alexlebens/infrastructure
1
0
Fork 0
Code Issues 1 Pull Requests 4 Actions Activity

feat: use helper

Browse Source
This commit is contained in:
Alex Lebens
2026-04-19 21:03:44 -05:00
parent 4f297c932f
commit 78a15b266c
29 changed files with 234 additions and 112 deletions
Download Patch File Download Diff File Expand all files Collapse all files

14
clusters/cl01tl/helm/argocd/templates/_helpers.tpl Normal file
View File

@@ -0,0 +1,14 @@
{{/*
Common labels
*/}}
{{- define "argocd.labels" -}}
{{ include "argocd.selectorLabels" $ }}
{{- end }}
{{/*
Selector labels
*/}}
{{- define "argocd.selectorLabels" -}}
app.kubernetes.io/instance: {{ .Release.Name }}
app.kubernetes.io/part-of: {{ .Release.Name }}
{{- end }}

10
clusters/cl01tl/helm/argocd/templates/external-secret.yaml
View File

@@ -4,9 +4,8 @@ metadata:
name: argocd-oidc-authentik name: argocd-oidc-authentik
namespace: {{ .Release.Namespace }} namespace: {{ .Release.Namespace }}
labels: labels:
app.kubernetes.io/name: {{ .Template.Name }} app.kubernetes.io/name: argocd-oidc-authentik
app.kubernetes.io/instance: {{ .Release.Name }} {{- include "argocd.labels" . | nindent 4 }}
app.kubernetes.io/part-of: {{ .Release.Name }}
spec: spec:
secretStoreRef: secretStoreRef:
kind: ClusterSecretStore kind: ClusterSecretStore
@@ -28,9 +27,8 @@ metadata:
name: argocd-notifications-ntfy name: argocd-notifications-ntfy
namespace: {{ .Release.Namespace }} namespace: {{ .Release.Namespace }}
labels: labels:
app.kubernetes.io/name: {{ .Template.Name }} app.kubernetes.io/name: argocd-notifications-ntfy
app.kubernetes.io/instance: {{ .Release.Name }} {{- include "argocd.labels" . | nindent 4 }}
app.kubernetes.io/part-of: {{ .Release.Name }}
spec: spec:
secretStoreRef: secretStoreRef:
kind: ClusterSecretStore kind: ClusterSecretStore

27
clusters/cl01tl/helm/audiobookshelf/templates/_helpers.tpl Normal file
View File

@@ -0,0 +1,27 @@
{{/*
Common labels
*/}}
{{- define "audiobookshelf.labels" -}}
{{ include "audiobookshelf.selectorLabels" $ }}
{{- end }}
{{/*
Selector labels
*/}}
{{- define "audiobookshelf.selectorLabels" -}}
app.kubernetes.io/instance: {{ .Release.Name }}
app.kubernetes.io/part-of: {{ .Release.Name }}
{{- end }}
{{/*
NFS names
*/}}
{{- define "audiobookshelf.booksNfsName" -}}
audiobookshelf-books-nfs-storage
{{- end -}}
{{- define "audiobookshelf.audiobooksNfsName" -}}
audiobookshelf-audiobooks-nfs-storage
{{- end -}}
{{- define "audiobookshelf.podcastsNfsName" -}}
audiobookshelf-podcasts-nfs-storage
{{- end -}}

5
clusters/cl01tl/helm/audiobookshelf/templates/external-secret.yaml
View File

@@ -4,9 +4,8 @@ metadata:
name: audiobookshelf-config-apprise name: audiobookshelf-config-apprise
namespace: {{ .Release.Namespace }} namespace: {{ .Release.Namespace }}
labels: labels:
app.kubernetes.io/name: {{ .Template.Name }} app.kubernetes.io/name: audiobookshelf-config-apprise
app.kubernetes.io/instance: {{ .Release.Name }} {{- include "audiobookshelf.labels" . | nindent 4 }}
app.kubernetes.io/part-of: {{ .Release.Name }}
spec: spec:
secretStoreRef: secretStoreRef:
kind: ClusterSecretStore kind: ClusterSecretStore

27
clusters/cl01tl/helm/audiobookshelf/templates/persistent-volume-claim.yaml
View File

@@ -1,14 +1,13 @@
apiVersion: v1 apiVersion: v1
kind: PersistentVolumeClaim kind: PersistentVolumeClaim
metadata: metadata:
name: audiobookshelf-books-nfs-storage name: {{- include "audiobookshelf.booksNfsName" . }}
namespace: {{ .Release.Namespace }} namespace: {{ .Release.Namespace }}
labels: labels:
app.kubernetes.io/name: {{ .Template.Name }} app.kubernetes.io/name: {{- include "audiobookshelf.booksNfsName" . }}
app.kubernetes.io/instance: {{ .Release.Name }} {{- include "audiobookshelf.labels" . | nindent 4 }}
app.kubernetes.io/part-of: {{ .Release.Name }}
spec: spec:
volumeName: {{ .Template.Name }} volumeName: {{- include "audiobookshelf.booksNfsName" . }}
storageClassName: nfs-client storageClassName: nfs-client
accessModes: accessModes:
- ReadWriteMany - ReadWriteMany
@@ -20,14 +19,13 @@ spec:
apiVersion: v1 apiVersion: v1
kind: PersistentVolumeClaim kind: PersistentVolumeClaim
metadata: metadata:
name: audiobookshelf-audiobooks-nfs-storage name: {{- include "audiobookshelf.audiobooksNfsName" . }}
namespace: {{ .Release.Namespace }} namespace: {{ .Release.Namespace }}
labels: labels:
app.kubernetes.io/name: {{ .Template.Name }} app.kubernetes.io/name: {{- include "audiobookshelf.audiobooksNfsName" . }}
app.kubernetes.io/instance: {{ .Release.Name }} {{- include "audiobookshelf.labels" . | nindent 4 }}
app.kubernetes.io/part-of: {{ .Release.Name }}
spec: spec:
volumeName: {{ .Template.Name }} volumeName: {{- include "audiobookshelf.audiobooksNfsName" . }}
storageClassName: nfs-client storageClassName: nfs-client
accessModes: accessModes:
- ReadWriteMany - ReadWriteMany
@@ -39,14 +37,13 @@ spec:
apiVersion: v1 apiVersion: v1
kind: PersistentVolumeClaim kind: PersistentVolumeClaim
metadata: metadata:
name: audiobookshelf-podcasts-nfs-storage name: {{- include "audiobookshelf.podcastsNfsName" . }}
namespace: {{ .Release.Namespace }} namespace: {{ .Release.Namespace }}
labels: labels:
app.kubernetes.io/name: {{ .Template.Name }} app.kubernetes.io/name: {{- include "audiobookshelf.podcastsNfsName" . }}
app.kubernetes.io/instance: {{ .Release.Name }} {{- include "audiobookshelf.labels" . | nindent 4 }}
app.kubernetes.io/part-of: {{ .Release.Name }}
spec: spec:
volumeName: {{ .Template.Name }} volumeName: {{- include "audiobookshelf.podcastsNfsName" . }}
storageClassName: nfs-client storageClassName: nfs-client
accessModes: accessModes:
- ReadWriteMany - ReadWriteMany

21
clusters/cl01tl/helm/audiobookshelf/templates/persistent-volume.yaml
View File

@@ -1,12 +1,11 @@
apiVersion: v1 apiVersion: v1
kind: PersistentVolume kind: PersistentVolume
metadata: metadata:
name: audiobookshelf-books-nfs-storage name: {{- include "audiobookshelf.booksNfsName" . }}
namespace: {{ .Release.Namespace }} namespace: {{ .Release.Namespace }}
labels: labels:
app.kubernetes.io/name: {{ .Template.Name }} app.kubernetes.io/name: {{- include "audiobookshelf.booksNfsName" . }}
app.kubernetes.io/instance: {{ .Release.Name }} {{- include "audiobookshelf.labels" . | nindent 4 }}
app.kubernetes.io/part-of: {{ .Release.Name }}
spec: spec:
persistentVolumeReclaimPolicy: Retain persistentVolumeReclaimPolicy: Retain
storageClassName: nfs-client storageClassName: nfs-client
@@ -26,12 +25,11 @@ spec:
apiVersion: v1 apiVersion: v1
kind: PersistentVolume kind: PersistentVolume
metadata: metadata:
name: audiobookshelf-audiobooks-nfs-storage name: {{- include "audiobookshelf.audiobooksNfsName" . }}
namespace: {{ .Release.Namespace }} namespace: {{ .Release.Namespace }}
labels: labels:
app.kubernetes.io/name: {{ .Template.Name }} app.kubernetes.io/name: {{- include "audiobookshelf.audiobooksNfsName" . }}
app.kubernetes.io/instance: {{ .Release.Name }} {{- include "audiobookshelf.labels" . | nindent 4 }}
app.kubernetes.io/part-of: {{ .Release.Name }}
spec: spec:
persistentVolumeReclaimPolicy: Retain persistentVolumeReclaimPolicy: Retain
storageClassName: nfs-client storageClassName: nfs-client
@@ -51,12 +49,11 @@ spec:
apiVersion: v1 apiVersion: v1
kind: PersistentVolume kind: PersistentVolume
metadata: metadata:
name: audiobookshelf-podcasts-nfs-storage name: {{- include "audiobookshelf.podcastsNfsName" . }}
namespace: {{ .Release.Namespace }} namespace: {{ .Release.Namespace }}
labels: labels:
app.kubernetes.io/name: {{ .Template.Name }} app.kubernetes.io/name: {{- include "audiobookshelf.podcastsNfsName" . }}
app.kubernetes.io/instance: {{ .Release.Name }} {{- include "audiobookshelf.labels" . | nindent 4 }}
app.kubernetes.io/part-of: {{ .Release.Name }}
spec: spec:
persistentVolumeReclaimPolicy: Retain persistentVolumeReclaimPolicy: Retain
storageClassName: nfs-client storageClassName: nfs-client

14
clusters/cl01tl/helm/authentik/templates/_helpers.tpl Normal file
View File

@@ -0,0 +1,14 @@
{{/*
Common labels
*/}}
{{- define "authentik.labels" -}}
{{ include "authentik.selectorLabels" $ }}
{{- end }}
{{/*
Selector labels
*/}}
{{- define "authentik.selectorLabels" -}}
app.kubernetes.io/instance: {{ .Release.Name }}
app.kubernetes.io/part-of: {{ .Release.Name }}
{{- end }}

5
clusters/cl01tl/helm/authentik/templates/external-secret.yaml
View File

@@ -4,9 +4,8 @@ metadata:
name: authentik-key name: authentik-key
namespace: {{ .Release.Namespace }} namespace: {{ .Release.Namespace }}
labels: labels:
app.kubernetes.io/name: {{ .Template.Name }} app.kubernetes.io/name: authentik-key
app.kubernetes.io/instance: {{ .Release.Name }} {{- include "authentik.labels" . | nindent 4 }}
app.kubernetes.io/part-of: {{ .Release.Name }}
spec: spec:
secretStoreRef: secretStoreRef:
kind: ClusterSecretStore kind: ClusterSecretStore

7
clusters/cl01tl/helm/authentik/templates/ingress.yaml
View File

@@ -1,13 +1,12 @@
apiVersion: networking.k8s.io/v1 apiVersion: networking.k8s.io/v1
kind: Ingress kind: Ingress
metadata: metadata:
name: authentik-tailscale name: {{ .Release.Name }}-tailscale
namespace: {{ .Release.Namespace }} namespace: {{ .Release.Namespace }}
labels: labels:
app.kubernetes.io/name: {{ .Template.Name }} app.kubernetes.io/name: {{ .Release.Name }}-tailscale
app.kubernetes.io/instance: {{ .Release.Name }}
app.kubernetes.io/part-of: {{ .Release.Name }}
tailscale.com/proxy-class: no-metrics tailscale.com/proxy-class: no-metrics
{{- include "authentik.labels" . | nindent 4 }}
annotations: annotations:
tailscale.com/experimental-forward-cluster-traffic-via-ingress: "true" tailscale.com/experimental-forward-cluster-traffic-via-ingress: "true"
spec: spec:

5
clusters/cl01tl/helm/authentik/templates/reference-grant.yaml
View File

@@ -4,9 +4,8 @@ metadata:
name: allow-outpost-cross-namespace-access name: allow-outpost-cross-namespace-access
namespace: {{ .Release.Namespace }} namespace: {{ .Release.Namespace }}
labels: labels:
app.kubernetes.io/name: {{ .Template.Name }} app.kubernetes.io/name: allow-outpost-cross-namespace-access
app.kubernetes.io/instance: {{ .Release.Name }} {{- include "authentik.labels" . | nindent 4 }}
app.kubernetes.io/part-of: {{ .Release.Name }}
spec: spec:
from: from:
- group: gateway.networking.k8s.io - group: gateway.networking.k8s.io

24
clusters/cl01tl/helm/backrest/templates/_helpers.tpl Normal file
View File

@@ -0,0 +1,24 @@
{{/*
Common labels
*/}}
{{- define "backrest.labels" -}}
{{ include "backrest.selectorLabels" $ }}
{{- end }}
{{/*
Selector labels
*/}}
{{- define "backrest.selectorLabels" -}}
app.kubernetes.io/instance: {{ .Release.Name }}
app.kubernetes.io/part-of: {{ .Release.Name }}
{{- end }}
{{/*
NFS names
*/}}
{{- define "backrest.storageNfsName" -}}
backrest-nfs-storage
{{- end -}}
{{- define "backrest.shareNfsName" -}}
backrest-nfs-share
{{- end -}}

18
clusters/cl01tl/helm/backrest/templates/persistent-volume-claim.yaml
View File

@@ -1,14 +1,13 @@
apiVersion: v1 apiVersion: v1
kind: PersistentVolumeClaim kind: PersistentVolumeClaim
metadata: metadata:
name: backrest-nfs-storage name: {{- include "backrest.storageNfsName" . }}
namespace: {{ .Release.Namespace }} namespace: {{ .Release.Namespace }}
labels: labels:
app.kubernetes.io/name: {{ .Template.Name }} app.kubernetes.io/name: {{- include "backrest.storageNfsName" . }}
app.kubernetes.io/instance: {{ .Release.Name }} {{- include "backrest.labels" . | nindent 4 }}
app.kubernetes.io/part-of: {{ .Release.Name }}
spec: spec:
volumeName: {{ .Template.Name }} volumeName: {{- include "backrest.storageNfsName" . }}
storageClassName: nfs-client storageClassName: nfs-client
accessModes: accessModes:
- ReadWriteMany - ReadWriteMany
@@ -20,14 +19,13 @@ spec:
apiVersion: v1 apiVersion: v1
kind: PersistentVolumeClaim kind: PersistentVolumeClaim
metadata: metadata:
name: backrest-nfs-share name: {{- include "backrest.shareNfsName" . }}
namespace: {{ .Release.Namespace }} namespace: {{ .Release.Namespace }}
labels: labels:
app.kubernetes.io/name: {{ .Template.Name }} app.kubernetes.io/name: {{- include "backrest.shareNfsName" . }}
app.kubernetes.io/instance: {{ .Release.Name }} {{- include "backrest.labels" . | nindent 4 }}
app.kubernetes.io/part-of: {{ .Release.Name }}
spec: spec:
volumeName: {{ .Template.Name }} volumeName: {{- include "backrest.shareNfsName" . }}
storageClassName: nfs-client storageClassName: nfs-client
accessModes: accessModes:
- ReadWriteMany - ReadWriteMany

14
clusters/cl01tl/helm/backrest/templates/persistent-volume.yaml
View File

@@ -1,12 +1,11 @@
apiVersion: v1 apiVersion: v1
kind: PersistentVolume kind: PersistentVolume
metadata: metadata:
name: backrest-nfs-storage name: {{- include "backrest.storageNfsName" . }}
namespace: {{ .Release.Namespace }} namespace: {{ .Release.Namespace }}
labels: labels:
app.kubernetes.io/name: {{ .Template.Name }} app.kubernetes.io/name: {{- include "backrest.storageNfsName" . }}
app.kubernetes.io/instance: {{ .Release.Name }} {{- include "backrest.labels" . | nindent 4 }}
app.kubernetes.io/part-of: {{ .Release.Name }}
spec: spec:
persistentVolumeReclaimPolicy: Retain persistentVolumeReclaimPolicy: Retain
storageClassName: nfs-client storageClassName: nfs-client
@@ -26,12 +25,11 @@ spec:
apiVersion: v1 apiVersion: v1
kind: PersistentVolume kind: PersistentVolume
metadata: metadata:
name: backrest-nfs-share name: {{- include "backrest.shareNfsName" . }}
namespace: {{ .Release.Namespace }} namespace: {{ .Release.Namespace }}
labels: labels:
app.kubernetes.io/name: {{ .Template.Name }} app.kubernetes.io/name: {{- include "backrest.shareNfsName" . }}
app.kubernetes.io/instance: {{ .Release.Name }} {{- include "backrest.labels" . | nindent 4 }}
app.kubernetes.io/part-of: {{ .Release.Name }}
spec: spec:
persistentVolumeReclaimPolicy: Retain persistentVolumeReclaimPolicy: Retain
storageClassName: nfs-client storageClassName: nfs-client

21
clusters/cl01tl/helm/bazarr/templates/_helpers.tpl Normal file
View File

@@ -0,0 +1,21 @@
{{/*
Common labels
*/}}
{{- define "bazarr.labels" -}}
{{ include "bazarr.selectorLabels" $ }}
{{- end }}
{{/*
Selector labels
*/}}
{{- define "bazarr.selectorLabels" -}}
app.kubernetes.io/instance: {{ .Release.Name }}
app.kubernetes.io/part-of: {{ .Release.Name }}
{{- end }}
{{/*
NFS names
*/}}
{{- define "bazarr.storageNfsName" -}}
bazarr-nfs-storage
{{- end -}}

5
clusters/cl01tl/helm/bazarr/templates/external-secret.yaml
View File

@@ -4,9 +4,8 @@ metadata:
name: bazarr-key name: bazarr-key
namespace: {{ .Release.Namespace }} namespace: {{ .Release.Namespace }}
labels: labels:
app.kubernetes.io/name: {{ .Template.Name }} app.kubernetes.io/name: bazarr-key
app.kubernetes.io/instance: {{ .Release.Name }} {{- include "bazarr.labels" . | nindent 4 }}
app.kubernetes.io/part-of: {{ .Release.Name }}
spec: spec:
secretStoreRef: secretStoreRef:
kind: ClusterSecretStore kind: ClusterSecretStore

7
clusters/cl01tl/helm/bazarr/templates/persistent-volume-claim.yaml
View File

@@ -1,12 +1,11 @@
apiVersion: v1 apiVersion: v1
kind: PersistentVolumeClaim kind: PersistentVolumeClaim
metadata: metadata:
name: bazarr-nfs-storage name: {{- include "bazarr.storageNfsName" . }}
namespace: {{ .Release.Namespace }} namespace: {{ .Release.Namespace }}
labels: labels:
app.kubernetes.io/name: {{ .Template.Name }} app.kubernetes.io/name: {{- include "bazarr.storageNfsName" . }}
app.kubernetes.io/instance: {{ .Release.Name }} {{- include "bazarr.labels" . | nindent 4 }}
app.kubernetes.io/part-of: {{ .Release.Name }}
spec: spec:
volumeName: {{ .Template.Name }} volumeName: {{ .Template.Name }}
storageClassName: nfs-client storageClassName: nfs-client

7
clusters/cl01tl/helm/bazarr/templates/persistent-volume.yaml
View File

@@ -1,12 +1,11 @@
apiVersion: v1 apiVersion: v1
kind: PersistentVolume kind: PersistentVolume
metadata: metadata:
name: bazarr-nfs-storage name: {{- include "bazarr.storageNfsName" . }}
namespace: {{ .Release.Namespace }} namespace: {{ .Release.Namespace }}
labels: labels:
app.kubernetes.io/name: {{ .Template.Name }} app.kubernetes.io/name: {{- include "bazarr.storageNfsName" . }}
app.kubernetes.io/instance: {{ .Release.Name }} {{- include "bazarr.labels" . | nindent 4 }}
app.kubernetes.io/part-of: {{ .Release.Name }}
spec: spec:
persistentVolumeReclaimPolicy: Retain persistentVolumeReclaimPolicy: Retain
storageClassName: nfs-client storageClassName: nfs-client

24
clusters/cl01tl/helm/cert-manager/templates/_helpers.tpl Normal file
View File

@@ -0,0 +1,24 @@
{{/*
Common labels
*/}}
{{- define "cert-manager.labels" -}}
{{ include "cert-manager.selectorLabels" $ }}
{{- end }}
{{/*
Selector labels
*/}}
{{- define "cert-manager.selectorLabels" -}}
app.kubernetes.io/instance: {{ .Release.Name }}
app.kubernetes.io/part-of: {{ .Release.Name }}
{{- end }}
{{/*
NFS names
*/}}
{{- define "cert-manager.cloudflareSecretName" -}}
cert-manager-cloudflare-api-token
{{- end -}}
{{- define "cert-manager.cloudflareSecretKey" -}}
api-token
{{- end -}}

9
clusters/cl01tl/helm/cert-manager/templates/cluster-issuer.yaml
View File

@@ -4,9 +4,8 @@ metadata:
name: letsencrypt-issuer name: letsencrypt-issuer
namespace: {{ .Release.Namespace }} namespace: {{ .Release.Namespace }}
labels: labels:
app.kubernetes.io/name: {{ .Template.Name }} app.kubernetes.io/name: letsencrypt-issuer
app.kubernetes.io/instance: {{ .Release.Name }} {{- include "cert-manager.labels" . | nindent 4 }}
app.kubernetes.io/part-of: {{ .Release.Name }}
spec: spec:
acme: acme:
email: alexanderlebens@gmail.com email: alexanderlebens@gmail.com
@@ -22,5 +21,5 @@ spec:
cloudflare: cloudflare:
email: alexanderlebens@gmail.com email: alexanderlebens@gmail.com
apiTokenSecretRef: apiTokenSecretRef:
name: cloudflare-api-token name: {{- include "cert-manager.cloudflareSecretName" . }}
key: api-token key: {{- include "cert-manager.cloudflareSecretKey" . }}

9
clusters/cl01tl/helm/cert-manager/templates/external-secret.yaml
View File

@@ -1,18 +1,17 @@
apiVersion: external-secrets.io/v1 apiVersion: external-secrets.io/v1
kind: ExternalSecret kind: ExternalSecret
metadata: metadata:
name: cloudflare-api-token name: {{- include "cert-manager.cloudflareSecretName" . }}
namespace: {{ .Release.Namespace }} namespace: {{ .Release.Namespace }}
labels: labels:
app.kubernetes.io/name: {{ .Template.Name }} app.kubernetes.io/name: {{- include "cert-manager.cloudflareSecretName" . }}
app.kubernetes.io/instance: {{ .Release.Name }} {{- include "cert-manager.labels" . | nindent 4 }}
app.kubernetes.io/part-of: {{ .Release.Name }}
spec: spec:
secretStoreRef: secretStoreRef:
kind: ClusterSecretStore kind: ClusterSecretStore
name: openbao name: openbao
data: data:
- secretKey: api-token - secretKey: {{- include "cert-manager.cloudflareSecretKey" . }}
remoteRef: remoteRef:
key: /cloudflare/alexlebens.net/cl01tl-issuer-certificate key: /cloudflare/alexlebens.net/cl01tl-issuer-certificate
property: token property: token

14
clusters/cl01tl/helm/cilium/templates/_helpers.tpl Normal file
View File

@@ -0,0 +1,14 @@
{{/*
Common labels
*/}}
{{- define "cilium.labels" -}}
{{ include "cilium.selectorLabels" $ }}
{{- end }}
{{/*
Selector labels
*/}}
{{- define "cilium.selectorLabels" -}}
app.kubernetes.io/instance: {{ .Release.Name }}
app.kubernetes.io/part-of: {{ .Release.Name }}
{{- end }}

5
clusters/cl01tl/helm/cilium/templates/cilium-bgp-advertisement.yaml
View File

@@ -4,9 +4,8 @@
# name: cilium-bgp-advertisements # name: cilium-bgp-advertisements
# namespace: {{ .Release.Namespace }} # namespace: {{ .Release.Namespace }}
# labels: # labels:
# app.kubernetes.io/name: {{ .Template.Name }} # app.kubernetes.io/name: cilium-bgp-advertisements
# app.kubernetes.io/instance: {{ .Release.Name }} # {{- include "cilium.labels" . | nindent 4 }}
# app.kubernetes.io/part-of: {{ .Release.Name }}
# spec: # spec:
# advertisements: # advertisements:
# - advertisementType: "Service" # - advertisementType: "Service"

5
clusters/cl01tl/helm/cilium/templates/cilium-bgp-cluster-config.yaml
View File

@@ -4,9 +4,8 @@
# name: cilium-bgp # name: cilium-bgp
# namespace: {{ .Release.Namespace }} # namespace: {{ .Release.Namespace }}
# labels: # labels:
# app.kubernetes.io/name: {{ .Template.Name }} # app.kubernetes.io/name: cilium-bgp
# app.kubernetes.io/instance: {{ .Release.Name }} # {{- include "cilium.labels" . | nindent 4 }}
# app.kubernetes.io/part-of: {{ .Release.Name }}
# spec: # spec:
# nodeSelector: # nodeSelector:
# matchLabels: # matchLabels:

5
clusters/cl01tl/helm/cilium/templates/cilium-bgp-peer-config.yaml
View File

@@ -4,9 +4,8 @@
# name: cilium-peer # name: cilium-peer
# namespace: {{ .Release.Namespace }} # namespace: {{ .Release.Namespace }}
# labels: # labels:
# app.kubernetes.io/name: {{ .Template.Name }} # app.kubernetes.io/name: cilium-peer
# app.kubernetes.io/instance: {{ .Release.Name }} # {{- include "cilium.labels" . | nindent 4 }}
# app.kubernetes.io/part-of: {{ .Release.Name }}
# spec: # spec:
# timers: # timers:
# holdTimeSeconds: 9 # holdTimeSeconds: 9

10
clusters/cl01tl/helm/cilium/templates/cilium-load-balancer-ip-pool.yaml
View File

@@ -4,9 +4,8 @@ metadata:
name: default-ip-pool name: default-ip-pool
namespace: {{ .Release.Namespace }} namespace: {{ .Release.Namespace }}
labels: labels:
app.kubernetes.io/name: {{ .Template.Name }} app.kubernetes.io/name: default-ip-pool
app.kubernetes.io/instance: {{ .Release.Name }} {{- include "cilium.labels" . | nindent 4 }}
app.kubernetes.io/part-of: {{ .Release.Name }}
spec: spec:
blocks: blocks:
- start: "10.232.1.21" - start: "10.232.1.21"
@@ -19,9 +18,8 @@ metadata:
name: bgp-ip-pool name: bgp-ip-pool
namespace: {{ .Release.Namespace }} namespace: {{ .Release.Namespace }}
labels: labels:
app.kubernetes.io/name: {{ .Template.Name }} app.kubernetes.io/name: bgp-ip-pool
app.kubernetes.io/instance: {{ .Release.Name }} {{- include "cilium.labels" . | nindent 4 }}
app.kubernetes.io/part-of: {{ .Release.Name }}
spec: spec:
blocks: blocks:
- start: "10.232.2.100" - start: "10.232.2.100"

5
clusters/cl01tl/helm/cilium/templates/gateway.yaml
View File

@@ -4,9 +4,8 @@
# name: cilium-tls-gateway # name: cilium-tls-gateway
# namespace: {{ .Release.Namespace }} # namespace: {{ .Release.Namespace }}
# labels: # labels:
# app.kubernetes.io/name: {{ .Template.Name }} # app.kubernetes.io/name: cilium-tls-gateway
# app.kubernetes.io/instance: {{ .Release.Name }} # {{- include "cilium.labels" . | nindent 4 }}
# app.kubernetes.io/part-of: {{ .Release.Name }}
# annotations: # annotations:
# cert-manager.io/cluster-issuer: letsencrypt-issuer # cert-manager.io/cluster-issuer: letsencrypt-issuer
# spec: # spec:

5
clusters/cl01tl/helm/cilium/templates/http-route.yaml
View File

@@ -4,9 +4,8 @@ metadata:
name: hubble name: hubble
namespace: {{ .Release.Namespace }} namespace: {{ .Release.Namespace }}
labels: labels:
app.kubernetes.io/name: {{ .Template.Name }} app.kubernetes.io/name: hubble
app.kubernetes.io/instance: {{ .Release.Name }} {{- include "cilium.labels" . | nindent 4 }}
app.kubernetes.io/part-of: {{ .Release.Name }}
spec: spec:
parentRefs: parentRefs:
- group: gateway.networking.k8s.io - group: gateway.networking.k8s.io

14
clusters/cl01tl/helm/dawarich/templates/_helpers.tpl Normal file
View File

@@ -0,0 +1,14 @@
{{/*
Common labels
*/}}
{{- define "dawarich.labels" -}}
{{ include "dawarich.selectorLabels" $ }}
{{- end }}
{{/*
Selector labels
*/}}
{{- define "dawarich.selectorLabels" -}}
app.kubernetes.io/instance: {{ .Release.Name }}
app.kubernetes.io/part-of: {{ .Release.Name }}
{{- end }}

10
clusters/cl01tl/helm/dawarich/templates/external-secret.yaml
View File

@@ -4,9 +4,8 @@ metadata:
name: dawarich-key name: dawarich-key
namespace: {{ .Release.Namespace }} namespace: {{ .Release.Namespace }}
labels: labels:
app.kubernetes.io/name: {{ .Template.Name }} app.kubernetes.io/name: dawarich-key
app.kubernetes.io/instance: {{ .Release.Name }} {{- include "dawarich.labels" . | nindent 4 }}
app.kubernetes.io/part-of: {{ .Release.Name }}
spec: spec:
secretStoreRef: secretStoreRef:
kind: ClusterSecretStore kind: ClusterSecretStore
@@ -24,9 +23,8 @@ metadata:
name: dawarich-oidc-authentik name: dawarich-oidc-authentik
namespace: {{ .Release.Namespace }} namespace: {{ .Release.Namespace }}
labels: labels:
app.kubernetes.io/name: {{ .Template.Name }} app.kubernetes.io/name: dawarich-oidc-authentik
app.kubernetes.io/instance: {{ .Release.Name }} {{- include "dawarich.labels" . | nindent 4 }}
app.kubernetes.io/part-of: {{ .Release.Name }}
spec: spec:
secretStoreRef: secretStoreRef:
kind: ClusterSecretStore kind: ClusterSecretStore