feat: added registry/certs

This commit is contained in:
Smigz 2025-06-21 18:32:15 -04:00
parent 8d217e0778
commit 13aa1bc4a8
11 changed files with 369 additions and 39 deletions

View file

@ -5,12 +5,13 @@ metadata:
user: admin
spec:
hosts:
- ssh:
address: k1.lab.smig.tech
- role: controller
openSSH:
user: smig
port: 22
keyPath: ~/.ssh/id_ed25519
role: controller
address: k1.lab.smig.tech
options:
StrictHostkeyChecking: false # -o StrictHostkeyChecking: no
installFlags:
- --enable-metrics-scraper
files:
@ -18,16 +19,29 @@ spec:
src: manifests/prometheues-service-monitor.yaml
dstDir: /var/lib/k0s/manifests/prometheus/
perm: 0644
- name: weed-namespace
src: manifests/weed-namespace.yaml
dstDir: /var/lib/k0s/manifests/weed/
perm: 0644
- name: weed-cnpg-config
src: manifests/weed-pg.yaml
dstDir: /var/lib/k0s/manifests/weed/
perm: 0644
- name: weed-secret-config
src: manifests/weed-secret.yaml
dstDir: /var/lib/k0s/manifests/weed/
perm: 0644
- name: selinux-stuff
src: selinux.conf
dstDir: /etc/containerd.d
perm: 0644
- ssh:
- role: worker
openSSH:
address: k2.lab.smig.tech
user: smig
port: 22
keyPath: ~/.ssh/id_ed25519
role: worker
options:
StrictHostkeyChecking: false # -o StrictHostkeyChecking: no
files:
- name: selinux-script
src: ./selinux-script.sh
@ -48,12 +62,12 @@ spec:
reset:
after:
- rm /home/smig/k0s-selinux.log /home/smig/selinux-script.sh /home/smig/.k0s-selinuxsetup-complete
- ssh:
- role: worker
openSSH:
address: k3.lab.smig.tech
user: smig
port: 22
keyPath: ~/.ssh/id_ed25519
role: worker
options:
StrictHostkeyChecking: false # -o StrictHostkeyChecking: no
files:
- name: selinux-script
src: ./selinux-script.sh
@ -74,12 +88,12 @@ spec:
reset:
after:
- rm /home/smig/k0s-selinux.log /home/smig/selinux-script.sh /home/smig/.k0s-selinuxsetup-complete
- ssh:
- role: worker
openSSH:
address: k4.lab.smig.tech
user: smig
port: 22
keyPath: ~/.ssh/id_ed25519
role: worker
options:
StrictHostkeyChecking: false # -o StrictHostkeyChecking: no
files:
- name: selinux-script
src: ./selinux-script.sh
@ -149,33 +163,107 @@ spec:
url: https://charts.jetstack.io
- name: openebs-internal
url: https://openebs.github.io/charts
- name: seaweedfs-operator
url: https://seaweedfs.github.io/seaweedfs-operator/helm
- name: cloudnative-pg
url: https://cloudnative-pg.github.io/charts
# - name: seaweedfs
# url: oci://git.thecodedom.com/smig/seaweedfs:4.0.392
charts:
- name: seaweedfs-operator
chartname: seaweedfs-operator/seaweedfs-operator
version: "0.0.2"
order: 2
namespace: seaweefs-operator-system
- name: seaweedfs
namespace: weed
chartname: oci://git.thecodedom.com/smig/seaweedfs
order: 4
version: 4.0.392
timeout: 20m
values: |
image:
registry: git.thecodedom.com
repository: smig/seaweedfs-operator
tag: 0.1.0
webhook:
enabled: false
global:
logginglevel: 3
master:
affinity: null
data:
type: "persistentVolumeClaim"
storageClass: openebs-hostpath
size: 1Gi
logs:
type: "emptyDir"
nodeSelector: null
resources:
requests:
cpu: 100m
memory: 512Mi
limits:
cpu: 200m
memory: 1Gi
volume:
affinity: null
dataDirs:
- name: data
type: "persistentVolumeClaim"
storageClass: openebs-hostpath
size: 30Gi
maxVolumes: 0
nodeSelector: null
logs:
type: "emptyDir"
resources:
requests:
cpu: 200m
memory: 1Gi
limits:
cpu: 500m
memory: 2Gi
- name: openebs
chartname: openebs-internal/openebs
version: "3.9.0"
namespace: openebs
order: 2
values: |
localprovisioner:
hostpathClass:
filer:
enabled: true
affinity: null
nodeSelector: null
data:
type: "persistentVolumeClaim"
size: "1Gi"
storageClass: "openebs-hostpath"
logs:
type: "emptyDir"
resources:
requests:
cpu: 100m
memory: 512Mi
limits:
cpu: 400m
memory: 1Gi
extraEnvironmentVars:
WEED_LEVELDB2_ENABLED: "false"
WEED_POSTGRES_ENABLED: "true"
WEED_POSTGRES_HOSTNAME: "weed-pg-rw.weed.svc.cluster.local"
WEED_POSTGRES_PORT: "5432"
WEED_POSTGRES_DATABASE: "weed"
secretExtraEnvironmentVars:
WEED_POSTGRES_USERNAME:
secretKeyRef:
name: weed-pg-secret
key: username
WEED_POSTGRES_PASSWORD:
secretKeyRef:
name: weed-pg-secret
key: password
s3:
enabled: true
enableAuth: true
existingConfigSecret: weed-creds
domainName: k0s-s3.lab.smig.tech
nodeSelector: null
httpsPort: null
logs:
type: "emptryDir"
ingress:
enabled: true
isDefaultClass: false
className: "cilium"
host: k0s-s3.lab.smig.tech
createBuckets:
- name: registry
anonymousRead: false
- name: prometheus
chartName: prometheus/kube-prometheus-stack
@ -208,7 +296,6 @@ spec:
grafana:
initChownData:
enabled: false
persistence:
enabled: true
storageClassName: openebs-hostpath
@ -218,6 +305,13 @@ spec:
hosts:
- grafana-k0s.lab.smig.tech
- name: cloudnative-pg
namespace: cnpg-system
version: 0.24.0
chartname: cloudnative-pg/cloudnative-pg
order: 2
- name: cert-manager
chartName: cert-manager/cert-manager
version: "v1.17.2"
@ -227,11 +321,22 @@ spec:
crds:
enabled: true
- name: openebs
chartname: openebs-internal/openebs
version: "3.9.0"
namespace: openebs
order: 1
values: |
localprovisioner:
hostpathClass:
enabled: true
isDefaultClass: false
- name: cilium
chartName: cilium/cilium
namespace: kube-system
version: "1.18.0-pre.3"
order: 1
order: 0
values: |
hubble:
enabled: true