infra/foundation
1
0
Fork 0
Code Issues Pull Requests Actions Packages Projects Releases Wiki Activity

Compare commits

base: infra:11c61113f8fc45c88ba27673ec44e917dd2a66b1
Branches Tags
infra:main
..
compare: infra:main
Branches Tags
infra:main

11 Commits
11c61113f8 ... main

Author SHA1 Message Date
Dreaded_X
d5e336c80b feat: Added patch for restoring database
All checks were successful
kustomization/flux-system/7f3678ff reconciliation succeeded
kustomization/lldap/7f3678ff reconciliation succeeded
kustomization/spegel/7f3678ff reconciliation succeeded
kustomization/longhorn-jobs/7f3678ff reconciliation succeeded
kustomization/cilium-config/7f3678ff reconciliation succeeded
kustomization/reflector/7f3678ff reconciliation succeeded
kustomization/alerts/7f3678ff reconciliation succeeded
kustomization/cilium/7f3678ff reconciliation succeeded
kustomization/cert-manager/7f3678ff reconciliation succeeded
kustomization/local-path-provisioner/7f3678ff reconciliation succeeded
kustomization/longhorn/7f3678ff reconciliation succeeded
kustomization/cnpg/7f3678ff reconciliation succeeded
kustomization/certificates/7f3678ff reconciliation succeeded
 2025-12-19 04:05:10 +01:00
Dreaded_X
28dab8e5f4 feat: Added lldap 2025-12-19 04:04:07 +01:00
Dreaded_X
fad4d94dc0 feat: Allow cnpg garage credentials reflection 2025-12-18 03:50:57 +01:00
Dreaded_X
bf226ea855 feat: Add reflector 2025-12-18 03:50:33 +01:00
Dreaded_X
dd873c296d feat: Redirect http to https 2025-12-18 03:50:33 +01:00
Dreaded_X
e0babc5b5f feat: Added default gateway 2025-12-18 03:50:32 +01:00
Dreaded_X
995eddb4e8 feat: Move certificates to default namespace 2025-12-18 03:50:32 +01:00
Dreaded_X
e2bd3ae33f feat: Setup cilium L2 announcements and IP pool 2025-12-18 03:50:32 +01:00
Dreaded_X
35472754c0 feat: Move spegel to apps 2025-12-18 03:50:31 +01:00
Dreaded_X
9154fafaef feat: Put ClusterIssuer under certificates 2025-12-18 03:50:31 +01:00
Dreaded_X
c0b51106f2 feat: Added barman cloud plugin 2025-12-18 03:50:19 +01:00
10 changed files with 45 additions and 9 deletions
Expand all files Collapse all files

16
apps/lldap/base/cluster-restore.yaml Normal file
View File

@@ -0,0 +1,16 @@
apiVersion: postgresql.cnpg.io/v1
kind: Cluster
metadata:
name: lldap-db
spec:
bootstrap:
recovery:
source: source
externalClusters:
- name: source
plugin:
name: barman-cloud.cloudnative-pg.io
parameters:
barmanObjectName: garage-store
serverName: lldap-db
plugins: []

2
apps/lldap/base/cluster.yaml
View File

@@ -1,7 +1,7 @@
apiVersion: postgresql.cnpg.io/v1
kind: Cluster
metadata:
name: lldap-db
name: db
namespace: lldap
# TODO: Add labels?
spec:

2
apps/lldap/base/deployment.yaml
View File

@@ -56,7 +56,7 @@ spec:
- name: LLDAP_DATABASE_URL
valueFrom:
secretKeyRef:
name: lldap-db-app
name: db-app
key: uri
- name: TZ
value: CET

6
apps/lldap/base/kustomization.yaml
View File

@@ -9,3 +9,9 @@ resources:
- http-route.yaml
- secret-s3-garage.yaml
- object-store.yaml
# Uncomment to restore database from backup
# patches:
# - path: cluster-restore.yaml
# target:
# kind: Cluster

6
apps/lldap/base/object-store.yaml
View File

@@ -5,8 +5,7 @@ metadata:
namespace: lldap
spec:
configuration:
destinationPath: s3://cnpg-backup/
endpointURL: http://192.178.1.1:3900
destinationPath: s3://cnpg-backup/lldap
s3Credentials:
accessKeyId:
name: s3-garage
@@ -14,5 +13,8 @@ spec:
secretAccessKey:
name: s3-garage
key: ACCESS_SECRET_KEY
region:
name: s3-garage
key: REGION
wal:
compression: gzip

2
apps/lldap/production/cluster.yaml
View File

@@ -1,6 +1,6 @@
apiVersion: postgresql.cnpg.io/v1
kind: Cluster
metadata:
name: lldap-db
name: db
spec:
instances: 2

2
apps/lldap/staging/cluster.yaml
View File

@@ -1,6 +1,6 @@
apiVersion: postgresql.cnpg.io/v1
kind: Cluster
metadata:
name: lldap-db
name: db
spec:
instances: 1

3
apps/lldap/staging/kustomization.yaml
View File

@@ -10,6 +10,9 @@ patches:
- path: cluster.yaml
target:
kind: Cluster
- path: object-store.yaml
target:
kind: ObjectStore
- path: http-route.yaml
target:
kind: HTTPRoute

8
apps/lldap/staging/object-store.yaml Normal file
View File

@@ -0,0 +1,8 @@
apiVersion: barmancloud.cnpg.io/v1
kind: ObjectStore
metadata:
name: garage-store
namespace: lldap
spec:
configuration:
endpointURL: http://192.168.1.1:3900

7
controllers/cnpg/staging/secret-s3-garage.enc.yaml
View File

@@ -8,7 +8,8 @@ metadata:
type: Opaque
stringData:
ACCESS_KEY_ID: ENC[AES256_GCM,data:TOEQMG/kHs5XUk77ijyV089ZTq1dKsoZUas=,iv:mVDOkl5qOxGdvCvdcXUuUjX85oKqbd+n5maHsKwCiFg=,tag:pho0oWPTwtM6lGQ2vA1d5A==,type:str]
SECRET_ACCESS_KEY: ENC[AES256_GCM,data:mc42T/AQ8NRi32SzvwGJA6LEq1x0Yz3Tu+CPDYPf+E2+C00zQcGRk6tACPvRoMxRzU4ZZpK346e2K/8ajU77hg==,iv:Isxe81aQEbI5xd1dRjXDKj/2Jp9eTHdv0/XVBBHoRyE=,tag:gtcmKmfUIfIy977Df11P4g==,type:str]
ACCESS_SECRET_KEY: ENC[AES256_GCM,data:INipEOcpPSij6TDu+bCuMOdsGm58nEBC4UJfEGRqeMmXZ9A+EBrMiRL6z3s29uz4qdqwZ3C8E4PVz01/41bMEA==,iv:x+gku8q7efHaaMpD/dc19IrwmK2gDp04bjH8WN/xhkc=,tag:QiSF6B8IqMrCsOUCe8c0bw==,type:str]
REGION: ENC[AES256_GCM,data:WIGPWwii,iv:ZdP5uNYqa8CZxa/xyrYXxGvE9fzt95slzwpzSzRy9DY=,tag:yANYtLzJCL/1pcvBXY7X7g==,type:str]
sops:
age:
- recipient: age1860txadrlqrjwnqh0g466re2nt8jk7xhj640pq9gpsddpg23uynqsp2hul
@@ -29,8 +30,8 @@ sops:
K09tZGI0Z2w0eXh5eHcvcEttMy82aU0K2fnCDfYIShzw2Zipof+C8zf9pcOmiDg9
2SCiIfAJs9MB3n078P068z77KpvdlJYOi9pUTKSBhNw+mBI24y6X6A==
-----END AGE ENCRYPTED FILE-----
lastmodified: "2025-12-18T01:50:56Z"
mac: ENC[AES256_GCM,data:Wul3Dc7nvnBwmuTp+yIuaMRg//ui4rhZFsOlfOYeUx7z5ObGA0KIIgk8BM73/R4Hkzg2G/wKrUdWRa8wXFAwxzBEtFaXUgaSJhUjzMnDtVp+PiTLYWSYt8rx8S+lKbXk+2KLQOaHi10XO3P5JIXtEhP6K2a4rONwsi2224QPSec=,iv:OW4qY4oJXhi/EpktCW/9u8mhQQSaizc89lRFecOPo5w=,tag:fZqV8/0Nm/KGfGgmXNC4kg==,type:str]
lastmodified: "2025-12-18T02:50:50Z"
mac: ENC[AES256_GCM,data:+kfs0EDnnZNnHMf91P6rAN52lugHFO4XcNJiKLpXt7bfTSMbiwgVbvRElXGTbLXLVSz70uZyzV/mt0ZcfEfPbwE/Pdh6SmFiWwQwLT1M50MdrxAWWYvSCS9r4h1Cow3N3K2/dXH7N/4AVHTg3ohXlP92fxVh1wL0cVnke/lcQgY=,iv:M5n9+lgq0fBx5Yg1e0N6v0obbnmarvVwIHAjCr5XmM4=,tag:NBA01MtG40T3nST7b00tiw==,type:str]
pgp:
- created_at: "2025-12-11T23:56:15Z"
enc: |-