Compare commits
107 Commits
| Author | SHA1 | Date | |
|---|---|---|---|
|
|
3a4e96aaf0 | ||
|
|
f196ed4fbb | ||
|
|
86e50e6ed8 | ||
|
|
0bb5570668 | ||
| 34950703ca | |||
| 0ff4cc5bad | |||
| 6e4ae08a5c | |||
| df62890043 | |||
| 8a9004d456 | |||
| 00969f8183 | |||
| b90fdc1991 | |||
| b6e7d5065c | |||
|
|
1bab20668d | ||
|
|
750889d58c | ||
|
|
f6da30f4f4 | ||
| 01e75840d3 | |||
| cb2798e201 | |||
| 2978aee67a | |||
| 6d7e5d6956 | |||
|
|
6c3e9ba781 | ||
|
|
5811b6ecbf | ||
|
|
3b05002fcf | ||
|
|
911398e73f | ||
|
|
3254fda226 | ||
|
|
ef8c5e6ba2 | ||
|
|
01c8cd9e38 | ||
|
|
f761405a7f | ||
| 8a3104684e | |||
| 6aaafd3a7e | |||
| 78e6bd6b8e | |||
| 338e3c23c2 | |||
| f4f02d9147 | |||
| 2256f76caa | |||
| 5915b5b7a3 | |||
| 1e19df0c7a | |||
| 43486b4ab4 | |||
| 9e1debe339 | |||
| f349a1c43a | |||
| a0f384a428 | |||
| 1ef48ae879 | |||
| 9c35356c5d | |||
| 0d4ec2c08a | |||
| ed970283ae | |||
| 6bebb64c41 | |||
| bf6d929398 | |||
| 475ccd6576 | |||
| 8461a4e818 | |||
| d6b5a05352 | |||
| bd9af60728 | |||
| b30297b951 | |||
| 81384297be | |||
| 8e585ed7b0 | |||
| 1017d6a834 | |||
| db7e629fed | |||
| d01ee2da24 | |||
| 083bbe5af5 | |||
| c45d239b8c | |||
| 1b1d9178d3 | |||
| ca4d492882 | |||
| b7c14e18b2 | |||
| 6ad1f067e4 | |||
| 3babb5db29 | |||
| b03642cd1d | |||
| f95e7539f0 | |||
| 540a9c6f8a | |||
| ce256ff51a | |||
| d0ec1a9909 | |||
| ec8111c239 | |||
| 54e51af63f | |||
| 6a57946a53 | |||
| 2fe3df9227 | |||
| fd9731b7e1 | |||
| 0aeccd39b8 | |||
| d63ee6027d | |||
| dd91465e44 | |||
| d42cf229bf | |||
| ec8afdb6bc | |||
| 8568d5e4c0 | |||
| 2b4e117ba3 | |||
| 9f45c8b145 | |||
| 38846d58f3 | |||
| 43160a8da1 | |||
| 690c9e40c9 | |||
| 29136dd395 | |||
| bf6314e914 | |||
| a669676e8b | |||
| f69d3babfc | |||
| 6059303fcf | |||
| 1a0458354b | |||
| a63fe8cb3f | |||
| c47dba6dc6 | |||
| 77faed876d | |||
| b105b7004c | |||
| 9c59677594 | |||
| 2ef82bd70f | |||
| f0ca5ec41f | |||
| c3411b7f93 | |||
| 7beeb5c86f | |||
| aed1ff9556 | |||
| 76449c7ccd | |||
| 2f9dca4bc7 | |||
| 583c548900 | |||
| 8ff8705a2f | |||
| d0e7fd57ed | |||
| 1be8492f4c | |||
| e06a35f1a2 | |||
| ea811669c3 |
23
argocd/templates/InternalProxy.yaml
Normal file
23
argocd/templates/InternalProxy.yaml
Normal file
@@ -0,0 +1,23 @@
|
||||
apiVersion: argoproj.io/v1alpha1
|
||||
kind: Application
|
||||
metadata:
|
||||
name: internalproxy
|
||||
namespace: argocd
|
||||
spec:
|
||||
project: default
|
||||
source:
|
||||
repoURL: https://gitlab.com/developerdurp/homelab.git
|
||||
targetRevision: dev
|
||||
path: internalproxy
|
||||
directory:
|
||||
recurse: true
|
||||
destination:
|
||||
server: https://kubernetes.default.svc
|
||||
namespace: internalproxy
|
||||
syncPolicy:
|
||||
automated:
|
||||
prune: true
|
||||
selfHeal: true
|
||||
syncOptions:
|
||||
- CreateNamespace=true
|
||||
|
||||
@@ -7,7 +7,7 @@ spec:
|
||||
project: default
|
||||
source:
|
||||
repoURL: https://gitlab.com/developerdurp/homelab.git
|
||||
targetRevision: prd
|
||||
targetRevision: dev
|
||||
path: argocd
|
||||
destination:
|
||||
namespace: argocd
|
||||
|
||||
@@ -7,7 +7,7 @@ spec:
|
||||
project: default
|
||||
source:
|
||||
repoURL: https://gitlab.com/developerdurp/homelab.git
|
||||
targetRevision: prd
|
||||
targetRevision: dev
|
||||
path: authentik
|
||||
destination:
|
||||
namespace: authentik
|
||||
|
||||
@@ -7,7 +7,7 @@ spec:
|
||||
project: default
|
||||
source:
|
||||
repoURL: https://gitlab.com/developerdurp/homelab.git
|
||||
targetRevision: prd
|
||||
targetRevision: dev
|
||||
path: bitwarden
|
||||
directory:
|
||||
recurse: true
|
||||
|
||||
@@ -7,7 +7,7 @@ spec:
|
||||
project: default
|
||||
source:
|
||||
repoURL: https://gitlab.com/developerdurp/homelab.git
|
||||
targetRevision: prd
|
||||
targetRevision: dev
|
||||
path: cert-manager
|
||||
destination:
|
||||
namespace: cert-manager
|
||||
|
||||
@@ -7,7 +7,7 @@ spec:
|
||||
project: default
|
||||
source:
|
||||
repoURL: https://gitlab.com/developerdurp/homelab.git
|
||||
targetRevision: prd
|
||||
targetRevision: dev
|
||||
path: crossplane
|
||||
destination:
|
||||
namespace: crossplane
|
||||
|
||||
@@ -7,7 +7,7 @@ spec:
|
||||
project: default
|
||||
source:
|
||||
repoURL: https://gitlab.com/developerdurp/homelab.git
|
||||
targetRevision: prd
|
||||
targetRevision: dev
|
||||
path: durpapi
|
||||
destination:
|
||||
namespace: durpapi
|
||||
|
||||
@@ -7,7 +7,7 @@ spec:
|
||||
project: default
|
||||
source:
|
||||
repoURL: https://gitlab.com/developerdurp/homelab.git
|
||||
targetRevision: prd
|
||||
targetRevision: dev
|
||||
path: durpot
|
||||
destination:
|
||||
namespace: durpot
|
||||
|
||||
@@ -7,7 +7,7 @@ spec:
|
||||
project: default
|
||||
source:
|
||||
repoURL: https://gitlab.com/developerdurp/homelab.git
|
||||
targetRevision: prd
|
||||
targetRevision: dev
|
||||
path: external-dns
|
||||
destination:
|
||||
namespace: external-dns
|
||||
|
||||
@@ -7,7 +7,7 @@ spec:
|
||||
project: default
|
||||
source:
|
||||
repoURL: https://gitlab.com/developerdurp/homelab.git
|
||||
targetRevision: prd
|
||||
targetRevision: dev
|
||||
path: external-secrets
|
||||
destination:
|
||||
namespace: external-secrets
|
||||
|
||||
@@ -7,7 +7,7 @@ spec:
|
||||
project: default
|
||||
source:
|
||||
repoURL: https://gitlab.com/developerdurp/homelab.git
|
||||
targetRevision: prd
|
||||
targetRevision: dev
|
||||
path: gatekeeper
|
||||
destination:
|
||||
namespace: gatekeeper
|
||||
|
||||
@@ -7,7 +7,7 @@ spec:
|
||||
project: default
|
||||
source:
|
||||
repoURL: https://gitlab.com/developerdurp/homelab.git
|
||||
targetRevision: prd
|
||||
targetRevision: dev
|
||||
path: gitlab-runner
|
||||
destination:
|
||||
namespace: gitlab-runner
|
||||
|
||||
@@ -7,7 +7,7 @@ spec:
|
||||
project: default
|
||||
source:
|
||||
repoURL: https://gitlab.com/developerdurp/homelab.git
|
||||
targetRevision: prd
|
||||
targetRevision: dev
|
||||
path: heimdall
|
||||
destination:
|
||||
namespace: heimdall
|
||||
|
||||
@@ -8,7 +8,7 @@ spec:
|
||||
entryPoints:
|
||||
- websecure
|
||||
routes:
|
||||
- match: Host(`argocd.internal.prd.durp.info`)
|
||||
- match: Host(`argocd.internal.dev.durp.info`)
|
||||
middlewares:
|
||||
- name: internal-only
|
||||
namespace: traefik
|
||||
@@ -31,6 +31,6 @@ spec:
|
||||
issuerRef:
|
||||
name: letsencrypt-production
|
||||
kind: ClusterIssuer
|
||||
commonName: "argocd.internal.prd.durp.info"
|
||||
commonName: "argocd.internal.dev.durp.info"
|
||||
dnsNames:
|
||||
- "argocd.internal.prd.durp.info"
|
||||
- "argocd.internal.dev.durp.info"
|
||||
|
||||
@@ -7,7 +7,7 @@ spec:
|
||||
project: default
|
||||
source:
|
||||
repoURL: https://gitlab.com/developerdurp/homelab.git
|
||||
targetRevision: prd
|
||||
targetRevision: dev
|
||||
path: krakend
|
||||
destination:
|
||||
namespace: krakend
|
||||
|
||||
@@ -7,7 +7,7 @@ spec:
|
||||
project: default
|
||||
source:
|
||||
repoURL: https://gitlab.com/developerdurp/homelab.git
|
||||
targetRevision: prd
|
||||
targetRevision: dev
|
||||
path: kube-prometheus-stack
|
||||
destination:
|
||||
namespace: kube-prometheus-stack
|
||||
|
||||
@@ -7,7 +7,7 @@ spec:
|
||||
project: default
|
||||
source:
|
||||
repoURL: https://gitlab.com/developerdurp/homelab.git
|
||||
targetRevision: prd
|
||||
targetRevision: dev
|
||||
path: kubeclarity
|
||||
destination:
|
||||
namespace: kubeclarity
|
||||
|
||||
@@ -7,7 +7,7 @@ spec:
|
||||
project: default
|
||||
source:
|
||||
repoURL: https://gitlab.com/developerdurp/homelab.git
|
||||
targetRevision: prd
|
||||
targetRevision: dev
|
||||
path: littlelink
|
||||
directory:
|
||||
recurse: true
|
||||
|
||||
@@ -7,7 +7,7 @@ spec:
|
||||
project: default
|
||||
source:
|
||||
repoURL: https://gitlab.com/developerdurp/homelab.git
|
||||
targetRevision: prd
|
||||
targetRevision: dev
|
||||
path: longhorn
|
||||
destination:
|
||||
namespace: longhorn-system
|
||||
|
||||
@@ -7,7 +7,7 @@ spec:
|
||||
project: default
|
||||
source:
|
||||
repoURL: https://gitlab.com/developerdurp/homelab.git
|
||||
targetRevision: prd
|
||||
targetRevision: dev
|
||||
path: metallb-system
|
||||
destination:
|
||||
namespace: metallb-system
|
||||
|
||||
@@ -7,7 +7,7 @@ spec:
|
||||
project: default
|
||||
source:
|
||||
repoURL: https://gitlab.com/developerdurp/homelab.git
|
||||
targetRevision: prd
|
||||
targetRevision: dev
|
||||
path: nfs-client
|
||||
directory:
|
||||
recurse: true
|
||||
|
||||
@@ -7,7 +7,7 @@ spec:
|
||||
project: default
|
||||
source:
|
||||
repoURL: https://gitlab.com/developerdurp/homelab.git
|
||||
targetRevision: prd
|
||||
targetRevision: dev
|
||||
path: open-webui
|
||||
destination:
|
||||
namespace: open-webui
|
||||
|
||||
@@ -7,7 +7,7 @@ spec:
|
||||
project: default
|
||||
source:
|
||||
repoURL: https://gitlab.com/developerdurp/homelab.git
|
||||
targetRevision: prd
|
||||
targetRevision: dev
|
||||
path: traefik
|
||||
destination:
|
||||
namespace: traefik
|
||||
|
||||
@@ -7,7 +7,7 @@ spec:
|
||||
project: default
|
||||
source:
|
||||
repoURL: https://gitlab.com/developerdurp/homelab.git
|
||||
targetRevision: prd
|
||||
targetRevision: dev
|
||||
path: uptimekuma
|
||||
directory:
|
||||
recurse: true
|
||||
|
||||
@@ -7,7 +7,7 @@ spec:
|
||||
project: default
|
||||
source:
|
||||
repoURL: https://gitlab.com/developerdurp/homelab.git
|
||||
targetRevision: prd
|
||||
targetRevision: dev
|
||||
path: vault
|
||||
destination:
|
||||
namespace: vault
|
||||
|
||||
@@ -1,28 +1,10 @@
|
||||
argo-cd:
|
||||
|
||||
global:
|
||||
revisionHistoryLimit: 1
|
||||
image:
|
||||
repository: registry.internal.durp.info/argoproj/argocd
|
||||
imagePullPolicy: Always
|
||||
|
||||
server:
|
||||
#extraArgs:
|
||||
# - --dex-server-plaintext
|
||||
# - --dex-server=argocd-dex-server:5556
|
||||
# oidc.config: |
|
||||
# name: AzureAD
|
||||
# issuer: https://login.microsoftonline.com/TENANT_ID/v2.0
|
||||
# clientID: CLIENT_ID
|
||||
# clientSecret: $oidc.azuread.clientSecret
|
||||
# requestedIDTokenClaims:
|
||||
# groups:
|
||||
# essential: true
|
||||
# requestedScopes:
|
||||
# - openid
|
||||
# - profile
|
||||
# - email
|
||||
|
||||
dex:
|
||||
enabled: true
|
||||
image:
|
||||
@@ -33,12 +15,12 @@ argo-cd:
|
||||
cm:
|
||||
create: true
|
||||
annotations: {}
|
||||
url: https://argocd.internal.prd.durp.info
|
||||
url: https://argocd.dev.durp.info
|
||||
oidc.tls.insecure.skip.verify: "true"
|
||||
dex.config: |
|
||||
connectors:
|
||||
- config:
|
||||
issuer: https://authentik.prd.durp.info/application/o/argocd/
|
||||
issuer: https://authentik.dev.durp.info/application/o/argocd/
|
||||
clientID: lKuMgyYaOlQMNAUSjsRVYgkwZG9UT6CeFWeTLAcl
|
||||
clientSecret: $client-secret:clientSecret
|
||||
insecureEnableGroups: true
|
||||
@@ -54,9 +36,9 @@ argo-cd:
|
||||
rbac:
|
||||
create: true
|
||||
policy.csv: |
|
||||
g, ArgoCD Admins, role:admin
|
||||
g, ArgoCD Admins, role:admin
|
||||
scopes: "[groups]"
|
||||
|
||||
server:
|
||||
route:
|
||||
route:
|
||||
enabled: false
|
||||
|
||||
@@ -6,7 +6,7 @@ spec:
|
||||
entryPoints:
|
||||
- websecure
|
||||
routes:
|
||||
- match: Host(`authentik.prd.durp.info`) && PathPrefix(`/`)
|
||||
- match: Host(`authentik.dev.durp.info`) && PathPrefix(`/`)
|
||||
kind: Rule
|
||||
services:
|
||||
- name: authentik-server
|
||||
@@ -25,9 +25,9 @@ spec:
|
||||
issuerRef:
|
||||
name: letsencrypt-production
|
||||
kind: ClusterIssuer
|
||||
commonName: "authentik.prd.durp.info"
|
||||
commonName: "authentik.dev.durp.info"
|
||||
dnsNames:
|
||||
- "authentik.prd.durp.info"
|
||||
- "authentik.dev.durp.info"
|
||||
|
||||
---
|
||||
|
||||
@@ -36,7 +36,7 @@ apiVersion: v1
|
||||
metadata:
|
||||
name: authentik-external-dns
|
||||
annotations:
|
||||
external-dns.alpha.kubernetes.io/hostname: authentik.prd.durp.info
|
||||
external-dns.alpha.kubernetes.io/hostname: authentik.durp.info
|
||||
spec:
|
||||
type: ExternalName
|
||||
externalName:.prd.durp.info
|
||||
externalName: durp.info
|
||||
|
||||
@@ -6,7 +6,7 @@ spec:
|
||||
entryPoints:
|
||||
- websecure
|
||||
routes:
|
||||
- match: Host(`bitwarden.prd.durp.info`) && PathPrefix(`/`)
|
||||
- match: Host(`bitwarden.dev.durp.info`) && PathPrefix(`/`)
|
||||
kind: Rule
|
||||
services:
|
||||
- name: bitwarden
|
||||
@@ -25,9 +25,9 @@ spec:
|
||||
issuerRef:
|
||||
name: letsencrypt-production
|
||||
kind: ClusterIssuer
|
||||
commonName: "bitwarden.prd.durp.info"
|
||||
commonName: "bitwarden.dev.durp.info"
|
||||
dnsNames:
|
||||
- "bitwarden.prd.durp.info"
|
||||
- "bitwarden.dev.durp.info"
|
||||
|
||||
---
|
||||
|
||||
@@ -36,10 +36,10 @@ apiVersion: v1
|
||||
metadata:
|
||||
name: bitwarden-external-dns
|
||||
annotations:
|
||||
external-dns.alpha.kubernetes.io/hostname: bitwarden.prd.durp.info
|
||||
external-dns.alpha.kubernetes.io/hostname: bitwarden.dev.durp.info
|
||||
spec:
|
||||
type: ExternalName
|
||||
externalName:.prd.durp.info
|
||||
externalName: dev.durp.info
|
||||
|
||||
---
|
||||
|
||||
@@ -51,7 +51,7 @@ spec:
|
||||
entryPoints:
|
||||
- websecure
|
||||
routes:
|
||||
- match: Host(`bitwarden.prd.durp.info`) && PathPrefix(`/admin`)
|
||||
- match: Host(`bitwarden.dev.durp.info`) && PathPrefix(`/admin`)
|
||||
kind: Rule
|
||||
middlewares:
|
||||
- name: whitelist
|
||||
|
||||
@@ -1,11 +1,11 @@
|
||||
description: A Helm chart for Kubernetes
|
||||
name: durpapi
|
||||
appVersion: 0.1.0
|
||||
dependencies:
|
||||
- condition: postgresql.enabled
|
||||
name: postgresql
|
||||
version: 12.5.*
|
||||
repository: https://charts.bitnami.com/bitnami
|
||||
version: 0.1.0-dev0184
|
||||
apiVersion: v2
|
||||
type: application
|
||||
version: 0.1.0-dev0192
|
||||
description: A Helm chart for Kubernetes
|
||||
appVersion: 0.1.0
|
||||
name: durpapi
|
||||
dependencies:
|
||||
- version: 12.5.*
|
||||
condition: postgresql.enabled
|
||||
repository: https://charts.bitnami.com/bitnami
|
||||
name: postgresql
|
||||
|
||||
@@ -6,7 +6,7 @@ spec:
|
||||
entryPoints:
|
||||
- websecure
|
||||
routes:
|
||||
- match: Host("api.prd.durp.info") && PathPrefix(`/api`)
|
||||
- match: Host("api.dev.durp.info") && PathPrefix(`/api`)
|
||||
kind: Rule
|
||||
middlewares:
|
||||
- name: jwt
|
||||
@@ -24,7 +24,7 @@ spec:
|
||||
entryPoints:
|
||||
- websecure
|
||||
routes:
|
||||
- match: Host("api.prd.durp.info") && PathPrefix(`/swagger`)
|
||||
- match: Host("api.dev.durp.info") && PathPrefix(`/swagger`)
|
||||
kind: Rule
|
||||
services:
|
||||
- name: "durpapi-service"
|
||||
@@ -41,4 +41,5 @@ spec:
|
||||
jwt:
|
||||
Required: true
|
||||
Keys:
|
||||
- https://authentik.prd.durp.info/application/o/api/jwks/
|
||||
- https://authentik.durp.info/application/o/api/jwks
|
||||
|
||||
|
||||
@@ -4,10 +4,10 @@ external-dns:
|
||||
|
||||
image:
|
||||
pullPolicy: Always
|
||||
txtPrefix: "prd-"
|
||||
txtPrefix: "dev-"
|
||||
sources:
|
||||
- service
|
||||
|
||||
|
||||
provider: cloudflare
|
||||
cloudflare:
|
||||
secretName : "external-dns"
|
||||
|
||||
@@ -7,7 +7,7 @@ spec:
|
||||
entryPoints:
|
||||
- websecure
|
||||
routes:
|
||||
- match: Host(`heimdall.prd.durp.info`) && PathPrefix(`/`)
|
||||
- match: Host(`heimdall.dev.durp.info`) && PathPrefix(`/`)
|
||||
middlewares:
|
||||
- name: authentik-proxy-provider
|
||||
namespace: traefik
|
||||
@@ -15,7 +15,7 @@ spec:
|
||||
services:
|
||||
- name: heimdall
|
||||
port: 80
|
||||
- match: Host(`heimdall.prd.durp.info`) && PathPrefix(`/outpost.goauthentik.io`)
|
||||
- match: Host(`heimdall.dev.durp.info`) && PathPrefix(`/outpost.goauthentik.io`)
|
||||
kind: Rule
|
||||
services:
|
||||
- name: ak-outpost-authentik-embedded-outpost
|
||||
@@ -35,9 +35,9 @@ spec:
|
||||
issuerRef:
|
||||
name: letsencrypt-production
|
||||
kind: ClusterIssuer
|
||||
commonName: "heimdall.prd.durp.info"
|
||||
commonName: "heimdall.dev.durp.info"
|
||||
dnsNames:
|
||||
- "heimdall.prd.durp.info"
|
||||
- "heimdall.dev.durp.info"
|
||||
|
||||
---
|
||||
|
||||
@@ -46,7 +46,7 @@ apiVersion: v1
|
||||
metadata:
|
||||
name: heimdall-external-dns
|
||||
annotations:
|
||||
external-dns.alpha.kubernetes.io/hostname: heimdall.prd.durp.info
|
||||
external-dns.alpha.kubernetes.io/hostname: heimdall.durp.info
|
||||
spec:
|
||||
type: ExternalName
|
||||
externalName:.prd.durp.info
|
||||
externalName: durp.info
|
||||
|
||||
7
internalproxy/Chart.yaml
Normal file
7
internalproxy/Chart.yaml
Normal file
@@ -0,0 +1,7 @@
|
||||
apiVersion: v2
|
||||
name: internalproxy
|
||||
description: A Helm chart for Kubernetes
|
||||
type: application
|
||||
|
||||
version: 0.1.0
|
||||
appVersion: "0.1.0"
|
||||
@@ -7,9 +7,9 @@ spec:
|
||||
issuerRef:
|
||||
name: letsencrypt-production
|
||||
kind: ClusterIssuer
|
||||
commonName: "api.prd.durp.info"
|
||||
commonName: "api.dev.durp.info"
|
||||
dnsNames:
|
||||
- "api.prd.durp.info"
|
||||
- "api.dev.durp.info"
|
||||
|
||||
---
|
||||
|
||||
@@ -21,7 +21,7 @@ spec:
|
||||
entryPoints:
|
||||
- websecure
|
||||
routes:
|
||||
- match: Host(`api.prd.durp.info`) && PathPrefix(`/`)
|
||||
- match: Host(`api.dev.durp.info`) && PathPrefix(`/`)
|
||||
kind: Rule
|
||||
services:
|
||||
- name: krakend-service
|
||||
@@ -37,10 +37,10 @@ apiVersion: v1
|
||||
metadata:
|
||||
name: api-external-dns
|
||||
annotations:
|
||||
external-dns.alpha.kubernetes.io/hostname: api.prd.durp.info
|
||||
external-dns.alpha.kubernetes.io/hostname: api.dev.durp.info
|
||||
spec:
|
||||
type: ExternalName
|
||||
externalName:.prd.durp.info
|
||||
externalName: dev.durp.info
|
||||
|
||||
---
|
||||
|
||||
@@ -49,7 +49,7 @@ apiVersion: v1
|
||||
metadata:
|
||||
name: api-developer-dns
|
||||
annotations:
|
||||
external-dns.alpha.kubernetes.io/hostname: developer.prd.durp.info
|
||||
external-dns.alpha.kubernetes.io/hostname: developer.dev.durp.info
|
||||
external-dns.alpha.kubernetes.io/cloudflare-proxied: "false"
|
||||
spec:
|
||||
type: ExternalName
|
||||
|
||||
@@ -6,7 +6,7 @@ spec:
|
||||
entryPoints:
|
||||
- websecure
|
||||
routes:
|
||||
- match: Host(`grafana.prd.durp.info`) && PathPrefix(`/`)
|
||||
- match: Host(`grafana.dev.durp.info`) && PathPrefix(`/`)
|
||||
kind: Rule
|
||||
services:
|
||||
- name: grafana
|
||||
@@ -25,9 +25,9 @@ spec:
|
||||
issuerRef:
|
||||
name: letsencrypt-production
|
||||
kind: ClusterIssuer
|
||||
commonName: "grafana.prd.durp.info"
|
||||
commonName: "grafana.dev.durp.info"
|
||||
dnsNames:
|
||||
- "grafana.prd.durp.info"
|
||||
- "grafana.dev.durp.info"
|
||||
|
||||
---
|
||||
|
||||
@@ -39,7 +39,7 @@ spec:
|
||||
entryPoints:
|
||||
- websecure
|
||||
routes:
|
||||
- match: Host(`alertmanager.prd.durp.info`) && PathPrefix(`/`)
|
||||
- match: Host(`alertmanager.dev.durp.info`) && PathPrefix(`/`)
|
||||
middlewares:
|
||||
- name: whitelist
|
||||
namespace: traefik
|
||||
@@ -63,9 +63,9 @@ spec:
|
||||
issuerRef:
|
||||
name: letsencrypt-production
|
||||
kind: ClusterIssuer
|
||||
commonName: "alertmanager.prd.durp.info"
|
||||
commonName: "alertmanager.dev.durp.info"
|
||||
dnsNames:
|
||||
- "alertmanager.prd.durp.info"
|
||||
- "alertmanager.dev.durp.info"
|
||||
|
||||
---
|
||||
|
||||
@@ -74,7 +74,7 @@ apiVersion: v1
|
||||
metadata:
|
||||
name: grafana-external-dns
|
||||
annotations:
|
||||
external-dns.alpha.kubernetes.io/hostname: grafana.prd.durp.info
|
||||
external-dns.alpha.kubernetes.io/hostname: grafana.dev.durp.info
|
||||
spec:
|
||||
type: ExternalName
|
||||
externalName:.prd.durp.info
|
||||
externalName: dev.durp.info
|
||||
|
||||
@@ -6,7 +6,7 @@ spec:
|
||||
entryPoints:
|
||||
- websecure
|
||||
routes:
|
||||
- match: Host(`kubeclarity.prd.durp.info`) && PathPrefix(`/`)
|
||||
- match: Host(`kubeclarity.dev.durp.info`) && PathPrefix(`/`)
|
||||
middlewares:
|
||||
- name: whitelist
|
||||
namespace: traefik
|
||||
@@ -30,9 +30,9 @@ spec:
|
||||
issuerRef:
|
||||
name: letsencrypt-production
|
||||
kind: ClusterIssuer
|
||||
commonName: "kubeclarity.prd.durp.info"
|
||||
commonName: "kubeclarity.dev.durp.info"
|
||||
dnsNames:
|
||||
- "kubeclarity.prd.durp.info"
|
||||
- "kubeclarity.dev.durp.info"
|
||||
|
||||
---
|
||||
|
||||
@@ -41,7 +41,7 @@ apiVersion: v1
|
||||
metadata:
|
||||
name: kubeclarity-external-dns
|
||||
annotations:
|
||||
external-dns.alpha.kubernetes.io/hostname: kubeclarity.prd.durp.info
|
||||
external-dns.alpha.kubernetes.io/hostname: kubeclarity.dev.durp.info
|
||||
spec:
|
||||
type: ExternalName
|
||||
externalName:.prd.durp.info
|
||||
externalName: dev.durp.info
|
||||
|
||||
@@ -6,7 +6,7 @@ spec:
|
||||
entryPoints:
|
||||
- websecure
|
||||
routes:
|
||||
- match: Host(`links.prd.durp.info`) && PathPrefix(`/`)
|
||||
- match: Host(`links.dev.durp.info`) && PathPrefix(`/`)
|
||||
kind: Rule
|
||||
services:
|
||||
- name: littlelink
|
||||
@@ -25,9 +25,9 @@ spec:
|
||||
issuerRef:
|
||||
name: letsencrypt-production
|
||||
kind: ClusterIssuer
|
||||
commonName: "links.prd.durp.info"
|
||||
commonName: "links.dev.durp.info"
|
||||
dnsNames:
|
||||
- "links.prd.durp.info"
|
||||
- "links.dev.durp.info"
|
||||
|
||||
---
|
||||
|
||||
@@ -36,7 +36,8 @@ apiVersion: v1
|
||||
metadata:
|
||||
name: links-external-dns
|
||||
annotations:
|
||||
external-dns.alpha.kubernetes.io/hostname: links.prd.durp.info
|
||||
external-dns.alpha.kubernetes.io/hostname: links.dev.durp.info
|
||||
spec:
|
||||
type: ExternalName
|
||||
externalName:.prd.durp.info
|
||||
externalName: dev.durp.info
|
||||
|
||||
|
||||
@@ -9,4 +9,4 @@ appVersion: "1.16.0"
|
||||
dependencies:
|
||||
- name: longhorn
|
||||
repository: https://charts.longhorn.io
|
||||
version: 1.6.1
|
||||
version: 1.7.0
|
||||
|
||||
@@ -6,7 +6,7 @@ spec:
|
||||
entryPoints:
|
||||
- websecure
|
||||
routes:
|
||||
- match: Host(`longhorn.internal.prd.durp.info`) && PathPrefix(`/`)
|
||||
- match: Host(`longhorn.internal.dev.durp.info`) && PathPrefix(`/`)
|
||||
middlewares:
|
||||
- name: whitelist
|
||||
namespace: traefik
|
||||
@@ -16,7 +16,7 @@ spec:
|
||||
services:
|
||||
- name: longhorn-frontend
|
||||
port: 80
|
||||
- match: Host(`longhorn.internal.prd.durp.info`) && PathPrefix(`/outpost.goauthentik.io`)
|
||||
- match: Host(`longhorn.internal.dev.durp.info`) && PathPrefix(`/outpost.goauthentik.io`)
|
||||
kind: Rule
|
||||
services:
|
||||
- name: ak-outpost-authentik-embedded-outpost
|
||||
@@ -36,6 +36,6 @@ spec:
|
||||
issuerRef:
|
||||
name: letsencrypt-production
|
||||
kind: ClusterIssuer
|
||||
commonName: "longhorn.internal.prd.durp.info"
|
||||
commonName: "longhorn.internal.dev.durp.info"
|
||||
dnsNames:
|
||||
- "longhorn.internal.prd.durp.info"
|
||||
- "longhorn.internal.dev.durp.info"
|
||||
|
||||
@@ -8,7 +8,7 @@ spec:
|
||||
name: vault
|
||||
kind: ClusterSecretStore
|
||||
target:
|
||||
name: longhorn-backup-token-secret
|
||||
name: longhorn-backup-token-secret2
|
||||
data:
|
||||
- secretKey: AWS_ACCESS_KEY_ID
|
||||
remoteRef:
|
||||
|
||||
@@ -76,8 +76,8 @@ longhorn:
|
||||
snapshotterReplicaCount: ~
|
||||
|
||||
defaultSettings:
|
||||
backupTarget: S3://longhorn-prd@us-east-1/
|
||||
backupTargetCredentialSecret: longhorn-backup-token-secret
|
||||
backupTarget: S3://longhorn-dev@us-east-1/
|
||||
backupTargetCredentialSecret: longhorn-backup-token-secret2
|
||||
allowRecurringJobWhileVolumeDetached: ~
|
||||
createDefaultDiskLabeledNodes: ~
|
||||
defaultDataPath: ~
|
||||
|
||||
@@ -4,12 +4,12 @@ metadata:
|
||||
name: cheap
|
||||
spec:
|
||||
addresses:
|
||||
- 192.168.11.130-192.168.11.140
|
||||
- 192.168.10.110-192.168.10.120
|
||||
---
|
||||
apiVersion: metallb.io/v1beta1
|
||||
kind: L2Advertisement
|
||||
metadata:
|
||||
name: poop
|
||||
name: pool
|
||||
namespace: metallb-system
|
||||
spec:
|
||||
ipAddressPools:
|
||||
|
||||
@@ -6,7 +6,7 @@ spec:
|
||||
entryPoints:
|
||||
- websecure
|
||||
routes:
|
||||
- match: Host(`open-webui.prd.durp.info`) && PathPrefix(`/`)
|
||||
- match: Host(`open-webui.dev.durp.info`) && PathPrefix(`/`)
|
||||
kind: Rule
|
||||
services:
|
||||
- name: open-webui
|
||||
@@ -25,9 +25,9 @@ spec:
|
||||
issuerRef:
|
||||
name: letsencrypt-production
|
||||
kind: ClusterIssuer
|
||||
commonName: "open-webui.prd.durp.info"
|
||||
commonName: "open-webui.dev.durp.info"
|
||||
dnsNames:
|
||||
- "open-webui.prd.durp.info"
|
||||
- "open-webui.dev.durp.info"
|
||||
|
||||
---
|
||||
|
||||
@@ -36,7 +36,7 @@ apiVersion: v1
|
||||
metadata:
|
||||
name: open-webui-external-dns
|
||||
annotations:
|
||||
external-dns.alpha.kubernetes.io/hostname: open-webui.prd.durp.info
|
||||
external-dns.alpha.kubernetes.io/hostname: open-webui.dev.durp.info
|
||||
spec:
|
||||
type: ExternalName
|
||||
externalName: prd.durp.info
|
||||
externalName: dev.durp.info
|
||||
|
||||
@@ -6,7 +6,7 @@ spec:
|
||||
entryPoints:
|
||||
- websecure
|
||||
routes:
|
||||
- match: Host(`traefik.internal.prd.durp.info`)
|
||||
- match: Host(`traefik.internal.dev.durp.info`)
|
||||
middlewares:
|
||||
- name: authentik-proxy-provider
|
||||
namespace: traefik
|
||||
@@ -14,7 +14,7 @@ spec:
|
||||
services:
|
||||
- name: api@internal
|
||||
kind: TraefikService
|
||||
- match: Host(`traefik.internal.prd.durp.info`) && PathPrefix(`/outpost.goauthentik.io`)
|
||||
- match: Host(`traefik.internal.dev.durp.info`) && PathPrefix(`/outpost.goauthentik.io`)
|
||||
kind: Rule
|
||||
services:
|
||||
- name: ak-outpost-authentik-embedded-outpost
|
||||
@@ -34,6 +34,6 @@ spec:
|
||||
issuerRef:
|
||||
name: letsencrypt-production
|
||||
kind: ClusterIssuer
|
||||
commonName: "traefik.internal.prd.durp.info"
|
||||
commonName: "traefik.internal.dev.durp.info"
|
||||
dnsNames:
|
||||
- "traefik.internal.prd.durp.info"
|
||||
- "traefik.internal.dev.durp.info"
|
||||
|
||||
@@ -5,5 +5,4 @@ metadata:
|
||||
spec:
|
||||
chain:
|
||||
middlewares:
|
||||
- name: traefik-real-ip
|
||||
- name: whitelist
|
||||
|
||||
@@ -20,7 +20,6 @@ spec:
|
||||
- X-authentik-meta-app
|
||||
- X-authentik-meta-version
|
||||
|
||||
|
||||
---
|
||||
|
||||
apiVersion: traefik.containo.us/v1alpha1
|
||||
@@ -30,11 +29,8 @@ metadata:
|
||||
spec:
|
||||
ipWhiteList:
|
||||
sourceRange:
|
||||
- 192.168.10.1/32
|
||||
- 192.168.30.1/24
|
||||
- 192.168.0.0/16
|
||||
- 10.0.0.0/8
|
||||
ipStrategy:
|
||||
depth: 1
|
||||
|
||||
---
|
||||
|
||||
|
||||
@@ -582,7 +582,7 @@ traefik:
|
||||
# Trust forwarded headers information (X-Forwarded-*).
|
||||
forwardedHeaders:
|
||||
trustedIPs:
|
||||
- "192.168.11.1"
|
||||
- "192.168.10.1"
|
||||
insecure: false
|
||||
#
|
||||
# Enable the Proxy Protocol header parsing for the entry point
|
||||
@@ -613,7 +613,7 @@ traefik:
|
||||
## Trust forwarded headers information (X-Forwarded-*).
|
||||
forwardedHeaders:
|
||||
trustedIPs:
|
||||
- "192.168.11.1"
|
||||
- "192.168.10.1"
|
||||
insecure: false
|
||||
#
|
||||
## Enable the Proxy Protocol header parsing for the entry point
|
||||
|
||||
@@ -6,7 +6,7 @@ spec:
|
||||
entryPoints:
|
||||
- websecure
|
||||
routes:
|
||||
- match: Host(`kuma.prd.durp.info`) && PathPrefix(`/`)
|
||||
- match: Host(`kuma.dev.durp.info`) && PathPrefix(`/`)
|
||||
middlewares:
|
||||
- name: authentik-proxy-provider
|
||||
namespace: traefik
|
||||
@@ -28,9 +28,9 @@ spec:
|
||||
issuerRef:
|
||||
name: letsencrypt-production
|
||||
kind: ClusterIssuer
|
||||
commonName: "kuma.prd.durp.info"
|
||||
commonName: "kuma.dev.durp.info"
|
||||
dnsNames:
|
||||
- "kuma.prd.durp.info"
|
||||
- "kuma.dev.durp.info"
|
||||
|
||||
---
|
||||
|
||||
@@ -39,7 +39,7 @@ apiVersion: v1
|
||||
metadata:
|
||||
name: heimdall-external-dns
|
||||
annotations:
|
||||
external-dns.alpha.kubernetes.io/hostname: kuma.prd.durp.info
|
||||
external-dns.alpha.kubernetes.io/hostname: kuma.dev.durp.info
|
||||
spec:
|
||||
type: ExternalName
|
||||
externalName: prd.durp.info
|
||||
externalName: dev.durp.info
|
||||
|
||||
@@ -8,9 +8,9 @@ spec:
|
||||
entryPoints:
|
||||
- websecure
|
||||
routes:
|
||||
- match: Host(`vault.internal.prd.durp.info`)
|
||||
- match: Host(`vault.internal.dev.durp.info`)
|
||||
middlewares:
|
||||
- name: internal-only
|
||||
- name: whitelist
|
||||
namespace: traefik
|
||||
kind: Rule
|
||||
services:
|
||||
@@ -31,7 +31,7 @@ spec:
|
||||
issuerRef:
|
||||
name: letsencrypt-production
|
||||
kind: ClusterIssuer
|
||||
commonName: "vault.internal.prd.durp.info"
|
||||
commonName: "vault.internal.dev.durp.info"
|
||||
dnsNames:
|
||||
- "vault.internal.prd.durp.info"
|
||||
- "vault.internal.dev.durp.info"
|
||||
|
||||
|
||||
Reference in New Issue
Block a user