Skip to content

Commit 4dc2b2f

Browse files
tuxpeopletuxpeople
committed
various changes
1 parent e875161 commit 4dc2b2f

File tree

95 files changed

+1488
-245
lines changed

Some content is hidden

Large Commits have some content hidden by default. Use the searchbox below for content that may be hidden.

95 files changed

+1488
-245
lines changed

‎.github/workflows/meta-labeler.yaml

+1-1
Original file line numberDiff line numberDiff line change
@@ -17,7 +17,7 @@ jobs:
1717
runs-on: ubuntu-latest
1818
steps:
1919
- name: Labeler
20-
uses: actions/labeler@9fcb2c2f5584144ca754f8bfe8c6f81e77753375 # v4.1.0
20+
uses: actions/labeler@0967ca812e7fdc8f5f71402a1b486d5bd061fe20 # v4.2.0
2121
with:
2222
configuration-path: .github/labeler.yaml
2323
repo-token: "${{ secrets.GITHUB_TOKEN }}"

‎.github/workflows/release-drafter.yaml

+1-1
Original file line numberDiff line numberDiff line change
@@ -10,7 +10,7 @@ jobs:
1010
update:
1111
runs-on: ubuntu-latest
1212
steps:
13-
- uses: release-drafter/release-drafter@569eb7ee3a85817ab916c8f8ff03a5bd96c9c83e # v5.23.0
13+
- uses: release-drafter/release-drafter@65c5fb495d1e69aa8c08a3317bc44ff8aabe9772 # v5.24.0
1414
with:
1515
config-name: release-drafter.yaml
1616
env:

‎__before_move/cluster/apps/development/code-server/helm-release.yaml

+1-1
Original file line numberDiff line numberDiff line change
@@ -65,7 +65,7 @@ spec:
6565
kubernetes.io/ingress.class: nginx
6666
traefik.ingress.kubernetes.io/router.tls: "true"
6767
external-dns/is-public: "true"
68-
external-dns.alpha.kubernetes.io/target: ipv4.${SECRET_DOMAIN_K8S}
68+
external-dns.alpha.kubernetes.io/target: ${SECRET_DNS_TARGET}
6969
hosts:
7070
- host: code.${SECRET_DOMAIN_ME}
7171
paths:

‎__before_move/cluster/apps/development/documentation/ingress.yaml

+4-4
Original file line numberDiff line numberDiff line change
@@ -7,11 +7,11 @@ metadata:
77
name: documentation
88
annotations:
99
kubernetes.io/ingress.class: nginx
10-
traefik.ingress.kubernetes.io/router.tls: 'true'
11-
external-dns/is-public: 'true'
12-
external-dns.alpha.kubernetes.io/target: ipv4.${SECRET_DOMAIN_K8S}
10+
traefik.ingress.kubernetes.io/router.tls: "true"
11+
external-dns/is-public: "true"
12+
external-dns.alpha.kubernetes.io/target: ${SECRET_DNS_TARGET}
1313
traefik.ingress.kubernetes.io/router.middlewares: networking-forwardauth-authelia@kubernetescrd
14-
hajimari.io/enable: 'true'
14+
hajimari.io/enable: "true"
1515
hajimari.io/icon: file-document-edit
1616
spec:
1717
tls:

‎__before_move/cluster/apps/networking/cert-manager/letsencrypt-production.yaml

+2-2
Original file line numberDiff line numberDiff line change
@@ -6,13 +6,13 @@ metadata:
66
spec:
77
acme:
88
server: https://acme-v02.api.letsencrypt.org/directory
9-
email: ${SECRET_CLOUDFLARE_EMAIL}
9+
email: ${SECRET_ACME_EMAIL}
1010
privateKeySecretRef:
1111
name: letsencrypt-production
1212
solvers:
1313
- dns01:
1414
cloudflare:
15-
email: ${SECRET_CLOUDFLARE_EMAIL}
15+
email: ${SECRET_ACME_EMAIL}
1616
apiTokenSecretRef:
1717
name: cloudflare-api-key
1818
key: api-key

‎__before_move/cluster/apps/networking/cert-manager/letsencrypt-staging.yaml

+2-2
Original file line numberDiff line numberDiff line change
@@ -6,13 +6,13 @@ metadata:
66
spec:
77
acme:
88
server: https://acme-staging-v02.api.letsencrypt.org/directory
9-
email: ${SECRET_CLOUDFLARE_EMAIL}
9+
email: ${SECRET_ACME_EMAIL}
1010
privateKeySecretRef:
1111
name: letsencrypt-production
1212
solvers:
1313
- dns01:
1414
cloudflare:
15-
email: ${SECRET_CLOUDFLARE_EMAIL}
15+
email: ${SECRET_ACME_EMAIL}
1616
apiTokenSecretRef:
1717
name: cloudflare-api-key
1818
key: api-key

‎__before_move/cluster/apps/networking/external-dns/helm-release.yaml

+2-2
Original file line numberDiff line numberDiff line change
@@ -15,7 +15,7 @@ spec:
1515
name: external-dns-charts
1616
namespace: flux-system
1717
test:
18-
enable: false # Enable helm test
18+
enable: false # Enable helm test
1919
install:
2020
createNamespace: true
2121
remediation:
@@ -33,7 +33,7 @@ spec:
3333
provider: cloudflare
3434
env:
3535
- name: CF_API_EMAIL
36-
value: ${SECRET_CLOUDFLARE_EMAIL}
36+
value: ${SECRET_ACME_EMAIL}
3737
- name: CF_API_TOKEN
3838
valueFrom:
3939
secretKeyRef:

‎__before_move/cluster/apps/networking/traefik/dashboard/ingress.yaml

+4-4
Original file line numberDiff line numberDiff line change
@@ -5,11 +5,11 @@ metadata:
55
name: traefik-dashboard
66
annotations:
77
kubernetes.io/ingress.class: nginx
8-
traefik.ingress.kubernetes.io/router.tls: 'true'
9-
external-dns/is-public: 'true'
10-
external-dns.alpha.kubernetes.io/target: ipv4.${SECRET_DOMAIN_K8S}
8+
traefik.ingress.kubernetes.io/router.tls: "true"
9+
external-dns/is-public: "true"
10+
external-dns.alpha.kubernetes.io/target: ${SECRET_DNS_TARGET}
1111
traefik.ingress.kubernetes.io/router.middlewares: networking-forwardauth-authelia@kubernetescrd
12-
hajimari.io/enable: 'true'
12+
hajimari.io/enable: "true"
1313
hajimari.io/icon: web
1414
hajimari.io/appName: traefik
1515
spec:

‎__before_move/cluster/apps/system-upgrade-controller/app/kustomization.yaml

+1-1
Original file line numberDiff line numberDiff line change
@@ -2,7 +2,7 @@
22
apiVersion: kustomize.config.k8s.io/v1beta1
33
kind: Kustomization
44
resources:
5-
- github.com/rancher/system-upgrade-controller?ref=v0.11.0
5+
- github.com/rancher/system-upgrade-controller?ref=v0.12.0
66
- plans
77
images:
88
- name: rancher/system-upgrade-controller

‎__before_move/cluster/apps/vcluster/loft/helmrelease.yaml

+7-7
Original file line numberDiff line numberDiff line change
@@ -15,7 +15,7 @@ spec:
1515
name: loft-charts
1616
namespace: flux-system
1717
test:
18-
enable: false # Enable helm test
18+
enable: false # Enable helm test
1919
install:
2020
createNamespace: true
2121
crds: CreateReplace
@@ -31,26 +31,26 @@ spec:
3131
recreate: true
3232
values:
3333
admin:
34-
create: 'true'
34+
create: "true"
3535
username: admin
3636
password: ${CODESERVER_PASSWORD}
3737
ingress:
3838
enabled: true
3939
host: loft.${SECRET_DOMAIN_K8S}
4040
ingressClass: traefik
4141
annotations:
42-
traefik.ingress.kubernetes.io/router.tls: 'true'
43-
external-dns/is-public: 'true'
44-
external-dns.alpha.kubernetes.io/target: ipv4.${SECRET_DOMAIN_K8S}
45-
hajimari.io/enable: 'true'
42+
traefik.ingress.kubernetes.io/router.tls: "true"
43+
external-dns/is-public: "true"
44+
external-dns.alpha.kubernetes.io/target: ${SECRET_DNS_TARGET}
45+
hajimari.io/enable: "true"
4646
hajimari.io/icon: mdi:chart-arc
4747
tls:
4848
enabled: true
4949
secret: ${SECRET_DOMAIN_K8S//./-}-tls
5050

5151
# audit
5252
audit:
53-
enableSideCar: 'true'
53+
enableSideCar: "true"
5454
config:
5555
audit:
5656
enabled: true

‎__before_move/old/_very_old/ansible-semaphore/semaphore-deployment.yaml

+5-5
Original file line numberDiff line numberDiff line change
@@ -33,7 +33,7 @@ spec:
3333
- name: SEMAPHORE_DB_HOST
3434
value: mariadb
3535
- name: SEMAPHORE_DB_PORT
36-
value: '3306'
36+
value: "3306"
3737
- name: SEMAPHORE_DB
3838
value: semaphore
3939
- name: SEMAPHORE_PLAYBOOK_PATH
@@ -46,7 +46,7 @@ spec:
4646
- name: SEMAPHORE_ADMIN_NAME
4747
value: admin
4848
- name: SEMAPHORE_ADMIN_EMAIL
49-
value: ${SECRET_CLOUDFLARE_EMAIL}
49+
value: ${SECRET_ACME_EMAIL}
5050
- name: SEMAPHORE_ADMIN
5151
value: admin
5252
name: semaphore
@@ -94,9 +94,9 @@ kind: Ingress
9494
metadata:
9595
annotations:
9696
cert-manager.io/cluster-issuer: letsencrypt-prod
97-
external-dns.alpha.kubernetes.io/target: ipv4.${SECRET_DOMAIN_K8S}
98-
external-dns/is-public: 'true'
99-
traefik.ingress.kubernetes.io/router.tls: 'true'
97+
external-dns.alpha.kubernetes.io/target: ${SECRET_DNS_TARGET}
98+
external-dns/is-public: "true"
99+
traefik.ingress.kubernetes.io/router.tls: "true"
100100
labels:
101101
app: semaphore
102102
name: semaphore-ingress

‎__before_move/old/_very_old/dokuwiki/ingress.yaml

+4-4
Original file line numberDiff line numberDiff line change
@@ -8,11 +8,11 @@ metadata:
88
name: dokuwiki
99
annotations:
1010
kubernetes.io/ingress.class: nginx
11-
traefik.ingress.kubernetes.io/router.tls: 'true'
12-
external-dns/is-public: 'true'
13-
external-dns.alpha.kubernetes.io/target: ipv4.${SECRET_DOMAIN_K8S}
11+
traefik.ingress.kubernetes.io/router.tls: "true"
12+
external-dns/is-public: "true"
13+
external-dns.alpha.kubernetes.io/target: ${SECRET_DNS_TARGET}
1414
traefik.ingress.kubernetes.io/router.middlewares: networking-forwardauth-authelia@kubernetescrd
15-
hajimari.io/enable: 'true'
15+
hajimari.io/enable: "true"
1616
hajimari.io/icon: file-document-edit
1717
spec:
1818
tls:

‎__before_move/old/_very_old/gitea/helm-release.yaml

+12-12
Original file line numberDiff line numberDiff line change
@@ -17,7 +17,7 @@ spec:
1717
name: gitea
1818
namespace: flux-system
1919
test:
20-
enable: false # Enable helm test
20+
enable: false # Enable helm test
2121
install:
2222
createNamespace: true
2323
remediation:
@@ -38,7 +38,7 @@ spec:
3838
repository:
3939
ROOT: ~/gitea-repositories
4040
repository.pull-request:
41-
WORK_IN_PROGRESS_PREFIXES: 'WIP:,[WIP]:'
41+
WORK_IN_PROGRESS_PREFIXES: "WIP:,[WIP]:"
4242
cache:
4343
builtIn:
4444
enabled: true
@@ -48,17 +48,17 @@ spec:
4848
ROOT_URL: https://git.${SECRET_DOMAIN_ME}
4949
DISABLE_SSH: true
5050
cron.sync_external_users:
51-
ENABLED: 'true'
52-
RUN_AT_START: 'true'
53-
SCHEDULE: '@every 10m'
54-
UPDATE_EXISTING: 'true'
55-
NO_SUCCESS_NOTICE: 'true'
51+
ENABLED: "true"
52+
RUN_AT_START: "true"
53+
SCHEDULE: "@every 10m"
54+
UPDATE_EXISTING: "true"
55+
NO_SUCCESS_NOTICE: "true"
5656
ldap:
5757
enabled: true
5858
name: k8s-ldap
5959
securityProtocol: unencrypted
6060
host: openldap.identity.svc.cluster.local
61-
port: '1389'
61+
port: "1389"
6262
userSearchBase: ou=users,dc=sky,dc=lab
6363
userFilter: (sn=%s)
6464
adminFilter: (&(objectClass=groupOfNames)(cn=admins)))
@@ -80,10 +80,10 @@ spec:
8080
- git.${SECRET_DOMAIN_ME}
8181
annotations:
8282
kubernetes.io/ingress.class: nginx
83-
traefik.ingress.kubernetes.io/router.tls: 'true'
84-
external-dns/is-public: 'true'
85-
external-dns.alpha.kubernetes.io/target: ipv4.${SECRET_DOMAIN_K8S}
86-
hajimari.io/enable: 'true'
83+
traefik.ingress.kubernetes.io/router.tls: "true"
84+
external-dns/is-public: "true"
85+
external-dns.alpha.kubernetes.io/target: ${SECRET_DNS_TARGET}
86+
hajimari.io/enable: "true"
8787
hajimari.io/icon: git
8888
tls:
8989
- secretName: ${SECRET_DOMAIN_ME//./-}-tls

‎__before_move/old/_very_old/gollum/ingress.yaml

+4-4
Original file line numberDiff line numberDiff line change
@@ -8,14 +8,14 @@ metadata:
88
name: gollum
99
annotations:
1010
kubernetes.io/ingress.class: nginx
11-
traefik.ingress.kubernetes.io/router.tls: 'true'
11+
traefik.ingress.kubernetes.io/router.tls: "true"
1212
ingress.kubernetes.io/auth-type: basic
1313
ingress.kubernetes.io/auth-realm: traefik
1414
ingress.kubernetes.io/auth-secret: gollum-basic-auth
15-
external-dns/is-public: 'true'
16-
external-dns.alpha.kubernetes.io/target: ipv4.${SECRET_DOMAIN_K8S}
15+
external-dns/is-public: "true"
16+
external-dns.alpha.kubernetes.io/target: ${SECRET_DNS_TARGET}
1717
traefik.ingress.kubernetes.io/router.middlewares: networking-forwardauth-authelia@kubernetescrd
18-
hajimari.io/enable: 'true'
18+
hajimari.io/enable: "true"
1919
hajimari.io/icon: file-document-edit-outline
2020
spec:
2121
tls:

‎__before_move/old/_very_old/homer/helm-release.yaml

+4-4
Original file line numberDiff line numberDiff line change
@@ -17,7 +17,7 @@ spec:
1717
name: k8s-at-home
1818
namespace: flux-system
1919
test:
20-
enable: false # Enable helm test
20+
enable: false # Enable helm test
2121
install:
2222
createNamespace: true
2323
remediation:
@@ -46,9 +46,9 @@ spec:
4646
enabled: true
4747
annotations:
4848
kubernetes.io/ingress.class: nginx
49-
traefik.ingress.kubernetes.io/router.tls: 'true'
50-
external-dns/is-public: 'true'
51-
external-dns.alpha.kubernetes.io/target: ipv4.${SECRET_DOMAIN_K8S}
49+
traefik.ingress.kubernetes.io/router.tls: "true"
50+
external-dns/is-public: "true"
51+
external-dns.alpha.kubernetes.io/target: ${SECRET_DNS_TARGET}
5252
traefik.ingress.kubernetes.io/router.middlewares: networking-forwardauth-authelia@kubernetescrd
5353
hosts:
5454
- host: homer.${SECRET_DOMAIN_ME}

‎__before_move/old/_very_old/joplin/helm-release.yaml

+6-6
Original file line numberDiff line numberDiff line change
@@ -15,7 +15,7 @@ spec:
1515
name: k8s-at-home
1616
namespace: flux-system
1717
test:
18-
enable: false # Enable helm test
18+
enable: false # Enable helm test
1919
install:
2020
createNamespace: true
2121
remediation:
@@ -52,10 +52,10 @@ spec:
5252
enabled: true
5353
annotations:
5454
kubernetes.io/ingress.class: nginx
55-
traefik.ingress.kubernetes.io/router.tls: 'true'
56-
external-dns/is-public: 'true'
57-
external-dns.alpha.kubernetes.io/target: ipv4.${SECRET_DOMAIN_K8S}
58-
hajimari.io/enable: 'true'
55+
traefik.ingress.kubernetes.io/router.tls: "true"
56+
external-dns/is-public: "true"
57+
external-dns.alpha.kubernetes.io/target: ${SECRET_DNS_TARGET}
58+
hajimari.io/enable: "true"
5959
hajimari.io/icon: newspaper
6060
hosts:
6161
- host: joplin.${SECRET_DOMAIN_ME}
@@ -69,7 +69,7 @@ spec:
6969
service:
7070
main:
7171
annotations:
72-
prometheus.io/probe: 'true'
72+
prometheus.io/probe: "true"
7373
prometheus.io/protocol: tcp
7474
persistence:
7575
data:

‎__before_move/old/_very_old/k10/helm-release.yaml

+6-6
Original file line numberDiff line numberDiff line change
@@ -16,7 +16,7 @@ spec:
1616
namespace: flux-system
1717
releaseName: k10
1818
test:
19-
enable: false # Enable helm test
19+
enable: false # Enable helm test
2020
install:
2121
createNamespace: true
2222
crds: CreateReplace
@@ -34,7 +34,7 @@ spec:
3434
eula:
3535
accept: true
3636
company: tuxpeople-k8s-homelab
37-
email: ${SECRET_CLOUDFLARE_EMAIL}
37+
email: ${SECRET_ACME_EMAIL}
3838
clusterName: k8s-homelab
3939
resources:
4040
requests:
@@ -61,10 +61,10 @@ spec:
6161
ingress:
6262
annotations:
6363
kubernetes.io/ingress.class: nginx
64-
traefik.ingress.kubernetes.io/router.tls: 'true'
65-
external-dns/is-public: 'true'
66-
external-dns.alpha.kubernetes.io/target: ipv4.${SECRET_DOMAIN_K8S}
67-
hajimari.io/enable: 'true'
64+
traefik.ingress.kubernetes.io/router.tls: "true"
65+
external-dns/is-public: "true"
66+
external-dns.alpha.kubernetes.io/target: ${SECRET_DNS_TARGET}
67+
hajimari.io/enable: "true"
6868
hajimari.io/icon: file-cabinet
6969
hajimari.io/appName: Kasten K10
7070
hajimari.io/url: https://k10.eighty-three.me/k10/

‎__before_move/old/_very_old/keycloak/helm-release.yaml

+4-4
Original file line numberDiff line numberDiff line change
@@ -17,7 +17,7 @@ spec:
1717
name: codecentric
1818
namespace: flux-system
1919
test:
20-
enable: false # Enable helm test
20+
enable: false # Enable helm test
2121
install:
2222
createNamespace: true
2323
remediation:
@@ -34,9 +34,9 @@ spec:
3434
enabled: true
3535
annotations:
3636
kubernetes.io/ingress.class: nginx
37-
traefik.ingress.kubernetes.io/router.tls: 'true'
38-
external-dns/is-public: 'true'
39-
external-dns.alpha.kubernetes.io/target: ipv4.${SECRET_DOMAIN_K8S}
37+
traefik.ingress.kubernetes.io/router.tls: "true"
38+
external-dns/is-public: "true"
39+
external-dns.alpha.kubernetes.io/target: ${SECRET_DNS_TARGET}
4040
rules:
4141
- host: sso.${SECRET_DOMAIN_ME}
4242
paths:

0 commit comments

Comments
 (0)