diff --git a/.gitattributes b/.gitattributes index 4cdf503..07ef734 100644 --- a/.gitattributes +++ b/.gitattributes @@ -1,3 +1,4 @@ *.secret filter=git-crypt diff=git-crypt *.secret.yaml filter=git-crypt diff=git-crypt -*.secret.values filter=git-crypt diff=git-crypt \ No newline at end of file +*.secret.values filter=git-crypt diff=git-crypt +*.secret.sh filter=git-crypt diff=git-crypt \ No newline at end of file diff --git a/k8s/README.md b/k8s/README.md index 2b3cac0..c79e089 100644 --- a/k8s/README.md +++ b/k8s/README.md @@ -69,12 +69,23 @@ helm upgrade --install --create-namespace -f openebs/openebs.yml openebs --names k apply -f openebs/storageclass.yml ``` +## minio (bitnami) + +Switching to [Bitnami chart](https://artifacthub.io/packages/helm/bitnami/minio) as "normal" chart just too big. + +```sh +helm repo update +helm upgrade --install -f minio/minio.secret.yaml --namespace minio --create-namespace minio bitnami/minio +``` + ## minio +**DEPRECATED - INSTALL WITH OPERATOR** + See [chart on GitHub](https://github.com/minio/charts/tree/master/minio). ```sh -helm repo add minio https://helm.min.io/ +helm repo add minio https://charts.min.io/ helm repo update helm upgrade --install -f minio/minio.secret.yaml --namespace minio --create-namespace minio minio/minio # # @@ -328,12 +339,24 @@ Deployment instructions for [Octobot](https://github.com/Drakkar-Software/OctoBo ```sh kubectl create ns octobot -helm repo add dex https://charts.dexidp.io +helm repo add oauth2-proxy https://oauth2-proxy.github.io/manifests helm repo update -helm upgrade --install -n octobot dex-octobot dex/dex -f ./octobot/dex.secret.values +helm upgrade --install -n octobot oauth2-octobot oauth2-proxy/oauth2-proxy -f ./octobot/oauth2.secret.values kubectl apply $(ls octobot/*.yaml | awk ' { print " -f " $1 } ') ``` +## octobot-fabi + +Deployment instructions for [Octobot](https://github.com/Drakkar-Software/OctoBot). Dex is used for authenticating. + +```sh +kubectl create ns octobot-fabi +helm repo add oauth2-proxy https://oauth2-proxy.github.io/manifests +helm repo update +helm upgrade --install -n octobot-fabi oauth2-octobot oauth2-proxy/oauth2-proxy -f ./octobot-fabi/oauth2.secret.values +kubectl apply $(ls octobot-fabi/*.yaml | awk ' { print " -f " $1 } ') +``` + ## nextcloud [Chart GitHub](https://github.com/nextcloud/helm/tree/master/charts/nextcloud) diff --git a/k8s/minio/minio.secret.yaml b/k8s/minio/minio.secret.yaml index 902dd9c..17f4152 100644 Binary files a/k8s/minio/minio.secret.yaml and b/k8s/minio/minio.secret.yaml differ diff --git a/k8s/octobot/deployment.yaml b/k8s/octobot/deployment.yaml index 6c4865d..ac3cff6 100644 --- a/k8s/octobot/deployment.yaml +++ b/k8s/octobot/deployment.yaml @@ -25,14 +25,10 @@ spec: limits: cpu: "1" memory: "800Mi" - # args: - # - --cert-dir=/tmp - # - --secure-port=4443 - # - --kubelet-preferred-address-types=InternalIP,ExternalIP,Hostname - # - --kubelet-use-node-status-port - # - --kubelet-preferred-address-types=InternalIP - # - --v=2 - # - --kubelet-insecure-tls + # # To make manual configurations on the container + # command: + # - "sleep" + # - "9999" image: drakkarsoftware/octobot:stable imagePullPolicy: Always # livenessProbe: @@ -55,7 +51,7 @@ spec: # scheme: HTTPS # periodSeconds: 10 # securityContext: - # readOnlyRootFilesystem: true + # #readOnlyRootFilesystem: true # runAsNonRoot: true # runAsUser: 1000 volumeMounts: @@ -66,18 +62,17 @@ spec: name: user - mountPath: /octobot/tentacles name: tentacles - # - mountPath: /octobot/logs - # name: logs + - mountPath: /octobot/logs + name: logs nodeSelector: kubernetes.io/os: linux # serviceAccountName: metrics-server volumes: - # - name: octobot-config - # configMap: - # name: octobot-config + - name: user + persistentVolumeClaim: + claimName: octobot-user + - name: tentacles + persistentVolumeClaim: + claimName: octobot-tentacles - emptyDir: {} - name: user - - emptyDir: {} - name: tentacles - # - emptyDir: {} - # name: logs \ No newline at end of file + name: logs \ No newline at end of file diff --git a/k8s/openebs/openebs.yml b/k8s/openebs/openebs.yml index e215910..78247bc 100644 --- a/k8s/openebs/openebs.yml +++ b/k8s/openebs/openebs.yml @@ -6,7 +6,7 @@ analytics: ndmOperator: enabled: false ndm: - enabled: false + enabled: true snapshotOperator: enabled: true webhook: diff --git a/k8s/openebs/storageclass.yml b/k8s/openebs/storageclass.yml index e7a94c5..feebef2 100644 --- a/k8s/openebs/storageclass.yml +++ b/k8s/openebs/storageclass.yml @@ -2,10 +2,14 @@ apiVersion: storage.k8s.io/v1 kind: StorageClass metadata: annotations: + meta.helm.sh/release-name: openebs + meta.helm.sh/release-namespace: openebs cas.openebs.io/config: "- name: StorageType\n value: \"hostpath\"\n- name: BasePath\n \ value: /var/openebs/local \n" openebs.io/cas-type: local storageclass.kubernetes.io/is-default-class: "true" + labels: + app.kubernetes.io/managed-by: "Helm" name: openebs-hostpath provisioner: openebs.io/local reclaimPolicy: Delete