feat: rename kustomizations/ to values/

kustomizations/dex/base/cluster.yaml

@@ -1,19 +0,0 @@
-apiVersion: postgresql.cnpg.io/v1
-kind: Cluster
-metadata:
-  name: dexdb
-spec:
-  enableSuperuserAccess: true
-  instances: 2
-  logLevel: info
-  storage:
-    pvcTemplate:
-      accessModes:
-      - ReadWriteOnce
-      resources:
-        requests:
-          storage: 1Gi
-      storageClassName: managed-nfs-storage
-      volumeMode: Filesystem
-    resizeInUseVolumes: true
-    size: 1Gi

kustomizations/dex/base/config.yaml

@@ -1,146 +0,0 @@
-issuer: https://idp.oceanbox.io/dex
-storage:
-  type: postgres
-  config:
-    host: staging-dexdb-rw
-    port: 5432
-    database: app
-    user: app
-    password: epq4dGyf5sheJ7fp9f0NgYtPwlhS2Gvtb5FXl6tddcNGyIhwN9DchExTUD7nxFMH
-    ssl:
-      mode: disable
-web:
-  http: 127.0.0.1:5556
-telemetry:
-  http: 127.0.0.1:5558
-grpc:
-  addr: 127.0.0.1:5557
-frontend:
-  dir: /srv/dex/web
-  issuer: oceanbox
-  extra:
-    client_logo_url: "../theme/client-logo.png"
-# enablePasswordDB: true
-# staticPasswords:
-#   - email: "admin@oceanbox.io"
-#     hash: "$2y$12$2AUaWnDEpHxsfFyRzTwx8e8WtJtnhGJOujPjP3BXVVCJe3c.k2PjC"
-#     username: "admin"
-#     userID: "9a15441c-4d66-4b26-a0f6-4e619535ee8f"
-oauth2:
-  responseTypes: [ "code" ]
-  skipApprovalScreen: true
-  alwaysShowLoginScreen: false
-connectors:
-- type: microsoft
-  id: oceanbox
-  name: oceanbox.io
-  config:
-    clientID: 43667ac0-37e1-422f-99fc-50a699bb255c
-    clientSecret: 5kA8Q~N1Gq~YBgJyKg8xNONZbvf4bM0Qwp_AUbM8
-    tenant: 3f737008-e9a0-4485-9d27-40329d288089
-    redirectURI: https://idp.oceanbox.io/dex/callback
-    onlySecurityGroups: true
-    groups:
-      - atlantis
-- type: microsoft
-  id: salmar
-  name: salmar.no
-  config:
-    clientID: 3f6f1153-e5da-40eb-a2dd-ede6c7bf6058
-    clientSecret: rzC8Q~fc9ex6hBglFPAKCU4KJ1o82AQCQYdb~cI2
-    tenant: de10159d-2c09-4762-966c-e841d3391feb
-    redirectURI: https://idp.oceanbox.io/dex/callback
-    onlySecurityGroups: true
-    groups:
-      - Azure-Grp-App-Cloud-Oceanbox
-- type: microsoft
-  id: aqua-kompetanse
-  name: aqua-kompetanse.no
-  config:
-    clientID: 9fd83910-1a21-4869-8a30-19fc32722ee2
-    clientSecret: Uer8Q~8LKuDNQVt1vHaMVXAzKSLssvVduH.2HcNC
-    tenant: 6cd538cc-6cba-463f-9d22-1e0eda9695e3
-    redirectURI: https://idp.oceanbox.io/dex/callback
-    onlySecurityGroups: true
-    groups:
-      - Oceanbox
-- type: oidc
-  id: keycloak
-  name: default
-  config:
-    issuer: https://auth.srv.oceanbox.io/realms/oceanbox
-    clientID: dex
-    clientSecret: 4T7oMYLeShuIvrF3wvg4A24gcZWzdcrC
-    redirectURI: https://idp.oceanbox.io/dex/callback
-    promptType: login
-staticClients:
-  - id: atlantis
-    redirectURIs:
-      - 'https://maps.oceanbox.io/signin-oidc'
-      - 'https://maps.srv.oceanbox.io/signin-oidc'
-      - 'https://atlantis.srv.oceanbox.io/signin-oidc'
-      - 'https://maps.relic.oceanbox.io/signin-oidc'
-    name: 'Atlantis'
-    secret: KOJ6bDHzE5vdyfSrzgwLjtM5PzA809Zm
-  - id: atlantis_dev
-    redirectURIs:
-      - 'https://atlantis.beta.oceanbox.io/signin-oidc'
-      - 'https://beta.oceanbox.io/signin-oidc'
-      - 'https://atlas.oceanbox.io/signin-oidc'
-      - 'https://jonas-atlantis.dev.oceanbox.io/signin-oidc'
-      - 'https://stig-atlantis.dev.oceanbox.io/signin-oidc'
-      - 'https://simkir-atlantis.dev.oceanbox.io/signin-oidc'
-      - 'https://atlantis.local.oceanbox.io:8080/signin-oidc'
-    name: 'Atlantis dev'
-    secret: 3QjfSPmAemjn34XVA2o1fvoS7I4gKvOR
-  - id: petimeter
-    redirectURIs:
-      - 'https://petimeter.srv.oceanbox.io/signin-oidc'
-    name: 'Petimeter dev'
-    secret: kkrKo3mmmseMnorf9qw3eklefkoOKFNs
-  - id: petimeter_dev
-    redirectURIs:
-      - 'https://petimeter.beta.oceanbox.io/signin-oidc'
-      - 'https://jonas-petimeter.dev.oceanbox.io/signin-oidc'
-      - 'https://stig-petimeter.dev.oceanbox.io/signin-oidc'
-      - 'https://simkir-petimeter.dev.oceanbox.io/signin-oidc'
-      - 'https://local.oceanbox.io:8080/signin-oidc'
-    name: 'Petimeter dev'
-    secret: kfngKJF9EKVBnnvgkdmPfs0qw3rmjslk
-  - id: sorcerer
-    redirectURIs:
-      - 'https://sorcerer.data.oceanbox.io/signin-oidc'
-      - 'https://sorcerer.ekman.oceanbox.io/signin-oidc'
-    name: 'Sorcerer'
-    secret: sIUXxSQLaTJiLCQ9AqBhmEbAL9lubHGB
-  - id: sorcerer_dev
-    redirectURIs:
-      - 'https://sorcerer.ekman.oceanbox.io/signin-oidc'
-      - 'https://jonas-sorcerer.ekman.oceanbox.io/signin-oidc'
-      - 'https://stig-sorcerer.ekman.oceanbox.io/signin-oidc'
-      - 'https://simkir-sorcerer.ekman.oceanbox.io/signin-oidc'
-    name: 'Sorcerer dev'
-    secret: cyrgDr1UzhQrJn8nRVqEt9BJ9mLk3OBy
-  - id: archmeister
-    redirectURIs:
-      - 'https://archmeister.srv.oceanbox.io/signin-oidc'
-    name: 'Archmeister'
-    secret: ieK3yak9zoh3yeewee8quahY6seiv7Ro
-  - id: archmeister_dev
-    redirectURIs:
-      - 'https://archmeister.beta.oceanbox.io/signin-oidc'
-      - 'https://jonas-archmeister.dev.oceanbox.io/signin-oidc'
-      - 'https://stig-archmeister.dev.oceanbox.io/signin-oidc'
-      - 'https://simkir-archmeister.dev.oceanbox.io/signin-oidc'
-      - 'https://local.oceanbox.io:9080/signin-oidc'
-    name: 'Archmeister dev'
-    secret: Dae1eekeedeuKaoCiesh1Jei6aishe8I
-  - id: test
-    redirectURIs:
-      - 'http://localhost:8080/signin-oidc'
-      - 'https://localhost:8080/signin-oidc'
-      - 'http://localhost:8085/signin-oidc'
-      - 'https://localhost:8085/signin-oidc'
-    name: 'Local development'
-    secret: jkdjrKKkfkrkieurbd743jdrrrJdnRqR
-

kustomizations/dex/base/kustomization.yaml

@@ -1,8 +0,0 @@
-generatorOptions:
-  disableNameSuffixHash: true
-secretGenerator:
-  - name: dex-config
-    files:
-      - config.yaml
-resources:
-  - cluster.yaml

kustomizations/dex/manifests/dex.yaml

@@ -1,37 +0,0 @@
-apiVersion: argoproj.io/v1alpha1
-kind: ApplicationSet
-metadata:
-  name: dex
-  namespace: argocd
-spec:
-  generators:
-  - list:
-      elements:
-      - cluster: https://kubernetes.default.svc
-        env: prod
-        hostanme: idp.srv.oceanbox.io
-      - cluster: https://kubernetes.default.svc
-        env: staging
-        hostanme: idp.beta.oceanbox.io
-  template:
-    metadata:
-      name: '{{ env }}-dex'
-    spec:
-      project: atlantis
-      destination:
-        server: https://kubernetes.default.svc
-        namespace: idp
-      sources:
-      - repoURL: https://gitlab.com/oceanbox/manifests.git
-        targetRevision: main
-        path: 'kustomizations/dex/{{ env }}'
-      - repoURL: https://charts.dexidp.io
-        targetRevision: 0.16.0
-        chart: dex
-        helm:
-          valueFiles:
-            - $values/kustomizations/dex/values.yaml
-            - $values/kustomizations/dex/values-{{ env }}.yaml
-      - repoURL: https://gitlab.com/oceanbox/manifests.git
-        targetRevision: main
-        ref: values

kustomizations/dex/manifests/resources.yaml

@@ -1,15 +0,0 @@
-apiVersion: argoproj.io/v1alpha1
-kind: Application
-metadata:
-  name: dex-resources
-  namespace: argocd
-spec:
-  project: atlantis
-  destination:
-    server: https://kubernetes.default.svc
-    namespace: idp
-  source:
-    repoURL: https://gitlab.com/oceanbox/manifests.git
-    targetRevision: main
-    path: kustomizations/dex/resources
-

kustomizations/dex/prod/kustomization.yaml

@@ -1,3 +0,0 @@
-namePrefix: prod-
-resources:
-  - ../base

kustomizations/dex/resources/dex-volumes.yaml

@@ -1,31 +0,0 @@
-apiVersion: v1
-kind: PersistentVolume
-metadata:
-  name: pv-oceanbox-dex
-spec:
-  accessModes:
-  - ReadOnlyMany
-  capacity:
-    storage: 50M
-  mountOptions:
-  - vers=4.2
-  - soft
-  nfs:
-    path: /oceanbox/pv-oceanbox-dex
-    server: 10.255.241.210
-  persistentVolumeReclaimPolicy: Retain
-  volumeMode: Filesystem
----
-apiVersion: v1
-kind: PersistentVolumeClaim
-metadata:
-  name: oceanbox-dex
-spec:
-  accessModes:
-  - ReadOnlyMany
-  resources:
-    requests:
-      storage: 50M
-  storageClassName: ""
-  volumeMode: Filesystem
-  volumeName: pv-oceanbox-dex

kustomizations/dex/staging/cluster_patch.yaml

@@ -1,3 +0,0 @@
-- op: replace
-  path: /spec/instances
-  value: 1

kustomizations/dex/staging/kustomization.yaml

@@ -1,9 +0,0 @@
-namePrefix: staging-
-patches:
-  - target:
-      group: postgresql.cnpg.io
-      version: v1
-      kind: Cluster
-    path: cluster_patch.yaml
-resources:
-  - ../base

kustomizations/dex/values-prod.yaml

@@ -1,26 +0,0 @@
-configSecret:
-  create: false
-  name: prod-dex-config
-
-ingress:
-  enabled: true
-  className: nginx
-  annotations:
-    cert-manager.io/cluster-issuer: letsencrypt-production
-    nginx.ingress.kubernetes.io/ssl-redirect: "true"
-  hosts:
-    - host: idp.oceanbox.io
-      paths:
-        - path: /
-          pathType: ImplementationSpecific
-    - host: idp.srv.oceanbox.io
-      paths:
-        - path: /
-          pathType: ImplementationSpecific
-  tls:
-   - secretName: prod-dex-tls
-     hosts:
-       - idp.oceanbox.io
-       - idp.srv.oceanbox.io
-
-

kustomizations/dex/values-staging.yaml

@@ -1,21 +0,0 @@
-configSecret:
-  create: false
-  name: staging-dex-config
-
-ingress:
-  enabled: true
-  className: nginx
-  annotations:
-    cert-manager.io/cluster-issuer: letsencrypt-production
-    nginx.ingress.kubernetes.io/ssl-redirect: "true"
-  hosts:
-    - host: idp.beta.oceanbox.io
-      paths:
-        - path: /
-          pathType: ImplementationSpecific
-  tls:
-   - secretName: staging-dex-tls
-     hosts:
-       - idp.beta.oceanbox.io
-
-

kustomizations/dex/values.yaml

@@ -1,37 +0,0 @@
-replicaCount: 1
-https:
-  enabled: false
-grpc:
-  enabled: false
-
-configSecret:
-  create: false
-  name: dex-config
-config: {}
-
-volumes:
-  - name: web
-    persistentVolumeClaim:
-      claimName: oceanbox-dex
-volumeMounts:
-  - name: web
-    mountPath: /srv/dex/web
-envVars: []
-
-service:
-  annotations: {}
-  type: ClusterIP
-  clusterIP: ""
-  ports:
-    http:
-      port: 5556
-      nodePort:
-    https:
-      port: 5554
-      nodePort:
-    grpc:
-      port: 5557
-      nodePort:
-
-serviceMonitor:
-  enabled: true