Commit Graph

56 Commits

Author SHA1 Message Date
mrtz 9249f0eb18 wip: Match chart to k8s state 2025-06-10 17:00:17 +02:00
mrtz 1bb720840d feat: Migrate sys applications to helmfile
Move most of helmfiles into temp to test only velero.

File structure:

```bash
/
├── helmfile.d/                                                 # Helmfiles, *.yaml.gotmpl
├── charts/                                                     # Our own charts, e.g `Atlantis`
├── values                                                      # Values for helmfiles
│   ├── <chart>
│   │   ├── values.yaml.gotmpl                                  # Values to be templated in `values/`
│   │   ├── kustomize                                           # Kustomizations per environment
│   │   ├── manifests                                           # Raw manifests
│   │   │   ├── <chart>.yaml                                    # Argo App for bootstrap
│   │   │   ├── dashboards                                      # Grafana dashboards
│   │   │   │   └── <chart>-metrics.yaml
│   │   │   └── policies                                        # Cilium and Kyverno policies
│   │   │       ├── CiliumNetworkPolicy-allow-api-server.yaml
│   │   │       └── KyvernoPolicy-regred-secret.yaml
│   │   └── values                                              # Values for each environment
│   │       ├── <chart>-staging.yaml.gotmpl                     # Values for staging environment
│   │       ├── <chart>-prod.yaml.gotmpl                        # Values for prod environment
│   │       └── <chart>.yaml.gotmpl                             # Standard values for all environments
│   │
│   ├── values.yaml                                             # Standard values for all cluster
│   ├── values-oceanbox.yaml                                    # Values overrides for oceanbox
│   ├── values-ekman.yaml                                       # Values overrides for ekman
```
2025-06-05 13:49:00 +02:00
juselius ee09bf74ac wip: atlantis local chart and muliple envs 2025-05-17 09:19:52 +02:00
juselius 223149ecdd wip: more or less working argo and cilium helmfile setup 2025-05-16 15:30:01 +02:00
juselius ddc95aad80 wip: use separate toplevel helmfile.d and values/ 2025-05-16 10:46:38 +02:00
juselius aadc6cb305 wip: towards a helmfile based config scheme 2025-05-13 16:08:16 +02:00
juselius abba0999e2 fix: get rid of /helm-working-dir in cmp 2025-05-12 19:59:23 +02:00
juselius 73ccf570d9 wip: move cilium values to external dir 2025-05-11 10:19:11 +02:00
juselius 7de100a4d4 wip: unify sys and apps 2025-05-06 16:00:57 +02:00
juselius 4590ddc30a wip: add guards around apps for move to helm template 2025-05-06 15:58:18 +02:00
juselius 98e21ccf5d wip: experimenting with avoiding applicationsets 2025-05-05 19:36:14 +02:00
juselius 04f2db17b7 fix: make cilium s3 policies global 2025-05-05 16:06:51 +02:00
juselius 79403cf015 feat: add headscale 2025-04-26 19:05:05 +02:00
juselius cf3ea55bdf Merge branch 'main' of gitlab.com:oceanbox/manifests 2025-02-24 12:36:57 +01:00
juselius 006ff95a7e fix: tweak plausible 2025-02-24 12:35:50 +01:00
Moritz Jörg e6b64c06bf fix(plausible): Update ingress with correct hostname
Also moves the it into the `aux` project and updates
the databaseUrl to match the cnpg cluster.
2025-02-21 21:34:14 +01:00
juselius 5635256193 fix: fix plausible analytics app 2025-02-21 13:46:34 +01:00
juselius 8ca1a331aa feat: add plausible analytics app 2025-02-21 13:38:30 +01:00
juselius c66a1e8876 feat: add yolo-registr chart and app 2025-02-13 14:12:03 +01:00
juselius f9a2190d76 fix: fix staging sorcerer archmaester url 2025-02-07 15:40:34 +01:00
juselius 4faec93d6a fix: s3 policy 2025-02-07 13:48:11 +01:00
juselius 7483a52cdd fix: fix atlantis staging database 2025-02-07 13:28:11 +01:00
juselius ec7e523ed6 fix: update openfga version 2025-02-07 10:48:34 +01:00
juselius cc96b955a4 fix: switch apps back to main branch 2025-02-07 07:43:39 +01:00
juselius 253ed4eeba major: cleanup before merge back to 2025-02-07 07:27:39 +01:00
juselius 5d86e81fb0 feat: change preprod to prod! 2025-01-30 20:45:33 +01:00
juselius c9ba27539e feat: add new prod-sorcerer 2025-01-30 20:08:09 +01:00
juselius 28e2ba87eb fix: fix accidental lowecasing 2025-01-23 18:08:27 +01:00
juselius 89e99bed42 fix: ignore redis secret 2025-01-23 17:03:49 +01:00
juselius 0f8dae5436 fix: update preprod atlantis and sorcerer 2025-01-23 16:43:03 +01:00
juselius f1385b8d0b fix: update sorcerer beta and atlantis preprod 2025-01-14 15:54:55 +01:00
juselius 87e3219c0c fix: add redis to sorcerer 2025-01-11 21:12:18 +01:00
juselius c02d40564d fix: update staging sorcerer for maps.beta 2025-01-11 16:19:36 +01:00
juselius 386c098373 fix: update (pre)prod atlantis manifests 2025-01-10 12:48:34 +01:00
juselius 4498df8aea fix: fix staging atlantis app and tweak keycloak 2024-12-31 13:34:38 +01:00
juselius 768c54db1a feat: new prod keycloak deploy with cnpg database 2024-12-27 22:15:17 +01:00
juselius d2b03dd2eb fix: remove redis secret from atlantis chart 2024-12-27 12:26:03 +01:00
juselius 1a39118763 fix: use unified external redis for sorcerer and atlantis 2024-12-23 07:31:14 +01:00
juselius 50aabe96b8 fix: migrate from internal to external redis 2024-12-23 07:23:06 +01:00
juselius 426fe34412 fix: flip dex over on nixidy branch (for now) 2024-12-20 09:45:24 +01:00
juselius 675e3299a1 fix: update openfga 2024-12-19 19:26:27 +01:00
juselius c31bf79671 fix: update openfga 2024-12-19 18:52:23 +01:00
juselius 73555a2d80 fix: update loki, tempo and openfga apps 2024-12-19 16:00:53 +01:00
juselius 90e1e35e0a feat: rudimentary fga permissions checking in api 2024-12-12 15:45:17 +01:00
juselius 9d9836bffb fix: update atlantis manifests and argo apps 2024-12-12 14:38:26 +01:00
juselius 9eb9714c7f feat: move from atlantis and sorcerer applicationsets 2024-12-09 12:46:35 +01:00
juselius ca6b80d13f feat: update atlantis chart, values and app for spmsa 2024-12-09 10:49:02 +01:00
Jonas Juselius e8e652039c Merge remote-tracking branch 'origin/main' into nixidy 2024-11-18 13:24:20 +01:00
juselius ea929b7dc4 wip: kustomization experiments 2024-10-15 07:37:43 +02:00
juselius 354bd72248 wip: well, looking better 2024-10-14 18:02:42 +02:00