Compare commits

..

1 Commits

Author SHA1 Message Date
renovate-bot 7abe503050 Update ghcr.io/juanfont/headscale Docker tag to v0.28.0
renovate/stability-days Updates have not met minimum release age requirement
2026-03-17 14:57:21 +00:00
66 changed files with 54 additions and 472 deletions
+2 -2
View File
@@ -4,10 +4,10 @@ description: Atlantis map and simulation service
type: application type: application
# This is the chart version. This version number should be incremented each time you make changes # This is the chart version. This version number should be incremented each time you make changes
# to the chart and its templates, including the app version. # to the chart and its templates, including the app version.
version: v1.48.0 version: v1.46.5
# This is the version number of the application being deployed. This version number should be # This is the version number of the application being deployed. This version number should be
# incremented each time you make changes to the application. # incremented each time you make changes to the application.
appVersion: v1.48.0 appVersion: v1.46.5
dependencies: dependencies:
- name: diagrid-dashboard - name: diagrid-dashboard
version: "0.1.0" version: "0.1.0"
+1 -1
View File
@@ -4,7 +4,7 @@
replicaCount: 1 replicaCount: 1
image: image:
repository: git.oceanbox.io/oceanbox/poseidon/atlantis repository: git.oceanbox.io/oceanbox/poseidon/atlantis
tag: v1.48.0 tag: v1.46.5
pullPolicy: IfNotPresent pullPolicy: IfNotPresent
init: init:
enabled: false enabled: false
+2 -2
View File
@@ -13,9 +13,9 @@ type: application
# This is the chart version. This version number should be incremented each time you make changes # This is the chart version. This version number should be incremented each time you make changes
# to the chart and its templates, including the app version. # to the chart and its templates, including the app version.
# Versions are expected to follow Semantic Versioning (https://semver.org/) # Versions are expected to follow Semantic Versioning (https://semver.org/)
version: v1.48.0 version: v1.46.5
# This is the version number of the application being deployed. This version number should be # This is the version number of the application being deployed. This version number should be
# incremented each time you make changes to the application. Versions are not expected to # incremented each time you make changes to the application. Versions are not expected to
# follow Semantic Versioning. They should reflect the version the application is using. # follow Semantic Versioning. They should reflect the version the application is using.
# It is recommended to use it with quotes. # It is recommended to use it with quotes.
appVersion: "v1.48.0" appVersion: "v1.46.5"
+1 -1
View File
@@ -10,7 +10,7 @@ image:
# This sets the pull policy for images. # This sets the pull policy for images.
pullPolicy: IfNotPresent pullPolicy: IfNotPresent
# Overrides the image tag whose default is the chart appVersion. # Overrides the image tag whose default is the chart appVersion.
tag: v1.48.0 tag: v1.46.5
# This is for the secrets for pulling an image from a private repository more information can be found here: https://kubernetes.io/docs/tasks/configure-pod-container/pull-image-private-registry/ # This is for the secrets for pulling an image from a private repository more information can be found here: https://kubernetes.io/docs/tasks/configure-pod-container/pull-image-private-registry/
imagePullSecrets: imagePullSecrets:
- name: gitlab-pull-secret - name: gitlab-pull-secret
-6
View File
@@ -1,6 +0,0 @@
dependencies:
- name: diagrid-dashboard
repository: file://../diagrid-dashboard
version: 0.1.0
digest: sha256:4fdb3148a2a6439223d7844a3083da2de324dd47e5cb3ac4a5d9c436e6e2c775
generated: "2026-02-25T16:15:48.608231856+01:00"
+2 -2
View File
@@ -4,10 +4,10 @@ description: A Helm chart for Kubernetes
type: application type: application
# This is the chart version. This version number should be incremented each time you make changes # This is the chart version. This version number should be incremented each time you make changes
# to the chart and its templates, including the app version. # to the chart and its templates, including the app version.
version: v1.7.1 version: v1.6.13
# This is the version number of the application being deployed. This version number should be # This is the version number of the application being deployed. This version number should be
# incremented each time you make changes to the application. # incremented each time you make changes to the application.
appVersion: v1.7.1 appVersion: v1.6.13
dependencies: dependencies:
- name: diagrid-dashboard - name: diagrid-dashboard
version: "0.1.0" version: "0.1.0"
+2 -1
View File
@@ -4,7 +4,7 @@
replicaCount: 1 replicaCount: 1
image: image:
repository: git.oceanbox.io/oceanbox/plume/plume repository: git.oceanbox.io/oceanbox/plume/plume
tag: v1.7.1 tag: v1.6.13
pullPolicy: IfNotPresent pullPolicy: IfNotPresent
init: init:
enabled: false enabled: false
@@ -90,5 +90,6 @@ serviceMonitor:
nodeSelector: {} nodeSelector: {}
tolerations: [] tolerations: []
affinity: {} affinity: {}
diagrid-dashboard: diagrid-dashboard:
enabled: false enabled: false
+2 -2
View File
@@ -4,10 +4,10 @@ description: A Helm chart for Kubernetes
type: application type: application
# This is the chart version. This version number should be incremented each time you make changes # This is the chart version. This version number should be incremented each time you make changes
# to the chart and its templates, including the app version. # to the chart and its templates, including the app version.
version: v1.48.0 version: v1.46.5
# This is the version number of the application being deployed. This version number should be # This is the version number of the application being deployed. This version number should be
# incremented each time you make changes to the application. # incremented each time you make changes to the application.
appVersion: v1.48.0 appVersion: v1.46.5
dependencies: dependencies:
- name: diagrid-dashboard - name: diagrid-dashboard
version: "0.1.0" version: "0.1.0"
+1 -1
View File
@@ -5,7 +5,7 @@
replicaCount: 1 replicaCount: 1
image: image:
repository: git.oceanbox.io/oceanbox/poseidon/sorcerer repository: git.oceanbox.io/oceanbox/poseidon/sorcerer
tag: v1.48.0 tag: v1.46.5
pullPolicy: IfNotPresent pullPolicy: IfNotPresent
init: init:
enabled: false enabled: false
+3 -3
View File
@@ -15,7 +15,7 @@ releases:
- name: argocd - name: argocd
namespace: argocd namespace: argocd
chart: argo/argo-cd chart: argo/argo-cd
version: 9.4.17 version: 9.4.10
condition: argo.enabled condition: argo.enabled
values: values:
- ../values/argo/values/argocd.yaml.gotmpl - ../values/argo/values/argocd.yaml.gotmpl
@@ -35,7 +35,7 @@ releases:
- name: argo-rollouts - name: argo-rollouts
namespace: argocd namespace: argocd
chart: argo/argo-rollouts chart: argo/argo-rollouts
version: 2.40.9 version: 2.40.6
condition: argo.rollouts.enabled condition: argo.rollouts.enabled
values: values:
- ../values/argo/values/rollouts.yaml.gotmpl - ../values/argo/values/rollouts.yaml.gotmpl
@@ -43,7 +43,7 @@ releases:
- name: argo-workflows - name: argo-workflows
namespace: argocd namespace: argocd
chart: argo/argo-workflows chart: argo/argo-workflows
version: 1.0.7 version: 0.47.5
condition: argo.workflows.enabled condition: argo.workflows.enabled
missingFileHandler: Info missingFileHandler: Info
- name: manifests - name: manifests
-46
View File
@@ -1,46 +0,0 @@
# yaml-language-server: $schema=https://www.schemastore.org/helmfile.json
bases:
- ../envs/environments.yaml.gotmpl
repositories:
- name: catalyst
oci: true
url: 'public.ecr.aws/diagrid/catalyst'
commonLabels:
tier: system
releases:
- name: catalyst
namespace: cra-agent
chart: catalyst/catalyst
version: v1.38.0
condition: catalyst.enabled
values:
- ../values/catalyst/values/values.yaml
- ../values/catalyst/values/values-{{ .Environment.Name }}.yaml
postRenderer: ../bin/kustomizer
postRendererArgs:
- ../values/catalyst/kustomize/{{ .Environment.Name }}
missingFileHandler: Info
- name: manifests
namespace: cra-agent
chart: manifests
condition: catalyst.enabled
missingFileHandler: Info
values:
- ../values/env.yaml
- ../values/env-{{ requiredEnv "ARGOCD_ENV_CLUSTER_NAME" }}.yaml
- ../values/catalyst/env.yaml.gotmpl
- ../values/catalyst/env-{{ requiredEnv "ARGOCD_ENV_CLUSTER_NAME" }}.yaml.gotmpl
hooks:
- events: [ prepare, cleanup ]
showlogs: true
command: ../bin/helmify
args:
- '{{`{{ if eq .Event.Name "prepare" }}build{{ else }}clean{{ end }}`}}'
- '{{`{{ .Release.Chart }}`}}'
- '{{`{{ .Environment.Name }}`}}'
- ../values/catalyst/manifests
- manifests
+1 -1
View File
@@ -13,7 +13,7 @@ releases:
- name: cert-manager - name: cert-manager
namespace: cert-manager namespace: cert-manager
chart: cert-manager/cert-manager chart: cert-manager/cert-manager
version: v1.20.1 version: v1.19.4
condition: cert_manager.enabled condition: cert_manager.enabled
values: values:
- ../values/cert-manager/values/cert-manager.yaml.gotmpl - ../values/cert-manager/values/cert-manager.yaml.gotmpl
+1 -1
View File
@@ -13,7 +13,7 @@ releases:
- name: dragonfly - name: dragonfly
namespace: dragonfly namespace: dragonfly
chart: dragonfly/dragonfly-operator chart: dragonfly/dragonfly-operator
version: v1.5.0 version: v1.4.0
condition: dragonfly.enabled condition: dragonfly.enabled
values: values:
- ../values/dragonfly/values/dragonfly.yaml.gotmpl - ../values/dragonfly/values/dragonfly.yaml.gotmpl
+1 -1
View File
@@ -12,7 +12,7 @@ releases:
- name: ingress-nginx - name: ingress-nginx
namespace: ingress-nginx namespace: ingress-nginx
chart: ingress-nginx/ingress-nginx chart: ingress-nginx/ingress-nginx
version: 4.15.1 version: 4.14.3
condition: nginx.enabled condition: nginx.enabled
values: values:
- ../values/ingress-nginx/values/ingress-nginx.yaml.gotmpl - ../values/ingress-nginx/values/ingress-nginx.yaml.gotmpl
+1 -1
View File
@@ -8,7 +8,7 @@ releases:
- name: kueue - name: kueue
namespace: kueue-system namespace: kueue-system
chart: oci://registry.k8s.io/kueue/charts/kueue chart: oci://registry.k8s.io/kueue/charts/kueue
version: 0.16.4 version: 0.16.2
condition: kueue.enabled condition: kueue.enabled
values: values:
- ../values/kueue/values/values.yaml - ../values/kueue/values/values.yaml
+1 -1
View File
@@ -12,7 +12,7 @@ releases:
- name: loki - name: loki
namespace: loki namespace: loki
chart: loki/loki chart: loki/loki
version: 6.55.0 version: 6.53.0
condition: loki.enabled condition: loki.enabled
values: values:
- ../values/loki/values/loki.yaml.gotmpl - ../values/loki/values/loki.yaml.gotmpl
+1 -1
View File
@@ -12,7 +12,7 @@ releases:
- name: mariadb-operator - name: mariadb-operator
namespace: mariadb-operator namespace: mariadb-operator
chart: mariadb-operator/mariadb-operator chart: mariadb-operator/mariadb-operator
version: 26.3.0 version: 25.10.4
condition: mariadb_operator.enabled condition: mariadb_operator.enabled
values: values:
- ../values/mariadb-operator/values/mariadb-operator.yaml.gotmpl - ../values/mariadb-operator/values/mariadb-operator.yaml.gotmpl
+1 -1
View File
@@ -16,7 +16,7 @@ releases:
namespace: {{ .Environment.Name }}-openfga namespace: {{ .Environment.Name }}-openfga
{{- end }} {{- end }}
chart: openfga/openfga chart: openfga/openfga
version: 0.2.62 version: 0.2.56
condition: openfga.enabled condition: openfga.enabled
values: values:
- ../values/openfga/values/values.yaml - ../values/openfga/values/values.yaml
@@ -12,7 +12,7 @@ releases:
- name: opentelemetry-collector - name: opentelemetry-collector
namespace: otel namespace: otel
chart: open-telemetry/opentelemetry-collector chart: open-telemetry/opentelemetry-collector
version: 0.147.1 version: 0.146.1
condition: otel.enabled condition: otel.enabled
values: values:
- ../values/opentelemetry-collector/values/values.yaml - ../values/opentelemetry-collector/values/values.yaml
+1 -1
View File
@@ -15,7 +15,7 @@ releases:
- name: prometheus - name: prometheus
namespace: prometheus namespace: prometheus
chart: prometheus/kube-prometheus-stack chart: prometheus/kube-prometheus-stack
version: 82.15.1 version: 82.10.3
condition: prometheus.enabled condition: prometheus.enabled
values: values:
- ../values/prometheus/values/prometheus.yaml.gotmpl - ../values/prometheus/values/prometheus.yaml.gotmpl
+1 -1
View File
@@ -13,7 +13,7 @@ releases:
- name: slurm-operator - name: slurm-operator
namespace: slinky namespace: slinky
chart: slurm-operator/slurm-operator chart: slurm-operator/slurm-operator
version: 1.0.3 version: 1.0.2
condition: slurm_operator.enabled condition: slurm_operator.enabled
values: values:
- ../values/slurm-operator/values/slurm-operator.yaml.gotmpl - ../values/slurm-operator/values/slurm-operator.yaml.gotmpl
+1 -1
View File
@@ -13,7 +13,7 @@ releases:
- name: slurm - name: slurm
namespace: slurm namespace: slurm
chart: slurm/slurm chart: slurm/slurm
version: 1.0.3 version: 1.0.2
condition: slurm.enabled condition: slurm.enabled
values: values:
- ../values/slurm/values/slurm.yaml.gotmpl - ../values/slurm/values/slurm.yaml.gotmpl
+1 -1
View File
@@ -14,7 +14,7 @@ releases:
- name: umami - name: umami
namespace: analytics namespace: analytics
chart: umami/umami chart: umami/umami
version: 7.7.11 version: 7.7.3
condition: umami.enabled condition: umami.enabled
values: values:
- ../values/umami/values/values.yaml - ../values/umami/values/values.yaml
+1 -1
View File
@@ -12,7 +12,7 @@ releases:
- name: x509-exporter - name: x509-exporter
namespace: x509-exporter namespace: x509-exporter
chart: x509-exporter/x509-certificate-exporter chart: x509-exporter/x509-certificate-exporter
version: 3.20.0 version: 3.19.1
condition: x509_exporter.enabled condition: x509_exporter.enabled
values: values:
- ../values/x509-exporter/values/x509-exporter.yaml.gotmpl - ../values/x509-exporter/values/x509-exporter.yaml.gotmpl
+1 -6
View File
@@ -96,10 +96,6 @@ spec:
server: https://kubernetes.default.svc server: https://kubernetes.default.svc
- namespace: dex - namespace: dex
server: https://kubernetes.default.svc server: https://kubernetes.default.svc
- namespace: cra-agent
server: https://kubernetes.default.svc
- namespace: catalyst
server: https://kubernetes.default.svc
sourceRepos: sourceRepos:
- https://argoproj.github.io/argo-helm - https://argoproj.github.io/argo-helm
- https://kubernetes-sigs.github.io/metrics-server/ - https://kubernetes-sigs.github.io/metrics-server/
@@ -143,8 +139,7 @@ spec:
- ghcr.io/dragonflydb/dragonfly-operator/helm/dragonfly-operator - ghcr.io/dragonflydb/dragonfly-operator/helm/dragonfly-operator
- docker.gitea.com - docker.gitea.com
- https://operator.mariadb.com/mariadb-enterprise-operator - https://operator.mariadb.com/mariadb-enterprise-operator
- https://ot-container-kit.github.io/helm-charts
- https://operator.mariadb.com - https://operator.mariadb.com
- https://ot-container-kit.github.io/helm-charts
- https://twin.github.io/helm-charts - https://twin.github.io/helm-charts
- https://charts.dexidp.io - https://charts.dexidp.io
- public.ecr.aws/diagrid/catalyst
@@ -1,9 +0,0 @@
apiVersion: v1
kind: ConfigMap
metadata:
name: beta-atlantis-actor-config
data:
XTRACT_IMAGE: "git.oceanbox.io/oceanbox/katamari/excavator:v1.2.6"
XTRACT_QUEUE: "prod-queue"
PLUME_IMAGE: "git.oceanbox.io/oceanbox/katamari/plume:v1.2.7"
PLUME_QUEUE: "prod-queue"
@@ -7,9 +7,4 @@
path: /spec/template/spec/containers/0/envFrom/- path: /spec/template/spec/containers/0/envFrom/-
value: value:
secretRef: secretRef:
name: prod-atlantis-env name: prod-atlantis-env
- op: add
path: /spec/template/spec/containers/0/envFrom/-
value:
configMapRef:
name: beta-atlantis-actor-config
@@ -14,7 +14,6 @@ patches:
resources: resources:
- ../base - ../base
- rbac.yaml - rbac.yaml
- actor-config.yaml
- tracing.yaml - tracing.yaml
- bindings.yaml - bindings.yaml
- pubsub.yaml - pubsub.yaml
-1
View File
@@ -8,7 +8,6 @@ rules:
- "" - ""
resourceNames: resourceNames:
- beta-atlantis-appsettings - beta-atlantis-appsettings
- beta-atlantis-actor-config
resources: resources:
- configmaps - configmaps
verbs: verbs:
@@ -1,9 +0,0 @@
apiVersion: v1
kind: ConfigMap
metadata:
name: prod-atlantis-actor-config
data:
XTRACT_IMAGE: "git.oceanbox.io/oceanbox/katamari/excavator:v1.2.6"
XTRACT_QUEUE: "prod-queue"
PLUME_IMAGE: "git.oceanbox.io/oceanbox/katamari/plume:v1.2.7"
PLUME_QUEUE: "prod-queue"
@@ -7,9 +7,4 @@
path: /spec/template/spec/containers/0/envFrom/- path: /spec/template/spec/containers/0/envFrom/-
value: value:
secretRef: secretRef:
name: prod-atlantis-env name: prod-atlantis-env
- op: add
path: /spec/template/spec/containers/0/envFrom/-
value:
configMapRef:
name: prod-atlantis-actor-config
@@ -13,7 +13,6 @@ patches:
resources: resources:
- ../base - ../base
- secrets.yaml - secrets.yaml
- actor-config.yaml
- rbac.yaml - rbac.yaml
- tracing.yaml - tracing.yaml
- bindings.yaml - bindings.yaml
-1
View File
@@ -8,7 +8,6 @@ rules:
- "" - ""
resourceNames: resourceNames:
- prod-atlantis-appsettings - prod-atlantis-appsettings
- prod-atlantis-actor-config
resources: resources:
- configmaps - configmaps
verbs: verbs:
@@ -1,9 +0,0 @@
apiVersion: v1
kind: ConfigMap
metadata:
name: staging-atlantis-actor-config
data:
XTRACT_IMAGE: "git.oceanbox.io/oceanbox/katamari/excavator:v1.2.6"
XTRACT_QUEUE: "dev-queue"
PLUME_IMAGE: "git.oceanbox.io/oceanbox/katamari/plume:v1.2.7"
PLUME_QUEUE: "dev-queue"
@@ -7,9 +7,4 @@
path: /spec/template/spec/containers/0/envFrom/- path: /spec/template/spec/containers/0/envFrom/-
value: value:
secretRef: secretRef:
name: staging-atlantis-env name: staging-atlantis-env
- op: add
path: /spec/template/spec/containers/0/envFrom/-
value:
configMapRef:
name: staging-atlantis-actor-config
@@ -14,7 +14,6 @@ resources:
- ../base - ../base
- rbac.yaml - rbac.yaml
- secrets.yaml - secrets.yaml
- actor-config.yaml
- tracing.yaml - tracing.yaml
- bindings.yaml - bindings.yaml
- pubsub.yaml - pubsub.yaml
@@ -22,4 +21,4 @@ resources:
- subscriptions.yaml - subscriptions.yaml
- configurations.yaml - configurations.yaml
- secretstore.yaml - secretstore.yaml
- keyvault.yaml - keyvault.yaml
@@ -8,7 +8,6 @@ rules:
- "" - ""
resourceNames: resourceNames:
- staging-atlantis-appsettings - staging-atlantis-appsettings
- staging-atlantis-actor-config
resources: resources:
- configmaps - configmaps
verbs: verbs:
@@ -1,7 +1,7 @@
replicaCount: 1 replicaCount: 1
image: image:
repository: git.oceanbox.io/oceanbox/poseidon/atlantis repository: git.oceanbox.io/oceanbox/poseidon/atlantis
tag: 74ed3e11-debug tag: 23006866-debug
podAnnotations: podAnnotations:
dapr.io/app-id: "staging-atlantis" dapr.io/app-id: "staging-atlantis"
env: env:
-3
View File
@@ -1,3 +0,0 @@
catalyst:
enabled: true
autosync: false
-3
View File
@@ -1,3 +0,0 @@
catalyst:
enabled: false
autosync: false
-42
View File
@@ -1,42 +0,0 @@
{{- if .Values.clusterConfig.argo.enabled }}
apiVersion: argoproj.io/v1alpha1
kind: Application
metadata:
name: catalyst
namespace: argocd
annotations:
argocd.argoproj.io/sync-options: SkipDryRunOnMissingResource=true
finalizers:
- resources-finalizer.argocd.argoproj.io
spec:
destination:
namespace: cra-agent
server: https://kubernetes.default.svc
project: sys
sources:
- repoURL: {{ .Values.clusterConfig.manifests }}
targetRevision: HEAD
path: helmfile.d
plugin:
name: helmfile-cmp
env:
- name: CLUSTER_NAME
value: {{ .Values.clusterConfig.cluster }}
- name: HELMFILE_ENVIRONMENT
value: {{ .Values.catalyst.env }}
- name: HELMFILE_FILE_PATH
value: catalyst.yaml.gotmpl
syncPolicy:
managedNamespaceMetadata:
labels:
component: aux
syncOptions:
- CreateNamespace=true
- ApplyOutOfSyncOnly=true
# - ServerSideApply=true
{{- if .Values.catalyst.autosync }}
automated:
prune: true
# selfHeal: false
{{- end }}
{{- end }}
-11
View File
@@ -1,11 +0,0 @@
apiVersion: postgresql.cnpg.io/v1
kind: Cluster
metadata:
name: catalyst-db
namespace: cra-agent
spec:
instances: 1
imageName: ghcr.io/cloudnative-pg/postgresql:18
storage:
resizeInUseVolumes: true
size: 10Gi
-16
View File
@@ -1,16 +0,0 @@
{{- if .Values.clusterConfig.cilium.enabled }}
apiVersion: cilium.io/v2
kind: CiliumNetworkPolicy
metadata:
name: allow-api-umami
namespace: analytics
spec:
description: Allow umami api
egress:
- toFQDNs:
- matchPattern: binaries.prisma.sh
- matchPattern: checkpoint.prisma.io
endpointSelector:
matchLabels:
app.kubernetes.io/instance: umami
{{- end }}
-17
View File
@@ -1,17 +0,0 @@
agent:
config:
project:
default_managed_state_store_type: postgresql-shared-external
external_postgresql:
enabled: true
auth_type: connectionString
namespace: postgres
connection_string_host: catalyst-db.cr-agent.svc.cluster.local
connection_string_port: 5432
connection_string_username: postgres
connection_string_password: postgres
connection_string_database: catalyst
gateway:
tls:
enabled: true
join_token: "tset"
+1 -1
View File
@@ -38,4 +38,4 @@ volumeMounts:
readOnly: true readOnly: true
subPath: appsettings.json subPath: appsettings.json
image: image:
tag: 74ed3e11-debug tag: 38eeb4cc-debug
+1 -1
View File
@@ -1,6 +1,6 @@
replicaCount: 1 replicaCount: 1
image: image:
tag: "64b20667-debug" tag: "0d279bb9-debug"
env: env:
- name: APP_VERSION - name: APP_VERSION
value: "0.0.0" value: "0.0.0"
+9
View File
@@ -139,3 +139,12 @@ config:
environment: staging environment: staging
alerts: alerts:
- type: custom - type: custom
- name: Plume Dev TOS
<<: *https-endpoint
group: "Experimental Services"
url: https://plume.ekman.oceanbox.io/healthz
extra-labels:
environment: staging
alerts:
- type: custom
+1 -1
View File
@@ -1,7 +1,7 @@
image: image:
repository: ghcr.io/juanfont/headscale repository: ghcr.io/juanfont/headscale
pullPolicy: IfNotPresent pullPolicy: IfNotPresent
tag: v0.27.1 tag: v0.28.0
args: [ "serve" ] args: [ "serve" ]
+2 -3
View File
@@ -1,7 +1,7 @@
image: image:
repository: ghcr.io/juanfont/headscale repository: ghcr.io/juanfont/headscale
pullPolicy: IfNotPresent pullPolicy: IfNotPresent
tag: v0.27.1 tag: v0.28.0
args: ["serve"] args: ["serve"]
@@ -255,7 +255,6 @@ configMaps:
{ "action": "accept", "src": [ "faith.iha@oceanbox.io" ], "dst": [ "faith.iha@oceanbox.io:*" ] }, { "action": "accept", "src": [ "faith.iha@oceanbox.io" ], "dst": [ "faith.iha@oceanbox.io:*" ] },
{ "action": "accept", "src": [ "elianne.ersdal@oceanbox.io" ], "dst": [ "elianne.ersdal@oceanbox.io:*" ] }, { "action": "accept", "src": [ "elianne.ersdal@oceanbox.io" ], "dst": [ "elianne.ersdal@oceanbox.io:*" ] },
{ "action": "accept", "src": [ "hanskristian.djuve@oceanbox.io" ], "dst": [ "hanskristian.djuve@oceanbox.io:*" ] }, { "action": "accept", "src": [ "hanskristian.djuve@oceanbox.io" ], "dst": [ "hanskristian.djuve@oceanbox.io:*" ] },
{ "action": "accept", "src": [ "erlend.mundal@oceanbox.io" ], "dst": [ "erlend.mundal@oceanbox.io:*" ] },
// s/"\([^"]*\)"/{ "action": "accept", "src": [ "\1" ], "dst": [ "\1:*" ] }, // s/"\([^"]*\)"/{ "action": "accept", "src": [ "\1" ], "dst": [ "\1:*" ] },
] ]
} }
@@ -354,7 +353,7 @@ configMaps:
{ "name": "mrtz-sorcerer.ekman.oceanbox.io", "type": "A", "value": "10.255.241.99" }, { "name": "mrtz-sorcerer.ekman.oceanbox.io", "type": "A", "value": "10.255.241.99" },
{ "name": "mrtz-sorcerer.dev.vtn.obx", "type": "A", "value": "172.16.239.221" }, { "name": "mrtz-sorcerer.dev.vtn.obx", "type": "A", "value": "172.16.239.221" },
{ "name": "mrtz-plume.ekman.oceanbox.io", "type": "A", "value": "10.255.241.99" }, { "name": "mrtz-plume.ekman.oceanbox.io", "type": "A", "value": "10.255.241.99" },
{ "name": "mrtz-diadash.dev.oceanbox.io", "type": "A", "value": "10.255.241.11" }, { "name": "mrtz-diadash.ekman.oceanbox.io", "type": "A", "value": "10.255.241.99" },
{ "name": "simkir-atlantis.dev.oceanbox.io", "type": "A", "value": "10.255.241.11" }, { "name": "simkir-atlantis.dev.oceanbox.io", "type": "A", "value": "10.255.241.11" },
{ "name": "simkir-maps.dev.oceanbox.io", "type": "A", "value": "10.255.241.11" }, { "name": "simkir-maps.dev.oceanbox.io", "type": "A", "value": "10.255.241.11" },
{ "name": "simkir-codex.dev.oceanbox.io", "type": "A", "value": "10.255.241.11" }, { "name": "simkir-codex.dev.oceanbox.io", "type": "A", "value": "10.255.241.11" },
+1 -18
View File
@@ -48,29 +48,12 @@ metadata:
apiVersion: kueue.x-k8s.io/v1beta2 apiVersion: kueue.x-k8s.io/v1beta2
kind: LocalQueue kind: LocalQueue
metadata: metadata:
name: dev-queue name: staging-queue
namespace: dev-queue namespace: dev-queue
annotations: annotations:
argocd.argoproj.io/sync-wave: "2" argocd.argoproj.io/sync-wave: "2"
spec: spec:
clusterQueue: cluster-queue clusterQueue: cluster-queue
---
apiVersion: v1
kind: Namespace
metadata:
name: prod-queue
annotations:
argocd.argoproj.io/sync-wave: "2"
---
apiVersion: kueue.x-k8s.io/v1beta2
kind: LocalQueue
metadata:
name: prod-queue
namespace: prod-queue
annotations:
argocd.argoproj.io/sync-wave: "2"
spec:
clusterQueue: cluster-queue
# --- # ---
# apiVersion: kueue.x-k8s.io/v1beta2 # apiVersion: kueue.x-k8s.io/v1beta2
# kind: WorkloadPriorityClass # kind: WorkloadPriorityClass
@@ -1,117 +0,0 @@
# Cross-namespace RBAC: allow sorcerer ServiceAccounts to manage JobSets in dev-queue
apiVersion: rbac.authorization.k8s.io/v1
kind: Role
metadata:
name: beta-sorcerer-prod-queue
namespace: prod-queue
rules:
- apiGroups:
- jobset.x-k8s.io
resources:
- jobsets
verbs:
- create
- delete
- get
- list
- watch
- apiGroups:
- ""
resources:
- pods
- pods/log
verbs:
- get
- list
---
apiVersion: rbac.authorization.k8s.io/v1
kind: RoleBinding
metadata:
name: beta-sorcerer-prod-queue
namespace: prod-queue
roleRef:
apiGroup: rbac.authorization.k8s.io
kind: Role
name: beta-sorcerer-prod-queue
subjects:
- kind: ServiceAccount
name: beta-sorcerer
namespace: beta-sorcerer
---
apiVersion: rbac.authorization.k8s.io/v1
kind: Role
metadata:
name: prod-sorcerer-prod-queue
namespace: prod-queue
rules:
- apiGroups:
- jobset.x-k8s.io
resources:
- jobsets
verbs:
- create
- delete
- get
- list
- watch
- apiGroups:
- ""
resources:
- pods
- pods/log
verbs:
- get
- list
---
apiVersion: rbac.authorization.k8s.io/v1
kind: RoleBinding
metadata:
name: prod-sorcerer-prod-queue
namespace: prod-queue
roleRef:
apiGroup: rbac.authorization.k8s.io
kind: Role
name: prod-sorcerer-prod-queue
subjects:
- kind: ServiceAccount
name: prod-sorcerer
namespace: prod-sorcerer
---
apiVersion: rbac.authorization.k8s.io/v1
kind: Role
metadata:
name: staging-sorcerer-dev-queue
namespace: dev-queue
rules:
- apiGroups:
- jobset.x-k8s.io
resources:
- jobsets
verbs:
- create
- delete
- get
- list
- watch
- apiGroups:
- ""
resources:
- pods
- pods/log
verbs:
- get
- list
---
apiVersion: rbac.authorization.k8s.io/v1
kind: RoleBinding
metadata:
name: staging-sorcerer-dev-queue
namespace: dev-queue
roleRef:
apiGroup: rbac.authorization.k8s.io
kind: Role
name: staging-sorcerer-dev-queue
subjects:
- kind: ServiceAccount
name: staging-sorcerer
namespace: staging-sorcerer
+1 -1
View File
@@ -1,6 +1,6 @@
replicaCount: 1 replicaCount: 1
image: image:
tag: "da02dd2c-debug" tag: "d5e61949-debug"
env: env:
- name: APP_VERSION - name: APP_VERSION
value: "0.0.0" value: "0.0.0"
+2 -2
View File
@@ -1,7 +1,7 @@
replicaCount: 0 replicaCount: 1
image: image:
repository: "git.oceanbox.io/oceanbox/plume/plume" repository: "git.oceanbox.io/oceanbox/plume/plume"
tag: 0095aa5a-debug tag: v1.6.13
podAnnotations: podAnnotations:
dapr.io/enabled: "true" dapr.io/enabled: "true"
dapr.io/app-id: "staging-plume" dapr.io/app-id: "staging-plume"
@@ -11,9 +11,4 @@
value: value:
secretRef: secretRef:
name: prod-sorcerer-env name: prod-sorcerer-env
- op: add
path: /spec/template/spec/containers/0/envFrom/-
value:
configMapRef:
name: beta-sorcerer-kueue-config
@@ -1,7 +0,0 @@
apiVersion: v1
kind: ConfigMap
metadata:
name: beta-sorcerer-kueue-config
data:
KUEUE_NAMESPACE: "prod-queue"
KUEUE_ARCHIVE_PVC: "prod-queue-ceph-archives"
@@ -18,7 +18,6 @@ resources:
- configurations.yaml - configurations.yaml
- keyvault.yaml - keyvault.yaml
- rbac.yaml - rbac.yaml
- kueue-config.yaml
- secretstore.yaml - secretstore.yaml
- statestore.yaml - statestore.yaml
- tracing.yaml - tracing.yaml
@@ -8,7 +8,6 @@ rules:
- "" - ""
resourceNames: resourceNames:
- beta-sorcerer-appsettings - beta-sorcerer-appsettings
- beta-sorcerer-kueue-config
resources: resources:
- configmaps - configmaps
verbs: verbs:
@@ -24,24 +23,6 @@ rules:
verbs: verbs:
- get - get
- watch - watch
- apiGroups:
- jobset.x-k8s.io
resources:
- jobsets
verbs:
- create
- delete
- get
- list
- watch
- apiGroups:
- ""
resources:
- pods
- pods/log
verbs:
- get
- list
--- ---
apiVersion: rbac.authorization.k8s.io/v1 apiVersion: rbac.authorization.k8s.io/v1
kind: RoleBinding kind: RoleBinding
@@ -11,9 +11,4 @@
value: value:
secretRef: secretRef:
name: prod-sorcerer-env name: prod-sorcerer-env
- op: add
path: /spec/template/spec/containers/0/envFrom/-
value:
configMapRef:
name: prod-sorcerer-kueue-config
@@ -1,7 +0,0 @@
apiVersion: v1
kind: ConfigMap
metadata:
name: prod-sorcerer-kueue-config
data:
KUEUE_NAMESPACE: "prod-queue"
KUEUE_ARCHIVE_PVC: "prod-queue-ceph-archives"
@@ -18,7 +18,6 @@ resources:
- configurations.yaml - configurations.yaml
- keyvault.yaml - keyvault.yaml
- rbac.yaml - rbac.yaml
- kueue-config.yaml
- secretstore.yaml - secretstore.yaml
- statestore.yaml - statestore.yaml
- tracing.yaml - tracing.yaml
@@ -8,7 +8,6 @@ rules:
- "" - ""
resourceNames: resourceNames:
- prod-sorcerer-appsettings - prod-sorcerer-appsettings
- prod-sorcerer-kueue-config
resources: resources:
- configmaps - configmaps
verbs: verbs:
@@ -24,24 +23,6 @@ rules:
verbs: verbs:
- get - get
- watch - watch
- apiGroups:
- jobset.x-k8s.io
resources:
- jobsets
verbs:
- create
- delete
- get
- list
- watch
- apiGroups:
- ""
resources:
- pods
- pods/log
verbs:
- get
- list
--- ---
apiVersion: rbac.authorization.k8s.io/v1 apiVersion: rbac.authorization.k8s.io/v1
kind: RoleBinding kind: RoleBinding
@@ -11,9 +11,4 @@
value: value:
secretRef: secretRef:
name: staging-sorcerer-env name: staging-sorcerer-env
- op: add
path: /spec/template/spec/containers/0/envFrom/-
value:
configMapRef:
name: staging-sorcerer-kueue-config
@@ -1,7 +0,0 @@
apiVersion: v1
kind: ConfigMap
metadata:
name: staging-sorcerer-kueue-config
data:
KUEUE_NAMESPACE: "dev-queue"
KUEUE_ARCHIVE_PVC: "dev-queue-ceph-archives"
@@ -18,7 +18,6 @@ resources:
- configurations.yaml - configurations.yaml
- keyvault.yaml - keyvault.yaml
- rbac.yaml - rbac.yaml
- kueue-config.yaml
- secretstore.yaml - secretstore.yaml
- statestore.yaml - statestore.yaml
- tracing.yaml - tracing.yaml
@@ -8,7 +8,6 @@ rules:
- "" - ""
resourceNames: resourceNames:
- staging-sorcerer-appsettings - staging-sorcerer-appsettings
- staging-sorcerer-kueue-config
resources: resources:
- configmaps - configmaps
verbs: verbs:
@@ -24,24 +23,6 @@ rules:
verbs: verbs:
- get - get
- watch - watch
- apiGroups:
- jobset.x-k8s.io
resources:
- jobsets
verbs:
- create
- delete
- get
- list
- watch
- apiGroups:
- ""
resources:
- pods
- pods/log
verbs:
- get
- list
--- ---
apiVersion: rbac.authorization.k8s.io/v1 apiVersion: rbac.authorization.k8s.io/v1
kind: RoleBinding kind: RoleBinding
+1 -1
View File
@@ -1,7 +1,7 @@
replicaCount: 1 replicaCount: 1
image: image:
repository: git.oceanbox.io/oceanbox/poseidon/sorcerer repository: git.oceanbox.io/oceanbox/poseidon/sorcerer
tag: 74ed3e11-debug tag: 38eeb4cc-debug
podAnnotations: podAnnotations:
dapr.io/enabled: "true" dapr.io/enabled: "true"
dapr.io/app-id: "staging-sorcerer" dapr.io/app-id: "staging-sorcerer"