Compare commits

..

89 Commits

Author SHA1 Message Date
Gitea Actions af17fa4f23 ci(staging): deploy docs 64b20667-debug 2026-04-08 06:38:52 +00:00
Gitea Actions 660c1b7a69 ci(staging): deploy docs 119a79d0-debug 2026-04-08 06:36:16 +00:00
Gitea Actions 91981fd88e ci(staging): deploy docs b53ee37e-debug 2026-04-08 06:06:47 +00:00
Gitea Actions 5c5b83ccee ci(staging): deploy docs de86a741-debug 2026-04-08 05:59:00 +00:00
Gitea Actions c5191547b9 ci(staging): deploy docs 7147c3a2-debug 2026-04-08 05:48:51 +00:00
Gitea Actions e8943a9c5e ci(staging): deploy docs 88016ab3-debug 2026-04-08 05:42:02 +00:00
renovate-bot ebbefe6165 Update Helm release openfga to v0.2.62 2026-04-05 19:27:02 +00:00
renovate-bot 972b88a50c Update Helm release argo-workflows to v1.0.7 2026-04-05 00:03:25 +00:00
renovate-bot e37066179c Update Helm release ingress-nginx to v4.15.1 2026-04-01 10:03:02 +00:00
renovate-bot a0e32fe9e7 Update Helm release x509-certificate-exporter to v3.20.0 2026-04-01 08:28:38 +00:00
renovate-bot c326668d25 Update slurm-operator Docker tag to v1.0.3 2026-04-01 08:28:24 +00:00
renovate-bot 8677b171c0 Update slurm Docker tag to v1.0.3 2026-04-01 08:17:35 +00:00
Gitea Actions 039ec8fee7 ci(staging): deploy docs b7117e78-debug 2026-03-31 13:37:21 +00:00
Gitea Actions 6bc22fa9e4 ci(prod): deploy atlantis v1.48.0 2026-03-31 10:07:22 +00:00
Gitea Actions 419d6f6649 ci(prod): deploy codex v1.48.0 2026-03-31 10:07:16 +00:00
Gitea Actions 910fb908ea ci(staging): deploy codex 74ed3e11-debug 2026-03-31 10:06:34 +00:00
Gitea Actions 880bc79899 ci(staging): deploy atlantis 74ed3e11-debug 2026-03-31 10:06:28 +00:00
Gitea Actions 6da34d2a0c ci(prod): deploy sorcerer v1.48.0 2026-03-31 10:05:35 +00:00
Gitea Actions 862b3d32a8 ci(staging): deploy sorcerer 74ed3e11-debug 2026-03-31 10:04:33 +00:00
mrtz abf7199c05 fix(atlantis): Add CMs for kueue 2026-03-30 18:11:37 +02:00
mrtz a431a8b333 fix(kueue): Add rbac for sorcerer 2026-03-30 17:54:41 +02:00
Gitea Actions 5209d2e758 ci(staging): deploy makai da02dd2c-debug 2026-03-30 14:12:40 +00:00
mrtz 09ce53cdd6 fix: Add sorcerer queues 2026-03-30 12:29:06 +02:00
renovate-bot 9d979d5de3 Update Helm release argo-cd to v9.4.17 2026-03-29 08:20:42 +00:00
renovate-bot 2e7dcccb0c Update Helm release kube-prometheus-stack to v82.15.1 2026-03-29 08:13:53 +00:00
renovate-bot 07dbc73e3d Update dragonfly-operator Docker tag to v1.5.0 2026-03-29 08:10:17 +00:00
renovate-bot abcfe60f05 Update cert-manager Docker tag to v1.20.1 2026-03-29 08:03:55 +00:00
renovate-bot 3a570f5976 Update registry.k8s.io/kueue/charts/kueue Docker tag to v0.16.4 2026-03-29 08:03:41 +00:00
renovate-bot af77c9a487 Update Helm release openfga to v0.2.61 2026-03-29 08:03:26 +00:00
renovate-bot 96fff7c3ca Update Helm release argo-rollouts to v2.40.9 2026-03-29 00:03:45 +00:00
Gitea Actions e6e9ac9f15 ci(staging): deploy docs 2420b230-debug 2026-03-27 14:56:16 +00:00
Gitea Actions 2dea0dee4b ci(staging): deploy docs e62b5d5f-debug 2026-03-27 14:07:06 +00:00
Gitea Actions 169f2635a7 ci(staging): deploy docs 507fa1e4-debug 2026-03-27 12:00:30 +00:00
Gitea Actions c544671782 ci(staging): deploy docs 9244b090-debug 2026-03-27 11:21:35 +00:00
Gitea Actions 57f46cb077 ci(staging): deploy docs d993cf7c-debug 2026-03-27 08:16:48 +00:00
Gitea Actions 8531ea98ae ci(staging): deploy docs ca001c33-debug 2026-03-27 08:09:14 +00:00
Gitea Actions 0c7f57c31c ci(staging): deploy makai 2d307a7c-debug 2026-03-26 12:07:19 +00:00
renovate-bot 1fe09304db Update Helm release umami to v7.7.11 2026-03-26 08:20:59 +00:00
renovate-bot 6fe28794c0 Update Helm release argo-workflows to v1.0.6 2026-03-26 07:56:38 +00:00
Gitea Actions bc1b2e1b51 ci(staging): deploy docs 4ec212a6-debug 2026-03-25 19:26:24 +00:00
Gitea Actions e4e3438dbe ci(prod): deploy codex v1.47.0 2026-03-24 14:49:44 +00:00
Gitea Actions 923c070ee0 ci(prod): deploy atlantis v1.47.0 2026-03-24 14:49:40 +00:00
Gitea Actions 2d648e92fd ci(prod): deploy sorcerer v1.47.0 2026-03-24 14:48:48 +00:00
Gitea Actions f796b7e533 ci(staging): deploy atlantis 63a164ad-debug 2026-03-24 14:48:40 +00:00
mrtz 3ffe11364d fix(plume): Scale down dev plume 2026-03-24 09:52:05 +01:00
Gitea Actions 8e3d006f08 ci(staging): deploy plume 0095aa5a-debug 2026-03-23 14:55:05 +00:00
Gitea Actions a1c9132690 ci(staging): deploy plume d8ca2dd0-debug 2026-03-23 14:49:22 +00:00
Gitea Actions 539db3683b ci(prod): deploy plume v1.7.1 2026-03-23 14:29:21 +00:00
Gitea Actions 8db39ca626 ci(staging): deploy plume dbbbe56b-debug 2026-03-23 14:28:44 +00:00
Gitea Actions 821456cc94 ci(staging): deploy plume b05187be-debug 2026-03-23 13:58:30 +00:00
mrtz 5898354c41 fix(plume): Revert to server version 2026-03-23 13:28:13 +01:00
Gitea Actions c7483d7b85 ci(prod): deploy plume v1.7.0 2026-03-23 12:23:47 +00:00
Gitea Actions 0a7236d013 ci(staging): deploy plume dffd4390-debug 2026-03-23 12:23:17 +00:00
renovate-bot e11185f0b1 Update Helm release argo-cd to v9.4.15 2026-03-23 06:05:45 +00:00
renovate-bot 391f6288fd Update cert-manager Docker tag to v1.20.0 2026-03-22 08:06:45 +00:00
renovate-bot cc2df623d9 Update Helm release loki to v6.55.0 2026-03-22 07:49:30 +00:00
renovate-bot 3d0ef97139 Update Helm release argo-rollouts to v2.40.8 2026-03-22 07:45:33 +00:00
renovate-bot 20daac947c Update Helm release opentelemetry-collector to v0.147.1 2026-03-22 07:44:58 +00:00
renovate-bot 57525f2d35 Update Helm release argo-workflows to v1 2026-03-22 07:44:45 +00:00
renovate-bot ce09084991 Update Helm release mariadb-operator to v26 2026-03-22 00:04:53 +00:00
mrtz 596d4f5520 fix(kueue): Rename queue to dev from staging 2026-03-20 16:19:28 +01:00
Gitea Actions 8d0995333a ci(staging): deploy makai 95367d71-debug 2026-03-20 13:35:20 +00:00
Gitea Actions 5d450d1af7 ci(staging): deploy docs 606fc6be-debug 2026-03-20 13:22:11 +00:00
Gitea Actions 18d4a30e49 ci(staging): deploy docs a55a93b3-debug 2026-03-20 13:02:35 +00:00
Gitea Actions 55eb3b75db ci(staging): deploy docs aac9bb75-debug 2026-03-20 12:11:07 +00:00
Gitea Actions 1c67ab4c51 ci(staging): deploy docs 0aebecc9-debug 2026-03-20 11:52:00 +00:00
Gitea Actions 32b4892ecb ci(staging): deploy docs dbc2a9d2-debug 2026-03-20 11:33:27 +00:00
Gitea Actions 3109fc3fe8 ci(staging): deploy docs e10a69eb-debug 2026-03-20 10:18:12 +00:00
Gitea Actions 6157eb42d4 ci(staging): deploy docs 3c2b2f1d-debug 2026-03-20 10:13:21 +00:00
Gitea Actions 654b69b4e4 ci(staging): deploy docs 2d0ba1ce-debug 2026-03-20 10:11:46 +00:00
Gitea Actions 88f32e2c91 ci(staging): deploy docs bfdb3e87-debug 2026-03-20 09:53:07 +00:00
Gitea Actions d1bd25eaa6 ci(staging): deploy docs 0132a59f-debug 2026-03-20 09:47:40 +00:00
Gitea Actions d162c182cb ci(staging): deploy docs 3499f6c4-debug 2026-03-20 09:46:50 +00:00
Gitea Actions 43b3a9e44a ci(staging): deploy docs e9277ff1-debug 2026-03-20 09:13:00 +00:00
Gitea Actions 3e5910e3d7 ci(staging): deploy docs 1b94f60b-debug 2026-03-20 09:03:19 +00:00
Gitea Actions 719c6949af ci(staging): deploy docs 3f07dd58-debug 2026-03-20 08:26:38 +00:00
Gitea Actions c46c23b471 ci(staging): deploy docs c0932884-debug 2026-03-20 08:18:49 +00:00
Gitea Actions 3124f6294c ci(staging): deploy docs 3dcda7f4-debug 2026-03-20 06:41:16 +00:00
Gitea Actions d0660f5f60 ci(staging): deploy docs f19b7baa-debug 2026-03-19 20:18:59 +00:00
Gitea Actions c7395f6673 ci(staging): deploy docs 5e7024d9-debug 2026-03-19 19:27:31 +00:00
Gitea Actions ebad597333 ci(staging): deploy docs c1b05be9-debug 2026-03-19 14:50:20 +00:00
Gitea Actions 24fc3d0294 ci(staging): deploy docs f0b2ee1b-debug 2026-03-19 13:15:20 +00:00
Gitea Actions 7206436c87 ci(staging): deploy makai ebdf429b-debug 2026-03-19 13:09:15 +00:00
Gitea Actions 19b4e0f792 ci(staging): deploy docs 2a3e30bb-debug 2026-03-19 13:05:00 +00:00
Gitea Actions 100911d333 ci(staging): deploy docs 41136f09-debug 2026-03-19 12:56:46 +00:00
Gitea Actions 97f2b11702 ci(staging): deploy docs 0869c49c-debug 2026-03-19 11:22:46 +00:00
Gitea Actions c3610f846b ci(staging): deploy makai 5bef3dcc-debug 2026-03-19 10:23:24 +00:00
Gitea Actions 427f17adb2 ci(staging): deploy docs dd70dfe5-debug 2026-03-19 08:44:58 +00:00
mrtz 56e4602af0 fix(headscale): Add diadash and Erlend <-> Erlend 2026-03-17 16:13:41 +01:00
58 changed files with 327 additions and 52 deletions
+2 -2
View File
@@ -4,10 +4,10 @@ description: Atlantis map and simulation service
type: application
# This is the chart version. This version number should be incremented each time you make changes
# to the chart and its templates, including the app version.
version: v1.46.5
version: v1.48.0
# This is the version number of the application being deployed. This version number should be
# incremented each time you make changes to the application.
appVersion: v1.46.5
appVersion: v1.48.0
dependencies:
- name: diagrid-dashboard
version: "0.1.0"
+1 -1
View File
@@ -4,7 +4,7 @@
replicaCount: 1
image:
repository: git.oceanbox.io/oceanbox/poseidon/atlantis
tag: v1.46.5
tag: v1.48.0
pullPolicy: IfNotPresent
init:
enabled: false
+2 -2
View File
@@ -13,9 +13,9 @@ type: application
# This is the chart version. This version number should be incremented each time you make changes
# to the chart and its templates, including the app version.
# Versions are expected to follow Semantic Versioning (https://semver.org/)
version: v1.46.5
version: v1.48.0
# This is the version number of the application being deployed. This version number should be
# incremented each time you make changes to the application. Versions are not expected to
# follow Semantic Versioning. They should reflect the version the application is using.
# It is recommended to use it with quotes.
appVersion: "v1.46.5"
appVersion: "v1.48.0"
+1 -1
View File
@@ -10,7 +10,7 @@ image:
# This sets the pull policy for images.
pullPolicy: IfNotPresent
# Overrides the image tag whose default is the chart appVersion.
tag: v1.46.5
tag: v1.48.0
# This is for the secrets for pulling an image from a private repository more information can be found here: https://kubernetes.io/docs/tasks/configure-pod-container/pull-image-private-registry/
imagePullSecrets:
- name: gitlab-pull-secret
+6
View File
@@ -0,0 +1,6 @@
dependencies:
- name: diagrid-dashboard
repository: file://../diagrid-dashboard
version: 0.1.0
digest: sha256:4fdb3148a2a6439223d7844a3083da2de324dd47e5cb3ac4a5d9c436e6e2c775
generated: "2026-02-25T16:15:48.608231856+01:00"
+2 -2
View File
@@ -4,10 +4,10 @@ description: A Helm chart for Kubernetes
type: application
# This is the chart version. This version number should be incremented each time you make changes
# to the chart and its templates, including the app version.
version: v1.6.13
version: v1.7.1
# This is the version number of the application being deployed. This version number should be
# incremented each time you make changes to the application.
appVersion: v1.6.13
appVersion: v1.7.1
dependencies:
- name: diagrid-dashboard
version: "0.1.0"
+1 -2
View File
@@ -4,7 +4,7 @@
replicaCount: 1
image:
repository: git.oceanbox.io/oceanbox/plume/plume
tag: v1.6.13
tag: v1.7.1
pullPolicy: IfNotPresent
init:
enabled: false
@@ -90,6 +90,5 @@ serviceMonitor:
nodeSelector: {}
tolerations: []
affinity: {}
diagrid-dashboard:
enabled: false
+2 -2
View File
@@ -4,10 +4,10 @@ description: A Helm chart for Kubernetes
type: application
# This is the chart version. This version number should be incremented each time you make changes
# to the chart and its templates, including the app version.
version: v1.46.5
version: v1.48.0
# This is the version number of the application being deployed. This version number should be
# incremented each time you make changes to the application.
appVersion: v1.46.5
appVersion: v1.48.0
dependencies:
- name: diagrid-dashboard
version: "0.1.0"
+1 -1
View File
@@ -5,7 +5,7 @@
replicaCount: 1
image:
repository: git.oceanbox.io/oceanbox/poseidon/sorcerer
tag: v1.46.5
tag: v1.48.0
pullPolicy: IfNotPresent
init:
enabled: false
+3 -3
View File
@@ -15,7 +15,7 @@ releases:
- name: argocd
namespace: argocd
chart: argo/argo-cd
version: 9.4.10
version: 9.4.17
condition: argo.enabled
values:
- ../values/argo/values/argocd.yaml.gotmpl
@@ -35,7 +35,7 @@ releases:
- name: argo-rollouts
namespace: argocd
chart: argo/argo-rollouts
version: 2.40.6
version: 2.40.9
condition: argo.rollouts.enabled
values:
- ../values/argo/values/rollouts.yaml.gotmpl
@@ -43,7 +43,7 @@ releases:
- name: argo-workflows
namespace: argocd
chart: argo/argo-workflows
version: 0.47.5
version: 1.0.7
condition: argo.workflows.enabled
missingFileHandler: Info
- name: manifests
+1 -1
View File
@@ -13,7 +13,7 @@ releases:
- name: cert-manager
namespace: cert-manager
chart: cert-manager/cert-manager
version: v1.19.4
version: v1.20.1
condition: cert_manager.enabled
values:
- ../values/cert-manager/values/cert-manager.yaml.gotmpl
+1 -1
View File
@@ -13,7 +13,7 @@ releases:
- name: dragonfly
namespace: dragonfly
chart: dragonfly/dragonfly-operator
version: v1.4.0
version: v1.5.0
condition: dragonfly.enabled
values:
- ../values/dragonfly/values/dragonfly.yaml.gotmpl
+1 -1
View File
@@ -12,7 +12,7 @@ releases:
- name: ingress-nginx
namespace: ingress-nginx
chart: ingress-nginx/ingress-nginx
version: 4.14.3
version: 4.15.1
condition: nginx.enabled
values:
- ../values/ingress-nginx/values/ingress-nginx.yaml.gotmpl
+1 -1
View File
@@ -8,7 +8,7 @@ releases:
- name: kueue
namespace: kueue-system
chart: oci://registry.k8s.io/kueue/charts/kueue
version: 0.16.2
version: 0.16.4
condition: kueue.enabled
values:
- ../values/kueue/values/values.yaml
+1 -1
View File
@@ -12,7 +12,7 @@ releases:
- name: loki
namespace: loki
chart: loki/loki
version: 6.53.0
version: 6.55.0
condition: loki.enabled
values:
- ../values/loki/values/loki.yaml.gotmpl
+1 -1
View File
@@ -12,7 +12,7 @@ releases:
- name: mariadb-operator
namespace: mariadb-operator
chart: mariadb-operator/mariadb-operator
version: 25.10.4
version: 26.3.0
condition: mariadb_operator.enabled
values:
- ../values/mariadb-operator/values/mariadb-operator.yaml.gotmpl
+1 -1
View File
@@ -16,7 +16,7 @@ releases:
namespace: {{ .Environment.Name }}-openfga
{{- end }}
chart: openfga/openfga
version: 0.2.56
version: 0.2.62
condition: openfga.enabled
values:
- ../values/openfga/values/values.yaml
@@ -12,7 +12,7 @@ releases:
- name: opentelemetry-collector
namespace: otel
chart: open-telemetry/opentelemetry-collector
version: 0.146.1
version: 0.147.1
condition: otel.enabled
values:
- ../values/opentelemetry-collector/values/values.yaml
+1 -1
View File
@@ -15,7 +15,7 @@ releases:
- name: prometheus
namespace: prometheus
chart: prometheus/kube-prometheus-stack
version: 82.10.3
version: 82.15.1
condition: prometheus.enabled
values:
- ../values/prometheus/values/prometheus.yaml.gotmpl
+1 -1
View File
@@ -13,7 +13,7 @@ releases:
- name: {{ .Environment.Name }}-rabbitmq
namespace: rabbitmq
chart: bitnami/rabbitmq
version: 16.0.14
version: 13.0.3
condition: rabbitmq.enabled
values:
- ../values/rabbitmq/values/values.yaml
+1 -1
View File
@@ -13,7 +13,7 @@ releases:
- name: slurm-operator
namespace: slinky
chart: slurm-operator/slurm-operator
version: 1.0.2
version: 1.0.3
condition: slurm_operator.enabled
values:
- ../values/slurm-operator/values/slurm-operator.yaml.gotmpl
+1 -1
View File
@@ -13,7 +13,7 @@ releases:
- name: slurm
namespace: slurm
chart: slurm/slurm
version: 1.0.2
version: 1.0.3
condition: slurm.enabled
values:
- ../values/slurm/values/slurm.yaml.gotmpl
+1 -1
View File
@@ -14,7 +14,7 @@ releases:
- name: umami
namespace: analytics
chart: umami/umami
version: 7.7.3
version: 7.7.11
condition: umami.enabled
values:
- ../values/umami/values/values.yaml
+1 -1
View File
@@ -12,7 +12,7 @@ releases:
- name: x509-exporter
namespace: x509-exporter
chart: x509-exporter/x509-certificate-exporter
version: 3.19.1
version: 3.20.0
condition: x509_exporter.enabled
values:
- ../values/x509-exporter/values/x509-exporter.yaml.gotmpl
@@ -0,0 +1,9 @@
apiVersion: v1
kind: ConfigMap
metadata:
name: beta-atlantis-actor-config
data:
XTRACT_IMAGE: "git.oceanbox.io/oceanbox/katamari/excavator:v1.2.6"
XTRACT_QUEUE: "prod-queue"
PLUME_IMAGE: "git.oceanbox.io/oceanbox/katamari/plume:v1.2.7"
PLUME_QUEUE: "prod-queue"
@@ -7,4 +7,9 @@
path: /spec/template/spec/containers/0/envFrom/-
value:
secretRef:
name: prod-atlantis-env
name: prod-atlantis-env
- op: add
path: /spec/template/spec/containers/0/envFrom/-
value:
configMapRef:
name: beta-atlantis-actor-config
@@ -14,6 +14,7 @@ patches:
resources:
- ../base
- rbac.yaml
- actor-config.yaml
- tracing.yaml
- bindings.yaml
- pubsub.yaml
+1
View File
@@ -8,6 +8,7 @@ rules:
- ""
resourceNames:
- beta-atlantis-appsettings
- beta-atlantis-actor-config
resources:
- configmaps
verbs:
@@ -0,0 +1,9 @@
apiVersion: v1
kind: ConfigMap
metadata:
name: prod-atlantis-actor-config
data:
XTRACT_IMAGE: "git.oceanbox.io/oceanbox/katamari/excavator:v1.2.6"
XTRACT_QUEUE: "prod-queue"
PLUME_IMAGE: "git.oceanbox.io/oceanbox/katamari/plume:v1.2.7"
PLUME_QUEUE: "prod-queue"
@@ -7,4 +7,9 @@
path: /spec/template/spec/containers/0/envFrom/-
value:
secretRef:
name: prod-atlantis-env
name: prod-atlantis-env
- op: add
path: /spec/template/spec/containers/0/envFrom/-
value:
configMapRef:
name: prod-atlantis-actor-config
@@ -13,6 +13,7 @@ patches:
resources:
- ../base
- secrets.yaml
- actor-config.yaml
- rbac.yaml
- tracing.yaml
- bindings.yaml
+1
View File
@@ -8,6 +8,7 @@ rules:
- ""
resourceNames:
- prod-atlantis-appsettings
- prod-atlantis-actor-config
resources:
- configmaps
verbs:
@@ -0,0 +1,9 @@
apiVersion: v1
kind: ConfigMap
metadata:
name: staging-atlantis-actor-config
data:
XTRACT_IMAGE: "git.oceanbox.io/oceanbox/katamari/excavator:v1.2.6"
XTRACT_QUEUE: "dev-queue"
PLUME_IMAGE: "git.oceanbox.io/oceanbox/katamari/plume:v1.2.7"
PLUME_QUEUE: "dev-queue"
@@ -7,4 +7,9 @@
path: /spec/template/spec/containers/0/envFrom/-
value:
secretRef:
name: staging-atlantis-env
name: staging-atlantis-env
- op: add
path: /spec/template/spec/containers/0/envFrom/-
value:
configMapRef:
name: staging-atlantis-actor-config
@@ -14,6 +14,7 @@ resources:
- ../base
- rbac.yaml
- secrets.yaml
- actor-config.yaml
- tracing.yaml
- bindings.yaml
- pubsub.yaml
@@ -21,4 +22,4 @@ resources:
- subscriptions.yaml
- configurations.yaml
- secretstore.yaml
- keyvault.yaml
- keyvault.yaml
@@ -8,6 +8,7 @@ rules:
- ""
resourceNames:
- staging-atlantis-appsettings
- staging-atlantis-actor-config
resources:
- configmaps
verbs:
@@ -1,7 +1,7 @@
replicaCount: 1
image:
repository: git.oceanbox.io/oceanbox/poseidon/atlantis
tag: 23006866-debug
tag: 74ed3e11-debug
podAnnotations:
dapr.io/app-id: "staging-atlantis"
env:
+1 -1
View File
@@ -38,4 +38,4 @@ volumeMounts:
readOnly: true
subPath: appsettings.json
image:
tag: 38eeb4cc-debug
tag: 74ed3e11-debug
+1 -1
View File
@@ -1,6 +1,6 @@
replicaCount: 1
image:
tag: "0d279bb9-debug"
tag: "64b20667-debug"
env:
- name: APP_VERSION
value: "0.0.0"
-9
View File
@@ -139,12 +139,3 @@ config:
environment: staging
alerts:
- type: custom
- name: Plume Dev TOS
<<: *https-endpoint
group: "Experimental Services"
url: https://plume.ekman.oceanbox.io/healthz
extra-labels:
environment: staging
alerts:
- type: custom
+2 -1
View File
@@ -255,6 +255,7 @@ configMaps:
{ "action": "accept", "src": [ "faith.iha@oceanbox.io" ], "dst": [ "faith.iha@oceanbox.io:*" ] },
{ "action": "accept", "src": [ "elianne.ersdal@oceanbox.io" ], "dst": [ "elianne.ersdal@oceanbox.io:*" ] },
{ "action": "accept", "src": [ "hanskristian.djuve@oceanbox.io" ], "dst": [ "hanskristian.djuve@oceanbox.io:*" ] },
{ "action": "accept", "src": [ "erlend.mundal@oceanbox.io" ], "dst": [ "erlend.mundal@oceanbox.io:*" ] },
// s/"\([^"]*\)"/{ "action": "accept", "src": [ "\1" ], "dst": [ "\1:*" ] },
]
}
@@ -353,7 +354,7 @@ configMaps:
{ "name": "mrtz-sorcerer.ekman.oceanbox.io", "type": "A", "value": "10.255.241.99" },
{ "name": "mrtz-sorcerer.dev.vtn.obx", "type": "A", "value": "172.16.239.221" },
{ "name": "mrtz-plume.ekman.oceanbox.io", "type": "A", "value": "10.255.241.99" },
{ "name": "mrtz-diadash.ekman.oceanbox.io", "type": "A", "value": "10.255.241.99" },
{ "name": "mrtz-diadash.dev.oceanbox.io", "type": "A", "value": "10.255.241.11" },
{ "name": "simkir-atlantis.dev.oceanbox.io", "type": "A", "value": "10.255.241.11" },
{ "name": "simkir-maps.dev.oceanbox.io", "type": "A", "value": "10.255.241.11" },
{ "name": "simkir-codex.dev.oceanbox.io", "type": "A", "value": "10.255.241.11" },
+18 -1
View File
@@ -48,12 +48,29 @@ metadata:
apiVersion: kueue.x-k8s.io/v1beta2
kind: LocalQueue
metadata:
name: staging-queue
name: dev-queue
namespace: dev-queue
annotations:
argocd.argoproj.io/sync-wave: "2"
spec:
clusterQueue: cluster-queue
---
apiVersion: v1
kind: Namespace
metadata:
name: prod-queue
annotations:
argocd.argoproj.io/sync-wave: "2"
---
apiVersion: kueue.x-k8s.io/v1beta2
kind: LocalQueue
metadata:
name: prod-queue
namespace: prod-queue
annotations:
argocd.argoproj.io/sync-wave: "2"
spec:
clusterQueue: cluster-queue
# ---
# apiVersion: kueue.x-k8s.io/v1beta2
# kind: WorkloadPriorityClass
@@ -0,0 +1,117 @@
# Cross-namespace RBAC: allow sorcerer ServiceAccounts to manage JobSets in dev-queue
apiVersion: rbac.authorization.k8s.io/v1
kind: Role
metadata:
name: beta-sorcerer-prod-queue
namespace: prod-queue
rules:
- apiGroups:
- jobset.x-k8s.io
resources:
- jobsets
verbs:
- create
- delete
- get
- list
- watch
- apiGroups:
- ""
resources:
- pods
- pods/log
verbs:
- get
- list
---
apiVersion: rbac.authorization.k8s.io/v1
kind: RoleBinding
metadata:
name: beta-sorcerer-prod-queue
namespace: prod-queue
roleRef:
apiGroup: rbac.authorization.k8s.io
kind: Role
name: beta-sorcerer-prod-queue
subjects:
- kind: ServiceAccount
name: beta-sorcerer
namespace: beta-sorcerer
---
apiVersion: rbac.authorization.k8s.io/v1
kind: Role
metadata:
name: prod-sorcerer-prod-queue
namespace: prod-queue
rules:
- apiGroups:
- jobset.x-k8s.io
resources:
- jobsets
verbs:
- create
- delete
- get
- list
- watch
- apiGroups:
- ""
resources:
- pods
- pods/log
verbs:
- get
- list
---
apiVersion: rbac.authorization.k8s.io/v1
kind: RoleBinding
metadata:
name: prod-sorcerer-prod-queue
namespace: prod-queue
roleRef:
apiGroup: rbac.authorization.k8s.io
kind: Role
name: prod-sorcerer-prod-queue
subjects:
- kind: ServiceAccount
name: prod-sorcerer
namespace: prod-sorcerer
---
apiVersion: rbac.authorization.k8s.io/v1
kind: Role
metadata:
name: staging-sorcerer-dev-queue
namespace: dev-queue
rules:
- apiGroups:
- jobset.x-k8s.io
resources:
- jobsets
verbs:
- create
- delete
- get
- list
- watch
- apiGroups:
- ""
resources:
- pods
- pods/log
verbs:
- get
- list
---
apiVersion: rbac.authorization.k8s.io/v1
kind: RoleBinding
metadata:
name: staging-sorcerer-dev-queue
namespace: dev-queue
roleRef:
apiGroup: rbac.authorization.k8s.io
kind: Role
name: staging-sorcerer-dev-queue
subjects:
- kind: ServiceAccount
name: staging-sorcerer
namespace: staging-sorcerer
+1 -1
View File
@@ -1,6 +1,6 @@
replicaCount: 1
image:
tag: "d5e61949-debug"
tag: "da02dd2c-debug"
env:
- name: APP_VERSION
value: "0.0.0"
+2 -2
View File
@@ -1,7 +1,7 @@
replicaCount: 1
replicaCount: 0
image:
repository: "git.oceanbox.io/oceanbox/plume/plume"
tag: v1.6.13
tag: 0095aa5a-debug
podAnnotations:
dapr.io/enabled: "true"
dapr.io/app-id: "staging-plume"
@@ -11,4 +11,9 @@
value:
secretRef:
name: prod-sorcerer-env
- op: add
path: /spec/template/spec/containers/0/envFrom/-
value:
configMapRef:
name: beta-sorcerer-kueue-config
@@ -0,0 +1,7 @@
apiVersion: v1
kind: ConfigMap
metadata:
name: beta-sorcerer-kueue-config
data:
KUEUE_NAMESPACE: "prod-queue"
KUEUE_ARCHIVE_PVC: "prod-queue-ceph-archives"
@@ -18,6 +18,7 @@ resources:
- configurations.yaml
- keyvault.yaml
- rbac.yaml
- kueue-config.yaml
- secretstore.yaml
- statestore.yaml
- tracing.yaml
@@ -8,6 +8,7 @@ rules:
- ""
resourceNames:
- beta-sorcerer-appsettings
- beta-sorcerer-kueue-config
resources:
- configmaps
verbs:
@@ -23,6 +24,24 @@ rules:
verbs:
- get
- watch
- apiGroups:
- jobset.x-k8s.io
resources:
- jobsets
verbs:
- create
- delete
- get
- list
- watch
- apiGroups:
- ""
resources:
- pods
- pods/log
verbs:
- get
- list
---
apiVersion: rbac.authorization.k8s.io/v1
kind: RoleBinding
@@ -11,4 +11,9 @@
value:
secretRef:
name: prod-sorcerer-env
- op: add
path: /spec/template/spec/containers/0/envFrom/-
value:
configMapRef:
name: prod-sorcerer-kueue-config
@@ -0,0 +1,7 @@
apiVersion: v1
kind: ConfigMap
metadata:
name: prod-sorcerer-kueue-config
data:
KUEUE_NAMESPACE: "prod-queue"
KUEUE_ARCHIVE_PVC: "prod-queue-ceph-archives"
@@ -18,6 +18,7 @@ resources:
- configurations.yaml
- keyvault.yaml
- rbac.yaml
- kueue-config.yaml
- secretstore.yaml
- statestore.yaml
- tracing.yaml
@@ -8,6 +8,7 @@ rules:
- ""
resourceNames:
- prod-sorcerer-appsettings
- prod-sorcerer-kueue-config
resources:
- configmaps
verbs:
@@ -23,6 +24,24 @@ rules:
verbs:
- get
- watch
- apiGroups:
- jobset.x-k8s.io
resources:
- jobsets
verbs:
- create
- delete
- get
- list
- watch
- apiGroups:
- ""
resources:
- pods
- pods/log
verbs:
- get
- list
---
apiVersion: rbac.authorization.k8s.io/v1
kind: RoleBinding
@@ -11,4 +11,9 @@
value:
secretRef:
name: staging-sorcerer-env
- op: add
path: /spec/template/spec/containers/0/envFrom/-
value:
configMapRef:
name: staging-sorcerer-kueue-config
@@ -0,0 +1,7 @@
apiVersion: v1
kind: ConfigMap
metadata:
name: staging-sorcerer-kueue-config
data:
KUEUE_NAMESPACE: "dev-queue"
KUEUE_ARCHIVE_PVC: "dev-queue-ceph-archives"
@@ -18,6 +18,7 @@ resources:
- configurations.yaml
- keyvault.yaml
- rbac.yaml
- kueue-config.yaml
- secretstore.yaml
- statestore.yaml
- tracing.yaml
@@ -8,6 +8,7 @@ rules:
- ""
resourceNames:
- staging-sorcerer-appsettings
- staging-sorcerer-kueue-config
resources:
- configmaps
verbs:
@@ -23,6 +24,24 @@ rules:
verbs:
- get
- watch
- apiGroups:
- jobset.x-k8s.io
resources:
- jobsets
verbs:
- create
- delete
- get
- list
- watch
- apiGroups:
- ""
resources:
- pods
- pods/log
verbs:
- get
- list
---
apiVersion: rbac.authorization.k8s.io/v1
kind: RoleBinding
+1 -1
View File
@@ -1,7 +1,7 @@
replicaCount: 1
image:
repository: git.oceanbox.io/oceanbox/poseidon/sorcerer
tag: 38eeb4cc-debug
tag: 74ed3e11-debug
podAnnotations:
dapr.io/enabled: "true"
dapr.io/app-id: "staging-sorcerer"