1
0
Fork 0
mirror of https://git.sr.ht/~goorzhel/turboprop synced 2024-12-14 11:37:37 +00:00
Commit graph

218 commits

Author SHA1 Message Date
Antonio Gurgel
205a2e4f54 Got these releases backwards somehow 2023-11-26 00:14:42 -08:00
Antonio Gurgel
39f07b8264 Very few kube-system services should be in services/ 2023-11-26 00:07:39 -08:00
Antonio Gurgel
d798826df3 Move local-path-provisioner to system/kube-system 2023-11-26 00:06:02 -08:00
Antonio Gurgel
c641df6b50 Try again with k8s-intermediate CA
"Not a CA", cert-manager said. I minted it the wrong with easyrsa: I
asked for a server cert when I needed a CA.
2023-11-25 23:44:26 -08:00
Antonio Gurgel
a4d7d25e84 Add forgotten NS to secret/k8s-intermediate 2023-11-25 23:23:34 -08:00
Antonio Gurgel
f2d4a72678 Combine metallb releases
Same reason as an earlier commit: separating a yamlStream release
is pointless because it doesn't depend on `helm template -a`.
2023-11-25 23:17:14 -08:00
Antonio Gurgel
4f09138256 s/prometheus/prom
No reason to change the NFS path on losangeles.
2023-11-25 23:08:35 -08:00
Antonio Gurgel
f3c6484753 Fix typo in CNPG chart name 2023-11-25 23:00:32 -08:00
Antonio Gurgel
00b3e90344 Revert "Move internal registries to system/"
This reverts commit 0bf2a01bad.

Turns out I need HTTPRoute/v1.
2023-11-25 22:57:30 -08:00
Antonio Gurgel
5fc62f2d1b Move services/longhorn-system to extraObjects
It doesn't make sense to separate extraObjects; the `apiVersions`
argument doesn't affect them.
2023-11-25 22:31:48 -08:00
Antonio Gurgel
8a6a781575 Turn off Kyverno's irritating webhook clean-upper
If I want to uninstall it, I'll do it my own damn self.
2023-11-25 22:20:15 -08:00
Antonio Gurgel
62f155bd6b Fix meshConfig.enableTracing (bool, not string) 2023-11-25 22:02:51 -08:00
Antonio Gurgel
0bf2a01bad Move internal registries to system/
They're among the first things that must come up.
2023-11-25 21:29:48 -08:00
Antonio Gurgel
0529bdf6a2 Update my charts; yoke others to nixhelm
By overlaying nixhelm's charts with those I use for myself, be they
behind nixhelm's or simply absent, I get the best of both worlds.
2023-11-25 00:33:44 -08:00
Antonio Gurgel
9c18a98f0f Use fullnameOverride on sys/argo/workflows
Otherwise the resources have ridiculous names like
"workflows-argo-workflows-server".
2023-11-24 20:12:10 -08:00
Antonio Gurgel
1444cb9b18 s/release/service/g
"Helm releases" is what I'd been terming individual services, but
it makes no sense outside of the internal context of the Helm builder.

I also didn't want to call them "apps", however shorter that term is.
These are not apps.
2023-11-24 17:35:15 -08:00
Antonio Gurgel
22055d6fd2 Update get_values post-refactor 2023-11-24 17:35:02 -08:00
Antonio Gurgel
a27d902cd3 Upgrade Kyverno to v3 2023-11-24 17:35:00 -08:00
Antonio Gurgel
f1332fc3ca Fix bug: include dirs in Kustomizations again
I meant to exclude `*.yaml.drv` but ended up excluding whole dirs too.
2023-11-24 17:35:00 -08:00
Antonio Gurgel
e48d34df84 Add Kiali 2023-11-24 17:35:00 -08:00
Antonio Gurgel
dbb65668ee Add Longhorn 2023-11-24 12:27:52 -08:00
Antonio Gurgel
5d7691e427 Add MetalLB 2023-11-24 12:11:21 -08:00
Antonio Gurgel
29cd39af8d Clean up silly workaround in Istio revisioning 2023-11-24 12:06:06 -08:00
Antonio Gurgel
7e4d9f719c Add CloudNativePG 2023-11-24 11:58:42 -08:00
Antonio Gurgel
54aafbb426 Add Prometheus stack (and upgrade chart) 2023-11-24 11:41:50 -08:00
Antonio Gurgel
95318e84c1 Add script to get hashes of upgraded charts 2023-11-24 10:57:28 -08:00
Antonio Gurgel
4c842b1883 Give Intel GPU exporter clearer name 2023-11-24 10:57:28 -08:00
Antonio Gurgel
15591a24f9 Add last kube-system services 2023-11-23 18:27:54 -08:00
Antonio Gurgel
f2a8cc929d Unbungle statefulsets' persistence 2023-11-23 17:57:53 -08:00
Antonio Gurgel
8607d8d1b1 Add Docker registries 2023-11-23 17:57:51 -08:00
Antonio Gurgel
1b45553af6 Name Make recipe after output file 2023-11-23 17:12:33 -08:00
Antonio Gurgel
a2f95cb53c Add cert-manager; use intermediate cert instead of CA 2023-11-23 17:04:15 -08:00
Antonio Gurgel
94615ae400 Add Argo Workflows 2023-11-23 15:37:18 -08:00
Antonio Gurgel
a4d0c01066 Add more services 2023-11-23 12:15:18 -08:00
Antonio Gurgel
006be8401f Add httpbin 2023-11-23 11:17:07 -08:00
Antonio Gurgel
e9a0357fb9 Add common PV(C)s 2023-11-23 11:14:36 -08:00
Antonio Gurgel
c53071ef67 Tidy up 2023-11-23 10:34:53 -08:00
Antonio Gurgel
61c040df2c Revert silly name for import flake-builders
Also, clean out unused variables.
2023-11-23 10:22:34 -08:00
Antonio Gurgel
733868edee Document flake-builders.namespaces better 2023-11-23 10:08:38 -08:00
Antonio Gurgel
ef94817a55 Stop relying on ns/name in derivation path
I've changed release modules' signatures from:
`{lib} -> ... -> <drv>`
to:
`{lib} -> ... -> {out=<drv>; extra=<drv>;}`
Which makes individual derivations more easily findable.

Now, instead of picking them out from a soup of paths in `output.sh`
with a specially-crafted needle (`${ns}-${name}`), I map derivations
directly to paths and use the result as a sort of index. In other words,
I spent some ingenuity in `flake-builders.sh` to save a _lot_ of
ingenuity in `output.sh`.

This affords me the extra convenience, previously spurned because of
the very limitation I've overcome, of symlinking derivations in the
output flake.
2023-11-23 10:07:19 -08:00
Antonio Gurgel
e8016e5bc5 Reflow comments
I try to insert line breaks where a thought fragment ends (a habit
learnt from writing subtitles), but in comments and Git commit
messages it doesn't make as much sense.
2023-11-22 17:54:27 -08:00
Antonio Gurgel
5fb1556904 Make make more verbose 2023-11-21 23:19:46 -08:00
Antonio Gurgel
05a3f2bef0 Build extras from system releases too 2023-11-21 23:19:46 -08:00
Antonio Gurgel
ae070c60dc Add Istio base 2023-11-21 23:13:26 -08:00
Antonio Gurgel
b523baa63b Add Istio 1.18.1
The lengths to which I'll go to avoid hardcoding anything that needn't
be hardcoded are immense indeed. That's why I started this project.
2023-11-21 22:34:44 -08:00
Antonio Gurgel
be077878e7 Set default metadata for namespaces 2023-11-21 22:01:01 -08:00
Antonio Gurgel
6aff849da7 Add kyverno
I have my answer to 2638113, and it's what I was suspecting: the
flake-builder was never using clusterData until I added a release
that needs it, at which point I got the dreaded "error: attribute
'apiVersions' missing".

Remediation was simple: realize the wrongheadedness of passing
an empty attrset when the values are already well-known.
2023-11-21 20:58:13 -08:00
Antonio Gurgel
dc3060aa30 Pass charts into releases, and restore variadity
It doesn't pay to be strict about release module arity.
2023-11-21 20:46:32 -08:00
Antonio Gurgel
26381130e7 I don't understand this
Line 62 of this commit's flake.nix should bail with an attribute-missing
error while evaluating `buildDerivations.releases`, at the point where
Nix tries to inherit two variables from an empty `clusterData`.

...Or is it that I will have problems when I add something using
lib.builders.helmChart to `./system`? I'll only find out tomorrow.
2023-11-21 00:28:56 -08:00
Antonio Gurgel
a9490a3686 Add polish
- Clarify nature of release paths.
- Explain why I haven't bothered to wedge values.yaml files into the
  default derivation.
- Move drv_matcher to copy_drv_output, where it conceptually belongs.
2023-11-21 00:21:23 -08:00