1
0
Fork 0
mirror of https://git.sr.ht/~goorzhel/turboprop synced 2024-12-14 11:37:37 +00:00
Commit graph

28 commits

Author SHA1 Message Date
Antonio Gurgel
b318f9fe5d Upgrade gateway-api to 1.0.0 2023-11-26 22:17:11 -08:00
Antonio Gurgel
39f07b8264 Very few kube-system services should be in services/ 2023-11-26 00:07:39 -08:00
Antonio Gurgel
d798826df3 Move local-path-provisioner to system/kube-system 2023-11-26 00:06:02 -08:00
Antonio Gurgel
c641df6b50 Try again with k8s-intermediate CA
"Not a CA", cert-manager said. I minted it the wrong with easyrsa: I
asked for a server cert when I needed a CA.
2023-11-25 23:44:26 -08:00
Antonio Gurgel
a4d7d25e84 Add forgotten NS to secret/k8s-intermediate 2023-11-25 23:23:34 -08:00
Antonio Gurgel
f2d4a72678 Combine metallb releases
Same reason as an earlier commit: separating a yamlStream release
is pointless because it doesn't depend on `helm template -a`.
2023-11-25 23:17:14 -08:00
Antonio Gurgel
4f09138256 s/prometheus/prom
No reason to change the NFS path on losangeles.
2023-11-25 23:08:35 -08:00
Antonio Gurgel
f3c6484753 Fix typo in CNPG chart name 2023-11-25 23:00:32 -08:00
Antonio Gurgel
00b3e90344 Revert "Move internal registries to system/"
This reverts commit 0bf2a01bad.

Turns out I need HTTPRoute/v1.
2023-11-25 22:57:30 -08:00
Antonio Gurgel
5fc62f2d1b Move services/longhorn-system to extraObjects
It doesn't make sense to separate extraObjects; the `apiVersions`
argument doesn't affect them.
2023-11-25 22:31:48 -08:00
Antonio Gurgel
8a6a781575 Turn off Kyverno's irritating webhook clean-upper
If I want to uninstall it, I'll do it my own damn self.
2023-11-25 22:20:15 -08:00
Antonio Gurgel
0bf2a01bad Move internal registries to system/
They're among the first things that must come up.
2023-11-25 21:29:48 -08:00
Antonio Gurgel
9c18a98f0f Use fullnameOverride on sys/argo/workflows
Otherwise the resources have ridiculous names like
"workflows-argo-workflows-server".
2023-11-24 20:12:10 -08:00
Antonio Gurgel
1444cb9b18 s/release/service/g
"Helm releases" is what I'd been terming individual services, but
it makes no sense outside of the internal context of the Helm builder.

I also didn't want to call them "apps", however shorter that term is.
These are not apps.
2023-11-24 17:35:15 -08:00
Antonio Gurgel
a27d902cd3 Upgrade Kyverno to v3 2023-11-24 17:35:00 -08:00
Antonio Gurgel
dbb65668ee Add Longhorn 2023-11-24 12:27:52 -08:00
Antonio Gurgel
5d7691e427 Add MetalLB 2023-11-24 12:11:21 -08:00
Antonio Gurgel
7e4d9f719c Add CloudNativePG 2023-11-24 11:58:42 -08:00
Antonio Gurgel
54aafbb426 Add Prometheus stack (and upgrade chart) 2023-11-24 11:41:50 -08:00
Antonio Gurgel
15591a24f9 Add last kube-system services 2023-11-23 18:27:54 -08:00
Antonio Gurgel
1b45553af6 Name Make recipe after output file 2023-11-23 17:12:33 -08:00
Antonio Gurgel
a2f95cb53c Add cert-manager; use intermediate cert instead of CA 2023-11-23 17:04:15 -08:00
Antonio Gurgel
94615ae400 Add Argo Workflows 2023-11-23 15:37:18 -08:00
Antonio Gurgel
e9a0357fb9 Add common PV(C)s 2023-11-23 11:14:36 -08:00
Antonio Gurgel
ae070c60dc Add Istio base 2023-11-21 23:13:26 -08:00
Antonio Gurgel
6aff849da7 Add kyverno
I have my answer to 2638113, and it's what I was suspecting: the
flake-builder was never using clusterData until I added a release
that needs it, at which point I got the dreaded "error: attribute
'apiVersions' missing".

Remediation was simple: realize the wrongheadedness of passing
an empty attrset when the values are already well-known.
2023-11-21 20:58:13 -08:00
Antonio Gurgel
dc3060aa30 Pass charts into releases, and restore variadity
It doesn't pay to be strict about release module arity.
2023-11-21 20:46:32 -08:00
Antonio Gurgel
3e7a376329 Start messy refactor
Release trees are now split into API-producing and API-using ones.
Namespace rake must now take a list of roots of release trees.
2023-11-20 22:46:06 -08:00