+1 -1

Makefile

reviewed

··· 48 48 cd test/e2e && go test 49 49 50 50 fmt: 51 51 - yamlfmt . 51 51 + yamlfmt --exclude cluster/roles/secrets/vars/main.yml . 52 52 terragrunt hcl format 53 53 tofu fmt -recursive 54 54 cd test/e2e && go fmt ./...

+10 -10

apps/blog.yaml

reviewed

··· 49 49 annotations: 50 50 cert-manager.io/cluster-issuer: letsencrypt-prod 51 51 hosts: 52 52 - - host: www.khuedoan.com 53 53 - paths: 54 54 - - path: / 55 55 - pathType: Prefix 56 56 - service: 57 57 - identifier: main 58 58 - port: 3000 52 52 + - host: www.khuedoan.com 53 53 + paths: 54 54 + - path: / 55 55 + pathType: Prefix 56 56 + service: 57 57 + identifier: main 58 58 + port: 3000 59 59 tls: 60 60 - - hosts: 61 61 - - www.khuedoan.com 62 62 - secretName: blog-tls-certificate 60 60 + - hosts: 61 61 + - www.khuedoan.com 62 62 + secretName: blog-tls-certificate

+2 -2

apps/cert-manager/templates/clusterissuer.yaml

reviewed

··· 9 9 name: letsencrypt-account-key 10 10 solvers: 11 11 - http01: 12 12 - ingress: 13 13 - class: nginx 12 12 + ingress: 13 13 + class: nginx

+1 -1

apps/example-service.yaml

reviewed

··· 58 58 port: 8080 59 59 tls: 60 60 - hosts: 61 61 - - example.cloudlab.khuedoan.com 61 61 + - example.cloudlab.khuedoan.com 62 62 secretName: example-tls-certificate

+26 -26

apps/micropaas/values.yaml

reviewed

··· 19 19 repository: docker.io/library/docker 20 20 tag: 27-dind 21 21 command: 22 22 - - dockerd 23 23 - - --host=tcp://127.0.0.1:2375 22 22 + - dockerd 23 23 + - --host=tcp://127.0.0.1:2375 24 24 securityContext: 25 25 privileged: true 26 26 nginx: ··· 46 46 annotations: 47 47 cert-manager.io/cluster-issuer: letsencrypt-prod 48 48 hosts: 49 49 - - host: micropaas.khuedoan.com 50 50 - paths: 51 51 - - path: / 52 52 - pathType: Prefix 53 53 - service: 54 54 - identifier: main 55 55 - port: 80 49 49 + - host: micropaas.khuedoan.com 50 50 + paths: 51 51 + - path: / 52 52 + pathType: Prefix 53 53 + service: 54 54 + identifier: main 55 55 + port: 80 56 56 tls: 57 57 - - hosts: 58 58 - - micropaas.khuedoan.com 59 59 - secretName: micropaas-tls-certificate 57 57 + - hosts: 58 58 + - micropaas.khuedoan.com 59 59 + secretName: micropaas-tls-certificate 60 60 persistence: 61 61 data: 62 62 accessMode: ReadWriteOnce ··· 64 64 advancedMounts: 65 65 main: 66 66 main: 67 67 - - path: /var/lib/micropaas/repos 68 68 - subPath: repos 69 69 - - path: /var/lib/micropaas/db 70 70 - subPath: db 71 71 - - path: /var/lib/micropaas/ssh 72 72 - subPath: ssh 73 73 - - path: /var/lib/micropaas/web 74 74 - subPath: web 75 75 - - path: /root/.docker 76 76 - subPath: docker-config 67 67 + - path: /var/lib/micropaas/repos 68 68 + subPath: repos 69 69 + - path: /var/lib/micropaas/db 70 70 + subPath: db 71 71 + - path: /var/lib/micropaas/ssh 72 72 + subPath: ssh 73 73 + - path: /var/lib/micropaas/web 74 74 + subPath: web 75 75 + - path: /root/.docker 76 76 + subPath: docker-config 77 77 nginx: 78 78 - - path: /usr/share/nginx/html 79 79 - subPath: web 78 78 + - path: /usr/share/nginx/html 79 79 + subPath: web 80 80 cache: 81 81 accessMode: ReadWriteOnce 82 82 size: 100Gi 83 83 advancedMounts: 84 84 main: 85 85 main: 86 86 - - path: /var/cache/micropaas 87 87 - subPath: micropaas 86 86 + - path: /var/cache/micropaas 87 87 + subPath: micropaas

-1

cluster/roles/bootstrap/tasks/main.yml

reviewed

··· 38 38 tls: true 39 39 dex: 40 40 enabled: false 41 41 - 42 41 - name: Deploy ApplicationSets 43 42 kubernetes.core.k8s: 44 43 kubeconfig: "{{ kubeconfig }}"

-2

cluster/roles/data/tasks/main.yml

reviewed

··· 5 5 flags: 6 6 - lvm 7 7 state: present 8 8 - 9 8 - name: Format data partition 10 9 filesystem: 11 10 fstype: ext4 12 11 dev: /dev/sdb1 13 13 - 14 12 - name: Mount data partition 15 13 mount: 16 14 src: /dev/sdb1

-5

cluster/roles/k3s/tasks/main.yml

reviewed

··· 6 6 owner: root 7 7 group: root 8 8 mode: 0755 9 9 - 10 9 - name: Ensure config directories exist 11 10 file: 12 11 path: "{{ item }}" ··· 14 13 mode: 0755 15 14 loop: 16 15 - /etc/rancher/k3s 17 17 - 18 16 - name: Copy k3s config files 19 17 template: 20 18 src: "{{ item.src }}" ··· 27 25 dest: "{{ k3s_registries_file }}" 28 26 - src: k3s.service.j2 29 27 dest: "{{ k3s_service_file }}" 30 30 - 31 28 - name: Enable k3s service 32 29 systemd: 33 30 name: k3s ··· 36 33 register: k3s_service 37 34 until: k3s_service is succeeded 38 35 retries: 5 39 39 - 40 36 - name: Get Kubernetes config file 41 37 run_once: true 42 38 slurp: 43 39 src: /etc/rancher/k3s/k3s.yaml 44 40 register: kubeconfig_base64 45 45 - 46 41 - name: Write Kubernetes config file with the correct cluster address 47 42 become: false 48 43 copy:

-2

cluster/roles/prerequisites/tasks/main.yml

reviewed

··· 1 1 - name: Iptables flush filter 2 2 ansible.builtin.iptables: 3 3 flush: yes 4 4 - 5 4 - name: Disable netfilter service 6 5 systemd: 7 6 name: netfilter-persistent 8 7 enabled: false 9 8 state: stopped 10 10 - 11 9 - name: Adjust kernel parameters 12 10 ansible.posix.sysctl: 13 11 name: "{{ item.name }}"

-1

cluster/roles/secrets/tasks/main.yml

reviewed

··· 16 16 - temporal 17 17 - wireguard 18 18 - silverbullet 19 19 - 20 19 - name: Apply secrets 21 20 kubernetes.core.k8s: 22 21 kubeconfig: "{{ kubeconfig }}"

-1

platform/app-engine.yaml

reviewed

··· 58 58 globalMounts: 59 59 - path: /var/run 60 60 subPath: docker.sock 61 61 -

+7 -7

platform/kiali.yaml

reviewed

··· 48 48 - host: kiali.cloudlab.khuedoan.com 49 49 http: 50 50 paths: 51 51 - - backend: 52 52 - service: 53 53 - name: kiali 54 54 - port: 55 55 - name: http 56 56 - path: / 57 57 - pathType: Prefix 51 51 + - backend: 52 52 + service: 53 53 + name: kiali 54 54 + port: 55 55 + name: http 56 56 + path: / 57 57 + pathType: Prefix 58 58 tls: 59 59 - hosts: 60 60 - kiali.cloudlab.khuedoan.com

+41 -28

platform/radicle.yaml

reviewed

··· 61 61 tag: latest 62 62 env: 63 63 RAD_HOME: /var/lib/radicle 64 64 - command: [ 65 65 - "radicle-httpd", 66 66 - "--alias", "blog", "rad:zGtLfDcgmBqBUya1qTpzRzpBpoHx", 67 67 - "--alias", "dotfiles", "rad:z38YiLVx2e4JC5Xo2qMNDGoMPHE7U", 68 68 - "--alias", "homelab", "rad:z3pkjF1uaT1cZBrB8tBcCDtXGnrLQ", 69 69 - "--alias", "micropaas", "rad:zdhXFweZXNiVmb6YPV9SFeA5xeZC", 70 70 - "--alias", "nixos-setup", "rad:z3KcHMAjkkxzys1QyXYgFa4Rfik4D", 71 71 - "--alias", "webhook-transformer", "rad:z3Leck2yN7a8R2NpYtikkmAB8vA22", 72 72 - "--alias", "cloudlab", "rad:zLcEuZQwY8hRDUiaSNz8eNRgEpkc", 73 73 - ] 64 64 + command: 65 65 + - radicle-httpd 66 66 + - --alias 67 67 + - blog 68 68 + - rad:zGtLfDcgmBqBUya1qTpzRzpBpoHx 69 69 + - --alias 70 70 + - dotfiles 71 71 + - rad:z38YiLVx2e4JC5Xo2qMNDGoMPHE7U 72 72 + - --alias 73 73 + - homelab 74 74 + - rad:z3pkjF1uaT1cZBrB8tBcCDtXGnrLQ 75 75 + - --alias 76 76 + - micropaas 77 77 + - rad:zdhXFweZXNiVmb6YPV9SFeA5xeZC 78 78 + - --alias 79 79 + - nixos-setup 80 80 + - rad:z3KcHMAjkkxzys1QyXYgFa4Rfik4D 81 81 + - --alias 82 82 + - webhook-transformer 83 83 + - rad:z3Leck2yN7a8R2NpYtikkmAB8vA22 84 84 + - --alias 85 85 + - cloudlab 86 86 + - rad:zLcEuZQwY8hRDUiaSNz8eNRgEpkc 74 87 explorer: 75 88 containers: 76 89 main: ··· 99 112 annotations: 100 113 cert-manager.io/cluster-issuer: letsencrypt-prod 101 114 hosts: 102 102 - - host: radicle.cloudlab.khuedoan.com 103 103 - paths: 104 104 - - path: / 105 105 - pathType: Prefix 106 106 - service: 107 107 - identifier: server 108 108 - port: 8080 109 109 - - host: code.khuedoan.com 110 110 - paths: 111 111 - - path: / 112 112 - pathType: Prefix 113 113 - service: 114 114 - identifier: explorer 115 115 - port: 80 115 115 + - host: radicle.cloudlab.khuedoan.com 116 116 + paths: 117 117 + - path: / 118 118 + pathType: Prefix 119 119 + service: 120 120 + identifier: server 121 121 + port: 8080 122 122 + - host: code.khuedoan.com 123 123 + paths: 124 124 + - path: / 125 125 + pathType: Prefix 126 126 + service: 127 127 + identifier: explorer 128 128 + port: 80 116 129 tls: 117 117 - - hosts: 118 118 - - radicle.cloudlab.khuedoan.com 119 119 - - code.khuedoan.com 120 120 - secretName: radicle-tls-certificate 130 130 + - hosts: 131 131 + - radicle.cloudlab.khuedoan.com 132 132 + - code.khuedoan.com 133 133 + secretName: radicle-tls-certificate 121 134 persistence: 122 135 data: 123 136 accessMode: ReadWriteOnce