Commit Graph
100 Commits
Author SHA1 Message Date
2martens 1bced8d44b Fixed policy for legacy host routing 2023-11-17 18:13:11 +01:00
2martens f77db05fb1 Removed node selector 2023-11-17 18:06:02 +01:00
2martens 5c88782898 Added cluster role binding for 2martens user 2023-11-17 18:00:13 +01:00
2martens fa9a4940d1 Updated chart metadata 2023-11-17 16:40:29 +01:00
2martens 38905422a3 Remove all policies that enforce node-level 2023-11-17 16:38:50 +01:00
2martens 1f9bca4d41 Added value for cilium 2023-11-17 15:49:53 +01:00
2martens e03fb94524 Allow prometheus access to kubelet 2023-11-17 15:49:29 +01:00
2martens 9ad03f352e Allow prometheus access to host 2023-11-17 15:49:06 +01:00
2martens d2887eeda2 Add hostaccess networkpolicy to enable icmp 2023-11-17 15:47:28 +01:00
2martens 775ca487bf Allow egress to host for argocd 2023-11-17 15:07:33 +01:00
2martens f36017617f Added cilium network policy 2023-11-17 09:59:09 +01:00
2martens c3219be93c Added cilium network policy 2023-11-17 09:34:39 +01:00
2martens 7bd028e847 Added network policies for core components of cluster 2023-11-16 23:44:48 +01:00
2martens f751ff7a74 Disable network policy for prometheus 2023-11-16 22:32:11 +01:00
2martens af053872e0 Disable networking for cloud controller manager 2023-11-16 21:40:33 +01:00
2martens 5e75176943 Updated chart name 2023-11-15 23:04:16 +01:00
2martens 199e2290eb Moved cloud controller manager into one app with csi 2023-11-15 22:56:28 +01:00
2martens ea6e060e53 Added cloud controller manager 2023-11-15 22:54:17 +01:00
2martens e6b4119abc Added script to find all pods not managed by Cilium 2023-11-15 22:37:20 +01:00
2martens af09acbdab Added option to respect ignore differences 2023-11-15 22:21:33 +01:00
2martens 6a7cbc253d Don't use helm values for podMonitor and serviceMonitor 2023-11-15 22:11:10 +01:00
2martens a099881c6c Made ingressClassName configurable 2023-11-15 17:06:38 +01:00
2martens 009b39fd19 Made ingressClassName configurable 2023-11-15 17:02:18 +01:00
2martens 933c535572 Made ingressClassName configurable 2023-11-15 16:57:32 +01:00
2martens 5285830149 Made ingressClassName configurable 2023-11-15 15:21:34 +01:00
2martens 4100cb0610 Increase resource for configserver 2023-11-15 14:54:10 +01:00
2martens 9280aa21b1 Only use group if filled 2023-11-15 14:27:55 +01:00
2martens 76591e2d26 Fixed toYaml call 2023-11-15 14:25:11 +01:00
2martens 68fb20a825 Fixed name of field 2023-11-15 14:24:01 +01:00
2martens c2a10c7628 Ignore resourceVersion and uid for pv of prometheus 2023-11-15 14:23:06 +01:00
2martens d04b95ac95 Fix port and paths of cilium monitor definitions 2023-11-15 14:17:14 +01:00
2martens 7238983f75 Added namespace selectors 2023-11-15 14:08:14 +01:00
2martens 2d0f8e126e Fix type of port 2023-11-15 13:46:31 +01:00
2martens 05ffd31949 Added monitors for cilium 2023-11-15 13:45:01 +01:00
2martens 9883e70f3e Added resources to configserver 2023-11-10 11:01:49 +01:00
2martens 18c86ce67c Increase memory limit to 512mi 2023-11-10 10:36:35 +01:00
2martens e602c1610c Increase cpu limit to 1 cpu 2023-11-10 10:28:41 +01:00
2martens e3160a2078 Increase memory request and limit for kafka 2023-11-10 10:20:07 +01:00
2martens 5fa6fce9fd Increase memory request and limit for Prometheus 2023-11-10 10:06:30 +01:00
2martens 6c54ccba63 Added resources for Kafka 2023-11-10 10:00:43 +01:00
2martens c110d1885e Limit Prometheus to 1Gi of memory 2023-11-10 09:54:34 +01:00
2martens da442e41e8 Added resource usages and enabled network policy 2023-11-10 09:45:32 +01:00
2martens 6ecbb978d5 Added cluster role for sensible admin without access to secrets 2023-11-10 09:40:52 +01:00
2martens ff3ead170f Added csr resource template 2023-11-09 15:32:22 +01:00
2martens 5c6e8502c6 Deal with custom location of kubelet 2023-11-09 09:43:41 +01:00
2martens cbd79ff130 Make thanos available via NodePort, add replica label and remove ingress for Prometheus 2023-11-09 09:05:47 +01:00
2martens 925969170b Provide more information about claimRef 2023-11-08 20:12:36 +01:00
2martens 7a52c5c83b Fix passed volume handle 2023-11-08 19:47:39 +01:00
2martens fb5c1ba127 Added parentheses for clarity 2023-11-08 19:45:18 +01:00
2martens 837e60e7bc Volume handle must be string 2023-11-08 19:44:58 +01:00
2martens 6f3c8f22ba Fixed scope 2023-11-08 19:41:32 +01:00
2martens d78e091631 Convert to int 2023-11-08 19:40:05 +01:00
2martens 3adedd8bfc Create pvs manually 2023-11-08 19:36:20 +01:00
2martens bba6e9d2f4 Fix mounting of hcloud volumes 2023-11-08 18:46:03 +01:00
2martens dc6b288dc9 Added template annotations 2023-11-08 09:38:09 +01:00
2martens fb87d34c96 Added monitoring configurations for app-of-apps and prometheus 2023-11-08 09:35:43 +01:00
2martens 04d9432a46 Replaced namespaces with variable 2023-11-08 09:34:52 +01:00
2martens 35f3df176c Added thanos chart 2023-11-08 09:33:10 +01:00
2martens d62acc72ec Disable issuer 2023-11-07 10:30:39 +01:00
2martens bcec341dac Added issuer 2023-11-07 10:27:05 +01:00
2martens b3285e2338 Use cert manager 2023-11-07 10:26:18 +01:00
2martens f8cc2ec490 Fixed name of secret 2023-11-07 10:03:24 +01:00
2martens c3faa7ac06 Updated allowed namespace 2023-11-07 10:02:11 +01:00
2martens e2c49bd56c Don't create namespace 2023-11-07 09:56:54 +01:00
2martens 662a307f8c Provide global context correctly 2023-11-07 09:45:26 +01:00
2martens 35abefedd6 Provide global context 2023-11-07 09:43:20 +01:00
2martens 507cca0fb9 Added missing labels/annotations 2023-11-07 09:39:37 +01:00
2martens ab6a0e1de1 Read hcloud secret from vault secrets 2023-11-07 09:20:26 +01:00
2martens 12d08adc1a Changed sync waves 2023-11-07 09:09:37 +01:00
2martens b2d6c39bee Create namespace if thanos is enabled 2023-11-07 08:21:27 +01:00
2martens 1f2da6962a Don't create namespace for prometheus 2023-11-07 08:20:01 +01:00
2martens bd28095d51 Remove selector 2023-11-06 22:53:16 +01:00
2martens 442c7a2122 Provided path type 2023-11-06 22:49:41 +01:00
2martens 9084a628cf Fixed whitespace 2023-11-06 22:45:23 +01:00
2martens afc80a8ed6 Enable thanos sidecar and volume claims 2023-11-06 22:43:42 +01:00
2martens 0c176b79ae Disable thanos by default 2023-11-06 22:43:02 +01:00
2martens 6585975dfd Added AWS S3 access token to cluster_setup 2023-11-06 22:42:07 +01:00
2martens 8b125220a3 Added hcloud token to cluster_setup 2023-11-06 18:03:21 +01:00
2martens dbf1dc685a Add namespace in cluster_setup 2023-11-06 17:58:43 +01:00
2martens bc56423183 Added sync waves 2023-11-06 17:57:42 +01:00
2martens a3193728a4 Try as separate app 2023-11-06 17:14:01 +01:00
2martens 5bd27e708e Add csi driver 2023-11-06 17:06:26 +01:00
2martens 2f5dde112a Don't create namespace for prometheus-adapter 2023-11-06 08:23:28 +01:00
2martens f4957d470d Install VSO crds as dependency of app-of-apps 2023-11-06 08:22:12 +01:00
2martens 6cbd1dcd38 Create vault-secrets-operator through argo cd again 2023-11-06 08:02:07 +01:00
2martens 948de3960b Update metadata 2023-11-06 07:59:42 +01:00
2martens fe742a9cfe Remove obsolete variable 2023-11-06 07:59:20 +01:00
2martens 6fc002bcaf Don't create namespace in cluster_config 2023-11-06 07:59:01 +01:00
2martens 175164a96f Bumped version and updated metadata 2023-11-05 13:03:14 +01:00
2martens 5cf3279602 Install secret in each application namespace 2023-11-05 13:02:47 +01:00
2martens dae6e8592f Added script to copy vault service principal 2023-11-05 12:28:18 +01:00
2martens 5d744a5da0 Fixed range 2023-11-05 11:53:15 +01:00
2martens cb0341d37b Fixed value 2023-11-05 11:50:11 +01:00
2martens c5ef296180 Allow more namespaces to have vault secrets apps 2023-11-05 11:49:04 +01:00
2martens 025eb6136c Updated template chart 2023-11-05 11:46:01 +01:00
2martens 9af611d609 Fixed chart 2023-11-05 11:45:25 +01:00
2martens 7d55e6bff4 Updated template chart 2023-11-05 11:41:22 +01:00
2martens fb63260a9a Vault secrets app must be created in consumer namespace 2023-11-05 11:40:34 +01:00
2martens fc34fc9e73 Vault secrets app must be created in consumer namespace 2023-11-05 11:33:35 +01:00
2martens 891ff1f476 Fixed spelling of clientID so that vault secrets operator picks it up correctly 2023-11-05 11:28:10 +01:00