rblundon/homelab
0
0
Fork 0
Code Issues Pull Requests Actions Packages Projects Releases Wiki Activity

Merge commit 'fe564d72279f4ab061b961dd528623f0ed272667' as 'cluster-config'

Browse Source
This commit is contained in:
Ryan Blundon
2025-03-30 15:46:16 -05:00
parent 68785684d5 fe564d7227
commit d76d8f8e05
346 changed files with 11754 additions and 0 deletions
Download Patch File Download Diff File Expand all files Collapse all files

8
cluster-config/components/trusted-profile-analyzer/prereqs/base/bombastic-default-obc.yaml Normal file
View File

@@ -0,0 +1,8 @@
apiVersion: objectbucket.io/v1alpha1
kind: ObjectBucketClaim
metadata:
name: bombastic-default
namespace: trusted-profile-analyzer
spec:
generateBucketName: bombastic-default
storageClassName: openshift-storage.noobaa.io

41
cluster-config/components/trusted-profile-analyzer/prereqs/base/bombastic-topics.yaml Normal file
View File

@@ -0,0 +1,41 @@
kind: KafkaTopic
apiVersion: kafka.strimzi.io/v1beta2
metadata:
name: bombastic-failed-default
labels:
strimzi.io/cluster: kafka
namespace: trusted-profile-analyzer
spec:
partitions: 10
replicas: 1
config:
retention.ms: 604800000
segment.bytes: 1073741824
---
kind: KafkaTopic
apiVersion: kafka.strimzi.io/v1beta2
metadata:
name: bombastic-indexed-default
labels:
strimzi.io/cluster: kafka
namespace: trusted-profile-analyzer
spec:
partitions: 10
replicas: 1
config:
retention.ms: 604800000
segment.bytes: 1073741824
---
kind: KafkaTopic
apiVersion: kafka.strimzi.io/v1beta2
metadata:
name: bombastic-stored-default
labels:
strimzi.io/cluster: kafka
namespace: trusted-profile-analyzer
spec:
partitions: 10
replicas: 1
config:
retention.ms: 604800000
segment.bytes: 1073741824

35
cluster-config/components/trusted-profile-analyzer/prereqs/base/kafka.yaml Normal file
View File

@@ -0,0 +1,35 @@
apiVersion: kafka.strimzi.io/v1beta2
kind: Kafka
metadata:
name: kafka
namespace: trusted-profile-analyzer
spec:
entityOperator:
topicOperator: {}
kafka:
config:
default.replication.factor: 1
inter.broker.protocol.version: "3.7"
min.insync.replicas: 1
offsets.topic.replication.factor: 1
transaction.state.log.min.isr: 1
transaction.state.log.replication.factor: 1
listeners:
- name: plain
port: 9092
tls: false
type: internal
- name: tls
port: 9093
tls: true
type: internal
replicas: 1
storage:
type: persistent-claim
size: 1Gi
version: 3.7.0
zookeeper:
replicas: 1
storage:
type: persistent-claim
size: 1Gi

15
cluster-config/components/trusted-profile-analyzer/prereqs/base/kustomization.yaml Normal file
View File

@@ -0,0 +1,15 @@
namespace: trusted-profile-analyzer
resources:
- namespace.yaml
- vexination-default-obc.yaml
- v11y-default-obc.yaml
- bombastic-default-obc.yaml
- kafka.yaml
- v11y-topics.yaml
- bombastic-topics.yaml
- vexination-topics.yaml
- postgresql-pvc.yaml
- postgresql-es.yaml
- postgresql-deploy.yaml
- postgresql-svc.yaml

4
cluster-config/components/trusted-profile-analyzer/prereqs/base/namespace.yaml Normal file
View File

@@ -0,0 +1,4 @@
apiVersion: v1
kind: Namespace
metadata:
name: trusted-profile-analyzer

80
cluster-config/components/trusted-profile-analyzer/prereqs/base/postgresql-deploy.yaml Normal file
View File

@@ -0,0 +1,80 @@
apiVersion: apps/v1
kind: Deployment
metadata:
annotations:
argocd.argoproj.io/sync-wave: "1"
name: postgresql
namespace: trusted-profile-analyzer
spec:
replicas: 1
revisionHistoryLimit: 10
selector:
matchLabels:
name: postgresql
strategy:
type: Recreate
template:
metadata:
labels:
name: postgresql
spec:
containers:
- env:
- name: POSTGRESQL_USER
valueFrom:
secretKeyRef:
key: database-user
name: postgresql
- name: POSTGRESQL_PASSWORD
valueFrom:
secretKeyRef:
key: database-password
name: postgresql
- name: POSTGRESQL_DATABASE
valueFrom:
secretKeyRef:
key: database-name
name: postgresql
image: image-registry.openshift-image-registry.svc:5000/openshift/postgresql:15-el8
imagePullPolicy: IfNotPresent
livenessProbe:
exec:
command:
- /usr/libexec/check-container
- --live
failureThreshold: 3
initialDelaySeconds: 120
periodSeconds: 10
successThreshold: 1
timeoutSeconds: 10
name: postgresql
ports:
- containerPort: 5432
protocol: TCP
readinessProbe:
exec:
command:
- /usr/libexec/check-container
failureThreshold: 3
initialDelaySeconds: 5
periodSeconds: 10
successThreshold: 1
timeoutSeconds: 1
resources:
limits:
memory: 512Mi
securityContext:
privileged: false
terminationMessagePath: /dev/termination-log
terminationMessagePolicy: File
volumeMounts:
- mountPath: /var/lib/pgsql/data
name: postgresql-data
dnsPolicy: ClusterFirst
restartPolicy: Always
schedulerName: default-scheduler
terminationGracePeriodSeconds: 30
volumes:
- name: postgresql-data
persistentVolumeClaim:
claimName: postgresql

18
cluster-config/components/trusted-profile-analyzer/prereqs/base/postgresql-es.yaml Normal file
View File

@@ -0,0 +1,18 @@
apiVersion: external-secrets.io/v1beta1
kind: ExternalSecret
metadata:
annotations:
argocd.argoproj.io/sync-wave: "0"
name: postgresql
namespace: trusted-profile-analyzer
spec:
refreshInterval: 1h
secretStoreRef:
kind: ClusterSecretStore
name: doppler-cluster
target:
name: postgresql
creationPolicy: Owner
dataFrom:
- extract:
key: RHTPA_POSTGRESQL

11
cluster-config/components/trusted-profile-analyzer/prereqs/base/postgresql-pvc.yaml Normal file
View File

@@ -0,0 +1,11 @@
apiVersion: v1
kind: PersistentVolumeClaim
metadata:
name: postgresql
namespace: trusted-profile-analyzer
spec:
accessModes:
- ReadWriteOnce
resources:
requests:
storage: 5Gi

11
cluster-config/components/trusted-profile-analyzer/prereqs/base/postgresql-svc.yaml Normal file
View File

@@ -0,0 +1,11 @@
apiVersion: v1
kind: Service
metadata:
name: postgresql
namespace: trusted-profile-analyzer
spec:
ports:
- name: postgresql
port: 5432
selector:
name: postgresql

8
cluster-config/components/trusted-profile-analyzer/prereqs/base/v11y-default-obc.yaml Normal file
View File

@@ -0,0 +1,8 @@
apiVersion: objectbucket.io/v1alpha1
kind: ObjectBucketClaim
metadata:
name: v11y-default
namespace: trusted-profile-analyzer
spec:
generateBucketName: v11y-default
storageClassName: openshift-storage.noobaa.io

41
cluster-config/components/trusted-profile-analyzer/prereqs/base/v11y-topics.yaml Normal file
View File

@@ -0,0 +1,41 @@
kind: KafkaTopic
apiVersion: kafka.strimzi.io/v1beta2
metadata:
name: v11y-failed-default
labels:
strimzi.io/cluster: kafka
namespace: trusted-profile-analyzer
spec:
partitions: 10
replicas: 1
config:
retention.ms: 604800000
segment.bytes: 1073741824
---
kind: KafkaTopic
apiVersion: kafka.strimzi.io/v1beta2
metadata:
name: v11y-indexed-default
labels:
strimzi.io/cluster: kafka
namespace: trusted-profile-analyzer
spec:
partitions: 10
replicas: 1
config:
retention.ms: 604800000
segment.bytes: 1073741824
---
kind: KafkaTopic
apiVersion: kafka.strimzi.io/v1beta2
metadata:
name: v11y-stored-default
labels:
strimzi.io/cluster: kafka
namespace: trusted-profile-analyzer
spec:
partitions: 10
replicas: 1
config:
retention.ms: 604800000
segment.bytes: 1073741824

8
cluster-config/components/trusted-profile-analyzer/prereqs/base/vexination-default-obc.yaml Normal file
View File

@@ -0,0 +1,8 @@
apiVersion: objectbucket.io/v1alpha1
kind: ObjectBucketClaim
metadata:
name: vexination-default
namespace: trusted-profile-analyzer
spec:
generateBucketName: vexination-default
storageClassName: openshift-storage.noobaa.io

41
cluster-config/components/trusted-profile-analyzer/prereqs/base/vexination-topics.yaml Normal file
View File

@@ -0,0 +1,41 @@
kind: KafkaTopic
apiVersion: kafka.strimzi.io/v1beta2
metadata:
name: vexination-failed-default
labels:
strimzi.io/cluster: kafka
namespace: trusted-profile-analyzer
spec:
partitions: 10
replicas: 1
config:
retention.ms: 604800000
segment.bytes: 1073741824
---
kind: KafkaTopic
apiVersion: kafka.strimzi.io/v1beta2
metadata:
name: vexination-indexed-default
labels:
strimzi.io/cluster: kafka
namespace: trusted-profile-analyzer
spec:
partitions: 10
replicas: 1
config:
retention.ms: 604800000
segment.bytes: 1073741824
---
kind: KafkaTopic
apiVersion: kafka.strimzi.io/v1beta2
metadata:
name: vexination-stored-default
labels:
strimzi.io/cluster: kafka
namespace: trusted-profile-analyzer
spec:
partitions: 10
replicas: 1
config:
retention.ms: 604800000
segment.bytes: 1073741824