Compare commits

...

10 Commits

Author SHA1 Message Date
Márcio Fernandes bdcc82273a modified: deploy/act-runners/mf/app/kustomization.yaml
modified:   deploy/act-runners/myLimbo/app/kustomization.yaml
2026-06-04 22:35:46 +00:00
Márcio Fernandes 638dd73d1d flux: remaining act runners 2026-06-04 22:33:32 +00:00
Márcio Fernandes 8e83205d09 modified: deploy/act-runners/kb/app/secrets.yaml
modified:   deploy/act-runners/limbosolutions-com/app/secrets.yaml
2026-06-04 22:22:59 +00:00
Márcio Fernandes 50095dbde3 modified: deploy/act-runners/limbosolutions-com/app/kustomization.yaml 2026-06-04 22:20:32 +00:00
Márcio Fernandes 72f3c5dff7 modified: deploy/flux/kustomization.yaml 2026-06-04 22:16:47 +00:00
Márcio Fernandes 1e26f304b6 flux: limbosolutions-com act runner 2026-06-04 22:15:15 +00:00
Márcio Fernandes e3753b9647 flux: kb act runner running 2026-06-04 22:05:49 +00:00
Márcio Fernandes b7fb972c6c flux: kb act runner 2026-06-04 20:46:10 +00:00
Márcio Fernandes 7e68e15683 modified: deploy/act-runners/kb/deploy/app/secrets.yaml 2026-06-04 20:38:30 +00:00
Márcio Fernandes 08d7095a6c flux: prep kb act runner kustomization 2026-06-04 20:38:05 +00:00
44 changed files with 233 additions and 151 deletions
+28 -2
View File
@@ -30,11 +30,33 @@ ops-scripts/apply-flux.sh
**sops / age:**
``` bash
age-keygen -o deploy/clusters/prod/flux-system/.env.d/age.agekey
cat deploy/clusters/prod/flux-system/.env.d/age.agekey | \
age-keygen -o deploy/flux/.env.d/age.agekey
cat deploy/flux/.env.d/age.agekey | \
kubectl create secret generic flux-sops-age \
--namespace=git-limbosolutions-com \
--from-file=age.agekey=/dev/stdin
cat deploy/flux/.env.d/age.agekey | \
kubectl create secret generic flux-sops-age \
--namespace=kb-cicd \
--from-file=age.agekey=/dev/stdin
cat deploy/flux/.env.d/age.agekey | \
kubectl create secret generic flux-sops-age \
--namespace=limbosolutions-com-cicd \
--from-file=age.agekey=/dev/stdin
cat deploy/flux/.env.d/age.agekey | \
kubectl create secret generic flux-sops-age \
--namespace=mf-cicd \
--from-file=age.agekey=/dev/stdin
cat deploy/flux/.env.d/age.agekey | \
kubectl create secret generic flux-sops-age \
--namespace=mylimbo-com-cicd \
--from-file=age.agekey=/dev/stdin
```
**Encrypt secrets:**
@@ -42,6 +64,10 @@ kubectl create secret generic flux-sops-age \
``` bash
sops -e deploy/app/helm-values.private.dec.yaml > deploy/app/helm-values.private.yaml
sops -e deploy/backups/secrets.dec.yaml > deploy/backups/secrets.yaml
sops -e deploy/act-runners/kb/app/secrets.dec.yaml > deploy/act-runners/kb/app/secrets.yaml
sops -e deploy/act-runners/limbosolutions-com/app/secrets.dec.yaml > deploy/act-runners/limbosolutions-com/app/secrets.yaml
sops -e deploy/act-runners/mf/app/secrets.dec.yaml > deploy/act-runners/mf/app/secrets.yaml
sops -e deploy/act-runners/myLimbo/app/secrets.dec.yaml > deploy/act-runners/myLimbo/app/secrets.yaml
```
## Backups
-13
View File
@@ -1,13 +0,0 @@
# kb - act-runner
**Deploy app:**
```bash
./ops-scripts/apply-app.sh
```
**Deploy Infra:**
```bash
./ops-scripts/apply-infra.sh
```
@@ -0,0 +1,7 @@
apiVersion: kustomize.config.k8s.io/v1beta1
kind: Kustomization
namespace: kb-cicd
resources:
- configmap.yaml
- deployment.yaml
- secrets.yaml
+24
View File
@@ -0,0 +1,24 @@
apiVersion: v1
kind: Secret
metadata:
name: act-runner
type: Opaque
data:
GITEA_INSTANCE_URL: ENC[AES256_GCM,data:hu+3h7SrBqcg6/vJGlhfPKr0Ba/3sPLMAcB41UNTNNnq4h4Zlmy1pw==,iv:lVuWe2qSB6IovHQS0x+0Em28WhWCqvYrXRLgoZ8mc7s=,tag:YDycHwytzyQAdNL7ohQN7g==,type:str]
GITEA_RUNNER_NAME: ENC[AES256_GCM,data:YFBl0zauAt4c0pbGCmE6nw==,iv:AdNNfliMcV2cigwllAZDLf1FOELDLiZ1QQ6Sfxieos4=,tag:h943Vkz/pE3psHuAjmqowg==,type:str]
GITEA_RUNNER_REGISTRATION_TOKEN: ENC[AES256_GCM,data:aYl9ACO+XTJyak6Zbij+iynn6Vjyk+c1jTca8nRqU1GcsBgTA1BtkOJB4xlEZSFZJD+xxh3bS6g=,iv:FV7a7KolBwfwyNpDC+FFU0COfVHvze2U/eVhXffjh9E=,tag:af5xpYsycoNFo4OhZrw8Jg==,type:str]
sops:
age:
- enc: |
-----BEGIN AGE ENCRYPTED FILE-----
YWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IFgyNTUxOSBUT1Q0emFPZnE5YlRhdTRD
VU8rTVJOaXd5emZURk5wajFiWksrNXNLRzJVCkdEQjE1WXFkY21VWTMzL0w1TzFX
N09tRWtjQitnblU1ZFE1TE5iQzFocFkKLS0tIGU1Ukh3Wk5aVk5ZbWh4RVdIc2p1
clJSQ09mUU5LdnR4VTFBUDY2OGpUblkKfwkVzWWmQ3GUbMLzeIs7ai/qJn0gHPpa
CEXd9dMotRJ12cWawN4MdagRE1UL50GPy24rsGMXfqrNGsWnJP7y0Q==
-----END AGE ENCRYPTED FILE-----
recipient: age1gk946fp37xtm3fv500407zdd5h89a5lvxysrufhau3f73xcq8ewqcu8l5g
encrypted_regex: ^(data|stringData)$
lastmodified: "2026-06-04T22:22:42Z"
mac: ENC[AES256_GCM,data:BTJ6wKJotmvNMwP1SAqwwx3BPUkVoOmXCdvI0HTwQUWsS5y0X5fQLwW6wz46g7GgVMwuoH2SEEkIl27UViYNUM7ObYFgN3y1isBjE1Xhcp1rC7BqRqYPtQ5HHMTF1dAo1+eHBYUE9vvaud87FOvePAYiaez3dK/helvqlb7A41I=,iv:j2HOYSIlXdn3TQc936PYcmIA/6SIyVtNZVchtjCxrQU=,tag:eD9d5OIpI9V3mpo7DtsOzg==,type:str]
version: 3.13.1
@@ -1,2 +0,0 @@
**
!.gitignore
@@ -1,14 +0,0 @@
apiVersion: kustomize.config.k8s.io/v1beta1
kind: Kustomization
resources:
- configmap.yaml
- deployment.yaml
generatorOptions:
disableNameSuffixHash: true
secretGenerator:
- name: act-runner
envs:
- .env.d/.env
@@ -1,4 +0,0 @@
#!/bin/bash
set -e
NAMESPACE=kb-cicd
kubectl kustomize deploy/app | kubectl --namespace ${NAMESPACE} apply -f -
@@ -1,4 +0,0 @@
#!/bin/bash
set -e
NAMESPACE=kb-cicd
kubectl create namespace ${NAMESPACE} || true
@@ -1,13 +0,0 @@
# limbosolutions.com - act-runner
**Deploy app:**
```bash
./ops-scripts/apply-app.sh
```
**Deploy Infra:**
```bash
./ops-scripts/apply-infra.sh
```
@@ -0,0 +1,8 @@
apiVersion: kustomize.config.k8s.io/v1beta1
kind: Kustomization
namespace: limbosolutions-com
resources:
- configmap.yaml
- deployment.yaml
- secrets.yaml
@@ -0,0 +1,24 @@
apiVersion: v1
kind: Secret
metadata:
name: act-runner
type: Opaque
data:
GITEA_INSTANCE_URL: ENC[AES256_GCM,data:OPQWugTT+aXgNo2yy6LZ/QTs4U1CKkK/o4tR+gMNpQTLaLIPLquCDw==,iv:ZfBVdS2GKTy7DwjV7t8Fho2p1pDinfsEdwKtJ1z2o9k=,tag:x131kXwsOeE0ywOUsDE9fQ==,type:str]
GITEA_RUNNER_NAME: ENC[AES256_GCM,data:f+3pB+TpYt8iyhhb49xva50VywtWlO0ST/v4OxPMEnxdugyz4BOVcg==,iv:ifniki5AG6VkKR3MFYOCF8G8yYrNrlq2oTgDzIDMD4E=,tag:cVOM6myolTbwczVBgrx1Qw==,type:str]
GITEA_RUNNER_REGISTRATION_TOKEN: ENC[AES256_GCM,data:2yM7JegoIMFohpJlAj7KYMiwkYpVq4HgWcIjVbfpS07TwJa0cnuZ8kYb950An6vSKb8h27DuKjA=,iv:7mLiZYQ/HX/p8NU4mWB2P3nEUpxcsLOvP/3AcyFrhtU=,tag:UU+GSiTwtODbJNVUEmcR+A==,type:str]
sops:
age:
- enc: |
-----BEGIN AGE ENCRYPTED FILE-----
YWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IFgyNTUxOSA4anZFOG5VK2FnUGxEVkh0
eGJ5QWNyanVGbEJicDJXY0tsTU1PdXdoTGxFCktnOW9jVHFQVjVRc0lLT0JTbUFN
R3hiR0ZtUnAxc0NYeGUvNWF3SUt0cTgKLS0tIG11Qk93aDhOdGxBME1URERGazdz
aFRzZGVKVjdjcUE5U0FoV1c3ZVE2QTAKC9RWFz1b31kBGLe9GJHHT+96xE3QPLRH
PKHnlIaEfygSN1yss2LIgA6Ns05ge/hp4v/z3f1og+euKJdj10rd3w==
-----END AGE ENCRYPTED FILE-----
recipient: age1gk946fp37xtm3fv500407zdd5h89a5lvxysrufhau3f73xcq8ewqcu8l5g
encrypted_regex: ^(data|stringData)$
lastmodified: "2026-06-04T22:22:42Z"
mac: ENC[AES256_GCM,data:+bkTNhQqZvPOxiwgrDISexjvVbssqyxH6MV2grywZlZPxNXnCLnLSlFUx7J0L9DNefMQsOp6HvH0cz3cA6+I41g2SgjXWSxxQoIAvDbHH4e12bDAOchx4ZBIljTlmzIyWEgkH6DPPvha4PH8qMXjQPCJWE8rpUohj40QqjFgUCQ=,iv:st9SsBDbmZ2FVzPPDoLouJe1zn4zOW1d0tzS0fhc+3k=,tag:n3KH71UxmmjvwjWXU9aCKA==,type:str]
version: 3.13.1
@@ -1,2 +0,0 @@
**
!.gitignore
@@ -1,14 +0,0 @@
apiVersion: kustomize.config.k8s.io/v1beta1
kind: Kustomization
resources:
- configmap.yaml
- deployment.yaml
generatorOptions:
disableNameSuffixHash: true
secretGenerator:
- name: act-runner
envs:
- .env.d/.env
@@ -1,4 +0,0 @@
#!/bin/bash
set -e
NAMESPACE=limbosolutions-com-cicd
kubectl kustomize deploy/app | kubectl --namespace ${NAMESPACE} apply -f -
@@ -1,4 +0,0 @@
#!/bin/bash
set -e
NAMESPACE=limbosolutions-com-cicd
kubectl create namespace ${NAMESPACE} || true
-13
View File
@@ -1,13 +0,0 @@
# mylimbo - act-runner
**Deploy app:**
```bash
./ops-scripts/apply-app.sh
```
**Deploy Infra:**
```bash
./ops-scripts/apply-infra.sh
```
@@ -0,0 +1,9 @@
apiVersion: kustomize.config.k8s.io/v1beta1
kind: Kustomization
namespace: mf-cicd
resources:
- configmap.yaml
- deployment.yaml
- secrets.yaml
+24
View File
@@ -0,0 +1,24 @@
apiVersion: v1
kind: Secret
metadata:
name: act-runner
type: Opaque
data:
GITEA_INSTANCE_URL: ENC[AES256_GCM,data:Obz1y5FaUsux2DjItdnJMG+rfF3vuO9o4wmpeOU2xxs70ijWUIoEyg==,iv:TLqspEhTvo8lGSGirZMeN0ikKyKmvsuJZ3s2ePL/Hv4=,tag:ju8t2qk2Dgz63Cgte0Wmxw==,type:str]
GITEA_RUNNER_NAME: ENC[AES256_GCM,data:u9/zD8aDRx8OSXLZfRP8ww==,iv:tnO1oZGS1dCRGonL3KLaubUr1JtbJvaD7wjBcpCpL2Y=,tag:HtPlkQgSHKVE7Zndo+U2mA==,type:str]
GITEA_RUNNER_REGISTRATION_TOKEN: ENC[AES256_GCM,data:9qfwY9IjXnOOFb8SsIJ0HCBv4KlTt1QNy20v59hZt+fPI688mrGpAhzbZfdZwRbAI74H/Gm5Hfk=,iv:q38chmaHIo4nSsDUhpBeFpszTdtwFEFOFIjPTdfNX5A=,tag:tCndZLIBo6RQXQN4V6tbCQ==,type:str]
sops:
age:
- enc: |
-----BEGIN AGE ENCRYPTED FILE-----
YWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IFgyNTUxOSBVTk1JVDBJQURtd0VIMlc4
WjR4UUp6cHExWC9CVE55UzJLT1ZNU3lFY0JBCnkvK0xvSHRuWi9mUHVMMU5LN3dQ
Ujh3cU9pMkNKenRza1FyZjlWaW41T1EKLS0tIGx0WFlQSmtCc3VmWGhhdWNteC9S
YTR3S3FpN0pjM29aNTA3NG9TYVE5VW8KguSIXnaxjzcAcvsJAnsz6VdpM6QJoWos
5EO8pwi1KF6q/RNv9Qg8XWpenBNJJt4BUms6Lej6xcgntxIVc8Fx5A==
-----END AGE ENCRYPTED FILE-----
recipient: age1gk946fp37xtm3fv500407zdd5h89a5lvxysrufhau3f73xcq8ewqcu8l5g
encrypted_regex: ^(data|stringData)$
lastmodified: "2026-06-04T22:26:34Z"
mac: ENC[AES256_GCM,data:12FZB5VqHBDoFpatMhF9wHnseW5LAHRLDDxGQGkBqRbVEq1mWKzERAwBh7emeQvUNnIIAUU9OKjrVhboDPn3t2Te9/z70CIJ/UDoPql0DTxezN6ulL4EYfrhtQvs+4m3JTcAFaF5JWL8ogh46vIL9hxaibuSdi856MnR6Zpiw2Y=,iv:KbLpaU3es78wjEqgpwn1cqqIGQdRy+PDByoJhELlO0I=,tag:62rZQkGKWkgkxAglLqyjaw==,type:str]
version: 3.13.1
@@ -1,2 +0,0 @@
**
!.gitignore
@@ -1,14 +0,0 @@
apiVersion: kustomize.config.k8s.io/v1beta1
kind: Kustomization
resources:
- configmap.yaml
- deployment.yaml
generatorOptions:
disableNameSuffixHash: true
secretGenerator:
- name: act-runner
envs:
- .env.d/.env
@@ -1,4 +0,0 @@
#!/bin/bash
set -e
NAMESPACE=mf-cicd
kubectl kustomize deploy/app | kubectl --namespace ${NAMESPACE} apply -f -
@@ -1,4 +0,0 @@
#!/bin/bash
set -e
NAMESPACE=mf-cicd
kubectl create namespace ${NAMESPACE} || true
-13
View File
@@ -1,13 +0,0 @@
# mylimbo - act-runner
**Deploy app:**
```bash
./ops-scripts/apply-app.sh
```
**Deploy Infra:**
```bash
./ops-scripts/apply-infra.sh
```
@@ -0,0 +1,8 @@
apiVersion: kustomize.config.k8s.io/v1beta1
kind: Kustomization
namespace: mylimbo-com-cicd
resources:
- configmap.yaml
- deployment.yaml
- secrets.yaml
@@ -0,0 +1,24 @@
apiVersion: v1
kind: Secret
metadata:
name: act-runner
type: Opaque
data:
GITEA_INSTANCE_URL: ENC[AES256_GCM,data:BATws1oD1oaQehXZGiAWasKVWYlGUOB2xxdRe2+OdJds5LUdzXx4SA==,iv:6ox8QZJDhUdR8IVyOyk+nPa9c/lhlAYOb/pY/l+wOy0=,tag:nJVE3shYschhfhfFkwHQpQ==,type:str]
GITEA_RUNNER_NAME: ENC[AES256_GCM,data:P7yDwNE/bSl34HfEqSwQNmIf9OLP4ayD,iv:kDcRIaeULPF5XckCqK6qlKpZBWw2cSyGHKaKQiGlzhk=,tag:kzynWwCu4brmVRoSCemtOA==,type:str]
GITEA_RUNNER_REGISTRATION_TOKEN: ENC[AES256_GCM,data:P4yLgfdOTRscbU0QBaeGU4iZjHTazAAOtPzjAtinP196CFeJ177T58qU419WNSYZeutZB96Gzgw=,iv:YIbPzLSFMT+RlDkCuIfv2AkAk5v31cfmF/KRMBAV6kE=,tag:1htUmlUDedLXecT24wSIDQ==,type:str]
sops:
age:
- enc: |
-----BEGIN AGE ENCRYPTED FILE-----
YWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IFgyNTUxOSB4cEEyZmk3dnhPN2JxUytr
WUtCMDlrK2pmb2xJSG8yaEVSZ3FsQkFaUWpJCk5iRjZtdFUvL1ZDdXlkUG5QWVNF
NXFxSkQrQjJIQ3g5dmdGNXRzUEIrNUEKLS0tIEpzdlJuR1dQV2NMc1JvdmJOUlpm
TVpYQlY0dDNTaTE5KzNzMUdQbXFnNnMK3uirf3+95s/D5bztGWphGOGJBl7BGGHh
y4kwM4DzlZioy9sLT8DpEQJi9eazkwRCJfAw89HQML2waTzc3j8kDg==
-----END AGE ENCRYPTED FILE-----
recipient: age1gk946fp37xtm3fv500407zdd5h89a5lvxysrufhau3f73xcq8ewqcu8l5g
encrypted_regex: ^(data|stringData)$
lastmodified: "2026-06-04T22:31:22Z"
mac: ENC[AES256_GCM,data:jJQJe1C0ebtg6n2nEQHaMgC31rGOfPRDtEeBwUaE3r7JxBqPZA9zLi91wMtO2ULTiTVzEVq4uKUo21JIozkdKFcBvO7sQUPgCcxJ9p67/2zyM499I03yq9EnruvV30qVcLm7Ts+mXOt3Hnbb4hj7MR5nYAszf2ZmHNNRNLSHGwg=,iv:yjgKkJT+HQReEks7aVn2Q9besmzvTwbiDtECriCRxwU=,tag:6hyb/r21vtUI03CfrcXo4Q==,type:str]
version: 3.13.1
@@ -1,2 +0,0 @@
**
!.gitignore
@@ -1,14 +0,0 @@
apiVersion: kustomize.config.k8s.io/v1beta1
kind: Kustomization
resources:
- configmap.yaml
- deployment.yaml
generatorOptions:
disableNameSuffixHash: true
secretGenerator:
- name: act-runner
envs:
- .env.d/.env
@@ -1,4 +0,0 @@
#!/bin/bash
set -e
NAMESPACE=mylimbo-com-cicd
kubectl kustomize deploy/app | kubectl --namespace ${NAMESPACE} apply -f -
@@ -1,4 +0,0 @@
#!/bin/bash
set -e
NAMESPACE=mylimbo-com-cicd
kubectl create namespace ${NAMESPACE} || true
+17
View File
@@ -0,0 +1,17 @@
apiVersion: kustomize.toolkit.fluxcd.io/v1
kind: Kustomization
metadata:
name: act-runner-kb-sync
namespace: kb-cicd
spec:
interval: 1m
sourceRef:
kind: GitRepository
name: git-limbosolutions-com
namespace: git-limbosolutions-com
path: deploy/act-runners/kb/app
prune: true
decryption:
provider: sops
secretRef:
name: flux-sops-age
@@ -0,0 +1,17 @@
apiVersion: kustomize.toolkit.fluxcd.io/v1
kind: Kustomization
metadata:
name: act-runner-sync
namespace: limbosolutions-com-cicd
spec:
interval: 1m
sourceRef:
kind: GitRepository
name: git-limbosolutions-com
namespace: git-limbosolutions-com
path: deploy/act-runners/limbosolutions-com/app
prune: true
decryption:
provider: sops
secretRef:
name: flux-sops-age
+17
View File
@@ -0,0 +1,17 @@
apiVersion: kustomize.toolkit.fluxcd.io/v1
kind: Kustomization
metadata:
name: act-runner-sync
namespace: mf-cicd
spec:
interval: 1m
sourceRef:
kind: GitRepository
name: git-limbosolutions-com
namespace: git-limbosolutions-com
path: deploy/act-runners/mf/app
prune: true
decryption:
provider: sops
secretRef:
name: flux-sops-age
+17
View File
@@ -0,0 +1,17 @@
apiVersion: kustomize.toolkit.fluxcd.io/v1
kind: Kustomization
metadata:
name: act-runner-sync
namespace: mylimbo-com-cicd
spec:
interval: 1m
sourceRef:
kind: GitRepository
name: git-limbosolutions-com
namespace: git-limbosolutions-com
path: deploy/act-runners/myLimbo/app
prune: true
decryption:
provider: sops
secretRef:
name: flux-sops-age
+1
View File
@@ -2,6 +2,7 @@ apiVersion: kustomize.toolkit.fluxcd.io/v1
kind: Kustomization
metadata:
name: backups
namespace: git-limbosolutions-com
spec:
interval: 1m
sourceRef:
+6
View File
@@ -5,11 +5,17 @@ resources:
- infra-sync.yaml
- gitea-sync.yaml
- backups-sync.yaml
- act-runner-kb-sync.yaml
- act-runner-limbosolutions-com-sync.yaml
- act-runner-mf-sync.yaml
- act-runner-myLimbo-sync.yaml
secretGenerator:
- name: flux-repo-ssh-credentials
namespace: git-limbosolutions-com
files:
- "identity=./.env.d/flux-repo-ssh-key"
- "known_hosts=./.env.d/flux-repo-ssh-known_hosts"
- "pubkey=./.env.d/flux-repo-ssh-key.pub"
generatorOptions:
disableNameSuffixHash: true
+2 -1
View File
@@ -2,6 +2,7 @@
set -e
echo "Executing infra deploy."
kubectl kustomize deploy/flux | kubectl -n git-limbosolutions-com apply -f -
kubectl kustomize deploy/flux | kubectl apply -f -