cluster: add myinfra-kubernetes-shared-monitoring-sync

2026-09-12 14:33:24 +00:00
parent 28022eb5f3
commit 9be1d6b2bc
12 changed files with 59 additions and 1 deletions
@@ -0,0 +1,2 @@
+**
+!.gitignore
@@ -0,0 +1,16 @@
+apiVersion: kustomize.toolkit.fluxcd.io/v1
+kind: Kustomization
+metadata:
+  name: alloy-global
+spec:
+  interval: 1m
+  sourceRef:
+    kind: GitRepository
+    name: casa
+    namespace: casa-limbosolutions-com
+  path: services/monitoring/deploy/alloy
+  prune: true
+  decryption:
+    provider: sops
+    secretRef:
+      name: flux-sops-age
@@ -0,0 +1,12 @@
+apiVersion: kustomize.config.k8s.io/v1beta1
+kind: Kustomization
+namespace: monitoring
+resources:
+ - alloy-global-sync.yaml
+ - myinfra-kubernetes-shared-monitoring-sync.yaml
+secretGenerator:
+  - name: flux-sops-age
+    files:
+      - "age.agekey=./.env.d/age.agekey"
+generatorOptions:
+  disableNameSuffixHash: true
@@ -0,0 +1,12 @@
+apiVersion: kustomize.toolkit.fluxcd.io/v1
+kind: Kustomization
+metadata:
+  name: myinfra-kubernetes-shared-monitoring
+spec:
+  interval: 1m
+  sourceRef:
+    kind: GitRepository
+    name: myinfra-kubernetes-shared
+    namespace: casa-limbosolutions-com
+  path: monitoring/overlays/complete-stack
+  prune: true
@@ -0,0 +1,13 @@
+# casa-limbosolutions-com
+
+## sync cert
+
+``` bash
+kubectl annotate secret casa-limbosolutions-com-tls \
+  -n casa-limbosolutions-com \
+  replicator.v1.mittwald.de/replicate-to="home-assistant,node-red,lyrionmusicserver,jellyfin" --overwrite
+```
+
+``` bash
+kubectl kustomize deploy/flux | kubectl apply -f -
+```
@@ -0,0 +1,14 @@
+
+apiVersion: cert-manager.io/v1
+kind: Certificate
+metadata:
+  name: casa-limbosolutions-com
+  namespace: casa-limbosolutions-com
+spec:
+  secretName: casa-limbosolutions-com-tls
+  dnsNames:
+  - "casa.limbosolutions.com"
+  - "*.casa.limbosolutions.com"
+  issuerRef:
+    kind: ClusterIssuer
+    name: letsencrypt-prod
@@ -0,0 +1,2 @@
+**
+!.gitignore
@@ -0,0 +1,11 @@
+apiVersion: source.toolkit.fluxcd.io/v1
+kind: GitRepository
+metadata:
+  name: casa
+spec:
+  interval: 1m0s
+  url: ssh://git@git.limbosolutions.com:2222/myLimbo/casa.git
+  ref:
+    branch: main
+  secretRef:
+    name: flux-repo-ssh-credentials
@@ -0,0 +1,18 @@
+apiVersion: kustomize.config.k8s.io/v1beta1
+kind: Kustomization
+namespace: casa-limbosolutions-com
+resources:
+ - git-repo.yaml
+secretGenerator:
+  - name: flux-repo-ssh-credentials
+    namespace: casa-limbosolutions-com
+    files:
+      - "identity=./.env.d/flux-repo-ssh-key"
+      - "known_hosts=./.env.d/flux-repo-ssh-known_hosts"
+      - "pubkey=./.env.d/flux-repo-ssh-key.pub"
+  - name: flux-sops-age
+    namespace: casa-limbosolutions-com
+    files:
+      - "age.agekey=./.env.d/age.agekey"
+generatorOptions:
+  disableNameSuffixHash: true
@@ -0,0 +1,9 @@
+apiVersion: source.toolkit.fluxcd.io/v1
+kind: GitRepository
+metadata:
+  name: myinfra-kubernetes-shared
+spec:
+  interval: 1m0s
+  url: https://git.limbosolutions.com/myLimbo/myinfra.kubernetes.shared.git
+  ref:
+    branch: main
@@ -0,0 +1,7 @@
+apiVersion: kustomize.config.k8s.io/v1beta1
+kind: Kustomization
+namespace: casa-limbosolutions-com
+resources:
+ - git-repo.yaml
+generatorOptions:
+  disableNameSuffixHash: true