fluxcd: storage-limbosolutions-com

2026-06-07 22:31:02 +00:00
parent e004c033a4
commit d5f13a8c46
16 changed files with 124 additions and 64 deletions
@@ -0,0 +1,11 @@
+creation_rules:
+  # encrypt all values from file
+  - path_regex: \.dec\.yaml$
+    encrypted_regex: '^(.*)$'
+    age:
+      - age1f9e4pvp5y8gzuk8mz2s5xm85dd7znxhk56tcpuxqwn78qfjwja0qekwlju
+  # encrypt secrets files
+  - path_regex: .*.yaml
+    encrypted_regex: ^(data|stringData)$
+    age: 
+      - age1f9e4pvp5y8gzuk8mz2s5xm85dd7znxhk56tcpuxqwn78qfjwja0qekwlju
@@ -0,0 +1,17 @@
+# storage-limbosolutions-com
+
+<https://github.com/seaweedfs/seaweedfs-csi-driver>
+
+## Setup
+
+Using flux for reconciliation.
+
+``` bash
+./ops-scripts/apply-flux.sh
+```
+
+**Encrypt secrets:**
+
+``` bash
+sops -e deploy/app/helm-values.private.dec.yaml > deploy/app/helm-values.private.yaml
+```
@@ -0,0 +1,22 @@
+apiVersion: helm.toolkit.fluxcd.io/v2
+kind: HelmRelease
+metadata:
+  name: storage-limbosolutions-com-seaweedfs-csi-driver
+spec:
+  releaseName: storage-limbosolutions-com-seaweedfs-csi-driver
+  interval: 40h
+  chart:
+    spec:
+      chart: seaweedfs-csi-driver
+      version: 0.2.x
+      sourceRef:
+        kind: HelmRepository
+        name: seaweedfs-csi-driver
+      interval: 40h
+  valuesFrom:
+    - kind: Secret
+      name: seaweedfs-csi-helm-values
+      valuesKey: values.yaml 
+    - kind: Secret
+      name: seaweedfs-csi-helm-values
+      valuesKey: values.private.yaml 
@@ -0,0 +1,7 @@
+apiVersion: source.toolkit.fluxcd.io/v1
+kind: HelmRepository
+metadata:
+  name: seaweedfs-csi-driver
+spec:
+  interval: 40h
+  url: https://seaweedfs.github.io/seaweedfs-csi-driver/helm
@@ -0,0 +1,16 @@
+seaweedfsFiler: ENC[AES256_GCM,data:NkXmSvxU0i4HmwzXi3X31pY=,iv:hk8W9Yo7SG4TZKjNwhC8Ov70K9sa0I9ddiX6YZt+uIM=,tag:SDPqLpvW7UjQUr1jLVB0AA==,type:str]
+sops:
+    age:
+        - enc: |
+            -----BEGIN AGE ENCRYPTED FILE-----
+            YWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IFgyNTUxOSBUOGtiaWhmZ0p6Z29HdGVX
+            OGM1NGlZV1c2M3psZTdNOVVVYzBHak1HVVV3CjZFYXpudDdlTHBnekwvQ2NqcnVW
+            cE9LRk5mYnBYZkphc0ZzRjFMdVBuZjAKLS0tIGUvUSswZzlTRTRPWExTOTdPQlps
+            RUhBc280ODVjaFgyYi91d2U2WEtoS0EKk5PrgsSWWfCkwg+I7nIPY2dmOkLuOME4
+            RGO+MgqmlJIkw0c3sE0HnEjsbJm/QNClHPPVG+DvG1+2Hmw/iHBitQ==
+            -----END AGE ENCRYPTED FILE-----
+          recipient: age1f9e4pvp5y8gzuk8mz2s5xm85dd7znxhk56tcpuxqwn78qfjwja0qekwlju
+    encrypted_regex: ^(.*)$
+    lastmodified: "2026-06-07T22:11:46Z"
+    mac: ENC[AES256_GCM,data:4Evu7sdJuy6aRw58/qQkxY9HzDHcREfOklzjc43PASrMjXrfgwzFJVGZ2KAIHlQtLPMgrdRaxHV+u0XQ6pMiGvfzJg2q3IYQOA9SqyeKAnvOsIjWcKnIzRkvhiEC3RCsOxm4dR1dFiITz/0exiCs2E3AFAdo2H4cC7joA7AQFYk=,iv:550SS2OnNvtoP9ERlI0IYeDRY93zNpUAKKNrrrDKJb0=,tag:MBs8CguK+51AxRfHiOoUgA==,type:str]
+    version: 3.13.1
@@ -0,0 +1,6 @@
+storageClassName: "storage-limbosolutions-com"
+storageClassVolumeBindingMode: Immediate
+isDefaultStorageClass: false
+tlsSecret: ""
+driverName: storage-limbosolutions-com-csi-driver
+
@@ -0,0 +1,13 @@
+apiVersion: kustomize.config.k8s.io/v1beta1
+kind: Kustomization
+namespace: teleport-agent
+resources:
+ - helm-repo.yaml 
+ - helm-release.yaml 
+secretGenerator:
+  - name: seaweedfs-csi-helm-values
+    files:
+      - values.yaml=helm-values.yaml
+      - values.private.yaml=helm-values.private.yaml
+generatorOptions:
+  disableNameSuffixHash: true
@@ -0,0 +1,2 @@
+**
+!.gitignore
@@ -0,0 +1,16 @@
+apiVersion: kustomize.toolkit.fluxcd.io/v1
+kind: Kustomization
+metadata:
+  name: teleport-agent
+spec:
+  interval: 1m
+  sourceRef:
+    kind: GitRepository
+    name: casa
+    namespace: casa-limbosolutions-com
+  path: services/storage-limbosolutions-com/deploy/app
+  prune: true
+  decryption:
+    provider: sops
+    secretRef:
+      name: flux-sops-age
@@ -0,0 +1,11 @@
+apiVersion: kustomize.config.k8s.io/v1beta1
+kind: Kustomization
+namespace: storage-limbosolutions-com
+resources:
+ - app-sync.yaml
+secretGenerator:
+  - name: flux-sops-age
+    files:
+      - "age.agekey=./.env.d/age.agekey"
+generatorOptions:
+  disableNameSuffixHash: true
@@ -0,0 +1,12 @@
+#!/bin/bash
+set -e
+
+kubectl kustomize ./storage-limbosolutions-com/deploy/infra | kubectl apply -f -
+
+helm repo add seaweedfs-csi-driver https://seaweedfs.github.io/seaweedfs-csi-driver/helm
+helm repo update seaweedfs-csi-driver
+
+helm upgrade --install --version 0.2.23 \
+--values=./deploy/helm-values.yaml \
+--values=./deploy/helm-values.private.yaml \
+storage-limbosolutions-com-seaweedfs-csi-driver seaweedfs-csi-driver/seaweedfs-csi-driver --namespace storage-limbosolutions-com