mirrors/khuedoan-homelab
1
0
Fork 0
mirror of https://github.com/khuedoan/homelab.git synced 2025-02-03 12:54:54 +07:00
Code Issues Packages Projects Releases Wiki Activity

refactor: switch config jobs to cron jobs

Browse Source
This commit is contained in:
Khue Doan 2022-05-08 20:59:50 +07:00
parent 295d43f579
commit 4676650f59
2 changed files with 70 additions and 65 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

71
platform/gitea/templates/config-job.yaml
View File

@ -1,43 +1,46 @@
apiVersion: batch/v1
kind: Job # TODO switch to CronJob
kind: CronJob
metadata:
name: gitea-config
namespace: {{ .Release.Namespace }}
annotations:
argocd.argoproj.io/sync-wave: "1"
spec:
backoffLimit: 3
template:
schedule: '*/5 * * * *'
jobTemplate:
spec:
restartPolicy: Never
containers:
- name: apply
image: golang:1.17-alpine
env:
- name: GITEA_HOST
value: http://gitea-http:3000
- name: GITEA_USER
valueFrom:
secretKeyRef:
name: gitea-admin-secret
key: username
- name: GITEA_PASSWORD
valueFrom:
secretKeyRef:
name: gitea-admin-secret
key: password
workingDir: /go/src/gitea-config
command:
- sh
- -c
args:
- |
go get .
go run .
volumeMounts:
backoffLimit: 3
template:
spec:
restartPolicy: Never
containers:
- name: apply
image: golang:1.17-alpine
env:
- name: GITEA_HOST
value: http://gitea-http:3000
- name: GITEA_USER
valueFrom:
secretKeyRef:
name: gitea-admin-secret
key: username
- name: GITEA_PASSWORD
valueFrom:
secretKeyRef:
name: gitea-admin-secret
key: password
workingDir: /go/src/gitea-config
command:
- sh
- -c
args:
- |
go get .
go run .
volumeMounts:
- name: source
mountPath: /go/src/gitea-config
volumes:
- name: source
mountPath: /go/src/gitea-config
volumes:
- name: source
configMap:
name: gitea-config-source
configMap:
name: gitea-config-source

64
platform/vault/templates/generate-secrets-job.yaml
View File

@ -1,39 +1,41 @@
apiVersion: batch/v1
kind: Job # TODO switch to CronJob
kind: CronJob
metadata:
name: generate-secrets
namespace: {{ .Release.Namespace }}
annotations:
# TODO init and unseal in previous waves for production usage
argocd.argoproj.io/sync-wave: "3"
argocd.argoproj.io/sync-wave: "3" # TODO init and unseal in previous waves for production usage
spec:
backoffLimit: 3
template:
schedule: '*/5 * * * *'
jobTemplate:
spec:
restartPolicy: Never
containers:
- name: apply
image: golang:1.17-alpine
env:
- name: VAULT_ADDR
value: http://vault:8200
- name: VAULT_TOKEN
valueFrom:
secretKeyRef:
name: vault-token # TODO use production token
key: token
workingDir: /go/src/generate-secrets
command:
- sh
- -c
args:
- |
go get .
go run .
volumeMounts:
backoffLimit: 3
template:
spec:
restartPolicy: Never
containers:
- name: apply
image: golang:1.17-alpine
env:
- name: VAULT_ADDR
value: http://vault:8200
- name: VAULT_TOKEN
valueFrom:
secretKeyRef:
name: vault-token
key: token
workingDir: /go/src/generate-secrets
command:
- sh
- -c
args:
- |
go get .
go run .
volumeMounts:
- name: source
mountPath: /go/src/generate-secrets
volumes:
- name: source
mountPath: /go/src/generate-secrets
volumes:
- name: source
configMap:
name: generate-secrets-source
configMap:
name: generate-secrets-source