Split kustomization/apps into multiple apps and migrate kubenuc to ne…

…w path Signed-off-by: Daniele De Lorenzi <[email protected]>
dark-vex · May 12, 2024 · ef1d757 · ef1d757
1 parent 3766eae
commit ef1d757
Show file tree

Hide file tree

Showing 102 changed files with 3,299 additions and 7 deletions.
diff --git a/clusters/kubenuc/apps.yaml b/clusters/kubenuc/apps.yaml
@@ -10,7 +10,5 @@ spec:
   sourceRef:
     kind: GitRepository
     name: flux-system
-  path: ./apps/kubenuc
+  path: ./clusters/kubenuc/apps
   prune: true
-  wait: true
-  timeout: 5m0s
diff --git a/clusters/kubenuc/apps/bareos/deploy-app.yaml b/clusters/kubenuc/apps/bareos/deploy-app.yaml
@@ -0,0 +1,12 @@
+apiVersion: kustomize.toolkit.fluxcd.io/v1
+kind: Kustomization
+metadata:
+  name: bareos-app
+  namespace: flux-system
+spec:
+  interval: 15m
+  sourceRef:
+    kind: GitRepository
+    name: flux-system
+  path: ./apps/kubenuc/bareos/manifests
+  prune: true
diff --git a/clusters/kubenuc/apps/bareos/manifests/deployment.yml b/clusters/kubenuc/apps/bareos/manifests/deployment.yml
@@ -0,0 +1,219 @@
+---
+apiVersion: apps/v1
+kind: Deployment
+metadata:
+  labels:
+    io.kompose.service: bareos-sd-infra-local
+  name: bareos-sd-infra-local
+  namespace: bareos
+spec:
+  progressDeadlineSeconds: 600
+  replicas: 1
+  selector:
+    matchLabels:
+      io.kompose.service: bareos-sd-infra-local
+  strategy:
+    type: Recreate
+  template:
+    metadata:
+      labels:
+        io.kompose.service: bareos-sd-infra-local
+    spec:
+      nodeSelector:
+        kubernetes.io/hostname: "kubenuc"
+      containers:
+      - env:
+        - name: BAREOS_SD_PASSWORD
+          valueFrom:
+            secretKeyRef:
+              name: bareos-secret
+              key: bareos_sd_password
+        - name: TZ
+          value: Europe/Rome
+        image: barcus/bareos-storage:21-ubuntu
+        imagePullPolicy: Always
+        name: bareos-sd-infra-local
+        ports:
+        - containerPort: 9103
+          name: 9103tcp02
+          protocol: TCP
+        resources:
+          requests:
+            cpu: 10m
+            memory: 32Mi
+          limits:
+            cpu: 10m
+            memory: 32Mi
+        terminationMessagePath: /dev/termination-log
+        terminationMessagePolicy: File
+        volumeMounts:
+        - mountPath: /etc/bareos
+          name: bareos-sd-infra-local-claim0
+        - mountPath: /var/lib/bareos/storage
+          name: bareos-sd-infra-local-claim1
+      dnsPolicy: ClusterFirst
+      restartPolicy: Always
+      schedulerName: default-scheduler
+      securityContext: {}
+      serviceAccount: bareos-sa
+      serviceAccountName: bareos-sa
+      terminationGracePeriodSeconds: 30
+      volumes:
+      - name: bareos-sd-infra-local-claim0
+        persistentVolumeClaim:
+          claimName: bareos-sd-infra-local-claim0
+      - name: bareos-sd-infra-local-claim1
+        persistentVolumeClaim:
+          claimName: bareos-sd-infra-local-claim1
+---
+apiVersion: apps/v1
+kind: Deployment
+metadata:
+  labels:
+    app: bareos
+    role: aio
+  name: bareos-aio
+  namespace: bareos
+spec:
+  progressDeadlineSeconds: 600
+  replicas: 0
+  selector:
+    matchLabels:
+      app: bareos
+      role: aio
+  strategy:
+    type: Recreate
+  template:
+    metadata:
+      labels:
+        app: bareos
+        role: aio
+    spec:
+      containers:
+      - env:
+        - name: TZ
+          value: Europe/Rome
+        - name: DB_INIT
+          value: "false" #should be 'true' if bareos db does not exist
+        - name: DB_UPDATE
+          value: "false"
+        - name: DB_HOST
+          value: bareos-db-svc
+        - name: DB_PORT
+          value: "5432"
+        - name: DB_USER
+          value: bareos
+        - name: BAREOS_SD_HOST
+          value: bareos-sd.infra.local
+        - name: BAREOS_FD_HOST
+          value: bareos-fd
+        - name: SMTP_HOST
+          value: ""
+        # name: Optional you can gets backup notification via Slack or Telegram
+        - name: WEBHOOK_NOTIFICATION
+          value: "true" # true or false if set to true email notification gets disabled
+        - name: WEBHOOK_TYPE
+          value: slack # choose slack or telegram
+        #- name: WEBHOOK_CHAT_ID= # for telegram only set the <chat_id>
+        - name: DB_PASSWORD
+          valueFrom:
+            secretKeyRef:
+              name: bareos-secret
+              key: db_password
+        - name: DB_ADMIN_USER
+          valueFrom:
+            secretKeyRef:
+              name: bareos-secret
+              key: db_admin_user
+        - name: DB_ADMIN_PASSWORD
+          valueFrom:
+            secretKeyRef:
+              name: bareos-secret
+              key: db_admin_password
+        - name: BAREOS_SD_PASSWORD
+          valueFrom:
+            secretKeyRef:
+              name: bareos-secret
+              key: bareos_sd_password
+        - name: BAREOS_FD_PASSWORD
+          valueFrom:
+            secretKeyRef:
+              name: bareos-secret
+              key: bareos_fd_password
+        - name: BAREOS_WEBUI_PASSWORD
+          valueFrom:
+            secretKeyRef:
+              name: bareos-secret
+              key: bareos_webui_password
+        - name: ADMIN_MAIL
+          valueFrom:
+            secretKeyRef:
+              name: bareos-secret
+              key: admin_mail
+        - name: WEBHOOK_URL
+          valueFrom:
+            secretKeyRef:
+              name: bareos-secret
+              key: webhook_url
+        image: barcus/bareos-director:21-ubuntu-pgsql
+        imagePullPolicy: Always
+        name: bareos-dir
+        ports:
+        - containerPort: 9101
+          name: 9101tcp
+          protocol: TCP
+        resources:
+          requests:
+            cpu: 10m
+            memory: 16Mi
+          limits:
+            cpu: 10m
+            memory: 16Mi
+        securityContext: {}
+        terminationMessagePath: /dev/termination-log
+        terminationMessagePolicy: File
+        volumeMounts:
+        - mountPath: /etc/bareos
+          name: bareos-dir-config
+        - mountPath: /var/lib/bareos
+          name: bareos-dir-catalog
+      - name: bareos-fd
+        image: barcus/bareos-client:21-ubuntu
+        imagePullPolicy: Always
+        env:
+        - name: TZ
+          value: Europe/Rome
+        - name: BAREOS_FD_PASSWORD
+          valueFrom:
+            secretKeyRef:
+              name: bareos-secret
+              key: bareos_fd_password
+        resources:
+          requests:
+            cpu: 10m
+            memory: 16Mi
+          limits:
+            cpu: 10m
+            memory: 16Mi
+        volumeMounts:
+        - mountPath: /etc/bareos
+          name: bareos-client-config
+        - mountPath: /var/lib/bareos-director
+          name: bareos-dir-catalog
+      dnsPolicy: ClusterFirst
+      restartPolicy: Always
+      schedulerName: default-scheduler
+      securityContext: {}
+      serviceAccount: bareos-sa
+      serviceAccountName: bareos-sa
+      terminationGracePeriodSeconds: 30
+      volumes:
+      - name: bareos-dir-config
+        persistentVolumeClaim:
+          claimName: bareos-dir-config-vol
+      - name: bareos-dir-catalog
+        persistentVolumeClaim:
+          claimName: bareos-dir-catalog-vol
+      - name: bareos-client-config
+        persistentVolumeClaim:
+          claimName: bareos-client-config-vol
diff --git a/clusters/kubenuc/apps/bareos/manifests/kustomization.yaml b/clusters/kubenuc/apps/bareos/manifests/kustomization.yaml
@@ -0,0 +1,11 @@
+apiVersion: kustomize.config.k8s.io/v1beta1
+kind: Kustomization
+namespace: bareos
+resources:
+- namespace.yml
+- deployment.yml
+- service.yml
+- secret.yml
+- serviceaccount.yml
+- statefulset.yml
+- pvc.yml
diff --git a/clusters/kubenuc/apps/bareos/manifests/namespace.yml b/clusters/kubenuc/apps/bareos/manifests/namespace.yml
@@ -0,0 +1,6 @@
+apiVersion: v1
+kind: Namespace
+metadata:
+  name: bareos
+spec: {}
+status: {}
diff --git a/clusters/kubenuc/apps/bareos/manifests/pvc.yml b/clusters/kubenuc/apps/bareos/manifests/pvc.yml
@@ -0,0 +1,87 @@
+---
+apiVersion: v1
+kind: PersistentVolumeClaim
+metadata:
+  labels:
+    io.kompose.service: bareos-sd-infra-local-claim0
+  name: bareos-sd-infra-local-claim0
+spec:
+  accessModes:
+    - ReadWriteOnce
+  resources:
+    requests:
+      storage: 100Mi
+  storageClassName: local-hostpath
+  volumeMode: Filesystem
+---
+apiVersion: v1
+kind: PersistentVolumeClaim
+metadata:
+  labels:
+    io.kompose.service: bareos-sd-infra-local-claim1
+  name: bareos-sd-infra-local-claim1
+spec:
+  accessModes:
+    - ReadWriteOnce
+  resources:
+    requests:
+      storage: 1Ti
+  storageClassName: backup-hostpath
+  volumeMode: Filesystem
+  volumeName: pvc-64e73745-c6da-41c8-829e-6af3f38e8988
+---
+apiVersion: v1
+kind: PersistentVolumeClaim
+metadata:
+  name: bareos-dir-config-vol
+  namespace: bareos
+spec:
+  accessModes:
+  - ReadWriteOnce
+  resources:
+    requests:
+      storage: 100Mi
+  storageClassName: local-hostpath
+  volumeMode: Filesystem
+---
+apiVersion: v1
+kind: PersistentVolumeClaim
+metadata:
+  name: bareos-dir-catalog-vol
+  namespace: bareos
+spec:
+  accessModes:
+  - ReadWriteOnce
+  resources:
+    requests:
+      storage: 100Mi
+  storageClassName: local-hostpath
+  volumeMode: Filesystem
+---
+apiVersion: v1
+kind: PersistentVolumeClaim
+metadata:
+  name: bareos-client-config-vol
+  namespace: bareos
+spec:
+  accessModes:
+  - ReadWriteOnce
+  resources:
+    requests:
+      storage: 100Mi
+  storageClassName: local-hostpath
+  volumeMode: Filesystem
+---
+apiVersion: v1
+kind: PersistentVolumeClaim
+metadata:
+  name: bareos-db-vol
+  namespace: bareos
+spec:
+  accessModes:
+  - ReadWriteOnce
+  resources:
+    requests:
+      storage: 100Mi
+  storageClassName: local-hostpath
+  volumeMode: Filesystem
diff --git a/clusters/kubenuc/apps/bareos/manifests/secret.yml b/clusters/kubenuc/apps/bareos/manifests/secret.yml
@@ -0,0 +1,7 @@
+---
+apiVersion: onepassword.com/v1
+kind: OnePasswordItem
+metadata:
+  name: bareos-secret
+spec:
+  itemPath: "vaults/k8s_secrets/items/bareos_secret"
diff --git a/clusters/kubenuc/apps/bareos/manifests/service.yml b/clusters/kubenuc/apps/bareos/manifests/service.yml
@@ -0,0 +1,37 @@
+---
+apiVersion: v1
+kind: Service
+metadata:
+  name: bareos-sd-infra-local
+  namespace: bareos
+spec:
+  externalTrafficPolicy: Cluster
+  ipFamilies:
+  - IPv4
+  ipFamilyPolicy: SingleStack
+  ports:
+  - name: "9103"
+    nodePort: 30000
+    port: 9103
+    protocol: TCP
+    targetPort: 9103
+  selector:
+    io.kompose.service: bareos-sd-infra-local
+  sessionAffinity: None
+  type: NodePort
+status:
+  loadBalancer: {}
+---
+apiVersion: v1
+kind: Service
+metadata:
+  name: bareos-db-svc
+  namespace: bareos
+spec:
+  ports:
+  - port: 5432
+    name: psql
+  clusterIP: None
+  selector:
+    app: bareos
+    role: db