refactor: move files to a kind-directory so Renovate will find them

2024-12-28 18:07:44 +01:00
parent dc3af1b710
commit e62508cfbd
9 changed files with 11 additions and 9 deletions
@@ -0,0 +1,7 @@
+apiVersion: cert-manager.io/v1
+kind: Issuer
+metadata:
+  name: self-signed
+  namespace: default
+spec:
+  selfSigned: {}
@@ -0,0 +1,4 @@
+apiVersion: v1
+kind: Namespace
+metadata:
+  name: external-secrets
@@ -0,0 +1,19 @@
+kind: Cluster
+apiVersion: kind.x-k8s.io/v1alpha4
+name: unbound
+nodes:
+- role: control-plane
+  kubeadmConfigPatches:
+  - |
+    kind: InitConfiguration
+    nodeRegistration:
+      kubeletExtraArgs:
+        node-labels: "ingress-ready=true"
+  - |
+    kind: ClusterConfiguration
+    apiServer:
+        extraArgs:
+          service-node-port-range: 3000-39999
+  extraMounts:
+  - hostPath: ./data
+    containerPath: /data
@@ -0,0 +1,19 @@
+apiVersion: kustomize.config.k8s.io/v1beta1
+kind: Kustomization
+resources:
+- mysql.yaml
+- postgres.yaml
+- rabbitmq.yaml
+- external-secrets.yaml
+- https://raw.githubusercontent.com/kubernetes/ingress-nginx/main/deploy/static/provider/kind/deploy.yaml
+- https://github.com/jetstack/cert-manager/releases/download/v1.15.3/cert-manager.yaml
+- certificates.yaml
+- secrets-store.yaml
+helmCharts:
+- name: external-secrets
+  namespace: external-secrets
+  includeCRDs: true
+  releaseName: external-secrets
+  repo: https://charts.external-secrets.io
+  version: 0.12.1
+
@@ -0,0 +1,60 @@
+apiVersion: v1
+kind: Secret
+metadata:
+  name: mysql
+stringData:
+  DB_HOST: mysql
+  DB_PORT: "3306"
+  DB_NAME: mysql
+  DB_USER: mysql
+  DB_PASSWORD: mysql
+---
+apiVersion: apps/v1
+kind: Deployment
+metadata:
+  name: mysql
+spec:
+  selector:
+    matchLabels:
+      app: mysql
+  strategy:
+    type: Recreate
+  template:
+    metadata:
+      labels:
+        app: mysql
+    spec:
+      containers:
+      - image: mysql:8.4.3@sha256:106d5197fd8e4892980469ad42eb20f7a336bd81509aae4ee175d852f5cc4565
+        name: mysql
+        env:
+        - name: MYSQL_ROOT_PASSWORD
+          value: password
+        ports:
+        - containerPort: 3306
+          name: mysql
+        volumeMounts:
+        - name: data
+          mountPath: /var/lib/mysql
+      volumes:
+      - name: data
+        hostPath:
+          path: /data/mysql
+---
+
+apiVersion: v1
+kind: Service
+metadata:
+  labels:
+    app: mysql
+  name: mysql
+spec:
+  ports:
+  - name: mysql
+    port: 3306
+    nodePort: 3306
+    protocol: TCP
+  selector:
+    app: mysql
+  sessionAffinity: None
+  type: NodePort
@@ -0,0 +1,103 @@
+kind: ConfigMap
+apiVersion: v1
+metadata:
+  name: shared-postgres
+data:
+  DB_HOST: "postgres-postgresql"
+  DB_PORT: "5432"
+  DB_USER: "postgres"
+---
+apiVersion: v1
+kind: ConfigMap
+metadata:
+  name: postgres-init
+data:
+  initdb.sh: |-
+    #!/usr/bin/env bash
+    set -e
+
+    psql -v ON_ERROR_STOP=1 --username "$POSTGRES_USER" --dbname "$POSTGRES_DB" <<-EOSQL
+    	CREATE DATABASE schemas WITH OWNER postgres ENCODING utf8;
+    	CREATE DATABASE accounting WITH OWNER postgres ENCODING utf8;
+    	CREATE DATABASE authz WITH OWNER postgres ENCODING utf8;
+    	CREATE DATABASE company WITH OWNER postgres ENCODING utf8;
+    	CREATE DATABASE consumer WITH OWNER postgres ENCODING utf8;
+    	CREATE DATABASE employee WITH OWNER postgres ENCODING utf8;
+    	CREATE DATABASE invoice WITH OWNER postgres ENCODING utf8;
+    	CREATE DATABASE notification WITH OWNER postgres ENCODING utf8;
+    	CREATE DATABASE salary WITH OWNER postgres ENCODING utf8;
+    	CREATE DATABASE supplier WITH OWNER postgres ENCODING utf8;
+    	CREATE DATABASE supplier_invoice WITH OWNER postgres ENCODING utf8;
+    	CREATE DATABASE time WITH OWNER postgres ENCODING utf8;
+    	CREATE DATABASE dancefinder WITH OWNER postgres ENCODING utf8;
+    	CREATE DATABASE hifi WITH OWNER postgres ENCODING utf8;
+    EOSQL
+---
+apiVersion: apps/v1
+kind: Deployment
+metadata:
+  name: postgres
+spec:
+  selector:
+    matchLabels:
+      app: postgres
+  replicas: 1
+  template:
+    metadata:
+      labels:
+        app: postgres
+    spec:
+      containers:
+      - name: postgres
+        image: postgres:17.2-alpine@sha256:d37d2c160d34430877c802e5adc22824a2ad453499db9bab1a2ceb2be6c1a46f
+        args:
+        - -c
+        - shared_buffers=384MB
+        - -c
+        - max_connections=300
+        imagePullPolicy: "IfNotPresent"
+        resources:
+          requests:
+            memory: 400Mi
+          limits:
+            memory: 600Mi
+        ports:
+        - containerPort: 5432
+        env:
+        - name: POSTGRES_DB
+          value: postgres
+        - name: POSTGRES_USER
+          value: postgres
+        - name: POSTGRES_PASSWORD
+          value: postgres
+        - name: LANG
+          value: sv_SE.utf8
+        - name: POSTGRES_INITDB_ARGS
+          value: --locale-provider=icu --icu-locale=sv-SE
+        volumeMounts:
+        - name: data
+          mountPath: /var/lib/postgresql/data
+        - mountPath: /docker-entrypoint-initdb.d/initdb.sh
+          name: initdb
+          subPath: initdb.sh
+      volumes:
+      - name: data
+        hostPath:
+          path: /data/postgres
+      - name: initdb
+        configMap:
+          name: postgres-init
+---
+apiVersion: v1
+kind: Service
+metadata:
+  name: postgres
+  labels:
+    app: postgres
+spec:
+  ports:
+  - port: 5432
+    nodePort: 5432
+  selector:
+    app: postgres
+  type: NodePort
@@ -0,0 +1,166 @@
+kind: ConfigMap
+apiVersion: v1
+metadata:
+  name: shared-rabbitmq
+data:
+  RABBITMQ_SERVERS: rabbitmq
+  RABBITMQ_VHOST: /
+  RABBITMQ_USERNAME: user
+---
+apiVersion: v1
+kind: ConfigMap
+metadata:
+  name: rabbitmq-env-config
+data:
+  memory.conf: |-
+    total_memory_available_override_value = 1GB
+---
+apiVersion: v1
+kind: Secret
+metadata:
+  name: rabbitmq
+stringData:
+  AMQP_URL: "amqp://user:password@rabbitmq:5672/"
+---
+apiVersion: apps/v1
+kind: Deployment
+metadata:
+  labels:
+    app: rabbitmq
+    release: rabbitmq
+  name: rabbitmq
+spec:
+  replicas: 1
+  selector:
+    matchLabels:
+      app: rabbitmq
+  strategy:
+    rollingUpdate:
+      maxSurge: 1
+      maxUnavailable: 1
+    type: RollingUpdate
+  template:
+    metadata:
+      labels:
+        app: rabbitmq
+    spec:
+      securityContext:
+        fsGroup: 999
+        runAsUser: 999
+        runAsGroup: 999
+      containers:
+      - env:
+        - name: RABBITMQ_DEFAULT_USER
+          value: user
+        - name: RABBITMQ_DEFAULT_PASS
+          value: password
+        - name: RABBITMQ_NODE_PORT_NUMBER
+          value: "5672"
+        - name: RABBITMQ_NODE_TYPE
+          value: stats
+        - name: RABBITMQ_NODENAME
+          value: rabbit@localhost
+        - name: RABBITMQ_CLUSTER_NODE_NAME
+        - name: RABBITMQ_DEFAULT_VHOST
+          value: /
+        - name: RABBITMQ_MANAGER_PORT_NUMBER
+          value: "15672"
+        - name: RABBITMQ_DISK_FREE_LIMIT
+          value: '"8GiB"'
+        - name: RABBITMQ_CONFIG_FILES
+          value: /etc/rabbitmq/conf.d
+        image: rabbitmq:4.0.5-management@sha256:4a2b95d53111fe589fb44b5152ff87253c63eb227eee21f39494f64d9d96c0b2
+        imagePullPolicy: Always
+        livenessProbe:
+          exec:
+            command:
+            - rabbitmqctl
+            - status
+          failureThreshold: 6
+          initialDelaySeconds: 120
+          periodSeconds: 10
+          successThreshold: 1
+          timeoutSeconds: 5
+        name: rabbitmq
+        ports:
+        - containerPort: 4369
+          name: epmd
+          protocol: TCP
+        - containerPort: 5672
+          name: amqp
+          protocol: TCP
+        - containerPort: 25672
+          name: dist
+          protocol: TCP
+        - containerPort: 15672
+          name: stats
+          protocol: TCP
+        readinessProbe:
+          httpGet:
+            port: 15672
+            path: /api/aliveness-test/%2F
+            httpHeaders:
+            - name: "Authorization"
+              value: "Basic dXNlcjpwYXNzd29yZA=="
+          failureThreshold: 3
+          initialDelaySeconds: 10
+          periodSeconds: 5
+          successThreshold: 1
+          timeoutSeconds: 3
+        resources:
+          requests:
+            cpu: 100m
+            memory: 256Mi
+        terminationMessagePath: /dev/termination-log
+        terminationMessagePolicy: File
+        volumeMounts:
+        - name: data
+          mountPath: /var/lib/rabbitmq
+        - name: config
+          mountPath: /etc/rabbitmq/conf.d/20-memory.conf
+          subPath: memory.conf
+          readOnly: true
+      volumes:
+      - name: data
+        hostPath:
+          path: /data/rabbitmq
+      - name: config
+        configMap:
+          name: rabbitmq-env-config
+      dnsPolicy: ClusterFirst
+      restartPolicy: Always
+---
+apiVersion: v1
+kind: Service
+metadata:
+  labels:
+    app: rabbitmq
+    release: rabbitmq
+  name: rabbitmq
+spec:
+  externalTrafficPolicy: Cluster
+  ports:
+  - name: epmd
+    nodePort: 31799
+    port: 4369
+    protocol: TCP
+    targetPort: epmd
+  - name: amqp
+    nodePort: 5672
+    port: 5672
+    protocol: TCP
+    targetPort: amqp
+  - name: dist
+    nodePort: 32687
+    port: 25672
+    protocol: TCP
+    targetPort: dist
+  - name: stats
+    nodePort: 15672
+    port: 15672
+    protocol: TCP
+    targetPort: stats
+  selector:
+    app: rabbitmq
+  sessionAffinity: None
+  type: NodePort
@@ -0,0 +1,56 @@
+apiVersion: external-secrets.io/v1beta1
+kind: ClusterSecretStore
+metadata:
+  name: external-secrets
+spec:
+  provider:
+    fake:
+      data:
+        - key: "applications/shiny/accounting-service"
+          valueMap:
+            SENTRY_DSN: ""
+            SENTRY_DISABLED: "true"
+        - key: "applications/shiny/authz-service"
+          valueMap:
+            SENTRY_DSN: ""
+            SENTRY_DISABLED: "true"
+        - key: "applications/shiny/company-service"
+          valueMap:
+            SENTRY_DSN: ""
+            SENTRY_DISABLED: "true"
+        - key: "applications/shiny/consumer-service"
+          valueMap:
+            SENTRY_DSN: ""
+            SENTRY_DISABLED: "true"
+        - key: "applications/shiny/employee-service"
+          valueMap:
+            SENTRY_DSN: ""
+            SENTRY_DISABLED: "true"
+        - key: "applications/shiny/invoice-service"
+          valueMap:
+            SENTRY_DSN: ""
+            SENTRY_DISABLED: "true"
+        - key: "applications/shiny/notification-service"
+          valueMap:
+            SENTRY_DSN: ""
+            SENTRY_DISABLED: "true"
+        - key: "applications/shiny/salary-service"
+          valueMap:
+            SENTRY_DSN: ""
+            SENTRY_DISABLED: "true"
+        - key: "applications/shiny/time-service"
+          valueMap:
+            SENTRY_DSN: ""
+            SENTRY_DISABLED: "true"
+        - key: "applications/shiny/gateway"
+          valueMap:
+            ISSUER: "auth0"
+            STRICT_SSL: "false"
+        - key: "rds/postgres/prod-psql"
+          valueMap:
+            POSTGRES_URL: "postgres://postgres:postgres@postgres:5432/postgres?sslmode=disable"
+            DB_HOST: "postgres"
+            DB_NAME: "postgres"
+            DB_PASSWORD: "postgres"
+            DB_PORT: "5432"
+            DB_USERNAME: "postgres"