Add renovate.json

Use https for argocd
Use latest builder
2024-09-11 14:26:08 +00:00 · 2024-07-24 18:07:42 +02:00 · 2024-07-24 18:03:49 +02:00 · 2024-07-24 17:58:29 +02:00 · 2024-07-11 11:28:23 +00:00 · 2024-07-11 13:18:21 +02:00
10 changed files with 196 additions and 91 deletions
--- a/.woodpecker.yml
+++ b/.woodpecker.yml
@ -0,0 +1,93 @@
+---
+when:
+  event:
+    - push
+
+steps:
+  - image: alpine/helm
+    name: Publish the Helm chart
+    commands:
+      - helm plugin install https://github.com/chartmuseum/helm-push
+      - helm package chart -d chart-package
+      - helm repo add  --username allanger --password $GITEA_TOKEN badhouseplants-net https://git.badhouseplants.net/api/packages/badhouseplants/helm
+      - helm cm-push "./chart-package/$(ls chart-package)" badhouseplants-net
+    secrets:
+      - gitea_token
+
+  - name: Test a build
+    image: git.badhouseplants.net/badhouseplants/hugo-container
+    commands:
+      - hugo -s ./src
+
+  - name: Build and push the docker image
+    image: git.badhouseplants.net/badhouseplants/badhouseplants-builder:latest
+    privileged: true
+    depends_on:
+      - Test a build
+    secrets:
+      - gitea_token
+    environment:
+      BUILDER_COMMIT: 2449b73b13a62ae916c6703778d096e5290157b3
+    commands:
+      - rm -rf $DRONE_WORKSPACE/src/assets/
+      - ./scripts/build-container.pl
+    backend_options:
+      kubernetes:
+        resources:
+          requests:
+            memory: 500Mi
+            cpu: 200m
+          limits:
+            memory: 1000Mi
+            cpu: 1000m
+        securityContext:
+          privileged: true
+
+  - name: Sync pictures from lfs to Minio
+    image: git.badhouseplants.net/badhouseplants/badhouseplants-builder:latest
+    depends_on:
+      - Test a build
+    secrets:
+      - rclone_config_content
+    environment:
+      RCLONE_CONFIG: /tmp/rclone.conf
+    commands:
+      - echo "$RCLONE_CONFIG_CONTENT" > $RCLONE_CONFIG
+      - ./scripts/upload-media.pl
+
+  - name: Deploy the application
+    image: git.badhouseplants.net/badhouseplants/badhouseplants-builder:latest
+    depends_on:
+      - Build and push the docker image
+      - Sync pictures from lfs to Minio
+    secrets:
+      - gitea_token
+      - argocd_auth_token
+      - argo_github_oauth_key
+      - argo_google_oauth_key
+    environment:
+      ARGOCD_SERVER: https://argo.badhouseplants.net:443
+    commands:
+      - ./scripts/deploy-app.pl
+
+  - name: Cleanup everything
+    image: git.badhouseplants.net/badhouseplants/badhouseplants-builder:latest
+    depends_on:
+      - Deploy the application
+    secrets:
+      - gitea_token
+      - argocd_auth_token
+      - rclone_config_content
+    environment:
+      ARGOCD_SERVER: argo.badhouseplants.net:443
+      RCLONE_CONFIG: /tmp/rclone.conf
+    commands:
+      - echo "$RCLONE_CONFIG_CONTENT" > $RCLONE_CONFIG
+      - ./scripts/cleanup.pl
+
+  - name: Spell-Checker
+    failure: ignore
+    image: node
+    commands:
+      - npm i markdown-spellcheck -g
+      - mdspell "src/content/**/*.md" -n -r
--- a/chart/Chart.yaml
+++ b/chart/Chart.yaml
@ -2,10 +2,10 @@ apiVersion: v2
 name: badhouseplants-net
 description: A Helm chart for Kubernetes
 type: application
-version: 0.8.6
+version: 0.9.0
 appVersion: "4.20.0"
 dependencies:
  - name: remark42
-    version: 0.5.5
+    version: 0.7.0
    repository: https://groundhog2k.github.io/helm-charts/
    condition: remark42.enabled
--- a/chart/templates/virtual-service.yaml
+++ b/chart/templates/virtual-service.yaml
@ -1,57 +0,0 @@
-{{- if .Values.istio.enabled -}}
-apiVersion: networking.istio.io/v1beta1
-kind: VirtualService
-metadata:
-  name: {{ include "badhouseplants-net.fullname" . }}
-  labels:
-    {{- include "badhouseplants-net.labels" . | nindent 4 }}
-  {{- with .Values.istio.annotations }}
-  annotations:
-    {{- toYaml . | nindent 4 }}
-  {{- end }}
-spec:
-  gateways:
-  - istio-system/badhouseplants-net
-  hosts: 
-    {{- range .Values.istio.hosts}}
-    - {{ . }}
-    {{- end }}
-  http:
-  - match:
-    - uri:
-        prefix:  {{ .Values.istio.prefix }}
-    route:
-    - destination:
-        host: {{ include "badhouseplants-net.fullname" . }}
-        port:
-          number: {{ .Values.service.port }}
-{{- end }}
---
-{{- if .Values.remark42.istio.enabled -}}
-apiVersion: networking.istio.io/v1beta1
-kind: VirtualService
-metadata:
-  name: {{ include "remark42.fullname" . }}-remark42
-  labels:
-    {{- include "badhouseplants-net.labels" . | nindent 4 }}
-  {{- with .Values.remark42.istio.annotations }}
-  annotations:
-    {{- toYaml . | nindent 4 }}
-  {{- end }}
-spec:
-  gateways:
-  - istio-system/badhouseplants-net
-  hosts: 
-    {{- range .Values.remark42.istio.hosts}}
-    - {{ . }}
-    {{- end }}
-  http:
-  - match:
-    - uri:
-        prefix:  {{ .Values.remark42.istio.prefix }}
-    route:
-    - destination:
-        host: {{ .Release.Name }}-remark42
-        port:
-          number: {{ .Values.remark42.service.port }}
-{{- end }}
--- a/chart/values.yaml
+++ b/chart/values.yaml
@ -39,14 +39,6 @@ hugo:
  env:
    HUGO_PARAMS_GITBRANCH: main

-istio:
-  annotations: {}
-  enabled: true
-  hosts:
-    - badhouseplants.net
-    - www.badhouseplants.net
-  prefix: /
-
 volumes:
  # ----------------------------------------------
  # -- An emptydir volume where hugo should
--- a/kube/application.yaml
+++ b/kube/application.yaml
@ -6,10 +6,10 @@ metadata:
    branch: $ARGO_APP_BRANCH
    commit_sha: $ARGO_APP_IMAGE_TAG
  name: badhouseplants-$ARGO_APP_BRANCH
-  namespace: argo-system
+  namespace: platform
 spec:
  destination:
-    namespace: badhouseplants-$ARGO_APP_NAMESPACE
+    namespace: $ARGO_APP_NAMESPACE
    server: https://kubernetes.default.svc
  project: badhouseplants
  source:
--- a/kube/project.yaml
+++ b/kube/project.yaml
@ -2,7 +2,7 @@ apiVersion: argoproj.io/v1alpha1
 kind: AppProject
 metadata:
  name: badhouseplants
-  namespace: argo-system
+  namespace: platform
  finalizers:
    - resources-finalizer.argocd.argoproj.io
 spec:
@ -11,14 +11,12 @@ spec:
  - '*'

  destinations:
-  - namespace: badhouseplants-*
+  - namespace: development
+    server: https://kubernetes.default.svc
+    name: in-cluster
+  - namespace: production
    server: https://kubernetes.default.svc
    name: in-cluster
-
-  # Deny all cluster-scoped resources from being created, except for Namespace
-  clusterResourceWhitelist:
-  - group: ''
-    kind: Namespace

  # Allow all namespaced-scoped resources to be created, except for ResourceQuota, LimitRange, NetworkPolicy
  namespaceResourceBlacklist:
--- a/kube/values-main.yaml
+++ b/kube/values-main.yaml
@ -5,11 +5,33 @@ values: |
      tag: $ARGO_APP_IMAGE_TAG
    env:
      HUGO_PARAMS_GITCOMMIT: $ARGO_APP_IMAGE_TAG
-  istio:
+  ingress:
+    enabled: true
+    className: ~
    annotations: 
+      kubernetes.io/ingress.class: traefik
+      kubernetes.io/tls-acme: "true"
+      kubernetes.io/ingress.allow-http: "false"
+      kubernetes.io/ingress.global-static-ip-name: ""
+      cert-manager.io/cluster-issuer: badhouseplants-issuer-http01
      link.argocd.argoproj.io/env: https://badhouseplants.net/
      link.argocd.argoproj.io/build: $DRONE_BUILD_LINK
-      link.argocd.argoproj.io/remark42: https://remark42.badhouseplants.net/web
+    pathtype: ImplementationSpecific
+    hosts:
+      - host: badhouseplants.net
+        paths: 
+          - path: /
+            pathType: ImplementationSpecific
+      - host: www.badhouseplants.net
+        paths: 
+          - path: /
+            pathType: ImplementationSpecific
+    tls: 
+      - secretName: badhp-tls
+        hosts:
+          - badhouseplants.net
+          - www.badhouseplants.net
+    
  remark42:
    settings:
      secret: $ARGO_REMARK_SECRET
@ -26,3 +48,25 @@ values: |
          secret: $ARGO_GOOGLE_OAUTH_KEY
    storage:
      requestedSize: 300Mi
+    ingress:
+      enabled: true
+      className: ~
+      annotations:
+        kubernetes.io/ingress.class: traefik
+        kubernetes.io/tls-acme: "true"
+        kubernetes.io/ingress.allow-http: "false"
+        kubernetes.io/ingress.global-static-ip-name: ""
+        cert-manager.io/cluster-issuer: badhouseplants-issuer-http01
+        link.argocd.argoproj.io/remark42: https://remark42.badhouseplants.net/web
+      ## Hosts
+      hosts:
+        - host: remark42.badhouseplants.net
+          paths:
+            - path: /
+              pathType: ImplementationSpecific
+    
+      tls:
+        secretName: chart-example-tls
+        hosts:
+          - remark42.badhouseplants.net
+  
--- a/kube/values-preview.yaml
+++ b/kube/values-preview.yaml
@ -1,12 +1,27 @@
 ---
 values: |
-  istio:
+  ingress:
+    enabled: true
+    className: ~
+    annotations: 
+      kubernetes.io/ingress.class: traefik
+      kubernetes.io/tls-acme: "true"
+      kubernetes.io/ingress.allow-http: "false"
+      kubernetes.io/ingress.global-static-ip-name: ""
+      cert-manager.io/cluster-issuer: badhouseplants-issuer-http01
+      link.argocd.argoproj.io/env: https://$ARGO_APP_HOSTNAME/
+      link.argocd.argoproj.io/build: $DRONE_BUILD_LINK
+    pathtype: ImplementationSpecific
+    hosts:
+      - host: $ARGO_APP_HOSTNAME
+        paths: 
+          - path: /
+            pathType: ImplementationSpecific
+    tls: 
+      - secretName: badhp-$ARGO_APP_BRANCH-tls
        hosts:
          - $ARGO_APP_HOSTNAME
-    annotations:
-      link.argocd.argoproj.io/env: https://$ARGO_APP_HOSTNAME/
-      link.argocd.argoproj.io/remark42: https://remark42-$ARGO_APP_HOSTNAME/web
-      link.argocd.argoproj.io/build: $DRONE_BUILD_LINK
+
  hugo:
    image:
      tag: $ARGO_APP_IMAGE_TAG
@ -17,13 +32,31 @@ values: |
      HUGO_PARAMS_COMMENTS_REMARK42_HOST: https://remark42-$ARGO_APP_HOSTNAME
      HUGO_PARAMS_GITCOMMIT: $ARGO_APP_IMAGE_TAG
  remark42:
-    istio:
-      hosts:
-        - remark42-$ARGO_APP_HOSTNAME
    settings:
      url: https://remark42-$ARGO_APP_HOSTNAME/
      auth:
        anonymous: true
      secretKey: $ARGO_REMARK_SECRET
+    ingress:
+      enabled: true
+      className: ~
+      annotations:
+        kubernetes.io/ingress.class: traefik
+        kubernetes.io/tls-acme: "true"
+        kubernetes.io/ingress.allow-http: "false"
+        kubernetes.io/ingress.global-static-ip-name: ""
+        cert-manager.io/cluster-issuer: badhouseplants-issuer-http01
+        link.argocd.argoproj.io/remark42: https://remark42-$ARGO_APP_HOSTNAME/
+      ## Hosts
+      hosts:
+        - host: remark42.badhouseplants.net
+          paths:
+            - path: /
+              pathType: ImplementationSpecific
+    
+      tls:
+        secretName: remark-$ARGO_APP_BRANCH-tls
+        hosts:
+          - remark42-$ARGO_APP_HOSTNAME
  rclone:
    command: 'rclone copy -P badhouseplants-public:/badhouseplants-net/$ARGO_APP_IMAGE_TAG /static'
--- a/renovate.json
+++ b/renovate.json
@ -0,0 +1,3 @@
+{
+  "$schema": "https://docs.renovatebot.com/renovate-schema.json"
+}
--- a/scripts/deploy-app.pl
+++ b/scripts/deploy-app.pl
@ -18,9 +18,9 @@ chomp($remark_secret);
 $ENV{'ARGO_APP_CHART_VERSION'} = $chart_version;
 $ENV{'ARGO_APP_BRANCH'} = $git_branch;
 if ($git_branch eq $main_branch) {
-	$ENV{'ARGO_APP_NAMESPACE'} = $git_branch;
+	$ENV{'ARGO_APP_NAMESPACE'} = "production";
 } else {
-	$ENV{'ARGO_APP_NAMESPACE'} = "preview"
+	$ENV{'ARGO_APP_NAMESPACE'} = "development"
 }
 $ENV{'ARGO_APP_HOSTNAME'} = "$git_branch-dev.badhouseplants.net";
 $ENV{'ARGO_APP_IMAGE_TAG'} = $git_commit_sha;
@ -72,4 +72,3 @@ foreach my $app (@all_applications) {
 		}
 	}
 }
-
Author	SHA1	Message	Date
Devops Bot	35ca4bbe4a	Add renovate.json	2024-09-11 14:26:08 +00:00
Nikolai Rodionov	7a8e163973	Use https for argocd	2024-07-24 18:07:42 +02:00
Nikolai Rodionov	d8faab209c	Use latest builder	2024-07-24 18:03:49 +02:00
Nikolai Rodionov	3f5c97bf35	Fix deployment	2024-07-24 17:58:29 +02:00
Nikolai Rodionov	79dd9a18d4	Update the app namespace	2024-07-11 11:28:23 +00:00
Nikolai Rodionov	59a0287b5e	Trigger build	2024-07-11 13:18:21 +02:00
Nikolai Rodionov	f9457940be	Trigger build	2024-07-11 12:35:12 +02:00
Nikolai Rodionov	33bce94b2b	Fix woodpecker	2024-07-11 12:32:44 +02:00
Nikolai Rodionov	5414085273	Start using ingress instead of virtual service	2024-05-28 22:30:11 +02:00