Add renovate.json

helmule/helmule.yaml

@@ -53,118 +53,101 @@ repositories:
   - name: kubernetes-dashboard
     helm:
       url: https://kubernetes.github.io/dashboard/
-  - name: vmware-tanzu
-    helm:
-      url: https://vmware-tanzu.github.io/helm-charts/
-
 
 mirrors:
-  - name: gitea
+  - name: custom-commands
     custom_command:
       package:
         - helm package -d package .
       upload:
         - helm push ./package/{{ name }}-{{ version }}.tgz oci://registry.badhouseplants.net/softplayer/helm
         - rm -rf ./package
-  - name: ghcr
-    custom_command:
-      package:
-        - helm package -d package .
-      upload:
-        - helm push ./package/{{ name }}-{{ version }}.tgz oci://ghcr.io/allanger/softplayer/helm
-        - rm -rf ./package
 
 charts:
   - name: coredns
     repository: coredns
     mirrors:
-      - gitea
-      - ghcr
+      - custom_command
 
   - name: cilium
     repository: cilium
     mirrors:
-      - gitea
+      - custom_command
 
   - name: metrics-server
     repository: metrics-server
     mirrors:
-      - gitea
+      - custom_command
 
   - name: traefik
     repository: traefik
     mirrors:
-      - gitea
+      - custom_command
 
   - name: cert-manager
     repository: jetstack
     mirrors:
-      - gitea
-
-  - name: velero
-    repository: vmware-tanzu
-    mirrors:
-      - gitea
+      - custom_command
 
   - name: metallb
     repository: metallb
     mirrors:
-      - gitea
+      - custom_command
 
   - name: longhorn
     repository: longhorn
     mirrors:
-      - gitea
+      - custom_command
 
   - name: flannel
     repository: flannel
     mirrors:
-      - gitea
+      - custom_command
 
   - name: local-path-provisioner
     repository: rancher-local-path
     mirrors:
-      - gitea
+      - custom_command
 
   - name: base
     repository: istio
     mirrors:
-      - gitea
+      - custom_command
 
   - name: gateway
     repository: istio
     mirrors:
-      - gitea
+      - custom_command
 
   - name: istiod
     repository: istio
     mirrors:
-      - gitea
+      - custom_command
 
   - name: tekton-pipeline
     repository: cdf
     mirrors:
-      - gitea
+      - custom_command
 
   - name: flux2
     repository: fluxcd-community
     mirrors:
-      - gitea
+      - custom_command
 
   - name: helmrelease
     repository: softplayer
     mirrors:
-      - gitea
+      - custom_command
 
   - name: shadowsocks-libev
     repository: allanger-charts
     mirrors:
-      - gitea
+      - custom_command
 
   - name: keel
     repository: keel
     mirrors:
-      - gitea
+      - custom_command
 
   - name: kubernetes-dashboard
     repository: kubernetes-dashboard
@@ -178,29 +161,5 @@ charts:
           commands:
             - mv ./config/config.yaml .
             - rm -rf config
-      - name: enable ingress
-        yq:
-          file: values.yaml
-          op: Replace
-          key: .app.ingress.enabled
-          value: "true"
-      - name: change ingress class name
-        yq:
-          file: values.yaml
-          op: Replace
-          key: .app.ingress.ingressClassName
-          value: traefik
-      - name: change cert manager issuer name
-        yq:
-          file: values.yaml
-          op: Replace
-          key: .app.ingress.issuer.name
-          value: network-base
-      - name: change cert manager issuer kind
-        yq:
-          file: values.yaml
-          op: Replace
-          key: .app.ingress.issuer.scope
-          value: cluster
     mirrors:
-      - gitea
+      - custom_command

renovate.json

@@ -0,0 +1,3 @@
+{
+  "$schema": "https://docs.renovatebot.com/renovate-schema.json"
+}

service/helmfile.yaml

@@ -13,8 +13,6 @@ releases:
   
   - name: coredns
     chart: zot/coredns
-    labels:
-      element: system
     version: 1.29.0
     namespace: kube-system
     values:
@@ -22,8 +20,6 @@ releases:
   
   - name: cilium
     chart: zot/cilium
-    labels:
-      element: system
     installed: true
     version: 1.15.4
     namespace: kube-system
@@ -34,8 +30,6 @@ releases:
   
   - name: metrics-server
     chart: zot/metrics-server
-    labels:
-      element: system
     version: 3.12.1
     namespace: kube-system
     needs:
@@ -98,8 +92,6 @@ releases:
   
   - name: local-path-provisioner
     chart: zot/local-path-provisioner
-    labels:
-      element: system
     namespace: kube-system
     version: 0.0.25-dev
     values:

service/manifests/pipeline-run-cleanup.yaml

@@ -0,0 +1,23 @@
+apiVersion: tekton.dev/v1beta1
+kind: PipelineRun
+metadata:
+  generateName: hetzner-cleanup
+  namespace: default
+spec:
+  params:
+    - name: namespace
+      value: default
+    - name: environment
+      value: default
+    - name: customer
+      value: allanger
+  pipelineRef:
+    resolver: cluster
+    params:
+      - name: kind
+        value: pipeline
+      - name: name
+        value: hetzner-cleanup
+      - name: namespace
+        value: tekton-pipelines
+  serviceAccountName: secret-manager

service/manifests/pipeline-run.yaml

@@ -0,0 +1,30 @@
+apiVersion: tekton.dev/v1beta1
+kind: PipelineRun
+metadata:
+  generateName: hetzner-k3s
+  namespace: tekton-runtime
+spec:
+  params:
+    - name: namespace
+      value: default
+    - name: environment
+      value: default
+    - name: customer
+      value: allanger
+  pipelineRef:
+    resolver: cluster
+    params:
+      - name: kind
+        value: pipeline
+      - name: name
+        value: hetzner-k3s
+      - name: namespace
+        value: tekton-pipelines
+  workspaces:
+    - name: ssh-keys
+      emptyDir: {}
+    - name: inventory
+      emptyDir: {}
+    - name: kubeconfig-output
+      emptyDir: {}
+  serviceAccountName: secret-manager

service/values/values.istiod.yaml

@@ -3,7 +3,7 @@ pilot:
   resources:
     requests:
       cpu: 50m
-      memory: 248Mi
+      memory: 2048Mi
 global:
   proxy:
     resources:

workload/helmfile.yaml

@@ -39,7 +39,7 @@ releases:
 
   - name: flux2
     chart: zot/flux2
-    namespace: kube-system
+    namespace: flux-system
     version: 2.12.4
     createNamespace: false
     needs:
@@ -52,7 +52,7 @@ releases:
   - name: cert-manager
     chart: zot/cert-manager
     version: v1.14.4
-    namespace: kube-system
+    namespace: cert-manager
     needs:
       - kube-system/namespaces
       - kube-system/coredns
@@ -62,7 +62,7 @@ releases:
   - name: metallb
     chart: zot/metallb
     version: 0.14.5
-    namespace: kube-system
+    namespace: metallb-system
     createNamespace: false
     needs:
       - kube-system/namespaces
@@ -76,20 +76,20 @@ releases:
       - kube-system/namespaces
       - kube-system/coredns
       - kube-system/cilium
-    namespace: kube-system
+    namespace: traefik-system
     values:
       - ./values/traefik.yaml
 
   - name: ippool
-    namespace: kube-system
+    namespace: metallb-system
     createNamespace: false
     chart: ../charts/ippool
     values:
       {{ $ip4 := trim (exec "bash" (list "-c" "cat /tmp/outputs/provider_outputs.yaml | yq '.user_entrypoint'")) }}
       - ipPool: "{{- printf "%s-%s" $ip4 $ip4 -}}"
     needs:
-      - kube-system/metallb
-      - kube-system/cert-manager
+      - metallb-system/metallb
+      - cert-manager/cert-manager
 
   - name: local-path-provisioner
     chart: zot/local-path-provisioner
@@ -98,14 +98,23 @@ releases:
       - kube-system/namespaces
       - kube-system/coredns
       - kube-system/cilium
-    namespace: kube-system
-    values:
-      - ./values/local-path.yaml
+    namespace: traefik-system
   
   - name: network-base
     chart: ../charts/network-base-workload/
-    namespace: kube-system
     needs: 
       - kube-system/namespaces
-      - kube-system/cert-manager
+      - cert-manager/cert-manager
 
+
+  - name: kubernetes-dashboard 
+    chart: zot/kubernetes-dashboard 
+    installed: false
+    version: 7.3.2
+    namespace: applications
+    values:
+      - ./values/kubernetes-dashboard.yaml
+    needs: 
+      - kube-system/namespaces
+      - kube-system/coredns
+      - kube-system/cilium

workload/values/flux.yaml

@@ -6,5 +6,3 @@ imageAutomationController:
   create: false
 imageReflectionController:
   create: false
-notificationController:
-  create: false

workload/values/kubernetes-dashboard.yaml

@@ -1,9 +1,16 @@
 app:
   ingress:
     enabled: true
+    hosts:
+      - dashboard.fe85db5c-fa78-4951-9641-7382be9c5884.badhouseplants.net
     ingressClassName: traefik
+    pathType: ImplementationSpecific
+    path: /
     issuer:
       name: network-base
       scope: cluster
+    tls:
+      secretName: ""
+    labels: {}
     annotations:
       traefik.ingress.kubernetes.io/router.tls: "true"

workload/values/namespaces.yaml

@@ -1,2 +1,7 @@
 namespaces:
+  - name: metallb-system
+  - name: flux-system
+  - name: traefik-system
+  - name: cilium-system
+  - name: helm-installations
   - name: applications

workload/values/traefik.yaml

@@ -1,16 +1,2 @@
 globalArguments:
-  - "--serversTransport.insecureSkipVerify=true"
-
-ports:
-  tf2:
-    port: 27015
-    expose:
-      default: true
-    exposedPort: 27015
-    protocol: UDP
-  rcon:
-    port: 27015
-    expose:
-      default: true
-    exposedPort: 27015
-    protocol: TCP
+  - "--serversTransport.insecureSkipVerify=true"