fix pre-commit and cleanup

This commit is contained in:
Kjeld Schouten
2024-10-19 15:18:05 +02:00
parent 2acb59c9dc
commit 4ab41d42f2
203 changed files with 8456 additions and 8484 deletions
@@ -3,7 +3,3 @@ clusterconfig
patches/sopssecret.yaml
cluster/main/kubernetes/**/bootstrap-values.yaml.ct
*kubeconfig
@@ -35,4 +35,4 @@ spec:
patchStrategicMerge:
metadata:
annotations:
extensions.talos.dev/schematic: "{{ schematic }}"
extensions.talos.dev/schematic: "{{ schematic }}"
@@ -9,4 +9,4 @@ spec:
prune: true
sourceRef:
kind: GitRepository
name: cluster
name: cluster
@@ -37,4 +37,4 @@ spec:
autoAssign: false
avoidBuggyIPs: true
addresses:
- ${METALLB_RANGE}
- ${METALLB_RANGE}
@@ -48,4 +48,4 @@ spec:
args:
- --nodes=$(NODE_IP)
- upgrade-k8s
- --to=$(SYSTEM_UPGRADE_PLAN_LATEST_VERSION)
- --to=$(SYSTEM_UPGRADE_PLAN_LATEST_VERSION)
@@ -2,7 +2,7 @@
# yaml-language-server: $schema=https://json.schemastore.org/kustomization
apiVersion: kustomize.config.k8s.io/v1beta1
kind: Kustomization
resources:
resources:
# - schematics.yaml
- kubernetes.yaml
- talos.yaml
@@ -49,4 +49,4 @@ spec:
- --image=factory.talos.dev/installer/$(SCHEMATIC):$(SYSTEM_UPGRADE_PLAN_LATEST_VERSION)
- --preserve=true
- --wait=false
- --force
- --force
@@ -59,4 +59,4 @@ patches:
patch: |
- op: replace
path: /metadata/name
value: flux-view-flux-system
value: flux-view-flux-system
@@ -4,4 +4,4 @@ metadata:
name: cluster-config
namespace: flux-system
data:
REPLACEWITHENV
REPLACEWITHENV
@@ -84,4 +84,4 @@ spec:
value: --oom-watch-interval=500ms
target:
kind: Deployment
name: helm-controller
name: helm-controller
@@ -5,4 +5,4 @@ metadata:
name: flux-system
labels:
pod-security.kubernetes.io/enforce: privileged
topolvm.io/webhook: ignore
topolvm.io/webhook: ignore
@@ -7,4 +7,4 @@ data:
# renovate: datasource=docker depName=ghcr.io/siderolabs/installer
TALOS_VERSION: v1.8.1
# renovate: datasource=docker depName=ghcr.io/siderolabs/kubelet
KUBERNETES_VERSION: v1.31.1
KUBERNETES_VERSION: v1.31.1
@@ -1,3 +1,3 @@
## DO NOT ALTER THIS FILE, CHANGE DO NOT PERSIST. Alter TalEnv.yaml instead.
hubble:
enabled: false
enabled: false
@@ -1,3 +1,3 @@
metrics:
main:
enabled: false
enabled: false
@@ -31,4 +31,4 @@ spec:
core:
sources: ["pci", "system", "usb"]
prometheus:
enable: true
enable: true
@@ -192,4 +192,4 @@ spec:
- '[ServiceMonitor,{{ if .Values.admissionController.serviceMonitor.namespace }}{{ .Values.admissionController.serviceMonitor.namespace }}{{ else }}{{ template "kyverno.namespace" . }}{{ end }},{{ template "kyverno.cleanup-controller.name" . }}]'
- '[ServiceMonitor,{{ if .Values.admissionController.serviceMonitor.namespace }}{{ .Values.admissionController.serviceMonitor.namespace }}{{ else }}{{ template "kyverno.namespace" . }}{{ end }},{{ template "kyverno.reports-controller.name" . }}]'
- '[Secret,{{ include "kyverno.namespace" . }},{{ template "kyverno.admission-controller.serviceName" . }}.{{ template "kyverno.namespace" . }}.svc.*]'
- '[Secret,{{ include "kyverno.namespace" . }},{{ template "kyverno.cleanup-controller.name" . }}.{{ template "kyverno.namespace" . }}.svc.*]'
- '[Secret,{{ include "kyverno.namespace" . }},{{ template "kyverno.cleanup-controller.name" . }}.{{ template "kyverno.namespace" . }}.svc.*]'
@@ -24,7 +24,7 @@ spec:
crds: CreateReplace
remediation:
retries: 3
values:
values:
defaultSettings:
# Increase to 3 for a multi-node cluster
defaultReplicaCount: 1
@@ -35,4 +35,4 @@ spec:
# Set to false to pick another CSI as default
defaultClass: true
# Increase to 3 for a multi-node cluster
defaultClassReplicaCount: 1
defaultClassReplicaCount: 1
@@ -4,4 +4,4 @@ metadata:
name: longhorn-system
labels:
pod-security.kubernetes.io/enforce: privileged
topolvm.io/webhook: ignore
topolvm.io/webhook: ignore
@@ -8,4 +8,4 @@ metadata:
driver: driver.longhorn.io
deletionPolicy: Delete
parameters:
type: snap
type: snap
@@ -23,4 +23,4 @@ spec:
retries: 3
values:
speaker:
ignoreExcludeLB: true
ignoreExcludeLB: true
@@ -42,4 +42,4 @@ spec:
replicated:
# The Mayastor backend contains a duplicate of snapshot controller which will cause conflicts
mayastor:
enabled: false
enabled: false
@@ -99,4 +99,4 @@ spec:
hostPath: /etc/ca-certificates
hostPathType: DirectoryOrCreate
globalMounts:
- readOnly: true
- readOnly: true
@@ -24,7 +24,7 @@ spec:
crds: CreateReplace
remediation:
retries: 3
values:
values:
lvmd:
managed: false
env:
@@ -50,6 +50,6 @@ spec:
"topolvm.io/device-class": "thin"
node:
lvmdEmbedded: true
controller:
replicaCount: 1
replicaCount: 1
@@ -4,4 +4,4 @@ metadata:
name: topolvm-system
labels:
pod-security.kubernetes.io/enforce: privileged
topolvm.io/webhook: ignore
topolvm.io/webhook: ignore
@@ -6,4 +6,4 @@ metadata:
# annotations:
# snapshot.storage.kubernetes.io/is-default-class: "false"
driver: topolvm.io
deletionPolicy: Delete
deletionPolicy: Delete
@@ -4,4 +4,4 @@ metadata:
name: volsync
labels:
pod-security.kubernetes.io/enforce: privileged
topolvm.io/webhook: ignore
topolvm.io/webhook: ignore
@@ -48,4 +48,4 @@
allowedRoles:
- os:admin
allowedKubernetesNamespaces:
- system-upgrade
- system-upgrade
@@ -3,4 +3,4 @@
value:
"disabled": false
"servers":
- "time.cloudflare.com"
- "time.cloudflare.com"
@@ -37,4 +37,3 @@ REPLACEWITHTALENV
namespace: flux-system
stringData:
REPLACEWITHDEPLOYKEY
@@ -3,4 +3,4 @@
value:
"disabled": false
"servers":
- "time.cloudflare.com"
- "time.cloudflare.com"
@@ -7,4 +7,4 @@ clustertool.exe
clustertool
sopssecret.yaml
sopssecret*
*sopssecret*
*sopssecret*
@@ -12,4 +12,4 @@ creation_rules:
age: REPLACEME
- path_regex: talsecret.yaml
age: REPLACEME
## DO NOT REMOVE: Personal setting go under this line
## DO NOT REMOVE: Personal setting go under this line
+1 -1
View File
@@ -1 +1 @@
This is a kubernetes cluster Powered by TrueCharts ClusterTool
This is a kubernetes cluster Powered by TrueCharts ClusterTool
@@ -2,4 +2,4 @@
# yaml-language-server: $schema=https://json.schemastore.org/kustomization
apiVersion: kustomize.config.k8s.io/v1beta1
kind: Kustomization
resources: []
resources: []
@@ -38,4 +38,4 @@ spec:
target:
group: kustomize.toolkit.fluxcd.io
kind: Kustomization
labelSelector: substitution.flux.home.arpa/disabled notin (true)
labelSelector: substitution.flux.home.arpa/disabled notin (true)
@@ -4,4 +4,4 @@ apiVersion: kustomize.config.k8s.io/v1beta1
kind: Kustomization
resources:
- this-repo.yaml
- truecharts.yaml
- truecharts.yaml
@@ -17,4 +17,4 @@ spec:
/*
# include flux directories
!/clusters
!/repositories
!/repositories
@@ -16,4 +16,4 @@ spec:
# exclude all
/*
# include flux directories
!/repositories
!/repositories
@@ -6,4 +6,4 @@ resources:
- ./git
- ./helm
- ./oci
- ./entries
- ./entries
@@ -9,4 +9,4 @@ spec:
interval: 10m
url: oci://ghcr.io/fluxcd/flux-manifests
ref:
tag: v2.4.0
tag: v2.4.0
@@ -3,4 +3,4 @@
apiVersion: kustomize.config.k8s.io/v1beta1
kind: Kustomization
resources:
- flux-manifests.yaml
- flux-manifests.yaml