grant/fog
1
0
Fork 0
Code Issues Pull Requests Packages Projects Releases Wiki Activity

Switch readme to focus more on helmfile

Browse Source
This commit is contained in:
Grant 2025-02-10 18:33:16 -07:00
parent c104a70d6b
commit 4ded88f94c
1 changed files with 22 additions and 97 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

119
README.md
View File

@ -48,104 +48,42 @@ talosctl config node 192.168.1.38 192.168.1.43 192.168.1.39
```sh ```sh
talosctl kubeconfig --nodes 192.168.1.43 talosctl kubeconfig --nodes 192.168.1.43
``` ```
### metrics
## Applications
#### metrics
```sh ```sh
kubectl apply -f https://raw.githubusercontent.com/alex1989hu/kubelet-serving-cert-approver/main/deploy/standalone-install.yaml kubectl apply -f https://raw.githubusercontent.com/alex1989hu/kubelet-serving-cert-approver/main/deploy/standalone-install.yaml
kubectl apply -f https://github.com/kubernetes-sigs/metrics-server/releases/latest/download/components.yaml kubectl apply -f https://github.com/kubernetes-sigs/metrics-server/releases/latest/download/components.yaml
``` ```
### Ceph
### Apply and upgrade
```sh
bws run 'helmfile apply'
```
### Extras
#### Ceph
```sh ```sh
helm repo add rook-release https://charts.rook.io/release
helm install --create-namespace --namespace rook-ceph rook-ceph rook-release/rook-ceph
kubectl label namespace rook-ceph pod-security.kubernetes.io/enforce=privileged kubectl label namespace rook-ceph pod-security.kubernetes.io/enforce=privileged
helm install --create-namespace --namespace rook-ceph rook-ceph-cluster --set operatorNamespace=rook-ceph rook-release/rook-ceph-cluster -f rook-ceph-cluster/values.yaml
``` ```
### Metallb #### Traefik
```sh ```sh
helm repo add metallb https://metallb.github.io/metallb
helm upgrade --create-namespace \
--namespace metallb-system \
metallb ./metallb \
--install
```
### Traefik
```sh
helm repo add traefik https://traefik.github.io/charts
kubectl create secret generic digitalocean-api-key --from-literal=token=$DIGITAL_OCEAN_API_TOKEN kubectl create secret generic digitalocean-api-key --from-literal=token=$DIGITAL_OCEAN_API_TOKEN
helm install --create-namespace --namespace traefik traefik traefik/traefik\
--values traefik/values.yaml \
--set certificatesResolvers.letsencrypt.acme.email=$ACME_EMAIL \
--set 'extraObjects[0].stringData.password'=$TRAEFIK_ADMIN_PASSWORD
``` ```
### Postgres #### Postgres
copy secret over to goatchat namespace
```sh ```sh
helm install pgo --create-namespace --namespace postgres-operator ../postgres-operator/helm/install --values postgres/operator-values.yaml
helm install postgres --create-namespace --namespace datastore ../postgres-operator/helm/postgres --values postgres/values.yaml
# copy secret over to goatchat namespace
kubectl get secrets -n datastore postgres-pguser-synapse -o json | jq 'del(.metadata.resourceVersion,.metadata.uid,.metadata.ownerReferences) | .metadata.creationTimestamp=null,.metadata.namespace="goatchat"' | kubectl apply -f - kubectl get secrets -n datastore postgres-pguser-synapse -o json | jq 'del(.metadata.resourceVersion,.metadata.uid,.metadata.ownerReferences) | .metadata.creationTimestamp=null,.metadata.namespace="goatchat"' | kubectl apply -f -
``` ```
### Mariadb #### synapse
```sh
helm repo add bitnami https://charts.bitnami.com/bitnami
helm install --create-namespace --namespace datastore mariadb bitnami/mariadb --values mariadb/values.yaml
``` ```
## Goatchat (matrix)
### Synapse
#### Setup db
delete synapse db and recreate with correct locale
```sh
PRIMARY_POD=$(kubectl -n datastore get pods --selector='postgres-operator.crunchydata.com/cluster=postgres,postgres-operator.crunchydata.com/role=master' -o jsonpath='{.items[*].metadata.labels.statefulset\.kubernetes\.io/pod-name}')
PGPASSWORD=$(kubectl -n datastore get secrets "postgres-pguser-grant" -o go-template='{{.data.password | base64decode}}')
kubectl -n datastore exec -it "$PRIMARY_POD" -- psql -c 'DROP DATABASE synapse;'
kubectl -n datastore exec -it "$PRIMARY_POD" -- createdb --encoding=UTF8 --locale=C --template=template0 --owner=synapse synapse
```
backup/restore db
```sh
kubectl -n datastore exec -it $PRIMARY_POD -- pg_dump -Upostgres -Fc --exclude-table-data e2e_one_time_keys_json synapse > synapse.dump
kubectl port-forward $PRIMARY_POD 5432:5432
PGSSLMODE=disable pg_restore -h localhost -U synapse -vv -d synapse < synapse.dump
```
#### Install Synapse
```sh
helm repo add ananace-charts https://ananace.gitlab.io/charts
kubectl create ns goatchat
kubectl create secret generic goatchatca-signingkey --from-literal=signing.key=$GOATCHAT_SYNAPSE_SIGNING_KEY kubectl create secret generic goatchatca-signingkey --from-literal=signing.key=$GOATCHAT_SYNAPSE_SIGNING_KEY
helm upgrade --create-namespace \
--namespace goatchat \
goatchat ananace-charts/matrix-synapse \
--set config.macaroonSecretKey=$GOATCHAT_SYNAPSE_MACAROON_SECRET_KEY \
--set config.registrationSharedSecret=$GOATCHAT_REGISTRATION_SHARED_SECRET \
--set extraConfig.email.smtp_pass=$GOATCHAT_SMTP_PASSWORD \
--values synapse/values.yaml \
--install
``` ```
### Install Matrix Registration #### Ghost Blogs
TODO: make this a helm app or replace with something better
```sh
helm upgrade --create-namespace \
--namespace goatchat \
gate ./matrix-registration \
--set registrationSharedSecret=$GOATCHAT_REGISTRATION_SHARED_SECRET \
--set adminApiSharedSecret=$GOATCHAT_REGISTRATION_ADMIN_API_SHARE_SECRET \
--values matrix-registration/values-overrides.yaml \
--install
```
## Ghost Blogs
I got tired of fighting the docker container so I manually overrode the `config.production.json` I got tired of fighting the docker container so I manually overrode the `config.production.json`
which looks like which looks like
``` ```
@ -189,40 +127,27 @@ which looks like
} }
} }
``` ```
### kngot kngot
#### Create db and user Create db and user
```sh ```sh
CREATE DATABASE kgnot_ghost; CREATE DATABASE kgnot_ghost;
grant all privileges on kgnot_ghost.* to kgnot_ghost@'10.%.%.%' identified by '$KGNOT_MYSQL_PASSWORD'; grant all privileges on kgnot_ghost.* to kgnot_ghost@'10.%.%.%' identified by '$KGNOT_MYSQL_PASSWORD';
``` ```
#### Install app Install app
```sh ```sh
kubectl create secret generic ghost-kgnot-user-secret --from-literal=ghost-password=$KGNOT_GHOST_USER_PASSWORD kubectl create secret generic ghost-kgnot-user-secret --from-literal=ghost-password=$KGNOT_GHOST_USER_PASSWORD
kubectl create secret generic ghost-kgnot-db-secret --from-literal=mysql-password=$KGNOT_MYSQL_PASSWORD kubectl create secret generic ghost-kgnot-db-secret --from-literal=mysql-password=$KGNOT_MYSQL_PASSWORD
kubectl create secret generic kgnot-smtp-password --from-literal=smtp-password=$KNGOT_SMTP_PASSWORD kubectl create secret generic kgnot-smtp-password --from-literal=smtp-password=$KNGOT_SMTP_PASSWORD
helm upgrade --create-namespace \
--namespace ghost \
kgnot-ghost bitnami/ghost \
--set ghostUsername=$KGNOT_GHOST_USER_NAME \
--values kgnot/values.yaml \
--install
``` ```
53ll
### 53ll Create db and user
#### Create db and user
```sh ```sh
CREATE DATABASE 53ll_ghost; CREATE DATABASE 53ll_ghost;
grant all privileges on 53ll_ghost.* to 53ll_ghost@'10.%.%.%' identified by '$GHOST_53LL_MYSQL_PASSWORD'; grant all privileges on 53ll_ghost.* to 53ll_ghost@'10.%.%.%' identified by '$GHOST_53LL_MYSQL_PASSWORD';
``` ```
#### Install app Install app
```sh ```sh
kubectl create secret generic ghost-53ll-user-secret --from-literal=ghost-password=$GHOST_53LL_USER_PASSWORD kubectl create secret generic ghost-53ll-user-secret --from-literal=ghost-password=$GHOST_53LL_USER_PASSWORD
kubectl create secret generic ghost-53ll-db-secret --from-literal=mysql-password=$GHOST_53LL_MYSQL_PASSWORD kubectl create secret generic ghost-53ll-db-secret --from-literal=mysql-password=$GHOST_53LL_MYSQL_PASSWORD
kubectl create secret generic 53ll-smtp-password --from-literal=smtp-password=$GHOST_53LL_SMTP_PASSWORD kubectl create secret generic 53ll-smtp-password --from-literal=smtp-password=$GHOST_53LL_SMTP_PASSWORD
helm upgrade --create-namespace \
--namespace ghost \
ghost-53ll bitnami/ghost \
--set ghostUsername=$GHOST_53LL_USER_NAME \
--values 53ll/values.yaml \
--install
``` ```