diff --git a/mariadb/values.yaml b/mariadb/values.yaml new file mode 100644 index 0000000..e67f423 --- /dev/null +++ b/mariadb/values.yaml @@ -0,0 +1,2 @@ +persistent: + size: 5Gi diff --git a/metallb/ipaddresspool.yaml b/metallb/ipaddresspool.yaml new file mode 100644 index 0000000..a6609b4 --- /dev/null +++ b/metallb/ipaddresspool.yaml @@ -0,0 +1,10 @@ +apiVersion: metallb.io/v1beta1 +kind: IPAddressPool +metadata: + name: fog-pool + namespace: metallb-system +spec: + addresses: + - 192.168.1.38/32 + - 192.168.1.39/32 + - 192.168.1.43/32 diff --git a/metallb/kubeproxy.yaml b/metallb/kubeproxy.yaml new file mode 100644 index 0000000..e87d364 --- /dev/null +++ b/metallb/kubeproxy.yaml @@ -0,0 +1,5 @@ +apiVersion: kubeproxy.config.k8s.io/v1alpha1 +kind: KubeProxyConfiguration +mode: "ipvs" +ipvs: + strictARP: true diff --git a/metallb/l2advertisement.yaml b/metallb/l2advertisement.yaml new file mode 100644 index 0000000..57f39a2 --- /dev/null +++ b/metallb/l2advertisement.yaml @@ -0,0 +1,5 @@ +apiVersion: metallb.io/v1beta1 +kind: L2Advertisement +metadata: + name: fog + namespace: metallb-system diff --git a/postgres/operator-values.yaml b/postgres/operator-values.yaml new file mode 100644 index 0000000..a4783b6 --- /dev/null +++ b/postgres/operator-values.yaml @@ -0,0 +1,2 @@ +pgoControllerLeaseName: '' +replicas: 1 diff --git a/postgres/values.yaml b/postgres/values.yaml new file mode 100644 index 0000000..33a4f1f --- /dev/null +++ b/postgres/values.yaml @@ -0,0 +1,22 @@ +instanceSize: 5Gi +backupsSize: 5Gi + +patroni: + dynamicConfiguration: + postgresql: + pg_hba: + - "host all all all scram-sha-256" + +users: + - name: grant + databases: + - postgres + - synapse + options: "SUPERUSER LOGIN" + - name: synapse + databases: + - synapse + options: "LOGIN" + + + diff --git a/rook-ceph-cluster/route.yaml b/rook-ceph-cluster/route.yaml new file mode 100644 index 0000000..a0364d4 --- /dev/null +++ b/rook-ceph-cluster/route.yaml @@ -0,0 +1,28 @@ +apiVersion: traefik.io/v1alpha1 +kind: IngressRoute +metadata: + name: rook-ceph-mgr-dashboard +spec: + entryPoints: + - websecure + routes: + - match: Host(`fog.goatchat.ca`) && PathPrefix(`/fog/ceph`) + kind: Rule + middlewares: + - name: ceph-stripprefix + services: + - kind: Service + name: rook-ceph-mgr-dashboard + port: 7000 + tls: + certResolver: letsencrypt + +--- +apiVersion: traefik.io/v1alpha1 +kind: Middleware +metadata: + name: ceph-stripprefix +spec: + stripPrefix: + prefixes: + - /fog/ceph diff --git a/rook-ceph-cluster/values.yaml b/rook-ceph-cluster/values.yaml new file mode 100644 index 0000000..437bf00 --- /dev/null +++ b/rook-ceph-cluster/values.yaml @@ -0,0 +1,71 @@ +cephClusterSpec: + dashboard: + ssl: false + + storage: + useAllNodes: true + useAllDevices: false + deviceFilter: "^sda" + resources: + mgr: + requests: + cpu: 250m + memory: 256Mi + limits: + cpu: "1" + mon: + requests: + cpu: 250m + memory: 256Mi + limits: + cpu: "1" + osd: + requests: + cpu: 250m + memory: 256Mi + limits: + cpu: "1" +cephFileSystems: + - name: ceph-filesystem + # see https://github.com/rook/rook/blob/master/Documentation/ceph-filesystem-crd.md#filesystem-settings for available configuration + spec: + metadataPool: + replicated: + size: 2 + dataPools: + - failureDomain: host + replicated: + size: 2 + # Optional and highly recommended, 'data0' by default, see https://github.com/rook/rook/blob/master/Documentation/ceph-filesystem-crd.md#pools + name: data0 + metadataServer: + activeCount: 1 + activeStandby: true + resources: + requests: + cpu: 250m + memory: 256Mi + limit: + cpu: "1" + storageClass: + enabled: true + isDefault: false + name: ceph-filesystem + # (Optional) specify a data pool to use, must be the name of one of the data pools above, 'data0' by default + pool: data0 + reclaimPolicy: Delete + allowVolumeExpansion: true + mountOptions: [] + # see https://github.com/rook/rook/blob/master/Documentation/ceph-filesystem.md#provision-storage for available configuration + parameters: + # The secrets contain Ceph admin credentials. + csi.storage.k8s.io/provisioner-secret-name: rook-csi-cephfs-provisioner + csi.storage.k8s.io/provisioner-secret-namespace: rook-ceph + csi.storage.k8s.io/controller-expand-secret-name: rook-csi-cephfs-provisioner + csi.storage.k8s.io/controller-expand-secret-namespace: rook-ceph + csi.storage.k8s.io/node-stage-secret-name: rook-csi-cephfs-node + csi.storage.k8s.io/node-stage-secret-namespace: rook-ceph + # Specify the filesystem type of the volume. If not specified, csi-provisioner + # will set default as `ext4`. Note that `xfs` is not recommended due to potential deadlock + # in hyperconverged settings where the volume is mounted on the same node as the osds. + csi.storage.k8s.io/fstype: ext4