mirror of
https://github.com/dredx/prole.git
synced 2026-09-23 10:13:58 +00:00
- Monitoring: Migrated from manual Grafana/Prometheus manifests to kube-prometheus-stack based setup in etc/init_monitoring.sh. Removed old manifest files from deploy/ and k8s/. - Installer Core: Refactored installer with new modules for actions, environment handling, and UI screens. Enhanced Milestone logic to support advanced configuration (ArgoCD, Registry namespaces, Kerberos flags, etc.). - Service & Init Scripts: Updated multiple initialization scripts (init_*.sh) for better integration with OpenBao, Kerberos, and the new monitoring stack. Added new scripts for Nginx Ingress, Ollama parsing, and K3D route fixes. - Infrastructure: Enhanced Samba AD DC Ansible role with realm derivation, provisioning guidance, and group management. Updated K3s role tasks. - Configuration: Refined default settings in conf/ to align with the new deployment architecture. - App & Tools: Updated prole-app Swift code and prole.sh for improved environment variable handling and installation flow.
176 lines
8.6 KiB
Plaintext
176 lines
8.6 KiB
Plaintext
; Prole Master Configuration File
|
|
; Generated by install.py on 2026-02-05 15:29:20
|
|
; This file is used as input for Ansible deployment and k8s cluster creation.
|
|
|
|
[User]
|
|
; User-editable values; derived values below reference these by default.
|
|
PROLE_HOME = /Users/chrisfu/dev/prole
|
|
PROLE_CONF = ${PROLE_HOME}/conf
|
|
PROLE_SERVICE = ${PROLE_HOME}/etc
|
|
PROLE_DATA = /opt/prole/data/chrisfu
|
|
PROLE_LOGS = /opt/prole/logs/chrisfu
|
|
NAMESPACE = ${NAMESPACE}
|
|
SERVICE_NAMESPACE = default
|
|
|
|
[Inputs]
|
|
; Screen-scoped inputs used for unattended replays (-S)
|
|
build.deploy_env = Dev
|
|
build.run_build = false
|
|
dependencies.auto_install_missing = true
|
|
dependencies.brew.install = true
|
|
dependencies.docker.install = true
|
|
dependencies.k3d.install = true
|
|
dependencies.verify_all = false
|
|
disk_selection.disk_type = local
|
|
disk_selection.local_path = ${PROLE_HOME}/prole-tools-app/dist
|
|
disk_selection.removable_mount =
|
|
env_setup.NAMESPACE = ${NAMESPACE}
|
|
env_setup.PROLE_CONF = ${PROLE_CONF}
|
|
env_setup.PROLE_DATA = ${PROLE_DATA}
|
|
env_setup.PROLE_HOME = ${PROLE_HOME}
|
|
env_setup.PROLE_LOGS = ${PROLE_LOGS}
|
|
env_setup.PROLE_SERVICE = ${PROLE_SERVICE}
|
|
init_cluster.at_rest_encryption_enabled = true
|
|
init_cluster.cluster_env = prole-service-cluster
|
|
init_cluster.k3s_server_url = https://pi.prole.org:6443
|
|
init_cluster.k3s_token = ${PROLE_SECRET:v1:fsX0MfG2qqQpKoPi:JqND7OComMcPDaRCpw6iiXL8w9If-70rvmbQA2V6lz9hK2MpPTX796dp-r3-qiIQYMc-sax9OobVoZLXdfBbzMmkR270uzl_CeDNuVBWnPmXcd00DYnBTsfs8hcGvJ6EuswizHsNVcIBxIUftPuyXr2ZQQVcC8VBuRlphw==}
|
|
init_cluster.kerberos_enabled = false
|
|
init_cluster.start_cluster = true
|
|
init_cluster.supabase_enabled = false
|
|
init_cnpg_deploy.force_rollout = false
|
|
init_cnpg_deploy.run_deploy = true
|
|
init_db_build.run_build = true
|
|
init_password.db_host_port = 5432
|
|
init_password.db_namespace = ${NAMESPACE}
|
|
init_password.db_password = ${OPENBAO:kv/prole/prole-chrisfu-abracadabra/db#password}
|
|
init_password.db_password_confirm = ${OPENBAO:kv/prole/prole-chrisfu-abracadabra/db#password}
|
|
init_password.db_username = chrisfu
|
|
init_password.generate_ssh_key = true
|
|
init_scripts.run_scripts = true
|
|
kerberos_config.enabled = false
|
|
kerberos_config.kdc = 10.0.0.3
|
|
kerberos_config.password = ${OPENBAO:kv/prole/prole-chrisfu-abracadabra/kerberos#password}
|
|
kerberos_config.realm = PROLE.ORG
|
|
kerberos_config.test_connection = false
|
|
kerberos_config.user =
|
|
network_scan.run = true
|
|
|
|
[Global]
|
|
; Variables used by name in more than one place or assumed global scope
|
|
CLUSTER_ENV = prole-service-cluster
|
|
DB_HOST_PORT = 5432
|
|
DB_PASSWORD = ${OPENBAO:kv/prole/prole-chrisfu-abracadabra/db#password}
|
|
DEPLOYMENT_MODE = k3s
|
|
DEPLOYMENT_TARGET = prole-service-cluster
|
|
DOCKER_IMPORT_DIR =
|
|
NAMESPACE = ${NAMESPACE}
|
|
PROLE_DB_USER = chrisfu
|
|
PROLE_HOME = ${PROLE_HOME}
|
|
PROLE_K3S_SERVER = https://pi.prole.org:6443
|
|
PROLE_K3S_TOKEN = ${PROLE_SECRET:v1:EpUBQqBLpN0hKPcy:0MdKwHBxLbrY71XZSsbvhHSudotpC_hCmyO98HfDG08pCDzCzFiVzHzuO_LoRclwViNEipmqyl0JjwPQsVEaIBt5B1AjGeVcU1iFoDKvYf5pl2bAjTWIXKtNg8eq6LFTMGoe-I72bFcwuRJ17ykzoCaXdwC6c7Ru_UZxwQ==}
|
|
PROLE_OPENTOFU_URL = http://127.0.0.1:8080
|
|
SERVICE_NAMESPACE = default
|
|
ARGOCD_NAMESPACE = argocd
|
|
REGISTRY_NAMESPACE = default
|
|
PROLE_ENABLE_LOCAL_REGISTRY = true
|
|
|
|
[Welcome]
|
|
; No configuration values captured yet for this section.
|
|
|
|
[Dependencies]
|
|
STATUS = All installed
|
|
|
|
[Network]
|
|
AD_DC_HOST = myrddin.prole.org
|
|
AD_DC_IP = 10.0.0.3
|
|
ANSIBLE_DOMAIN = prole.org
|
|
ANSIBLE_INFRASTRUCTURE = ${PROLE_HOME}/infrastructure
|
|
ANSIBLE_INVENTORY = ${PROLE_HOME}/infrastructure/inventory
|
|
ANSIBLE_REALM = PROLE.ORG
|
|
ANSIBLE_TOPOLOGY = {"domain":"prole.org","realm":"PROLE.ORG","internal_records":{"aventage.prole.org":"10.0.0.206","fairyland.prole.org":"10.0.0.208","loghost.prole.org":"10.0.0.3","morana.prole.org":"10.0.0.66","morgoth.prole.org":"10.0.0.204","myrddin.prole.org":"10.0.0.3","pi.prole.org":"10.0.0.5","raspberry.prole.org":"10.0.0.4","retropie.prole.org":"10.0.0.207","synology.prole.org":"10.0.0.203","zinfandel.prole.org":"10.0.0.205"},"ad_dc":{"host":"myrddin.prole.org","ip":"10.0.0.3"},"k3s":{"server_url":"https://pi.prole.org:6443","server_host":"pi.prole.org","token_present":true},"groups":{"iscsi":["pi.prole.org","raspberry.prole.org","myrddin.prole.org","retropie.prole.org"],"pihole":["pi.prole.org","raspberry.prole.org"],"ad_dc":["myrddin.prole.org"],"k3s_hosts":["pi.prole.org","myrddin.prole.org","retropie.prole.org"],"linux_hosts":["pi.prole.org","raspberry.prole.org","myrddin.prole.org","retropie.prole.org"]},"hosts":{"myrddin.prole.org":"10.0.0.3","pi.prole.org":"10.0.0.5","raspberry.prole.org":"10.0.0.4","retropie.prole.org":"10.0.0.207"},"unmapped_hosts":[]}
|
|
KDC_ANSIBLE_DETECTED = 10.0.0.3
|
|
|
|
[Port Forwards]
|
|
; Port-forward defaults for local k3d and external k3s access.
|
|
PORT_FORWARD_K3D_ENABLED = true
|
|
PORT_FORWARD_K3S_ENABLED = true
|
|
PORT_FORWARD_EXTERNAL_DB_HOST = myrddin.prole.org
|
|
PORT_FORWARD_EXTERNAL_DB_IP = 10.0.0.3
|
|
PORT_FORWARD_EXTERNAL_DB_PORT = 5432
|
|
PORT_FORWARD_EXTERNAL_DB_SERVICE = prole-db-rw
|
|
; Mapping format: id=...;namespace=...;target=...;address=...;hostPort=...;servicePort=...;protocol=TCP;description=...
|
|
PORT_FORWARD_K3D_MAPPING_1 = id=dashboard;namespace=kubernetes-dashboard;target=svc/kubernetes-dashboard-kong-proxy;address=127.0.0.1;hostPort=8443;servicePort=443;protocol=TCP;description=Kubernetes Dashboard (https://127.0.0.1:8443)
|
|
PORT_FORWARD_K3D_MAPPING_2 = id=prometheus;namespace=monitoring;target=svc/kps-kube-prometheus-stack-prometheus;address=127.0.0.1;hostPort=9090;servicePort=9090;protocol=TCP;description=Prometheus UI (http://127.0.0.1:9090)
|
|
PORT_FORWARD_K3D_MAPPING_3 = id=grafana;namespace=monitoring;target=svc/kps-grafana;address=0.0.0.0;hostPort=3000;servicePort=3000;protocol=TCP;description=Grafana UI (0.0.0.0:3000)
|
|
PORT_FORWARD_K3D_MAPPING_4 = id=postgres;namespace=${NAMESPACE};target=svc/prole-db-rw;address=0.0.0.0;hostPort=5432;servicePort=5432;protocol=TCP;description=PostgreSQL (primary) (0.0.0.0:5432)
|
|
PORT_FORWARD_K3D_MAPPING_5 = id=openbao;namespace=${NAMESPACE};target=svc/openbao;address=127.0.0.1;hostPort=8200;servicePort=8200;protocol=TCP;description=OpenBao UI (http://127.0.0.1:8200)
|
|
PORT_FORWARD_K3S_MAPPING_1 = id=grafana;namespace=monitoring;target=svc/kps-grafana;address=0.0.0.0;hostPort=3000;servicePort=3000;protocol=TCP;description=Grafana UI (0.0.0.0:3000)
|
|
PORT_FORWARD_K3S_MAPPING_2 = id=opentofu;namespace=${NAMESPACE};target=svc/opentofu;address=0.0.0.0;hostPort=8080;servicePort=8080;protocol=TCP;description=OpenTofu UI/API (0.0.0.0:8080)
|
|
PORT_FORWARD_K3S_MAPPING_3 = id=openbao;namespace=${NAMESPACE};target=svc/openbao;address=0.0.0.0;hostPort=8200;servicePort=8200;protocol=TCP;description=OpenVault/OpenBao UI/API (0.0.0.0:8200)
|
|
PORT_FORWARD_K3S_MAPPING_4 = id=postgres;namespace=${NAMESPACE};target=svc/prole-db-rw;address=0.0.0.0;hostPort=5432;servicePort=5432;protocol=TCP;description=PostgreSQL external (0.0.0.0:5432)
|
|
|
|
[System Environment]
|
|
PROLE_CONF = ${PROLE_CONF}
|
|
PROLE_DATA = ${PROLE_DATA}
|
|
PROLE_HOME = ${PROLE_HOME}
|
|
PROLE_LOGS = ${PROLE_LOGS}
|
|
PROLE_SERVICE = ${PROLE_SERVICE}
|
|
PROLE_OPENTOFU_URL = http://127.0.0.1:8080
|
|
|
|
[Monitoring]
|
|
GRAFANA_ADMIN_PASSWORD = ${OPENBAO:kv/prole/prole-chrisfu-abracadabra/monitoring#grafana_admin_password}
|
|
|
|
[Kerberos Authentication]
|
|
PASSWORD = ${OPENBAO:kv/prole/prole-chrisfu-abracadabra/kerberos#password}
|
|
|
|
[Optional Features]
|
|
AT_REST_ENCRYPTION_ENABLED = true
|
|
KERBEROS_ENABLED = false
|
|
SUPABASE_ENABLED = false
|
|
|
|
[Database Creation]
|
|
DB_NAME = prole-chrisfu-abracadabra
|
|
DB_PASSWORD_SET = true
|
|
DB_USER = chrisfu
|
|
NAMESPACE = prole-chrisfu-abracadabra
|
|
|
|
[Initialize Cluster]
|
|
ENVIRONMENT = prole-service-cluster
|
|
K3S_SERVER_URL = https://pi.prole.org:6443
|
|
K3S_TOKEN = ${PROLE_SECRET:v1:87PgULFcPofp_fez:sWTKxPhs0ykJEtWLlAj_cWFGK5pe1ttmeQhOfSnPfNLDe8L6qL7U5mv6OQfbT9n1z46zoJ9QKaYCCvwjIgdTjOkdjE9YGrHs1IhkSVGbnFZ531LCZ0eoj_ouhutPYcFpC5b7L990zbcwMYGyZ8Cr-ohIMRk7mN-Xp_PB4w==}
|
|
|
|
[Dev Cluster (k3d)]
|
|
CLUSTER_ENV = k3d-prole-dev-cluster
|
|
DISPLAY_NAME = prole-dev-cluster
|
|
KUBECTL_CONTEXT = prole-service-cluster
|
|
MODE = k3d
|
|
|
|
[Service Cluster (k3s)]
|
|
CLUSTER_ENV = prole-service-cluster
|
|
DISPLAY_NAME = prole-service-cluster
|
|
K3S_SERVER_URL = https://pi.prole.org:6443
|
|
K3S_TOKEN = ${PROLE_SECRET:v1:gLFC-kFjv_0LzEO7:fTdBIU1aFqYM1f2eILrkzYCay1A0ITp_1cfHMYlX47The7ritLEV8R3_dxKgx3L34kCw0dptoqfQL65VoLTbBLN55pus7CQs-3bb-XCJLJ0VUDPfavI9yEJ7u3VJw4SYvSGIrRa6U4YTAnFCcICMly7g6XfFnOsGoz4W2w==}
|
|
MODE = k3s
|
|
PIPELINE_URL = http://127.0.0.1:8080
|
|
|
|
[Prod Cluster (k8s)]
|
|
ARTIFACTS_DIR = ${PROLE_DATA}/staging
|
|
CLUSTER_ENV = prole-prod-cluster
|
|
DISPLAY_NAME = prole-prod-cluster
|
|
MODE = k8s
|
|
PIPELINE_URL = http://127.0.0.1:8080
|
|
|
|
[Docker Build]
|
|
LOCAL_REGISTRY = localhost:5000
|
|
LOCAL_REGISTRY_INTERNAL =
|
|
|
|
[Initialization Scripts]
|
|
; No configuration values captured yet for this section.
|
|
|
|
[Deployment]
|
|
MODE = k3s
|
|
TARGET = prole-service-cluster
|
|
|
|
[Install]
|
|
STATUS = Failed
|