mirror of
https://github.com/dredx/prole.git
synced 2026-09-28 17:54:30 +00:00
b03efa8f69
Kong API Gateway (replacing prole nginx): - Add etc/init_kong.sh provisioning script (DB-less mode, prole-db namespace) - Add kong-deployment.yaml and kong-service.yaml manifests - Rewire ingress rules (svc/git/api.prole.org) to prole-db-kong:8000 - Update kustomization.yaml to reference kong manifests PostgREST & DB Manager in prole-db namespace: - Add etc/init_postgrest.sh and etc/init_db_manager.sh scripts - Add postgrest/db-manager deployment and service manifests - Add src/db-manager/ Node.js REST endpoint for backup triggers - Default NAMESPACE changed to prole-db in both scripts Docker image pre-load from PROLE_DATA/docker-import: - Add _preload_docker_images() to init_common_services.sh - Scan for .tar files exported by final_deployment.sh - Import via k3d image import (k3d) or ctr (k3s) before deployments - Increase rollout timeouts to 300s (configurable via ROLLOUT_TIMEOUT) in init_openbao.sh, init_opentofu.sh, init_garage_store.sh, init_registry.sh OpenTofu password resolution fix: - Add Kubernetes secret fallback in resolve_admin_password() - Change hard exit 1 to graceful return 1 with warning - Wrap call in if-guard so set -e doesn't abort the script chain Milestone fix (init scripts not running): - Add init_kong.sh, init_postgrest.sh, init_db_manager.sh to InitializationScriptsMilestone.execute() script list and arg branches - Previously only actions.py had these; milestones.py was missing them Installer integration: - Add Kong/PostgREST/DB Manager to silent installer _step_init_scripts - Add corresponding tabs and execution blocks in UI services.py
58 lines
1.3 KiB
YAML
58 lines
1.3 KiB
YAML
apiVersion: apps/v1
|
|
kind: StatefulSet
|
|
metadata:
|
|
name: openbao
|
|
labels:
|
|
app: openbao
|
|
spec:
|
|
serviceName: openbao
|
|
replicas: 1
|
|
selector:
|
|
matchLabels:
|
|
app: openbao
|
|
template:
|
|
metadata:
|
|
labels:
|
|
app: openbao
|
|
spec:
|
|
nodeSelector:
|
|
kubernetes.io/hostname: myrddin.prole.org
|
|
containers:
|
|
- name: openbao
|
|
image: ghcr.io/openbao/openbao:2.0.0
|
|
imagePullPolicy: IfNotPresent
|
|
args:
|
|
- server
|
|
- -dev
|
|
- -dev-listen-address=0.0.0.0:8200
|
|
- -dev-root-token-id=root
|
|
env:
|
|
- name: VAULT_DEV_ROOT_TOKEN_ID
|
|
value: root
|
|
- name: VAULT_ADDR
|
|
value: http://127.0.0.1:8200
|
|
ports:
|
|
- containerPort: 8200
|
|
name: http
|
|
readinessProbe:
|
|
httpGet:
|
|
path: /v1/sys/health
|
|
port: http
|
|
initialDelaySeconds: 5
|
|
periodSeconds: 10
|
|
volumeMounts:
|
|
- name: data
|
|
mountPath: /data
|
|
volumeClaimTemplates:
|
|
- metadata:
|
|
name: data
|
|
spec:
|
|
accessModes: ["ReadWriteOnce"]
|
|
resources:
|
|
requests:
|
|
storage: 1Gi
|
|
storageClassName: prole-iscsi
|
|
selector:
|
|
matchLabels:
|
|
prole.storage/role: openbao
|