mirror of
https://github.com/dredx/prole.git
synced 2026-09-27 12:34:30 +00:00
f47c18fef7
- Infrastructure:
- Updated k3s Ansible role with mountpoint preflight checks and better permission management.
- Automated deployment of prole configuration and port-forwarding scripts to cluster hosts.
- Added systemd service for managing port forwards on k3s nodes.
- Added prole-installer service account token automation.
- K8s Manifests:
- Renamed and added Persistent Volumes in iscsi-pvs.yaml (including OpenBao support).
- Updated StatefulSets for garage and openbao.
- Migrated prole-db to CloudNativePG-based configuration.
- Added comprehensive OpenTofu manifests for cluster deployment.
- Configuration:
- Added cluster-specific configurations (k3d, k3s-hosts).
- Added PostgreSQL configuration templates.
- Updated .gitignore to track the conf/ directory.
- Tools:
- Updated install.py and port-forwarding scripts.
- Added render_manifest.py for manifest generation.
60 lines
1.2 KiB
YAML
60 lines
1.2 KiB
YAML
apiVersion: apps/v1
|
|
kind: Deployment
|
|
metadata:
|
|
name: openbao
|
|
labels:
|
|
app: openbao
|
|
spec:
|
|
replicas: 1
|
|
selector:
|
|
matchLabels:
|
|
app: openbao
|
|
template:
|
|
metadata:
|
|
labels:
|
|
app: openbao
|
|
spec:
|
|
containers:
|
|
- name: openbao
|
|
image: ghcr.io/openbao/openbao:latest
|
|
args:
|
|
- "server"
|
|
- "-dev"
|
|
- "-dev-listen-address=0.0.0.0:8200"
|
|
- "-dev-root-token-id=405f3fd4ceea0f00952532333e3035b240b404e9d30e0b7f"
|
|
ports:
|
|
- name: http
|
|
containerPort: 8200
|
|
env:
|
|
- name: VAULT_DEV_ROOT_TOKEN_ID
|
|
valueFrom:
|
|
secretKeyRef:
|
|
name: openbao-root
|
|
key: token
|
|
readinessProbe:
|
|
httpGet:
|
|
path: /v1/sys/health
|
|
port: 8200
|
|
initialDelaySeconds: 3
|
|
periodSeconds: 3
|
|
---
|
|
apiVersion: v1
|
|
kind: Service
|
|
metadata:
|
|
name: openbao
|
|
spec:
|
|
selector:
|
|
app: openbao
|
|
ports:
|
|
- name: http
|
|
port: 8200
|
|
targetPort: 8200
|
|
---
|
|
apiVersion: v1
|
|
kind: Secret
|
|
metadata:
|
|
name: openbao-root
|
|
type: Opaque
|
|
data:
|
|
token: NDA1ZjNmZDRjZWVhMGYwMDk1MjUzMjMzM2UzMDM1YjI0MGI0MDRlOWQzMGUwYjdm
|