mirror of
https://github.com/dredx/prole.git
synced 2026-09-24 17:54:32 +00:00
eb9430df9d
Namespace & routing - milestones.py: GitOpsMilestone now resolves namespace from gitops.gitlab_namespace (new) → Global.GITLAB_NAMESPACE → 'gitlab' hardcoded; never falls through to gitops.namespace (was 'gitea') - prole.cfg: add gitops.gitlab_namespace=gitlab + GITLAB_NAMESPACE=gitlab - init_gitlab.sh: NAMESPACE defaults to gitlab, NODE_SELECTOR blanked so only gitaly+minio are node-pinned; GITOPS_NAMESPACE fallback removed GitLab on ARM64 RPi (16 KB kernel pages) - init_gitlab.sh: DaemonSet compiles jemalloc-5.3.0 with --with-lg-page=14 (glibc/Ubuntu) on every node; LD_PRELOAD injected per Ruby component - Minio: quay.io 2022 image (ARM64); configure init container replaced with ARM64 alpine that writes credential files; MINIO_ROOT_USER/PASSWORD injected directly into main container env via secretKeyRef - Minio buckets auto-created post-deploy (registry, lfs, artifacts, etc.) - webservice/sidekiq: replicaCount=1, reduced memory (1500M/800M), liveness probe initialDelaySeconds=3600 (Rails loads 25-40min on RPi) - allowedHosts set as flat string list (chart 9.x default is list-of-maps which breaks URI initializer in 7_gitlab_http.rb) - gitaly+minio always pinned to gandalf (local PV); other workloads spread Storage - Static PVs created for gitaly (50Gi) + minio (10Gi) on synology d005 - Synology dirs created before PVs; bucket creation idempotent Redis (shared for GitLab KAS) - init_redis.sh: persistence disabled (no dynamic provisioner); Redis used as pub/sub broker only Infrastructure / pi.prole.org - Removed pi.prole.org from [k3s_agents] – dedicated pihole node, OOM - host_vars: k3s_enabled=false, k3s_state=absent (storage preserved) - New playbook: infrastructure/playbooks/disable_pi_k3s.yml (drain + disable) - monitoring.py: node-exporter DaemonSet excludes pi.prole.org - init_monitoring.sh: pi.prole.org excluded from node-exporter affinity - kong-deployment.yaml: affinity rule prevents scheduling on pi (pihole owns 80/443) Co-authored-by: Junie <junie@jetbrains.com> |
||
|---|---|---|
| .. | ||
| audit.yml | ||
| bootstrap_local_ansible_user.yml | ||
| cgroups.yml | ||
| check_k3s_endpoint.yml | ||
| disable_pi_k3s.yml | ||
| iscsi_cleanup.yml | ||
| iscsi_login.yml | ||
| iscsi_mount.yml | ||
| k3s_cleanup.yml | ||
| k3s_delete.yml | ||
| k3s_diagnose_repair.yml | ||
| k3s_fetch_kubeconfig.yml | ||
| k3s_import_images.yml | ||
| k3s_install_single.yml | ||
| k3s_mariadb_datastore_prepare.yml | ||
| k3s_mariadb_datastore_rollout.yml | ||
| k3s_reset.yml | ||
| k3s_server_refresh.yml | ||
| k3s_start_single.yml | ||
| k3s_stop.yml | ||
| k3s_sync.yml | ||
| merlin_mariadb_full_export.yml | ||
| merlin_mariadb_full_import.yml | ||
| merlin_mariadb_provision.yml | ||
| prole_logs_migrate.yml | ||
| rotate_pihole_db.yml | ||
| site.yml | ||
| smoke_ping.yml | ||
| start_k3s_agents.yml | ||
| start_k3s_servers.yml | ||
| stop_k3s_agents.yml | ||
| stop_k3s_servers.yml | ||
| swap.yml | ||
| sync_pihole_toml.yml | ||
| test_k3s_kubeconfig_rewrite.yml | ||
| test_k3s_validate_args.yml | ||
| tmp_bao_dir.yml | ||
| tmp_mount.yml | ||