mirror of
https://github.com/dredx/prole.git
synced 2026-09-23 11:03:59 +00:00
eb9430df9d
Namespace & routing - milestones.py: GitOpsMilestone now resolves namespace from gitops.gitlab_namespace (new) → Global.GITLAB_NAMESPACE → 'gitlab' hardcoded; never falls through to gitops.namespace (was 'gitea') - prole.cfg: add gitops.gitlab_namespace=gitlab + GITLAB_NAMESPACE=gitlab - init_gitlab.sh: NAMESPACE defaults to gitlab, NODE_SELECTOR blanked so only gitaly+minio are node-pinned; GITOPS_NAMESPACE fallback removed GitLab on ARM64 RPi (16 KB kernel pages) - init_gitlab.sh: DaemonSet compiles jemalloc-5.3.0 with --with-lg-page=14 (glibc/Ubuntu) on every node; LD_PRELOAD injected per Ruby component - Minio: quay.io 2022 image (ARM64); configure init container replaced with ARM64 alpine that writes credential files; MINIO_ROOT_USER/PASSWORD injected directly into main container env via secretKeyRef - Minio buckets auto-created post-deploy (registry, lfs, artifacts, etc.) - webservice/sidekiq: replicaCount=1, reduced memory (1500M/800M), liveness probe initialDelaySeconds=3600 (Rails loads 25-40min on RPi) - allowedHosts set as flat string list (chart 9.x default is list-of-maps which breaks URI initializer in 7_gitlab_http.rb) - gitaly+minio always pinned to gandalf (local PV); other workloads spread Storage - Static PVs created for gitaly (50Gi) + minio (10Gi) on synology d005 - Synology dirs created before PVs; bucket creation idempotent Redis (shared for GitLab KAS) - init_redis.sh: persistence disabled (no dynamic provisioner); Redis used as pub/sub broker only Infrastructure / pi.prole.org - Removed pi.prole.org from [k3s_agents] – dedicated pihole node, OOM - host_vars: k3s_enabled=false, k3s_state=absent (storage preserved) - New playbook: infrastructure/playbooks/disable_pi_k3s.yml (drain + disable) - monitoring.py: node-exporter DaemonSet excludes pi.prole.org - init_monitoring.sh: pi.prole.org excluded from node-exporter affinity - kong-deployment.yaml: affinity rule prevents scheduling on pi (pihole owns 80/443) Co-authored-by: Junie <junie@jetbrains.com>
52 lines
1.4 KiB
YAML
52 lines
1.4 KiB
YAML
iscsi_portal: 10.0.0.203
|
|
|
|
k3s_required_mounts:
|
|
- /synology/d003
|
|
|
|
iscsi_targets:
|
|
# `/var/lib/rancher` is local host storage (do not manage it via iSCSI).
|
|
|
|
# PROLE-DATA-3
|
|
- iqn: "iqn.2000-01.com.synology:synology.Target-13.292d45194a1"
|
|
chap_user: "prole"
|
|
chap_password: "{{ vault_iscsi_prole_password }}"
|
|
mounts:
|
|
- path: /synology/d003
|
|
fstype: xfs
|
|
opts: "_netdev,noatime"
|
|
src: "UUID=757f1ee4-dc23-414b-b595-e3058c0744f0"
|
|
|
|
# PROLE-PI-2
|
|
- iqn: "iqn.2000-01.com.synology:synology.Target-19.292d45194a1"
|
|
chap_user: "prole"
|
|
chap_password: "{{ vault_iscsi_prole_password }}"
|
|
mounts:
|
|
- path: /var/log/pihole
|
|
fstype: ext4
|
|
opts: "_netdev,noatime"
|
|
src: "UUID=56b21ec3-2826-4171-b909-a6715223f9a4"
|
|
|
|
# k3s intentionally disabled — pi.prole.org is a dedicated pihole node;
|
|
# insufficient RAM for k3s workloads; agent manually stopped 2026-04-01.
|
|
k3s_enabled: false
|
|
k3s_state: absent
|
|
|
|
k3s_rancher_mount_required: true
|
|
k3s_rancher_mount_src: /synology/d003/rancher
|
|
k3s_rancher_mount_fstype: none
|
|
k3s_rancher_mount_opts: bind
|
|
k3s_rancher_mount_passno: 0
|
|
|
|
k3s_role: agent
|
|
k3s_cluster_init: false
|
|
k3s_server_url: "https://myrddin.prole.org:6443"
|
|
k3s_service_node_labels:
|
|
- "prole.org/node-role=general"
|
|
- "prole.org/role=observer"
|
|
k3s_node_taints: []
|
|
|
|
k3s_write_kubeconfig_mode: "0640"
|
|
k3s_kubeconfig_group: kubeadm
|
|
k3s_kubeconfig_users:
|
|
- pi
|