nold/hive-apps
1
0
Fork 0
mirror of https://github.com/nold360/hive-apps synced 2025-02-22 17:01:41 +00:00
Code Issues Projects Releases Packages Wiki Activity

del(crossplane)

Browse source
This commit is contained in:
nold 2025-01-16 15:15:28 +01:00
parent 3b84ac59bc
commit 53096b963c
10 changed files with 0 additions and 439 deletions
Show stats Download patch file Download diff file Expand all files Collapse all files

138
projects/crossplane/manifests/composition-bucket.yml
View file

@ -1,138 +0,0 @@
apiVersion: apiextensions.crossplane.io/v1
kind: Composition
metadata:
annotations:
labels:
implementation: terraform
provider: minio
name: tf-bucket.gnu.one
spec:
compositeTypeRef:
apiVersion: s3.gnu.one/v1alpha1
kind: XBucket
mode: Resources
publishConnectionDetailsWithStoreConfigRef:
name: default
resources:
- base:
apiVersion: tf.upbound.io/v1beta1
kind: Workspace
spec:
forProvider:
module: |
terraform {
required_providers {
minio = {
source = "aminueza/minio"
version = "1.17.2"
}
}
}
variable "access_key" {
description = "S3 Access Key"
type = string
}
variable "secret_key" {
description = "S2 Secret Key"
type = string
sensitive = true
}
variable "name" {
description = "Name of Bucket & Service Account"
type = string
}
variable "endpoint" {
description = "Minio Endpoint"
type = string
default = "s3-minio.s3.svc.cluster.local:9000"
}
provider "minio" {
minio_server = var.endpoint
minio_user = var.access_key
minio_password = var.secret_key
}
resource "minio_s3_bucket" "bucket" {
bucket = var.name
acl = "private"
force_destroy = false
}
resource "minio_iam_policy" "policy" {
name = var.name
policy= <<EOF
{
"Version": "2012-10-17",
"Statement": [
{
"Effect": "Allow",
"Action": [
"s3:*"
],
"Resource": [
"arn:aws:s3:::${var.name}/*",
"arn:aws:s3:::${var.name}"
]
}
]
}
EOF
}
resource "minio_iam_user" "user" {
name = var.name
force_destroy = true
}
resource "minio_iam_user_policy_attachment" "policy_to_user" {
user_name = minio_iam_user.user.id
policy_name = minio_iam_policy.policy.id
}
resource "minio_iam_service_account" "service_account" {
target_user = minio_iam_user.user.name
}
output "endpoint" {
value = var.endpoint
}
output "access_key" {
value = minio_iam_service_account.service_account.access_key
}
output "secret_key" {
value = minio_iam_service_account.service_account.secret_key
sensitive = true
}
source: Inline
varFiles:
- format: JSON
secretKeyRef:
key: secret.json
name: terraform
namespace: crossplane-system
source: SecretKey
vars:
- key: name
- key: endpoint
value: s3-minio.s3.svc.cluster.local:9000
writeConnectionSecretToRef:
name: s3-bucket
namespace: default
name: tf-bucket-and-user
patches:
- fromFieldPath: spec.name
toFieldPath: spec.forProvider.vars[0].value
type: FromCompositeFieldPath
- fromFieldPath: spec.claimRef.namespace
toFieldPath: spec.writeConnectionSecretToRef.namespace
type: FromCompositeFieldPath
- fromFieldPath: spec.secretName
toFieldPath: spec.writeConnectionSecretToRef.name
type: FromCompositeFieldPath

164
projects/crossplane/manifests/composition-postgres.yml
View file

@ -1,164 +0,0 @@
apiVersion: apiextensions.crossplane.io/v1
kind: Composition
metadata:
labels:
provider: cnpg
name: postgres.gnu.one
spec:
compositeTypeRef:
apiVersion: db.gnu.one/v1alpha2
kind: XPostgres
mode: Resources
patchSets:
- name: common
patches:
- fromFieldPath: spec.name
toFieldPath: spec.forProvider.manifest.metadata.name
type: FromCompositeFieldPath
- fromFieldPath: spec.name
toFieldPath: spec.forProvider.manifest.spec.name
type: FromCompositeFieldPath
- fromFieldPath: metadata.labels[crossplane.io/claim-namespace]
toFieldPath: spec.forProvider.manifest.metadata.namespace
type: FromCompositeFieldPath
publishConnectionDetailsWithStoreConfigRef:
name: default
resources:
- base:
apiVersion: kubernetes.crossplane.io/v1alpha1
kind: Object
spec:
forProvider:
manifest:
apiVersion: s3.gnu.one/v1alpha1
kind: Bucket
metadata:
namespace: namespace
spec:
name: name
name: bucket
patches:
- patchSetName: common
type: PatchSet
readinessChecks:
- matchCondition:
status: "True"
type: Ready
type: MatchCondition
- base:
apiVersion: kubernetes.crossplane.io/v1alpha1
kind: Object
spec:
forProvider:
manifest:
apiVersion: postgresql.cnpg.io/v1
kind: Cluster
metadata:
namespace: namespace
spec:
backup:
barmanObjectStore:
data:
compression: gzip
destinationPath: s3://backup
endpointURL: http://s3-minio.s3.svc.cluster.local:9000
s3Credentials:
accessKeyId:
key: access_key
name: bucket-creds
secretAccessKey:
key: secret_key
name: bucket-creds
wal:
compression: gzip
retentionPolicy: 90d
bootstrap:
initdb:
database: app
owner: app
externalClusters:
- barmanObjectStore:
destinationPath: s3://bucket/
endpointURL: http://s3-minio.s3.svc.cluster.local:9000
s3Credentials:
accessKeyId:
key: access_key
name: bucket-creds
secretAccessKey:
key: secret_key
name: bucket-creds
wal:
maxParallel: 8
name: db
imageName: ghcr.io/cloudnative-pg/postgresql:15
instances: 1
resources:
limits:
cpu: "1"
memory: 1Gi
requests:
cpu: 50m
memory: 64Mi
storage:
size: 10Gi
name: postgres-db
patches:
- patchSetName: common
type: PatchSet
- fromFieldPath: spec.name
toFieldPath: spec.forProvider.manifest.spec.backup.barmanObjectStore.destinationPath
transforms:
- string:
fmt: s3://%s/
type: Format
type: string
type: FromCompositeFieldPath
- fromFieldPath: spec.instances
toFieldPath: spec.forProvider.manifest.spec.instances
type: FromCompositeFieldPath
- fromFieldPath: spec.name
toFieldPath: spec.forProvider.manifest.spec.externalClusters[0].barmanObjectStore.destinationPath
transforms:
- string:
fmt: s3://%s/
type: Format
type: string
type: FromCompositeFieldPath
- fromFieldPath: spec.storage.size
toFieldPath: spec.forProvider.manifest.spec.storage.size
type: FromCompositeFieldPath
- fromFieldPath: spec.storage.class
toFieldPath: spec.forProvider.manifest.spec.storage.storageClass
type: FromCompositeFieldPath
readinessChecks:
- matchCondition:
status: "True"
type: Ready
type: MatchCondition
- base:
apiVersion: kubernetes.crossplane.io/v1alpha1
kind: Object
spec:
forProvider:
manifest:
apiVersion: postgresql.cnpg.io/v1
kind: ScheduledBackup
metadata:
namespace: namespace
spec:
backupOwnerReference: self
cluster:
name: name
schedule: 0 0 * * * *
name: postgres-backup
patches:
- patchSetName: common
type: PatchSet
- fromFieldPath: spec.name
toFieldPath: spec.forProvider.manifest.spec.cluster.name
type: FromCompositeFieldPath
readinessChecks:
- matchCondition:
status: "True"
type: Ready
type: MatchCondition

12
projects/crossplane/manifests/oci-repo.yaml
View file

@ -1,12 +0,0 @@
apiVersion: v1
kind: Secret
type: Opaque
metadata:
name: crossplane-contrib-oci-repo
namespace: argocd
labels:
argocd.argoproj.io/secret-type: repository
stringData:
enableOCI: "true"
url: xpkg.upbound.io/crossplane-contrib
type: helm

6
projects/crossplane/manifests/provider-kubernetes.yml
View file

@ -1,6 +0,0 @@
apiVersion: pkg.crossplane.io/v1
kind: Provider
metadata:
name: provider-kubernetes
spec:
package: xpkg.upbound.io/crossplane-contrib/provider-kubernetes:v0.11.4

6
projects/crossplane/manifests/provider-terraform.yml
View file

@ -1,6 +0,0 @@
apiVersion: pkg.crossplane.io/v1
kind: Provider
metadata:
name: provider-terraform
spec:
package: xpkg.upbound.io/upbound/provider-terraform:v0.14.1

42
projects/crossplane/manifests/xrd-bucket.yml
View file

@ -1,42 +0,0 @@
apiVersion: apiextensions.crossplane.io/v1
kind: CompositeResourceDefinition
metadata:
name: xbuckets.s3.gnu.one
spec:
claimNames:
kind: Bucket
plural: buckets
defaultCompositeDeletePolicy: Background
defaultCompositionUpdatePolicy: Automatic
group: s3.gnu.one
names:
kind: XBucket
plural: xbuckets
versions:
- name: v1alpha1
referenceable: true
schema:
openAPIV3Schema:
properties:
spec:
properties:
name:
description: Name of the Bucket to create
type: string
secretName:
default: bucket-creds
description: Name of secret to write credentials to
type: string
required:
- name
type: object
status:
description: A Status represents the observed state
properties:
share:
description: Freeform field containing status information
type: object
x-kubernetes-preserve-unknown-fields: true
type: object
type: object
served: true

48
projects/crossplane/manifests/xrd-postgres.yml
View file

@ -1,48 +0,0 @@
apiVersion: apiextensions.crossplane.io/v1
kind: CompositeResourceDefinition
metadata:
name: xpostgres.db.gnu.one
spec:
claimNames:
kind: Postgres
plural: postgres
defaultCompositeDeletePolicy: Background
defaultCompositionUpdatePolicy: Automatic
group: db.gnu.one
names:
kind: XPostgres
plural: xpostgres
versions:
- name: v1alpha1
referenceable: true
schema:
openAPIV3Schema:
properties:
spec:
properties:
name:
description: Name of the DB to create
type: string
storage:
class:
default: '-'
description: Storage Class to use for DB
type: string
size:
default: 10Gi
description: Size of DB Persistent Storage
type: string
type: object
required:
- name
type: object
status:
description: A Status represents the observed state
properties:
share:
description: Freeform field containing status information
type: object
x-kubernetes-preserve-unknown-fields: true
type: object
type: object
served: true

13
projects/crossplane/project.yml
View file

@ -1,13 +0,0 @@
config:
description: Crossplane
namespace: crossplane-system
apps:
- name: crossplane
repoURL: https://charts.crossplane.io/stable
chart: crossplane
targetRevision: 1.18.2
secrets:
- name: terraform
keys:
- secret.json

5
projects/crossplane/values/crossplain.yaml
View file

@ -1,5 +0,0 @@
podAnnotations:
vault.hashicorp.com/agent-inject: "true"
vault.hashicorp.com/agent-inject-token: "true"
vault.hashicorp.com/role: crossplane
vault.hashicorp.com/agent-run-as-user: "65532"

5
projects/crossplane/values/ess-plugin-vault.yaml
View file

@ -1,5 +0,0 @@
podAnnotations:
vault.hashicorp.com/agent-inject: "true"
vault.hashicorp.com/agent-inject-token: "true"
vault.hashicorp.com/role: crossplane
vault.hashicorp.com/agent-run-as-user: "65532"