Skip to content

Commit 19c7249

Browse files
MacroPowerMacroPower
committed
Add cert-manager
1 parent d86edcb commit 19c7249

19 files changed

+16221
-1
lines changed

‎apps/external/certs/base/kcl.mod

Lines changed: 6 additions & 0 deletions
Original file line numberDiff line numberDiff line change
@@ -0,0 +1,6 @@
1+
[package]
2+
name = "external_certs_base"
3+
version = "0.1.0"
4+
5+
[dependencies]
6+
external = { path = "../../_tenant/shared" }

‎apps/external/certs/base/kcl.mod.lock

Lines changed: 57 additions & 0 deletions
Original file line numberDiff line numberDiff line change
@@ -0,0 +1,57 @@
1+
[dependencies]
2+
[dependencies.charts]
3+
name = "charts"
4+
full_name = "charts_0.1.0"
5+
version = "0.1.0"
6+
[dependencies.cilium]
7+
name = "cilium"
8+
full_name = "cilium_0.4.1"
9+
version = "0.4.1"
10+
sum = "YmVvSokDKgHSwDc7XRfVyNdniLwF+lA57/Vgi60MDGo="
11+
reg = "ghcr.io"
12+
repo = "kcl-lang/cilium"
13+
oci_tag = "0.4.1"
14+
[dependencies.external]
15+
name = "external"
16+
full_name = "external_0.1.0"
17+
version = "0.1.0"
18+
[dependencies.external_tenant]
19+
name = "external_tenant"
20+
full_name = "external_tenant_0.1.0"
21+
version = "0.1.0"
22+
[dependencies.filepath]
23+
name = "filepath"
24+
full_name = "filepath_0.12.0"
25+
version = "0.12.0"
26+
sum = "zok5+7YXY/qutpo/CnjoJRbrvjWclw40zkBrB2peSa4="
27+
reg = "ghcr.io"
28+
repo = "macropower/kclipper/filepath"
29+
oci_tag = "0.12.0"
30+
[dependencies.helm]
31+
name = "helm"
32+
full_name = "helm_0.12.0"
33+
version = "0.12.0"
34+
sum = "7vrtMRNYMwG+F+lTKbmp0eC/yh0mHwWv0rYV4oP5h9I="
35+
reg = "ghcr.io"
36+
repo = "macropower/kclipper/helm"
37+
oci_tag = "0.12.0"
38+
[dependencies.json_merge_patch]
39+
name = "json_merge_patch"
40+
full_name = "json_merge_patch_0.1.1"
41+
version = "0.1.1"
42+
sum = "o1aamShk1L2MGjnN9u3IErRZ3xBNDxgmFxXsGVMt8Wk="
43+
reg = "ghcr.io"
44+
repo = "kcl-lang/json_merge_patch"
45+
oci_tag = "0.1.1"
46+
[dependencies.k8s]
47+
name = "k8s"
48+
full_name = "k8s_1.31.2"
49+
version = "1.31.2"
50+
sum = "xBZgPsnpVVyWBpahuPQHReeRx28eUHGFoaPeqbct+vs="
51+
reg = "ghcr.io"
52+
repo = "kcl-lang/k8s"
53+
oci_tag = "1.31.2"
54+
[dependencies.konfig]
55+
name = "konfig"
56+
full_name = "konfig_0.0.1"
57+
version = "0.0.1"

‎apps/external/certs/base/main.k

Lines changed: 22 additions & 0 deletions
Original file line numberDiff line numberDiff line change
@@ -0,0 +1,22 @@
1+
import file
2+
3+
import charts.cert_manager
4+
import external
5+
import konfig.models.frontend
6+
import konfig.utils
7+
8+
_values = utils.read_yaml(file.current(), "values.yaml")
9+
10+
app: frontend.App {
11+
name = "certs"
12+
tenantName = external.tenant.name
13+
namespace = "{}-{}".format(tenantName, name)
14+
15+
charts.cert_manager = cert_manager.Chart {
16+
values: _values | cert_manager.Values {
17+
global: {
18+
leaderElection.namespace = namespace
19+
}
20+
}
21+
}
22+
}

‎apps/external/certs/base/values.yaml

Lines changed: 45 additions & 0 deletions
Original file line numberDiff line numberDiff line change
@@ -0,0 +1,45 @@
1+
# yaml-language-server: $schema=../../../../charts/cert_manager/values.schema.json
2+
3+
replicaCount: 2
4+
5+
## When enableCertificateOwnerRef is enabled, secrets will be automatically
6+
## removed when the certificate resource is deleted.
7+
##
8+
enableCertificateOwnerRef: true
9+
10+
extraArgs:
11+
- --logging-format=json
12+
- --dns01-recursive-nameservers-only
13+
- --dns01-recursive-nameservers=1.1.1.1:53,1.0.0.1:53
14+
15+
prometheus:
16+
servicemonitor:
17+
enabled: false
18+
19+
resources:
20+
requests:
21+
cpu: 1m
22+
memory: 100Mi
23+
limits:
24+
cpu: 100m
25+
memory: 100Mi
26+
27+
webhook:
28+
replicaCount: 2
29+
resources:
30+
requests:
31+
cpu: 1m
32+
memory: 100Mi
33+
limits:
34+
cpu: 100m
35+
memory: 100Mi
36+
37+
cainjector:
38+
replicaCount: 2
39+
resources:
40+
requests:
41+
cpu: 1m
42+
memory: 250Mi
43+
limits:
44+
cpu: 100m
45+
memory: 250Mi

‎apps/external/certs/mgmt/.app.yaml

Lines changed: 5 additions & 0 deletions
Original file line numberDiff line numberDiff line change
@@ -0,0 +1,5 @@
1+
# yaml-language-server: $schema=../../../../konfig/models/frontend/patch.schema.json
2+
3+
syncPolicy:
4+
automated:
5+
selfHeal: true

‎apps/external/certs/mgmt/kcl.mod

Lines changed: 9 additions & 0 deletions
Original file line numberDiff line numberDiff line change
@@ -0,0 +1,9 @@
1+
[package]
2+
name = "external_certs_mgmt"
3+
version = "0.1.0"
4+
5+
[dependencies]
6+
external_certs_base = { path = "../base" }
7+
8+
[profile]
9+
entries = ["main.k", "${konfig:KCL_MOD}/models/render/render.k"]

‎apps/external/certs/mgmt/kcl.mod.lock

Lines changed: 61 additions & 0 deletions
Original file line numberDiff line numberDiff line change
@@ -0,0 +1,61 @@
1+
[dependencies]
2+
[dependencies.charts]
3+
name = "charts"
4+
full_name = "charts_0.1.0"
5+
version = "0.1.0"
6+
[dependencies.cilium]
7+
name = "cilium"
8+
full_name = "cilium_0.4.1"
9+
version = "0.4.1"
10+
sum = "YmVvSokDKgHSwDc7XRfVyNdniLwF+lA57/Vgi60MDGo="
11+
reg = "ghcr.io"
12+
repo = "kcl-lang/cilium"
13+
oci_tag = "0.4.1"
14+
[dependencies.external]
15+
name = "external"
16+
full_name = "external_0.1.0"
17+
version = "0.1.0"
18+
[dependencies.external_certs_base]
19+
name = "external_certs_base"
20+
full_name = "external_certs_base_0.1.0"
21+
version = "0.1.0"
22+
[dependencies.external_tenant]
23+
name = "external_tenant"
24+
full_name = "external_tenant_0.1.0"
25+
version = "0.1.0"
26+
[dependencies.filepath]
27+
name = "filepath"
28+
full_name = "filepath_0.12.0"
29+
version = "0.12.0"
30+
sum = "zok5+7YXY/qutpo/CnjoJRbrvjWclw40zkBrB2peSa4="
31+
reg = "ghcr.io"
32+
repo = "macropower/kclipper/filepath"
33+
oci_tag = "0.12.0"
34+
[dependencies.helm]
35+
name = "helm"
36+
full_name = "helm_0.12.0"
37+
version = "0.12.0"
38+
sum = "7vrtMRNYMwG+F+lTKbmp0eC/yh0mHwWv0rYV4oP5h9I="
39+
reg = "ghcr.io"
40+
repo = "macropower/kclipper/helm"
41+
oci_tag = "0.12.0"
42+
[dependencies.json_merge_patch]
43+
name = "json_merge_patch"
44+
full_name = "json_merge_patch_0.1.1"
45+
version = "0.1.1"
46+
sum = "o1aamShk1L2MGjnN9u3IErRZ3xBNDxgmFxXsGVMt8Wk="
47+
reg = "ghcr.io"
48+
repo = "kcl-lang/json_merge_patch"
49+
oci_tag = "0.1.1"
50+
[dependencies.k8s]
51+
name = "k8s"
52+
full_name = "k8s_1.31.2"
53+
version = "1.31.2"
54+
sum = "xBZgPsnpVVyWBpahuPQHReeRx28eUHGFoaPeqbct+vs="
55+
reg = "ghcr.io"
56+
repo = "kcl-lang/k8s"
57+
oci_tag = "1.31.2"
58+
[dependencies.konfig]
59+
name = "konfig"
60+
full_name = "konfig_0.0.1"
61+
version = "0.0.1"

‎apps/external/certs/mgmt/main.k

Lines changed: 10 additions & 0 deletions
Original file line numberDiff line numberDiff line change
@@ -0,0 +1,10 @@
1+
import charts.cert_manager
2+
import external_certs_base
3+
4+
_baseValues = external_certs_base.app.charts.cert_manager.values
5+
6+
app = external_certs_base.app | {
7+
charts.cert_manager.values = _baseValues | cert_manager.Values {
8+
replicaCount = 2
9+
}
10+
}

‎apps/external/secrets/base/main.k

Lines changed: 1 addition & 1 deletion
Original file line numberDiff line numberDiff line change
@@ -9,7 +9,7 @@ import konfig.utils
99
_values = utils.read_yaml(file.current(), "values.yaml")
1010

1111
app: frontend.App {
12-
name = "system"
12+
name = "secrets"
1313
tenantName = external.tenant.name
1414

1515
charts.external_secrets = external_secrets.Chart {

0 commit comments

Comments
 (0)