Agosto 2025 - Git do Root C3SL

[Git][root/services/dns][main] Add wrk1-k8sprod to dfs
by yyvf22 (＠yyvf22) 04 Ago '25

04 Ago '25

yyvf22 pushed to branch main at Root / Serviços / DNS Commits: 2e4a5acc by yyvf at 2025-08-04T16:45:51-03:00 Add wrk1-k8sprod to dfs - - - - - 2 changed files: - interna-119.17.10.in-addr.arpa.zone - interna-dfs.zone Changes: ===================================== interna-119.17.10.in-addr.arpa.zone ===================================== @@ -8,6 +8,7 @@ $TTL 21600 2 IN PTR wrk5-k8sstage.dfs. 3 IN PTR urquell.dfs. 4 IN PTR wrk6-k8sstage.dfs. +5 IN PTR wrk1-k8sprod.dfs. 11 IN PTR barril1.dfs. 12 IN PTR barril2.dfs. 13 IN PTR barril3.dfs. @@ -19,4 +20,4 @@ $TTL 21600 118 IN PTR forsyn.dfs. @ IN NS ns2.c3sl.ufpr.br. @ IN NS ns.c3sl.ufpr.br. -@ 21600 IN SOA ns.c3sl.ufpr.br. root.c3sl.ufpr.br. 1754318388 86400 7200 2592000 3600 +@ 21600 IN SOA ns.c3sl.ufpr.br. root.c3sl.ufpr.br. 1754336539 86400 7200 2592000 3600 ===================================== interna-dfs.zone ===================================== @@ -15,13 +15,14 @@ barril2 IN A 10.17.119.12 barril3 IN A 10.17.119.13 barril4 IN A 10.17.119.14 @ IN NS ns.c3sl.ufpr.br. -@ 21600 IN SOA ns.c3sl.ufpr.br. root.c3sl.ufpr.br. 1754318388 86400 7200 2592000 3600 +@ 21600 IN SOA ns.c3sl.ufpr.br. root.c3sl.ufpr.br. 1754336539 86400 7200 2592000 3600 forsyn IN A 10.17.119.118 monitoramento IN CNAME forsyn torneira8 IN A 10.17.119.28 torneira9 IN A 10.17.119.29 torneira12 IN A 10.17.119.32 urquell IN A 10.17.119.3 +wrk1-k8sprod IN A 10.17.119.5 wrk4-k8sstage IN A 10.17.119.1 wrk5-k8sstage IN A 10.17.119.2 wrk6-k8sstage IN A 10.17.119.4 View it on GitLab: https://gitlab.c3sl.ufpr.br/root/services/dns/-/commit/2e4a5accc9535535566c… -- View it on GitLab: https://gitlab.c3sl.ufpr.br/root/services/dns/-/commit/2e4a5accc9535535566c… You're receiving this email because of your account on gitlab.c3sl.ufpr.br.

1 0

[Git][root/services/dhcp][main] Add wrk1-k8sprod to dfs
by yyvf22 (＠yyvf22) 04 Ago '25

04 Ago '25

yyvf22 pushed to branch main at Root / Serviços / DHCP Commits: 3c18b476 by yyvf at 2025-08-04T16:42:46-03:00 Add wrk1-k8sprod to dfs - - - - - 1 changed file: - kea-dhcp4.conf Changes: ===================================== kea-dhcp4.conf ===================================== @@ -1457,6 +1457,12 @@ "ip-address": "10.17.119.4", "user-context": { "nextbox_ip_address_id": 2734 } }, + { + "hostname": "wrk1-k8sprod", + "hw-address": "00:16:CC:E8:DD:0E", + "ip-address": "10.17.119.5", + "user-context": { "nextbox_ip_address_id": 2739 } + }, { "hostname": "abbey", "hw-address": "B8:59:9F:8D:83:20", View it on GitLab: https://gitlab.c3sl.ufpr.br/root/services/dhcp/-/commit/3c18b4762abc871504d… -- View it on GitLab: https://gitlab.c3sl.ufpr.br/root/services/dhcp/-/commit/3c18b4762abc871504d… You're receiving this email because of your account on gitlab.c3sl.ufpr.br.

1 0

[Git][root/k8s/fluxcd][main] refactor(cert-manager): change cluster issuer name to letsencrypt-dns01
by yyvf22 (＠yyvf22) 04 Ago '25

04 Ago '25

yyvf22 pushed to branch main at Root / Kubernetes / FluxCD Commits: afc9c7fe by yyvf at 2025-08-04T16:08:17-03:00 refactor(cert-manager): change cluster issuer name to letsencrypt-dns01 Issue #7 - - - - - 12 changed files: - apps/base/ademir/ing.yaml - apps/base/codimd/ing.yaml - apps/base/matrix/helmrelease.yaml - apps/base/netbox/helmrelease.yaml - apps/base/nextcloud/helmrelease.yaml - apps/base/rallly/ing.yaml - apps/base/wordpress/ing.yaml - infrastructure/base/cert-manager/clusterissuer.yaml - infrastructure/base/harbor/helmrelease.yaml - infrastructure/base/keycloak/ing.yaml - infrastructure/base/openbao/helmrelease.yaml - monitoring/base/kube-prometheus-stack/helmrelease.yaml Changes: ===================================== apps/base/ademir/ing.yaml ===================================== @@ -4,7 +4,7 @@ metadata: name: ademir namespace: ademir annotations: - cert-manager.io/cluster-issuer: letsencrypt-wildcard + cert-manager.io/cluster-issuer: letsencrypt-dns01 spec: ingressClassName: cilium rules: ===================================== apps/base/codimd/ing.yaml ===================================== @@ -4,7 +4,7 @@ metadata: name: codimd namespace: codimd annotations: - cert-manager.io/cluster-issuer: letsencrypt-wildcard + cert-manager.io/cluster-issuer: letsencrypt-dns01 spec: ingressClassName: cilium rules: ===================================== apps/base/matrix/helmrelease.yaml ===================================== @@ -16,7 +16,7 @@ spec: ingress: className: cilium annotations: - cert-manager.io/cluster-issuer: letsencrypt-wildcard + cert-manager.io/cluster-issuer: letsencrypt-dns01 tlsSecret: matrix-tls postgres: # do not use **internal** postgres db ===================================== apps/base/netbox/helmrelease.yaml ===================================== @@ -98,7 +98,7 @@ spec: enabled: true className: cilium annotations: - cert-manager.io/cluster-issuer: letsencrypt-wildcard + cert-manager.io/cluster-issuer: letsencrypt-dns01 hosts: - host: netbox.k8sstage.c3sl.ufpr.br paths: ===================================== apps/base/nextcloud/helmrelease.yaml ===================================== @@ -18,7 +18,7 @@ spec: enabled: true className: cilium annotations: - cert-manager.io/cluster-issuer: letsencrypt-wildcard + cert-manager.io/cluster-issuer: letsencrypt-dns01 tls: - secretName: nextcloud-tls hosts: ===================================== apps/base/rallly/ing.yaml ===================================== @@ -4,7 +4,7 @@ metadata: name: rallly namespace: rallly annotations: - cert-manager.io/cluster-issuer: letsencrypt-wildcard + cert-manager.io/cluster-issuer: letsencrypt-dns01 spec: ingressClassName: cilium rules: ===================================== apps/base/wordpress/ing.yaml ===================================== @@ -4,7 +4,7 @@ metadata: name: wordpress namespace: wordpress annotations: - cert-manager.io/cluster-issuer: letsencrypt-wildcard + cert-manager.io/cluster-issuer: letsencrypt-dns01 spec: ingressClassName: cilium rules: ===================================== infrastructure/base/cert-manager/clusterissuer.yaml ===================================== @@ -1,13 +1,13 @@ apiVersion: cert-manager.io/v1 kind: ClusterIssuer metadata: - name: letsencrypt-wildcard + name: letsencrypt-dns01 spec: acme: server: https://acme-v02.api.letsencrypt.org/directory email: root(a)inf.ufpr.br privateKeySecretRef: - name: letsencrypt-wildcard + name: letsencrypt-dns01 solvers: - dns01: rfc2136: ===================================== infrastructure/base/harbor/helmrelease.yaml ===================================== @@ -19,7 +19,7 @@ spec: hosts: core: harbor.c3sl.ufpr.br annotations: - cert-manager.io/cluster-issuer: "letsencrypt-wildcard" + cert-manager.io/cluster-issuer: letsencrypt-dns01 tls: certSource: secret secret: ===================================== infrastructure/base/keycloak/ing.yaml ===================================== @@ -4,7 +4,7 @@ metadata: name: keycloak namespace: keycloak annotations: - cert-manager.io/cluster-issuer: letsencrypt-wildcard + cert-manager.io/cluster-issuer: letsencrypt-dns01 spec: ingressClassName: cilium rules: ===================================== infrastructure/base/openbao/helmrelease.yaml ===================================== @@ -50,7 +50,7 @@ spec: annotations: ingress.cilium.io/loadbalancer-mode: dedicated ingress.cilium.io/service-type: LoadBalancer - cert-manager.io/cluster-issuer: letsencrypt-wildcard + cert-manager.io/cluster-issuer: letsencrypt-dns01 ingressClassName: cilium pathType: Prefix hosts: ===================================== monitoring/base/kube-prometheus-stack/helmrelease.yaml ===================================== @@ -19,7 +19,7 @@ spec: ingress: enabled: true annotations: - cert-manager.io/cluster-issuer: letsencrypt-wildcard + cert-manager.io/cluster-issuer: letsencrypt-dns01 ingressClassName: cilium hosts: - grafana.k8sstage.c3sl.ufpr.br View it on GitLab: https://gitlab.c3sl.ufpr.br/root/k8s/fluxcd/-/commit/afc9c7feec2521bcdf9593… -- View it on GitLab: https://gitlab.c3sl.ufpr.br/root/k8s/fluxcd/-/commit/afc9c7feec2521bcdf9593… You're receiving this email because of your account on gitlab.c3sl.ufpr.br.

1 0

[Git][root/k8s/fluxcd][main] refactor(fluxcd): #6 move keycloak to infrastructure
by yyvf22 (＠yyvf22) 04 Ago '25

04 Ago '25

yyvf22 pushed to branch main at Root / Kubernetes / FluxCD Commits: 80265ef6 by yyvf at 2025-08-04T15:37:59-03:00 refactor(fluxcd): #6 move keycloak to infrastructure - - - - - 10 changed files: - apps/stage/kustomization.yaml - apps/base/keycloak/externalsecret.yaml → infrastructure/base/keycloak/es.yaml - apps/base/keycloak/ing.yaml → infrastructure/base/keycloak/ing.yaml - apps/base/keycloak/kustomization.yaml → infrastructure/base/keycloak/kustomization.yaml - apps/base/keycloak/ns.yaml → infrastructure/base/keycloak/ns.yaml - apps/base/keycloak/sts.yaml → infrastructure/base/keycloak/sts.yaml - apps/base/keycloak/svc.yaml → infrastructure/base/keycloak/svc.yaml - infrastructure/prod/kustomization.yaml - infrastructure/stage/kustomization.yaml - monitoring/prod/kustomization.yaml Changes: ===================================== apps/stage/kustomization.yaml ===================================== @@ -3,7 +3,6 @@ kind: Kustomization resources: - ../base/ademir - ../base/codimd - - ../base/keycloak - ../base/matrix - ../base/nextcloud - ../base/rallly ===================================== apps/base/keycloak/externalsecret.yaml → infrastructure/base/keycloak/es.yaml ===================================== ===================================== apps/base/keycloak/ing.yaml → infrastructure/base/keycloak/ing.yaml ===================================== ===================================== apps/base/keycloak/kustomization.yaml → infrastructure/base/keycloak/kustomization.yaml ===================================== @@ -1,4 +1,4 @@ -apiVersion: +apiVersion: kustomize.config.k8s.io/v1beta1 kind: Kustomization metadata: name: keycloak @@ -7,4 +7,4 @@ resources: - sts.yaml - svc.yaml - ing.yaml - - externalsecret.yaml + - es.yaml ===================================== apps/base/keycloak/ns.yaml → infrastructure/base/keycloak/ns.yaml ===================================== ===================================== apps/base/keycloak/sts.yaml → infrastructure/base/keycloak/sts.yaml ===================================== ===================================== apps/base/keycloak/svc.yaml → infrastructure/base/keycloak/svc.yaml ===================================== ===================================== infrastructure/prod/kustomization.yaml ===================================== @@ -2,6 +2,6 @@ apiVersion: kustomize.config.k8s.io/v1beta1 kind: Kustomization resources: - ../base/cilium + - ./ippool.yaml - ../base/ceph-csi - ../base/cert-manager - - ./ippool.yaml ===================================== infrastructure/stage/kustomization.yaml ===================================== @@ -9,4 +9,5 @@ resources: - ../base/external-secrets - ../base/harbor - ../base/gitlab-runner + - ../base/keycloak - ../base/etcd-backup ===================================== monitoring/prod/kustomization.yaml ===================================== @@ -1,2 +1,3 @@ apiVersion: kustomize.config.k8s.io/v1beta1 kind: Kustomization +resources: [] View it on GitLab: https://gitlab.c3sl.ufpr.br/root/k8s/fluxcd/-/commit/80265ef6853066c6f743db… -- View it on GitLab: https://gitlab.c3sl.ufpr.br/root/k8s/fluxcd/-/commit/80265ef6853066c6f743db… You're receiving this email because of your account on gitlab.c3sl.ufpr.br.

1 0

[Git][root/k8s/fluxcd][main] refactor(fluxcd): #6 move openbao to infrastructure
by yyvf22 (＠yyvf22) 04 Ago '25

04 Ago '25

yyvf22 pushed to branch main at Root / Kubernetes / FluxCD Commits: 575ab21d by yyvf at 2025-08-04T15:32:05-03:00 refactor(fluxcd): #6 move openbao to infrastructure - - - - - 14 changed files: - − apps/base/gitlab-runner/es.yaml - − apps/base/gitlab-runner/helmrelease.yaml - − apps/base/gitlab-runner/helmrepo.yaml - − apps/base/gitlab-runner/kustomization.yaml - − apps/base/gitlab-runner/ns.yaml - − apps/base/gitlab-runner/pvc.yaml - apps/stage/kustomization.yaml - apps/base/openbao/cj.yaml → infrastructure/base/openbao/cj.yaml - apps/base/openbao/es.yaml → infrastructure/base/openbao/es.yaml - apps/base/openbao/helmrelease.yaml → infrastructure/base/openbao/helmrelease.yaml - apps/base/openbao/helmrepo.yaml → infrastructure/base/openbao/helmrepo.yaml - apps/base/openbao/kustomization.yaml → infrastructure/base/openbao/kustomization.yaml - apps/base/openbao/ns.yaml → infrastructure/base/openbao/ns.yaml - infrastructure/stage/kustomization.yaml Changes: ===================================== apps/base/gitlab-runner/es.yaml deleted ===================================== @@ -1,25 +0,0 @@ -apiVersion: external-secrets.io/v1 -kind: ExternalSecret -metadata: - name: gitlab-runner - namespace: gitlab-runner -spec: - refreshInterval: "15s" - secretStoreRef: - name: openbao - kind: ClusterSecretStore - target: - name: gitlab-runner - data: - - secretKey: tokenUnprivileged - remoteRef: - key: gitlab-runner - property: tokenUnprivileged - - secretKey: tokenPrivilegedRoot - remoteRef: - key: gitlab-runner - property: tokenPrivilegedRoot - - secretKey: tokenPrivilegedC3SL - remoteRef: - key: gitlab-runner - property: tokenPrivilegedC3SL ===================================== apps/base/gitlab-runner/helmrelease.yaml deleted ===================================== @@ -1,195 +0,0 @@ -apiVersion: helm.toolkit.fluxcd.io/v2beta1 -kind: HelmRelease -metadata: - name: unprivileged - namespace: gitlab-runner -spec: - interval: 1m - chart: - spec: - chart: gitlab-runner - sourceRef: - kind: HelmRepository - name: gitlab-runner - values: - replicas: 1 - gitlabUrl: https://gitlab.c3sl.ufpr.br - rbac: - create: true - serviceAccount: - create: true - runners: - executor: kubernetes - config: | - [[runners]] - shell = "bash" - environment = ["FF_USE_ADVANCED_POD_SPEC_CONFIGURATION=true"] - [runners.kubernetes] - image = "harbor.c3sl.ufpr.br/root/gitlab-runner-base:latest" - ephemeral_storage_limit = "5Gi" - helper_ephemeral_storage_limit = "5Gi" - service_ephemeral_storage_limit = "5Gi" - [[runners.kubernetes.volumes.pvc]] - name = "unprivileged-gitlab-runner-cache" - mount_path = "/cache" - [[runners.kubernetes.pod_spec]] - name = "ephemeral-pvc" - patch = ''' - containers: - - name: build - volumeMounts: - - name: builds - mountPath: /builds - - name: helper - volumeMounts: - - name: builds - mountPath: /builds - volumes: - - name: builds - ephemeral: - volumeClaimTemplate: - spec: - storageClassName: csi-rbd-sc - accessModes: [ ReadWriteOnce ] - resources: - requests: - storage: 5Gi - ''' - securityContext: - allowPrivilegeEscalation: false - readOnlyRootFilesystem: false - runAsNonRoot: true - privileged: false - valuesFrom: - - kind: Secret - name: gitlab-runner - valuesKey: tokenUnprivileged - targetPath: runnerToken ---- -apiVersion: helm.toolkit.fluxcd.io/v2beta1 -kind: HelmRelease -metadata: - name: privileged-root - namespace: gitlab-runner -spec: - interval: 1m - chart: - spec: - chart: gitlab-runner - sourceRef: - kind: HelmRepository - name: gitlab-runner - values: - replicas: 1 - gitlabUrl: https://gitlab.c3sl.ufpr.br - rbac: - create: true - serviceAccount: - create: true - runners: - executor: kubernetes - config: | - [[runners]] - shell = "bash" - environment = ["FF_USE_ADVANCED_POD_SPEC_CONFIGURATION=true"] - [runners.kubernetes] - privileged = true - image = "harbor.c3sl.ufpr.br/root/gitlab-runner-base:latest" - ephemeral_storage_limit = "5Gi" - helper_ephemeral_storage_limit = "5Gi" - service_ephemeral_storage_limit = "5Gi" - [[runners.kubernetes.volumes.pvc]] - name = "privileged-root-gitlab-runner-cache" - mount_path = "/cache" - [[runners.kubernetes.pod_spec]] - name = "ephemeral-pvc" - patch = ''' - containers: - - name: build - volumeMounts: - - name: builds - mountPath: /builds - - name: helper - volumeMounts: - - name: builds - mountPath: /builds - volumes: - - name: builds - ephemeral: - volumeClaimTemplate: - spec: - storageClassName: csi-rbd-sc - accessModes: [ ReadWriteOnce ] - resources: - requests: - storage: 5Gi - ''' - valuesFrom: - - kind: Secret - name: gitlab-runner - valuesKey: tokenPrivilegedRoot - targetPath: runnerToken ---- -apiVersion: helm.toolkit.fluxcd.io/v2beta1 -kind: HelmRelease -metadata: - name: privileged-c3sl - namespace: gitlab-runner -spec: - interval: 1m - chart: - spec: - chart: gitlab-runner - sourceRef: - kind: HelmRepository - name: gitlab-runner - values: - replicas: 1 - gitlabUrl: https://gitlab.c3sl.ufpr.br - rbac: - create: true - serviceAccount: - create: true - runners: - executor: kubernetes - config: | - [[runners]] - shell = "bash" - environment = ["FF_USE_ADVANCED_POD_SPEC_CONFIGURATION=true"] - [runners.kubernetes] - privileged = true - image = "harbor.c3sl.ufpr.br/root/gitlab-runner-base:latest" - ephemeral_storage_limit = "5Gi" - helper_ephemeral_storage_limit = "5Gi" - service_ephemeral_storage_limit = "5Gi" - [[runners.kubernetes.volumes.pvc]] - name = "privileged-c3sl-gitlab-runner-cache" - mount_path = "/cache" - [[runners.kubernetes.pod_spec]] - name = "ephemeral-pvc" - patch = ''' - containers: - - name: build - volumeMounts: - - name: builds - mountPath: /builds - - name: helper - volumeMounts: - - name: builds - mountPath: /builds - volumes: - - name: builds - ephemeral: - volumeClaimTemplate: - spec: - storageClassName: csi-rbd-sc - accessModes: [ ReadWriteOnce ] - resources: - requests: - storage: 5Gi - ''' - valuesFrom: - - kind: Secret - name: gitlab-runner - valuesKey: tokenPrivilegedC3SL - targetPath: runnerToken ===================================== apps/base/gitlab-runner/helmrepo.yaml deleted ===================================== @@ -1,8 +0,0 @@ -apiVersion: source.toolkit.fluxcd.io/v1 -kind: HelmRepository -metadata: - name: gitlab-runner - namespace: gitlab-runner -spec: - interval: 1m0s - url: https://charts.gitlab.io ===================================== apps/base/gitlab-runner/kustomization.yaml deleted ===================================== @@ -1,8 +0,0 @@ -apiVersion: kustomize.config.k8s.io/v1beta1 -kind: Kustomization -resources: - - ns.yaml - - helmrepo.yaml - - helmrelease.yaml - - es.yaml - - pvc.yaml ===================================== apps/base/gitlab-runner/ns.yaml deleted ===================================== @@ -1,6 +0,0 @@ -apiVersion: v1 -kind: Namespace -metadata: - labels: - pod-security.kubernetes.io/enforce: privileged - name: gitlab-runner ===================================== apps/base/gitlab-runner/pvc.yaml deleted ===================================== @@ -1,41 +0,0 @@ -apiVersion: v1 -kind: PersistentVolumeClaim -metadata: - name: privileged-root-gitlab-runner-cache - namespace: gitlab-runner - labels: - app: gitlab-runner -spec: - accessModes: - - ReadWriteOnce - resources: - requests: - storage: 20Gi ---- -apiVersion: v1 -kind: PersistentVolumeClaim -metadata: - name: privileged-c3sl-gitlab-runner-cache - namespace: gitlab-runner - labels: - app: gitlab-runner -spec: - accessModes: - - ReadWriteOnce - resources: - requests: - storage: 20Gi ---- -apiVersion: v1 -kind: PersistentVolumeClaim -metadata: - name: unprivileged-gitlab-runner-cache - namespace: gitlab-runner - labels: - app: gitlab-runner -spec: - accessModes: - - ReadWriteOnce - resources: - requests: - storage: 20Gi ===================================== apps/stage/kustomization.yaml ===================================== @@ -1,8 +1,6 @@ apiVersion: kustomize.config.k8s.io/v1beta1 kind: Kustomization resources: - - ../base/openbao - # Apps - ../base/ademir - ../base/codimd - ../base/keycloak ===================================== apps/base/openbao/cj.yaml → infrastructure/base/openbao/cj.yaml ===================================== ===================================== apps/base/openbao/es.yaml → infrastructure/base/openbao/es.yaml ===================================== ===================================== apps/base/openbao/helmrelease.yaml → infrastructure/base/openbao/helmrelease.yaml ===================================== ===================================== apps/base/openbao/helmrepo.yaml → infrastructure/base/openbao/helmrepo.yaml ===================================== ===================================== apps/base/openbao/kustomization.yaml → infrastructure/base/openbao/kustomization.yaml ===================================== ===================================== apps/base/openbao/ns.yaml → infrastructure/base/openbao/ns.yaml ===================================== ===================================== infrastructure/stage/kustomization.yaml ===================================== @@ -5,6 +5,7 @@ resources: - ./ippool.yaml - ../base/ceph-csi - ../base/cert-manager + - ../base/openbao - ../base/external-secrets - ../base/harbor - ../base/gitlab-runner View it on GitLab: https://gitlab.c3sl.ufpr.br/root/k8s/fluxcd/-/commit/575ab21d9b6411c8b048ba… -- View it on GitLab: https://gitlab.c3sl.ufpr.br/root/k8s/fluxcd/-/commit/575ab21d9b6411c8b048ba… You're receiving this email because of your account on gitlab.c3sl.ufpr.br.

1 0

[Git][root/k8s/fluxcd][main] refactor(fluxcd): #6 move harbor to infrastructure
by yyvf22 (＠yyvf22) 04 Ago '25

04 Ago '25

yyvf22 pushed to branch main at Root / Kubernetes / FluxCD Commits: 747c4001 by yyvf at 2025-08-04T15:27:07-03:00 refactor(fluxcd): #6 move harbor to infrastructure - - - - - 7 changed files: - apps/stage/kustomization.yaml - apps/base/harbor/external-secret.yaml → infrastructure/base/harbor/es.yaml - apps/base/harbor/helmrelease.yaml → infrastructure/base/harbor/helmrelease.yaml - apps/base/harbor/helmrepo.yaml → infrastructure/base/harbor/helmrepo.yaml - apps/base/harbor/kustomization.yaml → infrastructure/base/harbor/kustomization.yaml - apps/base/harbor/ns.yaml → infrastructure/base/harbor/ns.yaml - infrastructure/stage/kustomization.yaml Changes: ===================================== apps/stage/kustomization.yaml ===================================== @@ -5,7 +5,6 @@ resources: # Apps - ../base/ademir - ../base/codimd - - ../base/harbor - ../base/keycloak - ../base/matrix - ../base/nextcloud ===================================== apps/base/harbor/external-secret.yaml → infrastructure/base/harbor/es.yaml ===================================== ===================================== apps/base/harbor/helmrelease.yaml → infrastructure/base/harbor/helmrelease.yaml ===================================== ===================================== apps/base/harbor/helmrepo.yaml → infrastructure/base/harbor/helmrepo.yaml ===================================== ===================================== apps/base/harbor/kustomization.yaml → infrastructure/base/harbor/kustomization.yaml ===================================== @@ -4,4 +4,4 @@ resources: - ns.yaml - helmrepo.yaml - helmrelease.yaml - - external-secret.yaml + - es.yaml ===================================== apps/base/harbor/ns.yaml → infrastructure/base/harbor/ns.yaml ===================================== ===================================== infrastructure/stage/kustomization.yaml ===================================== @@ -6,5 +6,6 @@ resources: - ../base/ceph-csi - ../base/cert-manager - ../base/external-secrets + - ../base/harbor - ../base/gitlab-runner - ../base/etcd-backup View it on GitLab: https://gitlab.c3sl.ufpr.br/root/k8s/fluxcd/-/commit/747c4001c611822f4e781c… -- View it on GitLab: https://gitlab.c3sl.ufpr.br/root/k8s/fluxcd/-/commit/747c4001c611822f4e781c… You're receiving this email because of your account on gitlab.c3sl.ufpr.br.

1 0

[Git][root/k8s/fluxcd][main] refactor(fluxcd): move gitlab-runner to infrastructure
by yyvf22 (＠yyvf22) 04 Ago '25

04 Ago '25

yyvf22 pushed to branch main at Root / Kubernetes / FluxCD Commits: dd9a7fd2 by yyvf at 2025-08-04T15:20:26-03:00 refactor(fluxcd): move gitlab-runner to infrastructure - - - - - 8 changed files: - apps/stage/kustomization.yaml - + infrastructure/base/gitlab-runner/es.yaml - + infrastructure/base/gitlab-runner/helmrelease.yaml - + infrastructure/base/gitlab-runner/helmrepo.yaml - + infrastructure/base/gitlab-runner/kustomization.yaml - + infrastructure/base/gitlab-runner/ns.yaml - + infrastructure/base/gitlab-runner/pvc.yaml - infrastructure/stage/kustomization.yaml Changes: ===================================== apps/stage/kustomization.yaml ===================================== @@ -5,7 +5,6 @@ resources: # Apps - ../base/ademir - ../base/codimd - - ../base/gitlab-runner - ../base/harbor - ../base/keycloak - ../base/matrix ===================================== infrastructure/base/gitlab-runner/es.yaml ===================================== @@ -0,0 +1,25 @@ +apiVersion: external-secrets.io/v1 +kind: ExternalSecret +metadata: + name: gitlab-runner + namespace: gitlab-runner +spec: + refreshInterval: "15s" + secretStoreRef: + name: openbao + kind: ClusterSecretStore + target: + name: gitlab-runner + data: + - secretKey: tokenUnprivileged + remoteRef: + key: gitlab-runner + property: tokenUnprivileged + - secretKey: tokenPrivilegedRoot + remoteRef: + key: gitlab-runner + property: tokenPrivilegedRoot + - secretKey: tokenPrivilegedC3SL + remoteRef: + key: gitlab-runner + property: tokenPrivilegedC3SL ===================================== infrastructure/base/gitlab-runner/helmrelease.yaml ===================================== @@ -0,0 +1,195 @@ +apiVersion: helm.toolkit.fluxcd.io/v2beta1 +kind: HelmRelease +metadata: + name: unprivileged + namespace: gitlab-runner +spec: + interval: 1m + chart: + spec: + chart: gitlab-runner + sourceRef: + kind: HelmRepository + name: gitlab-runner + values: + replicas: 1 + gitlabUrl: https://gitlab.c3sl.ufpr.br + rbac: + create: true + serviceAccount: + create: true + runners: + executor: kubernetes + config: | + [[runners]] + shell = "bash" + environment = ["FF_USE_ADVANCED_POD_SPEC_CONFIGURATION=true"] + [runners.kubernetes] + image = "harbor.c3sl.ufpr.br/root/gitlab-runner-base:latest" + ephemeral_storage_limit = "5Gi" + helper_ephemeral_storage_limit = "5Gi" + service_ephemeral_storage_limit = "5Gi" + [[runners.kubernetes.volumes.pvc]] + name = "unprivileged-gitlab-runner-cache" + mount_path = "/cache" + [[runners.kubernetes.pod_spec]] + name = "ephemeral-pvc" + patch = ''' + containers: + - name: build + volumeMounts: + - name: builds + mountPath: /builds + - name: helper + volumeMounts: + - name: builds + mountPath: /builds + volumes: + - name: builds + ephemeral: + volumeClaimTemplate: + spec: + storageClassName: csi-rbd-sc + accessModes: [ ReadWriteOnce ] + resources: + requests: + storage: 5Gi + ''' + securityContext: + allowPrivilegeEscalation: false + readOnlyRootFilesystem: false + runAsNonRoot: true + privileged: false + valuesFrom: + - kind: Secret + name: gitlab-runner + valuesKey: tokenUnprivileged + targetPath: runnerToken +--- +apiVersion: helm.toolkit.fluxcd.io/v2beta1 +kind: HelmRelease +metadata: + name: privileged-root + namespace: gitlab-runner +spec: + interval: 1m + chart: + spec: + chart: gitlab-runner + sourceRef: + kind: HelmRepository + name: gitlab-runner + values: + replicas: 1 + gitlabUrl: https://gitlab.c3sl.ufpr.br + rbac: + create: true + serviceAccount: + create: true + runners: + executor: kubernetes + config: | + [[runners]] + shell = "bash" + environment = ["FF_USE_ADVANCED_POD_SPEC_CONFIGURATION=true"] + [runners.kubernetes] + privileged = true + image = "harbor.c3sl.ufpr.br/root/gitlab-runner-base:latest" + ephemeral_storage_limit = "5Gi" + helper_ephemeral_storage_limit = "5Gi" + service_ephemeral_storage_limit = "5Gi" + [[runners.kubernetes.volumes.pvc]] + name = "privileged-root-gitlab-runner-cache" + mount_path = "/cache" + [[runners.kubernetes.pod_spec]] + name = "ephemeral-pvc" + patch = ''' + containers: + - name: build + volumeMounts: + - name: builds + mountPath: /builds + - name: helper + volumeMounts: + - name: builds + mountPath: /builds + volumes: + - name: builds + ephemeral: + volumeClaimTemplate: + spec: + storageClassName: csi-rbd-sc + accessModes: [ ReadWriteOnce ] + resources: + requests: + storage: 5Gi + ''' + valuesFrom: + - kind: Secret + name: gitlab-runner + valuesKey: tokenPrivilegedRoot + targetPath: runnerToken +--- +apiVersion: helm.toolkit.fluxcd.io/v2beta1 +kind: HelmRelease +metadata: + name: privileged-c3sl + namespace: gitlab-runner +spec: + interval: 1m + chart: + spec: + chart: gitlab-runner + sourceRef: + kind: HelmRepository + name: gitlab-runner + values: + replicas: 1 + gitlabUrl: https://gitlab.c3sl.ufpr.br + rbac: + create: true + serviceAccount: + create: true + runners: + executor: kubernetes + config: | + [[runners]] + shell = "bash" + environment = ["FF_USE_ADVANCED_POD_SPEC_CONFIGURATION=true"] + [runners.kubernetes] + privileged = true + image = "harbor.c3sl.ufpr.br/root/gitlab-runner-base:latest" + ephemeral_storage_limit = "5Gi" + helper_ephemeral_storage_limit = "5Gi" + service_ephemeral_storage_limit = "5Gi" + [[runners.kubernetes.volumes.pvc]] + name = "privileged-c3sl-gitlab-runner-cache" + mount_path = "/cache" + [[runners.kubernetes.pod_spec]] + name = "ephemeral-pvc" + patch = ''' + containers: + - name: build + volumeMounts: + - name: builds + mountPath: /builds + - name: helper + volumeMounts: + - name: builds + mountPath: /builds + volumes: + - name: builds + ephemeral: + volumeClaimTemplate: + spec: + storageClassName: csi-rbd-sc + accessModes: [ ReadWriteOnce ] + resources: + requests: + storage: 5Gi + ''' + valuesFrom: + - kind: Secret + name: gitlab-runner + valuesKey: tokenPrivilegedC3SL + targetPath: runnerToken ===================================== infrastructure/base/gitlab-runner/helmrepo.yaml ===================================== @@ -0,0 +1,8 @@ +apiVersion: source.toolkit.fluxcd.io/v1 +kind: HelmRepository +metadata: + name: gitlab-runner + namespace: gitlab-runner +spec: + interval: 1m0s + url: https://charts.gitlab.io ===================================== infrastructure/base/gitlab-runner/kustomization.yaml ===================================== @@ -0,0 +1,8 @@ +apiVersion: kustomize.config.k8s.io/v1beta1 +kind: Kustomization +resources: + - ns.yaml + - helmrepo.yaml + - helmrelease.yaml + - es.yaml + - pvc.yaml ===================================== infrastructure/base/gitlab-runner/ns.yaml ===================================== @@ -0,0 +1,6 @@ +apiVersion: v1 +kind: Namespace +metadata: + labels: + pod-security.kubernetes.io/enforce: privileged + name: gitlab-runner ===================================== infrastructure/base/gitlab-runner/pvc.yaml ===================================== @@ -0,0 +1,41 @@ +apiVersion: v1 +kind: PersistentVolumeClaim +metadata: + name: privileged-root-gitlab-runner-cache + namespace: gitlab-runner + labels: + app: gitlab-runner +spec: + accessModes: + - ReadWriteOnce + resources: + requests: + storage: 20Gi +--- +apiVersion: v1 +kind: PersistentVolumeClaim +metadata: + name: privileged-c3sl-gitlab-runner-cache + namespace: gitlab-runner + labels: + app: gitlab-runner +spec: + accessModes: + - ReadWriteOnce + resources: + requests: + storage: 20Gi +--- +apiVersion: v1 +kind: PersistentVolumeClaim +metadata: + name: unprivileged-gitlab-runner-cache + namespace: gitlab-runner + labels: + app: gitlab-runner +spec: + accessModes: + - ReadWriteOnce + resources: + requests: + storage: 20Gi ===================================== infrastructure/stage/kustomization.yaml ===================================== @@ -2,8 +2,9 @@ apiVersion: kustomize.config.k8s.io/v1beta1 kind: Kustomization resources: - ../base/cilium + - ./ippool.yaml - ../base/ceph-csi - ../base/cert-manager - ../base/external-secrets + - ../base/gitlab-runner - ../base/etcd-backup - - ./ippool.yaml View it on GitLab: https://gitlab.c3sl.ufpr.br/root/k8s/fluxcd/-/commit/dd9a7fd214ab3377eb2688… -- View it on GitLab: https://gitlab.c3sl.ufpr.br/root/k8s/fluxcd/-/commit/dd9a7fd214ab3377eb2688… You're receiving this email because of your account on gitlab.c3sl.ufpr.br.

1 0

[Git][root/k8s/fluxcd][main] 2 commits: refactor(fluxcd): move external-secrets and etcd-backup to infrastructure
by yyvf22 (＠yyvf22) 04 Ago '25

04 Ago '25

yyvf22 pushed to branch main at Root / Kubernetes / FluxCD Commits: 0312d69d by yyvf at 2025-08-04T15:13:26-03:00 refactor(fluxcd): move external-secrets and etcd-backup to infrastructure - - - - - 6496df11 by yyvf22 at 2025-08-04T18:15:14+00:00 refactor(fluxcd): move external-secrets and etcd-backup to infrastructure See merge request root/k8s/fluxcd!2 - - - - - 13 changed files: - apps/prod/kustomization.yaml - apps/stage/kustomization.yaml - apps/base/etcd-backup/cj.yaml → infrastructure/base/etcd-backup/cj.yaml - apps/base/etcd-backup/es.yaml → infrastructure/base/etcd-backup/es.yaml - apps/base/etcd-backup/kustomization.yaml → infrastructure/base/etcd-backup/kustomization.yaml - apps/base/etcd-backup/ns.yaml → infrastructure/base/etcd-backup/ns.yaml - apps/base/etcd-backup/sa.yaml → infrastructure/base/etcd-backup/sa.yaml - apps/base/external-secrets/clustersecretstore.yaml → infrastructure/base/external-secrets/clustersecretstore.yaml - apps/base/external-secrets/helmrelease.yaml → infrastructure/base/external-secrets/helmrelease.yaml - apps/base/external-secrets/helmrepo.yaml → infrastructure/base/external-secrets/helmrepo.yaml - apps/base/external-secrets/kustomization.yaml → infrastructure/base/external-secrets/kustomization.yaml - apps/base/external-secrets/ns.yaml → infrastructure/base/external-secrets/ns.yaml - infrastructure/stage/kustomization.yaml Changes: ===================================== apps/prod/kustomization.yaml ===================================== @@ -1,11 +1,3 @@ apiVersion: kustomize.config.k8s.io/v1beta1 kind: Kustomization -resources: - -# - ../base/ademir -#- ../base/gitlab-runner -# - ../base/wordpress -# - ../base/harbor -# - ../base/keycloak -# - ../base/netbox -# - ../base/nextcloud +resources: [] ===================================== apps/stage/kustomization.yaml ===================================== @@ -2,8 +2,6 @@ apiVersion: kustomize.config.k8s.io/v1beta1 kind: Kustomization resources: - ../base/openbao - - ../base/external-secrets - - ../base/etcd-backup # Apps - ../base/ademir - ../base/codimd ===================================== apps/base/etcd-backup/cj.yaml → infrastructure/base/etcd-backup/cj.yaml ===================================== ===================================== apps/base/etcd-backup/es.yaml → infrastructure/base/etcd-backup/es.yaml ===================================== ===================================== apps/base/etcd-backup/kustomization.yaml → infrastructure/base/etcd-backup/kustomization.yaml ===================================== ===================================== apps/base/etcd-backup/ns.yaml → infrastructure/base/etcd-backup/ns.yaml ===================================== ===================================== apps/base/etcd-backup/sa.yaml → infrastructure/base/etcd-backup/sa.yaml ===================================== ===================================== apps/base/external-secrets/clustersecretstore.yaml → infrastructure/base/external-secrets/clustersecretstore.yaml ===================================== ===================================== apps/base/external-secrets/helmrelease.yaml → infrastructure/base/external-secrets/helmrelease.yaml ===================================== ===================================== apps/base/external-secrets/helmrepo.yaml → infrastructure/base/external-secrets/helmrepo.yaml ===================================== ===================================== apps/base/external-secrets/kustomization.yaml → infrastructure/base/external-secrets/kustomization.yaml ===================================== ===================================== apps/base/external-secrets/ns.yaml → infrastructure/base/external-secrets/ns.yaml ===================================== ===================================== infrastructure/stage/kustomization.yaml ===================================== @@ -4,4 +4,6 @@ resources: - ../base/cilium - ../base/ceph-csi - ../base/cert-manager + - ../base/external-secrets + - ../base/etcd-backup - ./ippool.yaml View it on GitLab: https://gitlab.c3sl.ufpr.br/root/k8s/fluxcd/-/compare/41aaeda5160f13a861847… -- View it on GitLab: https://gitlab.c3sl.ufpr.br/root/k8s/fluxcd/-/compare/41aaeda5160f13a861847… You're receiving this email because of your account on gitlab.c3sl.ufpr.br.

1 0

[Git][root/k8s/fluxcd][main] 2 commits: refactor(fluxcd): infrastructure and monitoring
by yyvf22 (＠yyvf22) 04 Ago '25

04 Ago '25

yyvf22 pushed to branch main at Root / Kubernetes / FluxCD Commits: db0b1014 by yyvf at 2025-08-04T14:57:55-03:00 refactor(fluxcd): infrastructure and monitoring - - - - - 41aaeda5 by yyvf22 at 2025-08-04T18:06:26+00:00 Merge branch 'refactor' into 'main' refactor(fluxcd): infrastructure and monitoring See merge request root/k8s/fluxcd!1 - - - - - 21 changed files: - infrastructure/base/controllers/ceph-csi.yaml → infrastructure/base/ceph-csi/helmrelease.yaml - + infrastructure/base/ceph-csi/helmrepo.yaml - infrastructure/base/controllers/kustomization.yaml → infrastructure/base/ceph-csi/kustomization.yaml - + infrastructure/base/ceph-csi/ns.yaml - infrastructure/base/configs/cluster-issuers.yaml → infrastructure/base/cert-manager/clusterissuer.yaml - infrastructure/base/controllers/cert-manager.yaml → infrastructure/base/cert-manager/helmrelease.yaml - + infrastructure/base/cert-manager/helmrepo.yaml - + infrastructure/base/cert-manager/kustomization.yaml - + infrastructure/base/cert-manager/ns.yaml - infrastructure/base/controllers/cilium.yaml → infrastructure/base/cilium/helmrelease.yaml - + infrastructure/base/cilium/helmrepo.yaml - infrastructure/base/configs/kustomization.yaml → infrastructure/base/cilium/kustomization.yaml - infrastructure/base/configs/l2announcement.yaml → infrastructure/base/cilium/l2announcement.yaml - infrastructure/prod/kustomization.yaml - infrastructure/stage/kustomization.yaml - monitoring/base/controllers/kube-prometheus-stack/es.yaml → monitoring/base/kube-prometheus-stack/es.yaml - monitoring/base/controllers/kube-prometheus-stack/helmrelease.yaml → monitoring/base/kube-prometheus-stack/helmrelease.yaml - monitoring/base/controllers/kube-prometheus-stack/helmrepo.yaml → monitoring/base/kube-prometheus-stack/helmrepo.yaml - monitoring/base/controllers/kube-prometheus-stack/kustomization.yaml → monitoring/base/kube-prometheus-stack/kustomization.yaml - monitoring/base/controllers/kube-prometheus-stack/ns.yaml → monitoring/base/kube-prometheus-stack/ns.yaml - monitoring/stage/kustomization.yaml Changes: ===================================== infrastructure/base/controllers/ceph-csi.yaml → infrastructure/base/ceph-csi/helmrelease.yaml ===================================== @@ -1,19 +1,3 @@ -apiVersion: v1 -kind: Namespace -metadata: - name: ceph - labels: - pod-security.kubernetes.io/enforce: privileged ---- -apiVersion: source.toolkit.fluxcd.io/v1 -kind: HelmRepository -metadata: - name: ceph - namespace: ceph -spec: - interval: 1m0s - url: https://ceph.github.io/csi-charts ---- apiVersion: helm.toolkit.fluxcd.io/v2beta1 kind: HelmRelease metadata: ===================================== infrastructure/base/ceph-csi/helmrepo.yaml ===================================== @@ -0,0 +1,8 @@ +apiVersion: source.toolkit.fluxcd.io/v1 +kind: HelmRepository +metadata: + name: ceph + namespace: ceph +spec: + interval: 1m0s + url: https://ceph.github.io/csi-charts ===================================== infrastructure/base/controllers/kustomization.yaml → infrastructure/base/ceph-csi/kustomization.yaml ===================================== @@ -1,6 +1,6 @@ apiVersion: kustomize.config.k8s.io/v1beta1 kind: Kustomization resources: - - cert-manager.yaml - - cilium.yaml - - ceph-csi.yaml + - ns.yaml + - helmrepo.yaml + - helmrelease.yaml ===================================== infrastructure/base/ceph-csi/ns.yaml ===================================== @@ -0,0 +1,6 @@ +apiVersion: v1 +kind: Namespace +metadata: + name: ceph + labels: + pod-security.kubernetes.io/enforce: privileged ===================================== infrastructure/base/configs/cluster-issuers.yaml → infrastructure/base/cert-manager/clusterissuer.yaml ===================================== @@ -1,25 +1,5 @@ apiVersion: cert-manager.io/v1 kind: ClusterIssuer -metadata: - name: letsencrypt -spec: - acme: - # The ACME server URL. - # This is replaced by /clusters/prod/infrastructure.yaml. - server: https://acme-v02.api.letsencrypt.org/directory - # Email address used for ACME registration - email: root(a)inf.ufpr.br - # Name of a secret used to store the ACME account private key - privateKeySecretRef: - name: letsencrypt - # Enable the HTTP-01 challenge provider - solvers: - - http01: - ingress: - ingressClassName: nginx ---- -apiVersion: cert-manager.io/v1 -kind: ClusterIssuer metadata: name: letsencrypt-wildcard spec: ===================================== infrastructure/base/controllers/cert-manager.yaml → infrastructure/base/cert-manager/helmrelease.yaml ===================================== @@ -1,17 +1,3 @@ -apiVersion: v1 -kind: Namespace -metadata: - name: cert-manager ---- -apiVersion: source.toolkit.fluxcd.io/v1 -kind: HelmRepository -metadata: - name: cert-manager - namespace: cert-manager -spec: - interval: 1m0s - url: https://charts.jetstack.io ---- apiVersion: helm.toolkit.fluxcd.io/v2beta1 kind: HelmRelease metadata: ===================================== infrastructure/base/cert-manager/helmrepo.yaml ===================================== @@ -0,0 +1,8 @@ +apiVersion: source.toolkit.fluxcd.io/v1 +kind: HelmRepository +metadata: + name: cert-manager + namespace: cert-manager +spec: + interval: 1m0s + url: https://charts.jetstack.io ===================================== infrastructure/base/cert-manager/kustomization.yaml ===================================== @@ -0,0 +1,7 @@ +apiVersion: kustomize.config.k8s.io/v1beta1 +kind: Kustomization +resources: + - ns.yaml + - helmrepo.yaml + - helmrelease.yaml + - clusterissuer.yaml ===================================== infrastructure/base/cert-manager/ns.yaml ===================================== @@ -0,0 +1,4 @@ +apiVersion: v1 +kind: Namespace +metadata: + name: cert-manager ===================================== infrastructure/base/controllers/cilium.yaml → infrastructure/base/cilium/helmrelease.yaml ===================================== @@ -1,12 +1,3 @@ -apiVersion: source.toolkit.fluxcd.io/v1 -kind: HelmRepository -metadata: - name: cilium - namespace: kube-system -spec: - interval: 1h - url: https://helm.cilium.io/ ---- apiVersion: helm.toolkit.fluxcd.io/v2 kind: HelmRelease metadata: ===================================== infrastructure/base/cilium/helmrepo.yaml ===================================== @@ -0,0 +1,8 @@ +apiVersion: source.toolkit.fluxcd.io/v1 +kind: HelmRepository +metadata: + name: cilium + namespace: kube-system +spec: + interval: 1h + url: https://helm.cilium.io/ ===================================== infrastructure/base/configs/kustomization.yaml → infrastructure/base/cilium/kustomization.yaml ===================================== @@ -1,5 +1,6 @@ apiVersion: kustomize.config.k8s.io/v1beta1 kind: Kustomization resources: - - cluster-issuers.yaml + - helmrepo.yaml + - helmrelease.yaml - l2announcement.yaml ===================================== infrastructure/base/configs/l2announcement.yaml → infrastructure/base/cilium/l2announcement.yaml ===================================== ===================================== infrastructure/prod/kustomization.yaml ===================================== @@ -1,6 +1,7 @@ apiVersion: kustomize.config.k8s.io/v1beta1 kind: Kustomization resources: - - ../base/controllers - - ../base/configs + - ../base/cilium + - ../base/ceph-csi + - ../base/cert-manager - ./ippool.yaml ===================================== infrastructure/stage/kustomization.yaml ===================================== @@ -1,6 +1,7 @@ apiVersion: kustomize.config.k8s.io/v1beta1 kind: Kustomization resources: - - ../base/controllers - - ../base/configs + - ../base/cilium + - ../base/ceph-csi + - ../base/cert-manager - ./ippool.yaml ===================================== monitoring/base/controllers/kube-prometheus-stack/es.yaml → monitoring/base/kube-prometheus-stack/es.yaml ===================================== ===================================== monitoring/base/controllers/kube-prometheus-stack/helmrelease.yaml → monitoring/base/kube-prometheus-stack/helmrelease.yaml ===================================== ===================================== monitoring/base/controllers/kube-prometheus-stack/helmrepo.yaml → monitoring/base/kube-prometheus-stack/helmrepo.yaml ===================================== ===================================== monitoring/base/controllers/kube-prometheus-stack/kustomization.yaml → monitoring/base/kube-prometheus-stack/kustomization.yaml ===================================== ===================================== monitoring/base/controllers/kube-prometheus-stack/ns.yaml → monitoring/base/kube-prometheus-stack/ns.yaml ===================================== ===================================== monitoring/stage/kustomization.yaml ===================================== @@ -1,4 +1,4 @@ apiVersion: kustomize.config.k8s.io/v1beta1 kind: Kustomization resources: - - ../base/controllers/kube-prometheus-stack + - ../base/kube-prometheus-stack View it on GitLab: https://gitlab.c3sl.ufpr.br/root/k8s/fluxcd/-/compare/1812b554e5a230ce5d4e5… -- View it on GitLab: https://gitlab.c3sl.ufpr.br/root/k8s/fluxcd/-/compare/1812b554e5a230ce5d4e5… You're receiving this email because of your account on gitlab.c3sl.ufpr.br.

1 0

[Git][root/services/dns][main] add rbm-c3sl.c3local
by Bruno Sime Ferreira Nunes (＠bsfn19) 04 Ago '25

04 Ago '25

Bruno Sime Ferreira Nunes pushed to branch main at Root / Serviços / DNS Commits: b2811cd2 by Bruno Sime at 2025-08-04T14:25:18-03:00 add rbm-c3sl.c3local - - - - - 2 changed files: - interna-254.10.in-addr.arpa.zone - interna-c3local.zone Changes: ===================================== interna-254.10.in-addr.arpa.zone ===================================== @@ -338,6 +338,7 @@ $TTL 21600 48.224 IN PTR i21.c3local. 48.228 IN PTR b32.c3local. 48.229 IN PTR xuxa.c3local. +49.221 IN PTR rbm23-c3sl.c3local. 49.223 IN PTR h21.c3local. 49.224 IN PTR i22.c3local. 49.228 IN PTR b33.c3local. @@ -451,4 +452,4 @@ $TTL 21600 249.227 IN PTR mojito7.c3local. @ IN NS ns2.c3sl.ufpr.br. @ IN NS ns.c3sl.ufpr.br. -@ 21600 IN SOA ns.c3sl.ufpr.br. root.c3sl.ufpr.br. 1754326029 86400 7200 2592000 3600 +@ 21600 IN SOA ns.c3sl.ufpr.br. root.c3sl.ufpr.br. 1754327829 86400 7200 2592000 3600 ===================================== interna-c3local.zone ===================================== @@ -71,7 +71,7 @@ brioja IN A 10.254.221.54 buxfox IN A 10.254.237.8 @ IN NS ns2.c3sl.ufpr.br. @ IN NS ns.c3sl.ufpr.br. -@ 21600 IN SOA ns.c3sl.ufpr.br. root.c3sl.ufpr.br. 1754326029 86400 7200 2592000 3600 +@ 21600 IN SOA ns.c3sl.ufpr.br. root.c3sl.ufpr.br. 1754327829 86400 7200 2592000 3600 caio IN A 10.254.221.1 calvin IN A 10.254.229.6 carate IN A 10.254.221.43 @@ -368,6 +368,7 @@ rany IN A 10.254.221.93 raquel IN A 10.254.232.43 raquel2 IN A 10.254.232.1 raquel3 IN A 10.254.232.10 +rbm23-c3sl IN A 10.254.221.49 rei IN A 10.254.241.11 reino IN A 10.254.229.42 rhalah IN A 10.254.222.15 View it on GitLab: https://gitlab.c3sl.ufpr.br/root/services/dns/-/commit/b2811cd2bbed5b2d046b… -- View it on GitLab: https://gitlab.c3sl.ufpr.br/root/services/dns/-/commit/b2811cd2bbed5b2d046b… You're receiving this email because of your account on gitlab.c3sl.ufpr.br.

1 0