Initial upload

This commit is contained in:
Waldemar 2025-06-26 09:50:51 +02:00
parent a368827087
commit a6b864397a
56 changed files with 145 additions and 145 deletions

View file

@ -12,8 +12,8 @@ spec:
name: in-cluster name: in-cluster
namespace: argocd namespace: argocd
source: source:
path: "<no value>/<no value>/registry" path: "otc/localtest.me/registry"
repoURL: "https://<no value>/<no value>" repoURL: "https://forgejo.edf-bootstrap.cx.fg1.ffm.osc.live/DevFW-CICD/stacks-instances"
targetRevision: HEAD targetRevision: HEAD
project: default project: default
syncPolicy: syncPolicy:

View file

@ -12,8 +12,8 @@ spec:
name: in-cluster name: in-cluster
namespace: argocd namespace: argocd
source: source:
path: "<no value>/<no value>/stacks/core" path: "otc/localtest.me/stacks/core"
repoURL: "https://<no value>/<no value>" repoURL: "https://forgejo.edf-bootstrap.cx.fg1.ffm.osc.live/DevFW-CICD/stacks-instances"
targetRevision: HEAD targetRevision: HEAD
project: default project: default
syncPolicy: syncPolicy:

View file

@ -12,8 +12,8 @@ spec:
name: in-cluster name: in-cluster
namespace: argocd namespace: argocd
source: source:
path: "<no value>/<no value>/stacks/forgejo" path: "otc/localtest.me/stacks/forgejo"
repoURL: "https://<no value>/<no value>" repoURL: "https://forgejo.edf-bootstrap.cx.fg1.ffm.osc.live/DevFW-CICD/stacks-instances"
targetRevision: HEAD targetRevision: HEAD
project: default project: default
syncPolicy: syncPolicy:

View file

@ -12,8 +12,8 @@ spec:
name: in-cluster name: in-cluster
namespace: argocd namespace: argocd
source: source:
path: "<no value>/<no value>/stacks/local-backup" path: "otc/localtest.me/stacks/local-backup"
repoURL: "https://<no value>/<no value>" repoURL: "https://forgejo.edf-bootstrap.cx.fg1.ffm.osc.live/DevFW-CICD/stacks-instances"
targetRevision: HEAD targetRevision: HEAD
project: default project: default
syncPolicy: syncPolicy:

View file

@ -12,8 +12,8 @@ spec:
name: in-cluster name: in-cluster
namespace: argocd namespace: argocd
source: source:
path: "<no value>/<no value>/stacks/observability-client" path: "otc/localtest.me/stacks/observability-client"
repoURL: "https://<no value>/<no value>" repoURL: "https://forgejo.edf-bootstrap.cx.fg1.ffm.osc.live/DevFW-CICD/stacks-instances"
targetRevision: HEAD targetRevision: HEAD
project: default project: default
syncPolicy: syncPolicy:

View file

@ -12,8 +12,8 @@ spec:
name: in-cluster name: in-cluster
namespace: argocd namespace: argocd
source: source:
path: "<no value>/<no value>/stacks/observability" path: "otc/localtest.me/stacks/observability"
repoURL: "https://<no value>/<no value>" repoURL: "https://forgejo.edf-bootstrap.cx.fg1.ffm.osc.live/DevFW-CICD/stacks-instances"
targetRevision: HEAD targetRevision: HEAD
project: default project: default
syncPolicy: syncPolicy:

View file

@ -12,8 +12,8 @@ spec:
name: in-cluster name: in-cluster
namespace: argocd namespace: argocd
source: source:
path: "<no value>/<no value>/stacks/otc" path: "otc/localtest.me/stacks/otc"
repoURL: "https://<no value>/<no value>" repoURL: "https://forgejo.edf-bootstrap.cx.fg1.ffm.osc.live/DevFW-CICD/stacks-instances"
targetRevision: HEAD targetRevision: HEAD
project: default project: default
syncPolicy: syncPolicy:

View file

@ -12,8 +12,8 @@ spec:
name: in-cluster name: in-cluster
namespace: argocd namespace: argocd
source: source:
path: "<no value>/<no value>/stacks/ref-implementation" path: "otc/localtest.me/stacks/ref-implementation"
repoURL: "https://<no value>/<no value>" repoURL: "https://forgejo.edf-bootstrap.cx.fg1.ffm.osc.live/DevFW-CICD/stacks-instances"
targetRevision: HEAD targetRevision: HEAD
project: default project: default
syncPolicy: syncPolicy:

View file

@ -26,10 +26,10 @@ spec:
targetRevision: argo-cd-7.8.14-depends targetRevision: argo-cd-7.8.14-depends
helm: helm:
valueFiles: valueFiles:
- $values/<no value>/<no value>/stacks/core/argocd/values.yaml - $values/otc/localtest.me/stacks/core/argocd/values.yaml
- repoURL: https://<no value>/<no value> - repoURL: https://forgejo.edf-bootstrap.cx.fg1.ffm.osc.live/DevFW-CICD/stacks-instances
targetRevision: HEAD targetRevision: HEAD
ref: values ref: values
- repoURL: https://<no value>/<no value> - repoURL: https://forgejo.edf-bootstrap.cx.fg1.ffm.osc.live/DevFW-CICD/stacks-instances
targetRevision: HEAD targetRevision: HEAD
path: "<no value>/<no value>/stacks/core/argocd/manifests" path: "otc/localtest.me/stacks/core/argocd/manifests"

View file

@ -11,7 +11,7 @@ metadata:
spec: spec:
ingressClassName: nginx ingressClassName: nginx
rules: rules:
- host: <no value> - host: argocd.localtest.me
http: http:
paths: paths:
- backend: - backend:
@ -23,5 +23,5 @@ spec:
pathType: Prefix pathType: Prefix
tls: tls:
- hosts: - hosts:
- <no value> - argocd.localtest.me
secretName: argocd-net-tls secretName: argocd-net-tls

View file

@ -1,5 +1,5 @@
global: global:
domain: <no value> domain: argocd.localtest.me
configs: configs:
params: params:
@ -19,7 +19,7 @@ configs:
clusters: clusters:
- "*" - "*"
accounts.provider-argocd: apiKey accounts.provider-argocd: apiKey
url: https://<no value> url: https://argocd.localtest.me
rbac: rbac:
policy.csv: 'g, provider-argocd, role:admin' policy.csv: 'g, provider-argocd, role:admin'

View file

@ -19,6 +19,6 @@ spec:
destination: destination:
server: "https://kubernetes.default.svc" server: "https://kubernetes.default.svc"
source: source:
repoURL: https://<no value>/<no value> repoURL: https://forgejo.edf-bootstrap.cx.fg1.ffm.osc.live/DevFW-CICD/stacks-instances
targetRevision: HEAD targetRevision: HEAD
path: "<no value>/<no value>/stacks/forgejo/forgejo-runner" path: "otc/localtest.me/stacks/forgejo/forgejo-runner"

View file

@ -51,7 +51,7 @@ spec:
name: forgejo-runner-token name: forgejo-runner-token
key: token key: token
- name: FORGEJO_INSTANCE_URL - name: FORGEJO_INSTANCE_URL
value: https://<no value> value: https://gitea.localtest.me
volumeMounts: volumeMounts:
- name: runner-data - name: runner-data
mountPath: /data mountPath: /data

View file

@ -29,10 +29,10 @@ spec:
targetRevision: v9.0.0-depends targetRevision: v9.0.0-depends
helm: helm:
valueFiles: valueFiles:
- $values/<no value>/<no value>/stacks/forgejo/forgejo-server/values.yaml - $values/otc/localtest.me/stacks/forgejo/forgejo-server/values.yaml
- repoURL: https://<no value>/<no value> - repoURL: https://forgejo.edf-bootstrap.cx.fg1.ffm.osc.live/DevFW-CICD/stacks-instances
targetRevision: HEAD targetRevision: HEAD
ref: values ref: values
- repoURL: https://<no value>/<no value> - repoURL: https://forgejo.edf-bootstrap.cx.fg1.ffm.osc.live/DevFW-CICD/stacks-instances
targetRevision: HEAD targetRevision: HEAD
path: "<no value>/<no value>/stacks/forgejo/forgejo-server/manifests" path: "otc/localtest.me/stacks/forgejo/forgejo-server/manifests"

View file

@ -11,7 +11,7 @@ metadata:
spec: spec:
ingressClassName: nginx ingressClassName: nginx
rules: rules:
- host: <no value> - host: gitea.localtest.me
http: http:
paths: paths:
- backend: - backend:
@ -23,5 +23,5 @@ spec:
pathType: Prefix pathType: Prefix
tls: tls:
- hosts: - hosts:
- <no value> - gitea.localtest.me
secretName: forgejo-net-tls secretName: forgejo-net-tls

View file

@ -18,7 +18,7 @@ persistence:
enabled: true enabled: true
size: 200Gi size: 200Gi
annotations: annotations:
everest.io/crypt-key-id: <no value> everest.io/crypt-key-id:
test: test:
enabled: false enabled: false
@ -136,8 +136,8 @@ gitea:
SSL_MODE: verify-ca SSL_MODE: verify-ca
server: server:
DOMAIN: '<no value>' DOMAIN: 'gitea.localtest.me'
ROOT_URL: 'https://<no value>:443' ROOT_URL: 'https://gitea.localtest.me:443'
mailer: mailer:
ENABLED: true ENABLED: true

View file

@ -15,14 +15,14 @@ spec:
helm: helm:
releaseName: minio releaseName: minio
valueFiles: valueFiles:
- $values/<no value>/<no value>/stacks/local-backup/minio/helm/values.yaml - $values/otc/localtest.me/stacks/local-backup/minio/helm/values.yaml
chart: minio chart: minio
- repoURL: https://<no value>/<no value> - repoURL: https://forgejo.edf-bootstrap.cx.fg1.ffm.osc.live/DevFW-CICD/stacks-instances
targetRevision: HEAD targetRevision: HEAD
ref: values ref: values
- repoURL: https://<no value>/<no value> - repoURL: https://forgejo.edf-bootstrap.cx.fg1.ffm.osc.live/DevFW-CICD/stacks-instances
targetRevision: HEAD targetRevision: HEAD
path: "<no value>/<no value>/stacks/local-backup/minio/manifests" path: "otc/localtest.me/stacks/local-backup/minio/manifests"
destination: destination:
server: "https://kubernetes.default.svc" server: "https://kubernetes.default.svc"
namespace: minio-backup namespace: minio-backup

View file

@ -15,9 +15,9 @@ spec:
helm: helm:
releaseName: velero releaseName: velero
valueFiles: valueFiles:
- $values/<no value>/<no value>/stacks/local-backup/velero/helm/values.yaml - $values/otc/localtest.me/stacks/local-backup/velero/helm/values.yaml
chart: velero chart: velero
- repoURL: https://<no value>/<no value> - repoURL: https://forgejo.edf-bootstrap.cx.fg1.ffm.osc.live/DevFW-CICD/stacks-instances
targetRevision: HEAD targetRevision: HEAD
ref: values ref: values
destination: destination:

View file

@ -23,7 +23,7 @@ spec:
targetRevision: 3.12.2 targetRevision: 3.12.2
helm: helm:
valueFiles: valueFiles:
- $values/<no value>/<no value>/stacks/observability-client/metrics-server/values.yaml - $values/otc/localtest.me/stacks/observability-client/metrics-server/values.yaml
- repoURL: https://<no value>/<no value> - repoURL: https://forgejo.edf-bootstrap.cx.fg1.ffm.osc.live/DevFW-CICD/stacks-instances
targetRevision: HEAD targetRevision: HEAD
ref: values ref: values

View file

@ -23,7 +23,7 @@ spec:
targetRevision: 0.43.0 targetRevision: 0.43.0
helm: helm:
valueFiles: valueFiles:
- $values/<no value>/<no value>/stacks/observability-client/vector/values.yaml - $values/otc/localtest.me/stacks/observability-client/vector/values.yaml
- repoURL: https://<no value>/<no value> - repoURL: https://forgejo.edf-bootstrap.cx.fg1.ffm.osc.live/DevFW-CICD/stacks-instances
targetRevision: HEAD targetRevision: HEAD
ref: values ref: values

View file

@ -21,10 +21,10 @@ spec:
targetRevision: 0.48.1 targetRevision: 0.48.1
helm: helm:
valueFiles: valueFiles:
- $values/<no value>/<no value>/stacks/observability-client/vm-client-stack/values.yaml - $values/otc/localtest.me/stacks/observability-client/vm-client-stack/values.yaml
- repoURL: https://<no value>/<no value> - repoURL: https://forgejo.edf-bootstrap.cx.fg1.ffm.osc.live/DevFW-CICD/stacks-instances
targetRevision: HEAD targetRevision: HEAD
ref: values ref: values
- repoURL: https://<no value>/<no value> - repoURL: https://forgejo.edf-bootstrap.cx.fg1.ffm.osc.live/DevFW-CICD/stacks-instances
targetRevision: HEAD targetRevision: HEAD
path: "<no value>/<no value>/stacks/observability-client/vm-client-stack/manifests" path: "otc/localtest.me/stacks/observability-client/vm-client-stack/manifests"

View file

@ -763,9 +763,9 @@ vmauth:
annotations: annotations:
nginx.ingress.kubernetes.io/force-ssl-redirect: "true" nginx.ingress.kubernetes.io/force-ssl-redirect: "true"
cert-manager.io/cluster-issuer: main cert-manager.io/cluster-issuer: main
host: o12y.<no value> host: o12y.localtest.me
tlsHosts: tlsHosts:
- o12y.<no value> - o12y.localtest.me
tlsSecretName: vmauth-tls-secret tlsSecretName: vmauth-tls-secret
unauthorizedUserAccessSpec: {} unauthorizedUserAccessSpec: {}
selectAllByDefault: true selectAllByDefault: true

View file

@ -20,6 +20,6 @@ spec:
- chart: grafana-operator - chart: grafana-operator
repoURL: ghcr.io/grafana/helm-charts repoURL: ghcr.io/grafana/helm-charts
targetRevision: v5.18.0 targetRevision: v5.18.0
- repoURL: https://<no value>/<no value> - repoURL: https://forgejo.edf-bootstrap.cx.fg1.ffm.osc.live/DevFW-CICD/stacks-instances
targetRevision: HEAD targetRevision: HEAD
path: "<no value>/<no value>/stacks/observability/grafana-operator/manifests" path: "otc/localtest.me/stacks/observability/grafana-operator/manifests"

View file

@ -20,7 +20,7 @@ spec:
spec: spec:
ingressClassName: nginx ingressClassName: nginx
rules: rules:
- host: o12y.<no value> - host: o12y.gitea.localtest.me
http: http:
paths: paths:
- backend: - backend:
@ -32,5 +32,5 @@ spec:
pathType: Prefix pathType: Prefix
tls: tls:
- hosts: - hosts:
- o12y.<no value> - o12y.gitea.localtest.me
secretName: grafana-net-tls secretName: grafana-net-tls

View file

@ -22,10 +22,10 @@ spec:
targetRevision: 0.48.1 targetRevision: 0.48.1
helm: helm:
valueFiles: valueFiles:
- $values/<no value>/<no value>/stacks/observability/victoria-k8s-stack/values.yaml - $values/otc/localtest.me/stacks/observability/victoria-k8s-stack/values.yaml
- repoURL: https://<no value>/<no value> - repoURL: https://forgejo.edf-bootstrap.cx.fg1.ffm.osc.live/DevFW-CICD/stacks-instances
targetRevision: HEAD targetRevision: HEAD
ref: values ref: values
- repoURL: https://<no value>/<no value> - repoURL: https://forgejo.edf-bootstrap.cx.fg1.ffm.osc.live/DevFW-CICD/stacks-instances
targetRevision: HEAD targetRevision: HEAD
path: "<no value>/<no value>/stacks/observability/victoria-k8s-stack/manifests" path: "otc/localtest.me/stacks/observability/victoria-k8s-stack/manifests"

View file

@ -8,7 +8,7 @@ spec:
removePvcAfterDelete: true removePvcAfterDelete: true
storageMetadata: storageMetadata:
annotations: annotations:
everest.io/crypt-key-id: <no value> everest.io/crypt-key-id:
storage: storage:
accessModes: accessModes:
- ReadWriteOnce - ReadWriteOnce

View file

@ -288,7 +288,7 @@ vmsingle:
extraArgs: {} extraArgs: {}
storageMetadata: storageMetadata:
annotations: annotations:
everest.io/crypt-key-id: <no value> everest.io/crypt-key-id:
storage: storage:
accessModes: accessModes:
- ReadWriteOnce - ReadWriteOnce

View file

@ -23,10 +23,10 @@ spec:
targetRevision: v1.17.2 targetRevision: v1.17.2
helm: helm:
valueFiles: valueFiles:
- $values/<no value>/<no value>/stacks/otc/cert-manager/values.yaml - $values/otc/localtest.me/stacks/otc/cert-manager/values.yaml
- repoURL: https://<no value>/<no value> - repoURL: https://forgejo.edf-bootstrap.cx.fg1.ffm.osc.live/DevFW-CICD/stacks-instances
targetRevision: HEAD targetRevision: HEAD
ref: values ref: values
- repoURL: https://<no value>/<no value> - repoURL: https://forgejo.edf-bootstrap.cx.fg1.ffm.osc.live/DevFW-CICD/stacks-instances
targetRevision: HEAD targetRevision: HEAD
path: "<no value>/<no value>/stacks/otc/cert-manager/manifests" path: "otc/localtest.me/stacks/otc/cert-manager/manifests"

View file

@ -23,7 +23,7 @@ spec:
targetRevision: helm-chart-4.12.1-depends targetRevision: helm-chart-4.12.1-depends
helm: helm:
valueFiles: valueFiles:
- $values/<no value>/<no value>/stacks/otc/ingress-nginx/values.yaml - $values/otc/localtest.me/stacks/otc/ingress-nginx/values.yaml
- repoURL: https://<no value>/<no value> - repoURL: https://forgejo.edf-bootstrap.cx.fg1.ffm.osc.live/DevFW-CICD/stacks-instances
targetRevision: HEAD targetRevision: HEAD
ref: values ref: values

View file

@ -12,9 +12,9 @@ spec:
namespace: default namespace: default
server: "https://kubernetes.default.svc" server: "https://kubernetes.default.svc"
source: source:
repoURL: https://<no value>/<no value> repoURL: https://forgejo.edf-bootstrap.cx.fg1.ffm.osc.live/DevFW-CICD/stacks-instances
targetRevision: HEAD targetRevision: HEAD
path: "<no value>/<no value>/stacks/otc/storageclass" path: "otc/localtest.me/stacks/otc/storageclass"
project: default project: default
syncPolicy: syncPolicy:
automated: automated:

View file

@ -30,7 +30,7 @@ idpbuilder create --use-path-routing \
--package https://github.com/cnoe-io/stacks//ref-implementation --package https://github.com/cnoe-io/stacks//ref-implementation
``` ```
This will take ~6 minutes for everything to come up. To track the progress, you can go to the [ArgoCD UI](https://<no value>:8443/argocd/applications). This will take ~6 minutes for everything to come up. To track the progress, you can go to the [ArgoCD UI](https://localtest.me:8443/argocd/applications).
### What was installed? ### What was installed?
@ -47,15 +47,15 @@ The only package that cannot be removed this way is Keycloak because other packa
#### Accessing UIs #### Accessing UIs
- Argo CD: https://<no value>:8443/argocd - Argo CD: https://localtest.me:8443/argocd
- Argo Workflows: https://<no value>:8443/argo-workflows - Argo Workflows: https://localtest.me:8443/argo-workflows
- Backstage: https://<no value>:8443/ - Backstage: https://localtest.me:8443/
- Gitea: https://<no value>:8443/gitea - Gitea: https://localtest.me:8443/gitea
- Keycloak: https://<no value>:8443/keycloak/admin/master/console/ - Keycloak: https://localtest.me:8443/keycloak/admin/master/console/
# Using it # Using it
For this example, we will walk through a few demonstrations. Once applications are ready, go to the [backstage URL](https://<no value>:8443). For this example, we will walk through a few demonstrations. Once applications are ready, go to the [backstage URL](https://localtest.me:8443).
Click on the Sign-In button, you will be asked to log into the Keycloak instance. There are two users set up in this Click on the Sign-In button, you will be asked to log into the Keycloak instance. There are two users set up in this
configuration, and their password can be retrieved with the following command: configuration, and their password can be retrieved with the following command:
@ -70,7 +70,7 @@ Both users use the same password retrieved above.
If you want to create a new user or change existing users: If you want to create a new user or change existing users:
1. Go to the [Keycloak UI](https://<no value>:8443/keycloak/admin/master/console/). 1. Go to the [Keycloak UI](https://localtest.me:8443/keycloak/admin/master/console/).
Login with the username `cnoe-admin`. Password is the `KEYCLOAK_ADMIN_PASSWORD` field from the command above. Login with the username `cnoe-admin`. Password is the `KEYCLOAK_ADMIN_PASSWORD` field from the command above.
2. Select `cnoe` from the realms drop down menu. 2. Select `cnoe` from the realms drop down menu.
3. Select users tab. 3. Select users tab.
@ -97,9 +97,9 @@ You can click on the ArgoCD Application name to see more details.
### What just happened? ### What just happened?
1. Backstage created [a git repository](https://<no value>:8443/gitea/giteaAdmin/demo), then pushed templated contents to it. 1. Backstage created [a git repository](https://localtest.me:8443/gitea/giteaAdmin/demo), then pushed templated contents to it.
2. Backstage created [an ArgoCD Application](https://<no value>:8443/argocd/applications/argocd/demo?) and pointed it to the git repository. 2. Backstage created [an ArgoCD Application](https://localtest.me:8443/argocd/applications/argocd/demo?) and pointed it to the git repository.
3. Backstage registered the application as [a component](https://<no value>:8443/gitea/giteaAdmin/demo/src/branch/main/catalog-info.yaml) in Backstage. 3. Backstage registered the application as [a component](https://localtest.me:8443/gitea/giteaAdmin/demo/src/branch/main/catalog-info.yaml) in Backstage.
4. ArgoCD deployed the manifests stored in the repo to the cluster. 4. ArgoCD deployed the manifests stored in the repo to the cluster.
5. Backstage retrieved application health from ArgoCD API, then displayed it. 5. Backstage retrieved application health from ArgoCD API, then displayed it.

View file

@ -10,9 +10,9 @@ metadata:
spec: spec:
project: default project: default
source: source:
repoURL: https://<no value>/<no value> repoURL: https://forgejo.edf-bootstrap.cx.fg1.ffm.osc.live/DevFW-CICD/stacks-instances
targetRevision: HEAD targetRevision: HEAD
path: "<no value>/<no value>/stacks/ref-implementation/argo-workflows/manifests/dev" path: "otc/localtest.me/stacks/ref-implementation/argo-workflows/manifests/dev"
destination: destination:
server: "https://kubernetes.default.svc" server: "https://kubernetes.default.svc"
namespace: argo namespace: argo

View file

@ -7,14 +7,14 @@ data:
config: | config: |
sso: sso:
insecureSkipVerify: true insecureSkipVerify: true
issuer: https://<no value>/keycloak/realms/cnoe issuer: https://localtest.me/keycloak/realms/cnoe
clientId: clientId:
name: keycloak-oidc name: keycloak-oidc
key: client-id key: client-id
clientSecret: clientSecret:
name: keycloak-oidc name: keycloak-oidc
key: secret-key key: secret-key
redirectUrl: https://<no value>:443/argo-workflows/oauth2/callback redirectUrl: https://localtest.me:443/argo-workflows/oauth2/callback
rbac: rbac:
enabled: true enabled: true
scopes: scopes:

View file

@ -10,9 +10,9 @@ metadata:
spec: spec:
project: default project: default
source: source:
repoURL: https://<no value>/<no value> repoURL: https://forgejo.edf-bootstrap.cx.fg1.ffm.osc.live/DevFW-CICD/stacks-instances
targetRevision: HEAD targetRevision: HEAD
path: "<no value>/<no value>/stacks/ref-implementation/backstage-templates/entities" path: "otc/localtest.me/stacks/ref-implementation/backstage-templates/entities"
directory: directory:
exclude: "catalog-info.yaml" exclude: "catalog-info.yaml"
destination: destination:

View file

@ -20,7 +20,7 @@ metadata:
backstage.io/kubernetes-namespace: default backstage.io/kubernetes-namespace: default
argocd/app-name: ${{values.name | dump}} argocd/app-name: ${{values.name | dump}}
links: links:
- url: https://<no value>:443 - url: https://gitea.localtest.me:443
title: Repo URL title: Repo URL
icon: github icon: github
spec: spec:

View file

@ -100,7 +100,7 @@ spec:
input: input:
description: This is an example app description: This is an example app
# Hard coded value for this demo purposes only. # Hard coded value for this demo purposes only.
repoUrl: <no value>:443/?repo=${{parameters.name}} repoUrl: gitea.localtest.me:443/?repo=${{parameters.name}}
defaultBranch: main defaultBranch: main
- id: create-argocd-app - id: create-argocd-app
name: Create ArgoCD App name: Create ArgoCD App
@ -111,7 +111,7 @@ spec:
argoInstance: in-cluster argoInstance: in-cluster
projectName: default projectName: default
# necessary until we generate our own cert # necessary until we generate our own cert
repoUrl: https://<no value>:443/giteaAdmin/${{parameters.name}} repoUrl: https://gitea.localtest.me:443/giteaAdmin/${{parameters.name}}
path: "kustomize/base" path: "kustomize/base"
- id: register - id: register
name: Register name: Register

View file

@ -14,7 +14,7 @@ metadata:
apache-spark.cnoe.io/label-selector: env=dev,entity-id=${{values.name}} apache-spark.cnoe.io/label-selector: env=dev,entity-id=${{values.name}}
apache-spark.cnoe.io/cluster-name: local apache-spark.cnoe.io/cluster-name: local
links: links:
- url: https://<no value>:443 - url: https://gitea.localtest.me:443
title: Repo URL title: Repo URL
icon: github icon: github
spec: spec:

View file

@ -35,7 +35,7 @@ spec:
input: input:
description: This is an example app description: This is an example app
# Hard coded value for this demo purposes only. # Hard coded value for this demo purposes only.
repoUrl: <no value>:443/?repo=${{parameters.name}} repoUrl: gitea.localtest.me:443/?repo=${{parameters.name}}
defaultBranch: main defaultBranch: main
- id: create-argocd-app - id: create-argocd-app
name: Create ArgoCD App name: Create ArgoCD App
@ -46,7 +46,7 @@ spec:
argoInstance: in-cluster argoInstance: in-cluster
projectName: default projectName: default
# necessary until we generate our own cert # necessary until we generate our own cert
repoUrl: https://<no value>:443/giteaAdmin/${{parameters.name}} repoUrl: https://gitea.localtest.me:443/giteaAdmin/${{parameters.name}}
path: "manifests" path: "manifests"
- id: register - id: register
name: Register name: Register

View file

@ -10,7 +10,7 @@ metadata:
backstage.io/kubernetes-namespace: default backstage.io/kubernetes-namespace: default
argocd/app-name: ${{values.name | dump}} argocd/app-name: ${{values.name | dump}}
links: links:
- url: https://<no value>:443 - url: https://gitea.localtest.me:443
title: Repo URL title: Repo URL
icon: github icon: github
spec: spec:

View file

@ -31,7 +31,7 @@ spec:
input: input:
description: This is an example app description: This is an example app
# Hard coded value for this demo purposes only. # Hard coded value for this demo purposes only.
repoUrl: <no value>:443/?repo=${{parameters.name}} repoUrl: gitea.localtest.me:443/?repo=${{parameters.name}}
defaultBranch: main defaultBranch: main
- id: create-argocd-app - id: create-argocd-app
name: Create ArgoCD App name: Create ArgoCD App
@ -42,7 +42,7 @@ spec:
argoInstance: in-cluster argoInstance: in-cluster
projectName: default projectName: default
# necessary until we generate our own cert # necessary until we generate our own cert
repoUrl: https://<no value>:443/giteaAdmin/${{parameters.name}} repoUrl: https://gitea.localtest.me:443/giteaAdmin/${{parameters.name}}
path: "manifests" path: "manifests"
- id: register - id: register
name: Register name: Register

View file

@ -9,7 +9,7 @@ metadata:
backstage.io/kubernetes-label-selector: 'entity-id=${{ values.name }}' backstage.io/kubernetes-label-selector: 'entity-id=${{ values.name }}'
backstage.io/kubernetes-namespace: gitea backstage.io/kubernetes-namespace: gitea
links: links:
- url: https://<no value>:443 - url: https://gitea.localtest.me:443
title: Repo URL title: Repo URL
icon: git icon: git
spec: spec:
@ -26,7 +26,7 @@ metadata:
annotations: annotations:
backstage.io/techdocs-ref: dir:. backstage.io/techdocs-ref: dir:.
links: links:
- url: https://<no value>:443 - url: https://gitea.localtest.me:443
title: Gitea Repo title: Gitea Repo
icon: git icon: git
spec: spec:

View file

@ -33,7 +33,7 @@ spec:
name: Publish to Gitea name: Publish to Gitea
action: publish:gitea action: publish:gitea
input: input:
repoUrl: <no value>:443/?repo=${{parameters.name}} repoUrl: gitea.localtest.me:443/?repo=${{parameters.name}}
description: This is the repository for ${{ parameters.name }} description: This is the repository for ${{ parameters.name }}
sourcePath: ./skeleton sourcePath: ./skeleton
defaultBranch: main defaultBranch: main

View file

@ -33,7 +33,7 @@ jobs:
#run: ./mvnw spring-boot:build-image # the original image build #run: ./mvnw spring-boot:build-image # the original image build
run: | run: |
export CONTAINER_REPO=$(echo {% raw %}${{ env.GITHUB_REPOSITORY }}{% endraw %} | tr '[:upper:]' '[:lower:]') export CONTAINER_REPO=$(echo {% raw %}${{ env.GITHUB_REPOSITORY }}{% endraw %} | tr '[:upper:]' '[:lower:]')
./mvnw com.google.cloud.tools:jib-maven-plugin:3.4.4:build -Djib.allowInsecureRegistries=true -Dimage=<no value>/${CONTAINER_REPO}:latest -Djib.to.auth.username={% raw %}${{ secrets.PACKAGES_USER }}{% endraw %} -Djib.to.auth.password={% raw %}${{ secrets.PACKAGES_TOKEN }}{% endraw %} -Djib.from.platforms=linux/arm64,linux/amd64 ./mvnw com.google.cloud.tools:jib-maven-plugin:3.4.4:build -Djib.allowInsecureRegistries=true -Dimage=gitea.localtest.me/${CONTAINER_REPO}:latest -Djib.to.auth.username={% raw %}${{ secrets.PACKAGES_USER }}{% endraw %} -Djib.to.auth.password={% raw %}${{ secrets.PACKAGES_TOKEN }}{% endraw %} -Djib.from.platforms=linux/arm64,linux/amd64
- name: Build image as tar - name: Build image as tar
run: | run: |
./mvnw com.google.cloud.tools:jib-maven-plugin:3.4.4:buildTar -Djib.allowInsecureRegistries=true ./mvnw com.google.cloud.tools:jib-maven-plugin:3.4.4:buildTar -Djib.allowInsecureRegistries=true

View file

@ -9,7 +9,7 @@ metadata:
backstage.io/kubernetes-label-selector: 'entity-id=${{ values.name }}' backstage.io/kubernetes-label-selector: 'entity-id=${{ values.name }}'
backstage.io/kubernetes-namespace: gitea backstage.io/kubernetes-namespace: gitea
links: links:
- url: https://<no value>:443 - url: https://gitea.localtest.me:443
title: Repo URL title: Repo URL
icon: git icon: git
spec: spec:
@ -26,7 +26,7 @@ metadata:
annotations: annotations:
backstage.io/techdocs-ref: dir:. backstage.io/techdocs-ref: dir:.
links: links:
- url: https://<no value>:443 - url: https://gitea.localtest.me:443
title: Gitea Repo title: Gitea Repo
icon: git icon: git
spec: spec:

View file

@ -28,7 +28,7 @@ metadata:
spec: spec:
ingressClassName: nginx ingressClassName: nginx
rules: rules:
- host: ${{ values.namespace }}.<no value> - host: ${{ values.namespace }}.localtest.me
http: http:
paths: paths:
- backend: - backend:
@ -58,7 +58,7 @@ spec:
spec: spec:
containers: containers:
- name: workload - name: workload
image: <no value>/giteaadmin/${{ values.name }} image: gitea.localtest.me/giteaadmin/${{ values.name }}
env: env:
- name: SPRING_PROFILES_ACTIVE - name: SPRING_PROFILES_ACTIVE
value: postgres value: postgres

View file

@ -50,7 +50,7 @@ spec:
name: Publish to Gitea name: Publish to Gitea
action: publish:gitea action: publish:gitea
input: input:
repoUrl: <no value>:443/?repo=${{parameters.name}} repoUrl: gitea.localtest.me:443/?repo=${{parameters.name}}
description: This is the repository for ${{ parameters.name }} description: This is the repository for ${{ parameters.name }}
sourcePath: ./ sourcePath: ./
defaultBranch: main defaultBranch: main
@ -64,7 +64,7 @@ spec:
argoInstance: in-cluster argoInstance: in-cluster
projectName: default projectName: default
# necessary until we generate our own cert # necessary until we generate our own cert
repoUrl: https://<no value>:443/giteaAdmin/${{parameters.name}} repoUrl: https://gitea.localtest.me:443/giteaAdmin/${{parameters.name}}
path: "k8s" path: "k8s"
- id: register - id: register

View file

@ -10,9 +10,9 @@ metadata:
spec: spec:
project: default project: default
source: source:
repoURL: https://<no value>/<no value> repoURL: https://forgejo.edf-bootstrap.cx.fg1.ffm.osc.live/DevFW-CICD/stacks-instances
targetRevision: HEAD targetRevision: HEAD
path: "<no value>/<no value>/stacks/ref-implementation/backstage/manifests" path: "otc/localtest.me/stacks/ref-implementation/backstage/manifests"
destination: destination:
server: "https://kubernetes.default.svc" server: "https://kubernetes.default.svc"
namespace: backstage namespace: backstage

View file

@ -70,7 +70,7 @@ data:
app-config.yaml: | app-config.yaml: |
app: app:
title: CNOE Backstage title: CNOE Backstage
baseUrl: https://<no value>:443 baseUrl: https://localtest.me:443
organization: organization:
name: CNOE name: CNOE
backend: backend:
@ -80,7 +80,7 @@ data:
# auth: # auth:
# keys: # keys:
# - secret: ${BACKEND_SECRET} # - secret: ${BACKEND_SECRET}
baseUrl: https://<no value>:443 baseUrl: https://localtest.me:443
listen: listen:
port: 7007 port: 7007
# Uncomment the following host directive to bind to specific interfaces # Uncomment the following host directive to bind to specific interfaces
@ -90,7 +90,7 @@ data:
# Content-Security-Policy directives follow the Helmet format: https://helmetjs.github.io/#reference # Content-Security-Policy directives follow the Helmet format: https://helmetjs.github.io/#reference
# Default Helmet Content-Security-Policy values can be removed by setting the key to false # Default Helmet Content-Security-Policy values can be removed by setting the key to false
cors: cors:
origin: https://<no value>:443 origin: https://localtest.me:443
methods: [GET, HEAD, PATCH, POST, PUT, DELETE] methods: [GET, HEAD, PATCH, POST, PUT, DELETE]
credentials: true credentials: true
database: database:
@ -106,12 +106,12 @@ data:
integrations: integrations:
gitea: gitea:
- baseUrl: https://<no value>:443 - baseUrl: https://gitea.localtest.me:443
host: <no value>:443 host: gitea.localtest.me:443
username: ${GITEA_USERNAME} username: ${GITEA_USERNAME}
password: ${GITEA_PASSWORD} password: ${GITEA_PASSWORD}
- baseUrl: https://<no value> - baseUrl: https://gitea.localtest.me
host: <no value> host: gitea.localtest.me
username: ${GITEA_USERNAME} username: ${GITEA_USERNAME}
password: ${GITEA_PASSWORD} password: ${GITEA_PASSWORD}
- baseUrl: https://forgejo.edf-bootstrap.cx.fg1.ffm.osc.live - baseUrl: https://forgejo.edf-bootstrap.cx.fg1.ffm.osc.live
@ -167,7 +167,7 @@ data:
locations: locations:
# Examples from a public GitHub repository. # Examples from a public GitHub repository.
- type: url - type: url
target: https://<no value>:443/<no value>/raw/branch/main/<no value>/<no value>/stacks/ref-implementation/backstage-templates/entities/catalog-info.yaml target: https://forgejo.edf-bootstrap.cx.fg1.ffm.osc.live:443/DevFW-CICD/stacks-instances/raw/branch/main/otc/localtest.me/stacks/ref-implementation/backstage-templates/entities/catalog-info.yaml
rules: rules:
- allow: [Component, System, API, Resource, Location, Template, User, Group] - allow: [Component, System, API, Resource, Location, Template, User, Group]
kubernetes: kubernetes:
@ -182,7 +182,7 @@ data:
- type: 'config' - type: 'config'
instances: instances:
- name: in-cluster - name: in-cluster
url: https://<no value>:443/argocd url: https://localtest.me:443/argocd
username: admin username: admin
password: ${ARGOCD_ADMIN_PASSWORD} password: ${ARGOCD_ADMIN_PASSWORD}
argoWorkflows: argoWorkflows:
@ -379,17 +379,17 @@ spec:
template: template:
engineVersion: v2 engineVersion: v2
data: data:
BACKSTAGE_FRONTEND_URL: https://<no value>:443/backstage BACKSTAGE_FRONTEND_URL: https://localtest.me:443/backstage
POSTGRES_HOST: postgresql.backstage.svc.cluster.local POSTGRES_HOST: postgresql.backstage.svc.cluster.local
POSTGRES_PORT: '5432' POSTGRES_PORT: '5432'
POSTGRES_DB: backstage POSTGRES_DB: backstage
POSTGRES_USER: backstage POSTGRES_USER: backstage
POSTGRES_PASSWORD: "{{.POSTGRES_PASSWORD}}" POSTGRES_PASSWORD: "{{.POSTGRES_PASSWORD}}"
ARGO_WORKFLOWS_URL: https://<no value>:443/argo-workflows ARGO_WORKFLOWS_URL: https://localtest.me:443/argo-workflows
KEYCLOAK_NAME_METADATA: https://<no value>:443/keycloak/realms/cnoe/.well-known/openid-configuration KEYCLOAK_NAME_METADATA: https://localtest.me:443/keycloak/realms/cnoe/.well-known/openid-configuration
KEYCLOAK_CLIENT_SECRET: "{{.BACKSTAGE_CLIENT_SECRET}}" KEYCLOAK_CLIENT_SECRET: "{{.BACKSTAGE_CLIENT_SECRET}}"
ARGOCD_AUTH_TOKEN: "argocd.token={{.ARGOCD_SESSION_TOKEN}}" ARGOCD_AUTH_TOKEN: "argocd.token={{.ARGOCD_SESSION_TOKEN}}"
ARGO_CD_URL: 'https://<no value>/argocd/api/v1/' ARGO_CD_URL: 'https://localtest.me/argocd/api/v1/'
data: data:
- secretKey: ARGOCD_SESSION_TOKEN - secretKey: ARGOCD_SESSION_TOKEN
remoteRef: remoteRef:

View file

@ -69,5 +69,5 @@ From here on, you can follow the instructions in the [README](./README.md) file.
echo https://${CODESPACE_NAME}-8080.${GITHUB_CODESPACES_PORT_FORWARDING_DOMAIN} echo https://${CODESPACE_NAME}-8080.${GITHUB_CODESPACES_PORT_FORWARDING_DOMAIN}
``` ```
For example, if you need to access Argo Workflows UI, instead of going to `https://<no value>:8443/argo`, For example, if you need to access Argo Workflows UI, instead of going to `https://localtest.me:8443/argo`,
you go to `https://${CODESPACE_NAME}-8080.${GITHUB_CODESPACES_PORT_FORWARDING_DOMAIN}/argo` you go to `https://${CODESPACE_NAME}-8080.${GITHUB_CODESPACES_PORT_FORWARDING_DOMAIN}/argo`

View file

@ -12,9 +12,9 @@ spec:
namespace: external-secrets namespace: external-secrets
server: "https://kubernetes.default.svc" server: "https://kubernetes.default.svc"
source: source:
repoURL: https://<no value>/<no value> repoURL: https://forgejo.edf-bootstrap.cx.fg1.ffm.osc.live/DevFW-CICD/stacks-instances
targetRevision: HEAD targetRevision: HEAD
path: "<no value>/<no value>/stacks/ref-implementation/external-secrets/manifests" path: "otc/localtest.me/stacks/ref-implementation/external-secrets/manifests"
project: default project: default
syncPolicy: syncPolicy:
automated: automated:

View file

@ -12,9 +12,9 @@ spec:
namespace: keycloak namespace: keycloak
server: "https://kubernetes.default.svc" server: "https://kubernetes.default.svc"
source: source:
repoURL: https://<no value>/<no value> repoURL: https://forgejo.edf-bootstrap.cx.fg1.ffm.osc.live/DevFW-CICD/stacks-instances
targetRevision: HEAD targetRevision: HEAD
path: "<no value>/<no value>/stacks/ref-implementation/keycloak/manifests" path: "otc/localtest.me/stacks/ref-implementation/keycloak/manifests"
project: default project: default
syncPolicy: syncPolicy:
automated: automated:

View file

@ -83,7 +83,7 @@ data:
proxy=edge proxy=edge
# hostname configuration # hostname configuration
hostname=<no value> hostname=localtest.me
http-relative-path=keycloak http-relative-path=keycloak
# the admin url requires its own configuration to reflect correct url # the admin url requires its own configuration to reflect correct url

View file

@ -145,7 +145,7 @@ data:
"rootUrl": "", "rootUrl": "",
"baseUrl": "", "baseUrl": "",
"redirectUris": [ "redirectUris": [
"https://<no value>:443/argo-workflows/oauth2/callback" "https://localtest.me:443/argo-workflows/oauth2/callback"
], ],
"webOrigins": [ "webOrigins": [
"/*" "/*"
@ -174,7 +174,7 @@ data:
"rootUrl": "", "rootUrl": "",
"baseUrl": "", "baseUrl": "",
"redirectUris": [ "redirectUris": [
"https://<no value>:443/api/auth/keycloak-oidc/handler/frame" "https://localtest.me:443/api/auth/keycloak-oidc/handler/frame"
], ],
"webOrigins": [ "webOrigins": [
"/*" "/*"
@ -186,15 +186,15 @@ data:
"clientId": "grafana", "clientId": "grafana",
"name": "Grafana Client", "name": "Grafana Client",
"description": "Used for Grafana SSO", "description": "Used for Grafana SSO",
"rootUrl": "https://<no value>/grafana", "rootUrl": "https://localtest.me/grafana",
"adminUrl": "https://<no value>/grafana", "adminUrl": "https://localtest.me/grafana",
"baseUrl": "https://<no value>/grafana", "baseUrl": "https://localtest.me/grafana",
"alwaysDisplayInConsole": false, "alwaysDisplayInConsole": false,
"redirectUris": [ "redirectUris": [
"http://<no value>/grafana/*" "http://localtest.me/grafana/*"
], ],
"webOrigins": [ "webOrigins": [
"https://<no value>/grafana" "https://localtest.me/grafana"
], ],
"standardFlowEnabled": true, "standardFlowEnabled": true,
"implicitFlowEnabled": false, "implicitFlowEnabled": false,
@ -241,7 +241,7 @@ data:
"rootUrl": "", "rootUrl": "",
"baseUrl": "", "baseUrl": "",
"redirectUris": [ "redirectUris": [
"https://<no value>/*" "https://localtest.me/*"
], ],
"webOrigins": [ "webOrigins": [
"/*" "/*"
@ -270,7 +270,7 @@ data:
"rootUrl": "", "rootUrl": "",
"baseUrl": "", "baseUrl": "",
"redirectUris": [ "redirectUris": [
"https://<no value>/*" "https://gitea.localtest.me/*"
], ],
"webOrigins": [ "webOrigins": [
"/*" "/*"
@ -517,7 +517,7 @@ spec:
ARGOCD_PASSWORD=$(./kubectl -n argocd get secret argocd-initial-admin-secret -o go-template='{{.data.password | base64decode }}') ARGOCD_PASSWORD=$(./kubectl -n argocd get secret argocd-initial-admin-secret -o go-template='{{.data.password | base64decode }}')
ARGOCD_SESSION_TOKEN=$(curl -sS https://<no value>/argocd/api/v1/session -H 'Content-Type: application/json' -d "{\"username\":\"admin\",\"password\":\"${ARGOCD_PASSWORD}\"}" | jq -r .token) ARGOCD_SESSION_TOKEN=$(curl -sS https://localtest.me/argocd/api/v1/session -H 'Content-Type: application/json' -d "{\"username\":\"admin\",\"password\":\"${ARGOCD_PASSWORD}\"}" | jq -r .token)
echo \ echo \
"apiVersion: v1 "apiVersion: v1

View file

@ -10,9 +10,9 @@ metadata:
spec: spec:
project: default project: default
source: source:
repoURL: https://<no value>/<no value> repoURL: https://forgejo.edf-bootstrap.cx.fg1.ffm.osc.live/DevFW-CICD/stacks-instances
targetRevision: HEAD targetRevision: HEAD
path: "<no value>/<no value>/stacks/ref-implementation/mailhog" path: "otc/localtest.me/stacks/ref-implementation/mailhog"
destination: destination:
server: "https://kubernetes.default.svc" server: "https://kubernetes.default.svc"
namespace: mailhog namespace: mailhog

View file

@ -19,14 +19,14 @@ spec:
## Ingress ## Ingress
Mailhog offers both WebUi and API at `https://<no value>/mailhog`. Mailhog offers both WebUi and API at `https://localtest.me/mailhog`.
The ingress definition is in `stacks/core/ingress-apps/mailhog.yaml` (BTW, why isn't this ingress file here in this folder ??) routing to the mailhog' service The ingress definition is in `stacks/core/ingress-apps/mailhog.yaml` (BTW, why isn't this ingress file here in this folder ??) routing to the mailhog' service
```yaml ```yaml
spec: spec:
rules: rules:
- host: <no value> - host: localtest.me
http: http:
paths: paths:
- backend: - backend:

View file

@ -23,13 +23,13 @@ spec:
targetRevision: HEAD targetRevision: HEAD
helm: helm:
valueFiles: valueFiles:
- $values/<no value>/<no value>/stacks/ref-implementation/openbao/values.yaml - $values/otc/localtest.me/stacks/ref-implementation/openbao/values.yaml
- repoURL: https://<no value>/<no value> - repoURL: https://forgejo.edf-bootstrap.cx.fg1.ffm.osc.live/DevFW-CICD/stacks-instances
targetRevision: HEAD targetRevision: HEAD
ref: values ref: values
- repoURL: https://<no value>/<no value> - repoURL: https://forgejo.edf-bootstrap.cx.fg1.ffm.osc.live/DevFW-CICD/stacks-instances
targetRevision: HEAD targetRevision: HEAD
path: "<no value>/<no value>/stacks/ref-implementation/openbao/manifests" path: "otc/localtest.me/stacks/ref-implementation/openbao/manifests"
ignoreDifferences: ignoreDifferences:
- group: admissionregistration.k8s.io - group: admissionregistration.k8s.io
kind: MutatingWebhookConfiguration kind: MutatingWebhookConfiguration