Initial upload

This commit is contained in:
Waldemar 2025-06-26 09:50:51 +02:00
parent a368827087
commit a6b864397a
56 changed files with 145 additions and 145 deletions

View file

@ -12,8 +12,8 @@ spec:
name: in-cluster
namespace: argocd
source:
path: "<no value>/<no value>/registry"
repoURL: "https://<no value>/<no value>"
path: "otc/localtest.me/registry"
repoURL: "https://forgejo.edf-bootstrap.cx.fg1.ffm.osc.live/DevFW-CICD/stacks-instances"
targetRevision: HEAD
project: default
syncPolicy:

View file

@ -12,8 +12,8 @@ spec:
name: in-cluster
namespace: argocd
source:
path: "<no value>/<no value>/stacks/core"
repoURL: "https://<no value>/<no value>"
path: "otc/localtest.me/stacks/core"
repoURL: "https://forgejo.edf-bootstrap.cx.fg1.ffm.osc.live/DevFW-CICD/stacks-instances"
targetRevision: HEAD
project: default
syncPolicy:

View file

@ -12,8 +12,8 @@ spec:
name: in-cluster
namespace: argocd
source:
path: "<no value>/<no value>/stacks/forgejo"
repoURL: "https://<no value>/<no value>"
path: "otc/localtest.me/stacks/forgejo"
repoURL: "https://forgejo.edf-bootstrap.cx.fg1.ffm.osc.live/DevFW-CICD/stacks-instances"
targetRevision: HEAD
project: default
syncPolicy:

View file

@ -12,8 +12,8 @@ spec:
name: in-cluster
namespace: argocd
source:
path: "<no value>/<no value>/stacks/local-backup"
repoURL: "https://<no value>/<no value>"
path: "otc/localtest.me/stacks/local-backup"
repoURL: "https://forgejo.edf-bootstrap.cx.fg1.ffm.osc.live/DevFW-CICD/stacks-instances"
targetRevision: HEAD
project: default
syncPolicy:

View file

@ -12,8 +12,8 @@ spec:
name: in-cluster
namespace: argocd
source:
path: "<no value>/<no value>/stacks/observability-client"
repoURL: "https://<no value>/<no value>"
path: "otc/localtest.me/stacks/observability-client"
repoURL: "https://forgejo.edf-bootstrap.cx.fg1.ffm.osc.live/DevFW-CICD/stacks-instances"
targetRevision: HEAD
project: default
syncPolicy:

View file

@ -12,8 +12,8 @@ spec:
name: in-cluster
namespace: argocd
source:
path: "<no value>/<no value>/stacks/observability"
repoURL: "https://<no value>/<no value>"
path: "otc/localtest.me/stacks/observability"
repoURL: "https://forgejo.edf-bootstrap.cx.fg1.ffm.osc.live/DevFW-CICD/stacks-instances"
targetRevision: HEAD
project: default
syncPolicy:

View file

@ -12,8 +12,8 @@ spec:
name: in-cluster
namespace: argocd
source:
path: "<no value>/<no value>/stacks/otc"
repoURL: "https://<no value>/<no value>"
path: "otc/localtest.me/stacks/otc"
repoURL: "https://forgejo.edf-bootstrap.cx.fg1.ffm.osc.live/DevFW-CICD/stacks-instances"
targetRevision: HEAD
project: default
syncPolicy:

View file

@ -12,8 +12,8 @@ spec:
name: in-cluster
namespace: argocd
source:
path: "<no value>/<no value>/stacks/ref-implementation"
repoURL: "https://<no value>/<no value>"
path: "otc/localtest.me/stacks/ref-implementation"
repoURL: "https://forgejo.edf-bootstrap.cx.fg1.ffm.osc.live/DevFW-CICD/stacks-instances"
targetRevision: HEAD
project: default
syncPolicy:

View file

@ -26,10 +26,10 @@ spec:
targetRevision: argo-cd-7.8.14-depends
helm:
valueFiles:
- $values/<no value>/<no value>/stacks/core/argocd/values.yaml
- repoURL: https://<no value>/<no value>
- $values/otc/localtest.me/stacks/core/argocd/values.yaml
- repoURL: https://forgejo.edf-bootstrap.cx.fg1.ffm.osc.live/DevFW-CICD/stacks-instances
targetRevision: HEAD
ref: values
- repoURL: https://<no value>/<no value>
- repoURL: https://forgejo.edf-bootstrap.cx.fg1.ffm.osc.live/DevFW-CICD/stacks-instances
targetRevision: HEAD
path: "<no value>/<no value>/stacks/core/argocd/manifests"
path: "otc/localtest.me/stacks/core/argocd/manifests"

View file

@ -11,7 +11,7 @@ metadata:
spec:
ingressClassName: nginx
rules:
- host: <no value>
- host: argocd.localtest.me
http:
paths:
- backend:
@ -23,5 +23,5 @@ spec:
pathType: Prefix
tls:
- hosts:
- <no value>
- argocd.localtest.me
secretName: argocd-net-tls

View file

@ -1,5 +1,5 @@
global:
domain: <no value>
domain: argocd.localtest.me
configs:
params:
@ -19,7 +19,7 @@ configs:
clusters:
- "*"
accounts.provider-argocd: apiKey
url: https://<no value>
url: https://argocd.localtest.me
rbac:
policy.csv: 'g, provider-argocd, role:admin'

View file

@ -19,6 +19,6 @@ spec:
destination:
server: "https://kubernetes.default.svc"
source:
repoURL: https://<no value>/<no value>
repoURL: https://forgejo.edf-bootstrap.cx.fg1.ffm.osc.live/DevFW-CICD/stacks-instances
targetRevision: HEAD
path: "<no value>/<no value>/stacks/forgejo/forgejo-runner"
path: "otc/localtest.me/stacks/forgejo/forgejo-runner"

View file

@ -51,7 +51,7 @@ spec:
name: forgejo-runner-token
key: token
- name: FORGEJO_INSTANCE_URL
value: https://<no value>
value: https://gitea.localtest.me
volumeMounts:
- name: runner-data
mountPath: /data

View file

@ -29,10 +29,10 @@ spec:
targetRevision: v9.0.0-depends
helm:
valueFiles:
- $values/<no value>/<no value>/stacks/forgejo/forgejo-server/values.yaml
- repoURL: https://<no value>/<no value>
- $values/otc/localtest.me/stacks/forgejo/forgejo-server/values.yaml
- repoURL: https://forgejo.edf-bootstrap.cx.fg1.ffm.osc.live/DevFW-CICD/stacks-instances
targetRevision: HEAD
ref: values
- repoURL: https://<no value>/<no value>
- repoURL: https://forgejo.edf-bootstrap.cx.fg1.ffm.osc.live/DevFW-CICD/stacks-instances
targetRevision: HEAD
path: "<no value>/<no value>/stacks/forgejo/forgejo-server/manifests"
path: "otc/localtest.me/stacks/forgejo/forgejo-server/manifests"

View file

@ -11,7 +11,7 @@ metadata:
spec:
ingressClassName: nginx
rules:
- host: <no value>
- host: gitea.localtest.me
http:
paths:
- backend:
@ -23,5 +23,5 @@ spec:
pathType: Prefix
tls:
- hosts:
- <no value>
- gitea.localtest.me
secretName: forgejo-net-tls

View file

@ -18,7 +18,7 @@ persistence:
enabled: true
size: 200Gi
annotations:
everest.io/crypt-key-id: <no value>
everest.io/crypt-key-id:
test:
enabled: false
@ -136,8 +136,8 @@ gitea:
SSL_MODE: verify-ca
server:
DOMAIN: '<no value>'
ROOT_URL: 'https://<no value>:443'
DOMAIN: 'gitea.localtest.me'
ROOT_URL: 'https://gitea.localtest.me:443'
mailer:
ENABLED: true

View file

@ -15,14 +15,14 @@ spec:
helm:
releaseName: minio
valueFiles:
- $values/<no value>/<no value>/stacks/local-backup/minio/helm/values.yaml
- $values/otc/localtest.me/stacks/local-backup/minio/helm/values.yaml
chart: minio
- repoURL: https://<no value>/<no value>
- repoURL: https://forgejo.edf-bootstrap.cx.fg1.ffm.osc.live/DevFW-CICD/stacks-instances
targetRevision: HEAD
ref: values
- repoURL: https://<no value>/<no value>
- repoURL: https://forgejo.edf-bootstrap.cx.fg1.ffm.osc.live/DevFW-CICD/stacks-instances
targetRevision: HEAD
path: "<no value>/<no value>/stacks/local-backup/minio/manifests"
path: "otc/localtest.me/stacks/local-backup/minio/manifests"
destination:
server: "https://kubernetes.default.svc"
namespace: minio-backup

View file

@ -15,9 +15,9 @@ spec:
helm:
releaseName: velero
valueFiles:
- $values/<no value>/<no value>/stacks/local-backup/velero/helm/values.yaml
- $values/otc/localtest.me/stacks/local-backup/velero/helm/values.yaml
chart: velero
- repoURL: https://<no value>/<no value>
- repoURL: https://forgejo.edf-bootstrap.cx.fg1.ffm.osc.live/DevFW-CICD/stacks-instances
targetRevision: HEAD
ref: values
destination:

View file

@ -23,7 +23,7 @@ spec:
targetRevision: 3.12.2
helm:
valueFiles:
- $values/<no value>/<no value>/stacks/observability-client/metrics-server/values.yaml
- repoURL: https://<no value>/<no value>
- $values/otc/localtest.me/stacks/observability-client/metrics-server/values.yaml
- repoURL: https://forgejo.edf-bootstrap.cx.fg1.ffm.osc.live/DevFW-CICD/stacks-instances
targetRevision: HEAD
ref: values

View file

@ -23,7 +23,7 @@ spec:
targetRevision: 0.43.0
helm:
valueFiles:
- $values/<no value>/<no value>/stacks/observability-client/vector/values.yaml
- repoURL: https://<no value>/<no value>
- $values/otc/localtest.me/stacks/observability-client/vector/values.yaml
- repoURL: https://forgejo.edf-bootstrap.cx.fg1.ffm.osc.live/DevFW-CICD/stacks-instances
targetRevision: HEAD
ref: values

View file

@ -21,10 +21,10 @@ spec:
targetRevision: 0.48.1
helm:
valueFiles:
- $values/<no value>/<no value>/stacks/observability-client/vm-client-stack/values.yaml
- repoURL: https://<no value>/<no value>
- $values/otc/localtest.me/stacks/observability-client/vm-client-stack/values.yaml
- repoURL: https://forgejo.edf-bootstrap.cx.fg1.ffm.osc.live/DevFW-CICD/stacks-instances
targetRevision: HEAD
ref: values
- repoURL: https://<no value>/<no value>
- repoURL: https://forgejo.edf-bootstrap.cx.fg1.ffm.osc.live/DevFW-CICD/stacks-instances
targetRevision: HEAD
path: "<no value>/<no value>/stacks/observability-client/vm-client-stack/manifests"
path: "otc/localtest.me/stacks/observability-client/vm-client-stack/manifests"

View file

@ -763,9 +763,9 @@ vmauth:
annotations:
nginx.ingress.kubernetes.io/force-ssl-redirect: "true"
cert-manager.io/cluster-issuer: main
host: o12y.<no value>
host: o12y.localtest.me
tlsHosts:
- o12y.<no value>
- o12y.localtest.me
tlsSecretName: vmauth-tls-secret
unauthorizedUserAccessSpec: {}
selectAllByDefault: true

View file

@ -20,6 +20,6 @@ spec:
- chart: grafana-operator
repoURL: ghcr.io/grafana/helm-charts
targetRevision: v5.18.0
- repoURL: https://<no value>/<no value>
- repoURL: https://forgejo.edf-bootstrap.cx.fg1.ffm.osc.live/DevFW-CICD/stacks-instances
targetRevision: HEAD
path: "<no value>/<no value>/stacks/observability/grafana-operator/manifests"
path: "otc/localtest.me/stacks/observability/grafana-operator/manifests"

View file

@ -20,7 +20,7 @@ spec:
spec:
ingressClassName: nginx
rules:
- host: o12y.<no value>
- host: o12y.gitea.localtest.me
http:
paths:
- backend:
@ -32,5 +32,5 @@ spec:
pathType: Prefix
tls:
- hosts:
- o12y.<no value>
- o12y.gitea.localtest.me
secretName: grafana-net-tls

View file

@ -22,10 +22,10 @@ spec:
targetRevision: 0.48.1
helm:
valueFiles:
- $values/<no value>/<no value>/stacks/observability/victoria-k8s-stack/values.yaml
- repoURL: https://<no value>/<no value>
- $values/otc/localtest.me/stacks/observability/victoria-k8s-stack/values.yaml
- repoURL: https://forgejo.edf-bootstrap.cx.fg1.ffm.osc.live/DevFW-CICD/stacks-instances
targetRevision: HEAD
ref: values
- repoURL: https://<no value>/<no value>
- repoURL: https://forgejo.edf-bootstrap.cx.fg1.ffm.osc.live/DevFW-CICD/stacks-instances
targetRevision: HEAD
path: "<no value>/<no value>/stacks/observability/victoria-k8s-stack/manifests"
path: "otc/localtest.me/stacks/observability/victoria-k8s-stack/manifests"

View file

@ -8,7 +8,7 @@ spec:
removePvcAfterDelete: true
storageMetadata:
annotations:
everest.io/crypt-key-id: <no value>
everest.io/crypt-key-id:
storage:
accessModes:
- ReadWriteOnce

View file

@ -288,7 +288,7 @@ vmsingle:
extraArgs: {}
storageMetadata:
annotations:
everest.io/crypt-key-id: <no value>
everest.io/crypt-key-id:
storage:
accessModes:
- ReadWriteOnce

View file

@ -23,10 +23,10 @@ spec:
targetRevision: v1.17.2
helm:
valueFiles:
- $values/<no value>/<no value>/stacks/otc/cert-manager/values.yaml
- repoURL: https://<no value>/<no value>
- $values/otc/localtest.me/stacks/otc/cert-manager/values.yaml
- repoURL: https://forgejo.edf-bootstrap.cx.fg1.ffm.osc.live/DevFW-CICD/stacks-instances
targetRevision: HEAD
ref: values
- repoURL: https://<no value>/<no value>
- repoURL: https://forgejo.edf-bootstrap.cx.fg1.ffm.osc.live/DevFW-CICD/stacks-instances
targetRevision: HEAD
path: "<no value>/<no value>/stacks/otc/cert-manager/manifests"
path: "otc/localtest.me/stacks/otc/cert-manager/manifests"

View file

@ -23,7 +23,7 @@ spec:
targetRevision: helm-chart-4.12.1-depends
helm:
valueFiles:
- $values/<no value>/<no value>/stacks/otc/ingress-nginx/values.yaml
- repoURL: https://<no value>/<no value>
- $values/otc/localtest.me/stacks/otc/ingress-nginx/values.yaml
- repoURL: https://forgejo.edf-bootstrap.cx.fg1.ffm.osc.live/DevFW-CICD/stacks-instances
targetRevision: HEAD
ref: values

View file

@ -12,9 +12,9 @@ spec:
namespace: default
server: "https://kubernetes.default.svc"
source:
repoURL: https://<no value>/<no value>
repoURL: https://forgejo.edf-bootstrap.cx.fg1.ffm.osc.live/DevFW-CICD/stacks-instances
targetRevision: HEAD
path: "<no value>/<no value>/stacks/otc/storageclass"
path: "otc/localtest.me/stacks/otc/storageclass"
project: default
syncPolicy:
automated:

View file

@ -30,7 +30,7 @@ idpbuilder create --use-path-routing \
--package https://github.com/cnoe-io/stacks//ref-implementation
```
This will take ~6 minutes for everything to come up. To track the progress, you can go to the [ArgoCD UI](https://<no value>:8443/argocd/applications).
This will take ~6 minutes for everything to come up. To track the progress, you can go to the [ArgoCD UI](https://localtest.me:8443/argocd/applications).
### What was installed?
@ -47,15 +47,15 @@ The only package that cannot be removed this way is Keycloak because other packa
#### Accessing UIs
- Argo CD: https://<no value>:8443/argocd
- Argo Workflows: https://<no value>:8443/argo-workflows
- Backstage: https://<no value>:8443/
- Gitea: https://<no value>:8443/gitea
- Keycloak: https://<no value>:8443/keycloak/admin/master/console/
- Argo CD: https://localtest.me:8443/argocd
- Argo Workflows: https://localtest.me:8443/argo-workflows
- Backstage: https://localtest.me:8443/
- Gitea: https://localtest.me:8443/gitea
- Keycloak: https://localtest.me:8443/keycloak/admin/master/console/
# Using it
For this example, we will walk through a few demonstrations. Once applications are ready, go to the [backstage URL](https://<no value>:8443).
For this example, we will walk through a few demonstrations. Once applications are ready, go to the [backstage URL](https://localtest.me:8443).
Click on the Sign-In button, you will be asked to log into the Keycloak instance. There are two users set up in this
configuration, and their password can be retrieved with the following command:
@ -70,7 +70,7 @@ Both users use the same password retrieved above.
If you want to create a new user or change existing users:
1. Go to the [Keycloak UI](https://<no value>:8443/keycloak/admin/master/console/).
1. Go to the [Keycloak UI](https://localtest.me:8443/keycloak/admin/master/console/).
Login with the username `cnoe-admin`. Password is the `KEYCLOAK_ADMIN_PASSWORD` field from the command above.
2. Select `cnoe` from the realms drop down menu.
3. Select users tab.
@ -97,9 +97,9 @@ You can click on the ArgoCD Application name to see more details.
### What just happened?
1. Backstage created [a git repository](https://<no value>:8443/gitea/giteaAdmin/demo), then pushed templated contents to it.
2. Backstage created [an ArgoCD Application](https://<no value>:8443/argocd/applications/argocd/demo?) and pointed it to the git repository.
3. Backstage registered the application as [a component](https://<no value>:8443/gitea/giteaAdmin/demo/src/branch/main/catalog-info.yaml) in Backstage.
1. Backstage created [a git repository](https://localtest.me:8443/gitea/giteaAdmin/demo), then pushed templated contents to it.
2. Backstage created [an ArgoCD Application](https://localtest.me:8443/argocd/applications/argocd/demo?) and pointed it to the git repository.
3. Backstage registered the application as [a component](https://localtest.me:8443/gitea/giteaAdmin/demo/src/branch/main/catalog-info.yaml) in Backstage.
4. ArgoCD deployed the manifests stored in the repo to the cluster.
5. Backstage retrieved application health from ArgoCD API, then displayed it.

View file

@ -10,9 +10,9 @@ metadata:
spec:
project: default
source:
repoURL: https://<no value>/<no value>
repoURL: https://forgejo.edf-bootstrap.cx.fg1.ffm.osc.live/DevFW-CICD/stacks-instances
targetRevision: HEAD
path: "<no value>/<no value>/stacks/ref-implementation/argo-workflows/manifests/dev"
path: "otc/localtest.me/stacks/ref-implementation/argo-workflows/manifests/dev"
destination:
server: "https://kubernetes.default.svc"
namespace: argo

View file

@ -7,14 +7,14 @@ data:
config: |
sso:
insecureSkipVerify: true
issuer: https://<no value>/keycloak/realms/cnoe
issuer: https://localtest.me/keycloak/realms/cnoe
clientId:
name: keycloak-oidc
key: client-id
clientSecret:
name: keycloak-oidc
key: secret-key
redirectUrl: https://<no value>:443/argo-workflows/oauth2/callback
redirectUrl: https://localtest.me:443/argo-workflows/oauth2/callback
rbac:
enabled: true
scopes:

View file

@ -10,9 +10,9 @@ metadata:
spec:
project: default
source:
repoURL: https://<no value>/<no value>
repoURL: https://forgejo.edf-bootstrap.cx.fg1.ffm.osc.live/DevFW-CICD/stacks-instances
targetRevision: HEAD
path: "<no value>/<no value>/stacks/ref-implementation/backstage-templates/entities"
path: "otc/localtest.me/stacks/ref-implementation/backstage-templates/entities"
directory:
exclude: "catalog-info.yaml"
destination:

View file

@ -20,7 +20,7 @@ metadata:
backstage.io/kubernetes-namespace: default
argocd/app-name: ${{values.name | dump}}
links:
- url: https://<no value>:443
- url: https://gitea.localtest.me:443
title: Repo URL
icon: github
spec:

View file

@ -100,7 +100,7 @@ spec:
input:
description: This is an example app
# Hard coded value for this demo purposes only.
repoUrl: <no value>:443/?repo=${{parameters.name}}
repoUrl: gitea.localtest.me:443/?repo=${{parameters.name}}
defaultBranch: main
- id: create-argocd-app
name: Create ArgoCD App
@ -111,7 +111,7 @@ spec:
argoInstance: in-cluster
projectName: default
# necessary until we generate our own cert
repoUrl: https://<no value>:443/giteaAdmin/${{parameters.name}}
repoUrl: https://gitea.localtest.me:443/giteaAdmin/${{parameters.name}}
path: "kustomize/base"
- id: register
name: Register

View file

@ -14,7 +14,7 @@ metadata:
apache-spark.cnoe.io/label-selector: env=dev,entity-id=${{values.name}}
apache-spark.cnoe.io/cluster-name: local
links:
- url: https://<no value>:443
- url: https://gitea.localtest.me:443
title: Repo URL
icon: github
spec:

View file

@ -35,7 +35,7 @@ spec:
input:
description: This is an example app
# Hard coded value for this demo purposes only.
repoUrl: <no value>:443/?repo=${{parameters.name}}
repoUrl: gitea.localtest.me:443/?repo=${{parameters.name}}
defaultBranch: main
- id: create-argocd-app
name: Create ArgoCD App
@ -46,7 +46,7 @@ spec:
argoInstance: in-cluster
projectName: default
# necessary until we generate our own cert
repoUrl: https://<no value>:443/giteaAdmin/${{parameters.name}}
repoUrl: https://gitea.localtest.me:443/giteaAdmin/${{parameters.name}}
path: "manifests"
- id: register
name: Register

View file

@ -10,7 +10,7 @@ metadata:
backstage.io/kubernetes-namespace: default
argocd/app-name: ${{values.name | dump}}
links:
- url: https://<no value>:443
- url: https://gitea.localtest.me:443
title: Repo URL
icon: github
spec:

View file

@ -31,7 +31,7 @@ spec:
input:
description: This is an example app
# Hard coded value for this demo purposes only.
repoUrl: <no value>:443/?repo=${{parameters.name}}
repoUrl: gitea.localtest.me:443/?repo=${{parameters.name}}
defaultBranch: main
- id: create-argocd-app
name: Create ArgoCD App
@ -42,7 +42,7 @@ spec:
argoInstance: in-cluster
projectName: default
# necessary until we generate our own cert
repoUrl: https://<no value>:443/giteaAdmin/${{parameters.name}}
repoUrl: https://gitea.localtest.me:443/giteaAdmin/${{parameters.name}}
path: "manifests"
- id: register
name: Register

View file

@ -9,7 +9,7 @@ metadata:
backstage.io/kubernetes-label-selector: 'entity-id=${{ values.name }}'
backstage.io/kubernetes-namespace: gitea
links:
- url: https://<no value>:443
- url: https://gitea.localtest.me:443
title: Repo URL
icon: git
spec:
@ -26,7 +26,7 @@ metadata:
annotations:
backstage.io/techdocs-ref: dir:.
links:
- url: https://<no value>:443
- url: https://gitea.localtest.me:443
title: Gitea Repo
icon: git
spec:

View file

@ -33,7 +33,7 @@ spec:
name: Publish to Gitea
action: publish:gitea
input:
repoUrl: <no value>:443/?repo=${{parameters.name}}
repoUrl: gitea.localtest.me:443/?repo=${{parameters.name}}
description: This is the repository for ${{ parameters.name }}
sourcePath: ./skeleton
defaultBranch: main

View file

@ -33,7 +33,7 @@ jobs:
#run: ./mvnw spring-boot:build-image # the original image build
run: |
export CONTAINER_REPO=$(echo {% raw %}${{ env.GITHUB_REPOSITORY }}{% endraw %} | tr '[:upper:]' '[:lower:]')
./mvnw com.google.cloud.tools:jib-maven-plugin:3.4.4:build -Djib.allowInsecureRegistries=true -Dimage=<no value>/${CONTAINER_REPO}:latest -Djib.to.auth.username={% raw %}${{ secrets.PACKAGES_USER }}{% endraw %} -Djib.to.auth.password={% raw %}${{ secrets.PACKAGES_TOKEN }}{% endraw %} -Djib.from.platforms=linux/arm64,linux/amd64
./mvnw com.google.cloud.tools:jib-maven-plugin:3.4.4:build -Djib.allowInsecureRegistries=true -Dimage=gitea.localtest.me/${CONTAINER_REPO}:latest -Djib.to.auth.username={% raw %}${{ secrets.PACKAGES_USER }}{% endraw %} -Djib.to.auth.password={% raw %}${{ secrets.PACKAGES_TOKEN }}{% endraw %} -Djib.from.platforms=linux/arm64,linux/amd64
- name: Build image as tar
run: |
./mvnw com.google.cloud.tools:jib-maven-plugin:3.4.4:buildTar -Djib.allowInsecureRegistries=true

View file

@ -9,7 +9,7 @@ metadata:
backstage.io/kubernetes-label-selector: 'entity-id=${{ values.name }}'
backstage.io/kubernetes-namespace: gitea
links:
- url: https://<no value>:443
- url: https://gitea.localtest.me:443
title: Repo URL
icon: git
spec:
@ -26,7 +26,7 @@ metadata:
annotations:
backstage.io/techdocs-ref: dir:.
links:
- url: https://<no value>:443
- url: https://gitea.localtest.me:443
title: Gitea Repo
icon: git
spec:

View file

@ -28,7 +28,7 @@ metadata:
spec:
ingressClassName: nginx
rules:
- host: ${{ values.namespace }}.<no value>
- host: ${{ values.namespace }}.localtest.me
http:
paths:
- backend:
@ -58,7 +58,7 @@ spec:
spec:
containers:
- name: workload
image: <no value>/giteaadmin/${{ values.name }}
image: gitea.localtest.me/giteaadmin/${{ values.name }}
env:
- name: SPRING_PROFILES_ACTIVE
value: postgres

View file

@ -50,7 +50,7 @@ spec:
name: Publish to Gitea
action: publish:gitea
input:
repoUrl: <no value>:443/?repo=${{parameters.name}}
repoUrl: gitea.localtest.me:443/?repo=${{parameters.name}}
description: This is the repository for ${{ parameters.name }}
sourcePath: ./
defaultBranch: main
@ -64,7 +64,7 @@ spec:
argoInstance: in-cluster
projectName: default
# necessary until we generate our own cert
repoUrl: https://<no value>:443/giteaAdmin/${{parameters.name}}
repoUrl: https://gitea.localtest.me:443/giteaAdmin/${{parameters.name}}
path: "k8s"
- id: register

View file

@ -10,9 +10,9 @@ metadata:
spec:
project: default
source:
repoURL: https://<no value>/<no value>
repoURL: https://forgejo.edf-bootstrap.cx.fg1.ffm.osc.live/DevFW-CICD/stacks-instances
targetRevision: HEAD
path: "<no value>/<no value>/stacks/ref-implementation/backstage/manifests"
path: "otc/localtest.me/stacks/ref-implementation/backstage/manifests"
destination:
server: "https://kubernetes.default.svc"
namespace: backstage

View file

@ -70,7 +70,7 @@ data:
app-config.yaml: |
app:
title: CNOE Backstage
baseUrl: https://<no value>:443
baseUrl: https://localtest.me:443
organization:
name: CNOE
backend:
@ -80,7 +80,7 @@ data:
# auth:
# keys:
# - secret: ${BACKEND_SECRET}
baseUrl: https://<no value>:443
baseUrl: https://localtest.me:443
listen:
port: 7007
# Uncomment the following host directive to bind to specific interfaces
@ -90,7 +90,7 @@ data:
# Content-Security-Policy directives follow the Helmet format: https://helmetjs.github.io/#reference
# Default Helmet Content-Security-Policy values can be removed by setting the key to false
cors:
origin: https://<no value>:443
origin: https://localtest.me:443
methods: [GET, HEAD, PATCH, POST, PUT, DELETE]
credentials: true
database:
@ -106,12 +106,12 @@ data:
integrations:
gitea:
- baseUrl: https://<no value>:443
host: <no value>:443
- baseUrl: https://gitea.localtest.me:443
host: gitea.localtest.me:443
username: ${GITEA_USERNAME}
password: ${GITEA_PASSWORD}
- baseUrl: https://<no value>
host: <no value>
- baseUrl: https://gitea.localtest.me
host: gitea.localtest.me
username: ${GITEA_USERNAME}
password: ${GITEA_PASSWORD}
- baseUrl: https://forgejo.edf-bootstrap.cx.fg1.ffm.osc.live
@ -167,7 +167,7 @@ data:
locations:
# Examples from a public GitHub repository.
- type: url
target: https://<no value>:443/<no value>/raw/branch/main/<no value>/<no value>/stacks/ref-implementation/backstage-templates/entities/catalog-info.yaml
target: https://forgejo.edf-bootstrap.cx.fg1.ffm.osc.live:443/DevFW-CICD/stacks-instances/raw/branch/main/otc/localtest.me/stacks/ref-implementation/backstage-templates/entities/catalog-info.yaml
rules:
- allow: [Component, System, API, Resource, Location, Template, User, Group]
kubernetes:
@ -182,7 +182,7 @@ data:
- type: 'config'
instances:
- name: in-cluster
url: https://<no value>:443/argocd
url: https://localtest.me:443/argocd
username: admin
password: ${ARGOCD_ADMIN_PASSWORD}
argoWorkflows:
@ -379,17 +379,17 @@ spec:
template:
engineVersion: v2
data:
BACKSTAGE_FRONTEND_URL: https://<no value>:443/backstage
BACKSTAGE_FRONTEND_URL: https://localtest.me:443/backstage
POSTGRES_HOST: postgresql.backstage.svc.cluster.local
POSTGRES_PORT: '5432'
POSTGRES_DB: backstage
POSTGRES_USER: backstage
POSTGRES_PASSWORD: "{{.POSTGRES_PASSWORD}}"
ARGO_WORKFLOWS_URL: https://<no value>:443/argo-workflows
KEYCLOAK_NAME_METADATA: https://<no value>:443/keycloak/realms/cnoe/.well-known/openid-configuration
ARGO_WORKFLOWS_URL: https://localtest.me:443/argo-workflows
KEYCLOAK_NAME_METADATA: https://localtest.me:443/keycloak/realms/cnoe/.well-known/openid-configuration
KEYCLOAK_CLIENT_SECRET: "{{.BACKSTAGE_CLIENT_SECRET}}"
ARGOCD_AUTH_TOKEN: "argocd.token={{.ARGOCD_SESSION_TOKEN}}"
ARGO_CD_URL: 'https://<no value>/argocd/api/v1/'
ARGO_CD_URL: 'https://localtest.me/argocd/api/v1/'
data:
- secretKey: ARGOCD_SESSION_TOKEN
remoteRef:

View file

@ -69,5 +69,5 @@ From here on, you can follow the instructions in the [README](./README.md) file.
echo https://${CODESPACE_NAME}-8080.${GITHUB_CODESPACES_PORT_FORWARDING_DOMAIN}
```
For example, if you need to access Argo Workflows UI, instead of going to `https://<no value>:8443/argo`,
For example, if you need to access Argo Workflows UI, instead of going to `https://localtest.me:8443/argo`,
you go to `https://${CODESPACE_NAME}-8080.${GITHUB_CODESPACES_PORT_FORWARDING_DOMAIN}/argo`

View file

@ -12,9 +12,9 @@ spec:
namespace: external-secrets
server: "https://kubernetes.default.svc"
source:
repoURL: https://<no value>/<no value>
repoURL: https://forgejo.edf-bootstrap.cx.fg1.ffm.osc.live/DevFW-CICD/stacks-instances
targetRevision: HEAD
path: "<no value>/<no value>/stacks/ref-implementation/external-secrets/manifests"
path: "otc/localtest.me/stacks/ref-implementation/external-secrets/manifests"
project: default
syncPolicy:
automated:

View file

@ -12,9 +12,9 @@ spec:
namespace: keycloak
server: "https://kubernetes.default.svc"
source:
repoURL: https://<no value>/<no value>
repoURL: https://forgejo.edf-bootstrap.cx.fg1.ffm.osc.live/DevFW-CICD/stacks-instances
targetRevision: HEAD
path: "<no value>/<no value>/stacks/ref-implementation/keycloak/manifests"
path: "otc/localtest.me/stacks/ref-implementation/keycloak/manifests"
project: default
syncPolicy:
automated:

View file

@ -83,7 +83,7 @@ data:
proxy=edge
# hostname configuration
hostname=<no value>
hostname=localtest.me
http-relative-path=keycloak
# the admin url requires its own configuration to reflect correct url

View file

@ -145,7 +145,7 @@ data:
"rootUrl": "",
"baseUrl": "",
"redirectUris": [
"https://<no value>:443/argo-workflows/oauth2/callback"
"https://localtest.me:443/argo-workflows/oauth2/callback"
],
"webOrigins": [
"/*"
@ -174,7 +174,7 @@ data:
"rootUrl": "",
"baseUrl": "",
"redirectUris": [
"https://<no value>:443/api/auth/keycloak-oidc/handler/frame"
"https://localtest.me:443/api/auth/keycloak-oidc/handler/frame"
],
"webOrigins": [
"/*"
@ -186,15 +186,15 @@ data:
"clientId": "grafana",
"name": "Grafana Client",
"description": "Used for Grafana SSO",
"rootUrl": "https://<no value>/grafana",
"adminUrl": "https://<no value>/grafana",
"baseUrl": "https://<no value>/grafana",
"rootUrl": "https://localtest.me/grafana",
"adminUrl": "https://localtest.me/grafana",
"baseUrl": "https://localtest.me/grafana",
"alwaysDisplayInConsole": false,
"redirectUris": [
"http://<no value>/grafana/*"
"http://localtest.me/grafana/*"
],
"webOrigins": [
"https://<no value>/grafana"
"https://localtest.me/grafana"
],
"standardFlowEnabled": true,
"implicitFlowEnabled": false,
@ -241,7 +241,7 @@ data:
"rootUrl": "",
"baseUrl": "",
"redirectUris": [
"https://<no value>/*"
"https://localtest.me/*"
],
"webOrigins": [
"/*"
@ -270,7 +270,7 @@ data:
"rootUrl": "",
"baseUrl": "",
"redirectUris": [
"https://<no value>/*"
"https://gitea.localtest.me/*"
],
"webOrigins": [
"/*"
@ -517,7 +517,7 @@ spec:
ARGOCD_PASSWORD=$(./kubectl -n argocd get secret argocd-initial-admin-secret -o go-template='{{.data.password | base64decode }}')
ARGOCD_SESSION_TOKEN=$(curl -sS https://<no value>/argocd/api/v1/session -H 'Content-Type: application/json' -d "{\"username\":\"admin\",\"password\":\"${ARGOCD_PASSWORD}\"}" | jq -r .token)
ARGOCD_SESSION_TOKEN=$(curl -sS https://localtest.me/argocd/api/v1/session -H 'Content-Type: application/json' -d "{\"username\":\"admin\",\"password\":\"${ARGOCD_PASSWORD}\"}" | jq -r .token)
echo \
"apiVersion: v1

View file

@ -10,9 +10,9 @@ metadata:
spec:
project: default
source:
repoURL: https://<no value>/<no value>
repoURL: https://forgejo.edf-bootstrap.cx.fg1.ffm.osc.live/DevFW-CICD/stacks-instances
targetRevision: HEAD
path: "<no value>/<no value>/stacks/ref-implementation/mailhog"
path: "otc/localtest.me/stacks/ref-implementation/mailhog"
destination:
server: "https://kubernetes.default.svc"
namespace: mailhog

View file

@ -19,14 +19,14 @@ spec:
## Ingress
Mailhog offers both WebUi and API at `https://<no value>/mailhog`.
Mailhog offers both WebUi and API at `https://localtest.me/mailhog`.
The ingress definition is in `stacks/core/ingress-apps/mailhog.yaml` (BTW, why isn't this ingress file here in this folder ??) routing to the mailhog' service
```yaml
spec:
rules:
- host: <no value>
- host: localtest.me
http:
paths:
- backend:

View file

@ -23,13 +23,13 @@ spec:
targetRevision: HEAD
helm:
valueFiles:
- $values/<no value>/<no value>/stacks/ref-implementation/openbao/values.yaml
- repoURL: https://<no value>/<no value>
- $values/otc/localtest.me/stacks/ref-implementation/openbao/values.yaml
- repoURL: https://forgejo.edf-bootstrap.cx.fg1.ffm.osc.live/DevFW-CICD/stacks-instances
targetRevision: HEAD
ref: values
- repoURL: https://<no value>/<no value>
- repoURL: https://forgejo.edf-bootstrap.cx.fg1.ffm.osc.live/DevFW-CICD/stacks-instances
targetRevision: HEAD
path: "<no value>/<no value>/stacks/ref-implementation/openbao/manifests"
path: "otc/localtest.me/stacks/ref-implementation/openbao/manifests"
ignoreDifferences:
- group: admissionregistration.k8s.io
kind: MutatingWebhookConfiguration