DevFW-CICD/stacks
14
0
Fork 2
Code Issues Pull requests 3 Projects Releases Packages Wiki Activity Actions
248 commits 30 branches 4 tags 1.5 MiB
Commit graph

202 commits

Author SHA1 Message Date
miwr
7b8ea2de6b status 2025-04-01 13:28:10 +02:00
miwr
ee630c88b9 env: 
- name: CRON_SCHEDULE
            value: "0 * * * *"
          - name: TINI_SUBREAPER
            value:
 2025-04-01 13:18:44 +02:00
miwr
fc6ee8bcae 1M 2025-04-01 12:53:31 +02:00
miwr
c9d72e9f90 should be done 2025-04-01 11:57:46 +02:00
miwr
7cc75f0095 test 2025-04-01 11:44:52 +02:00
miwr
37a9a73664 - name: passwd-volume 
mountPath: /etc/passwd
          subPath: passwd
 2025-04-01 11:44:19 +02:00
miwr
ad76195004 passwd-user-configmap 2025-04-01 11:35:26 +02:00
miwr
d3b60c036a extraArgs: "chmod o+rwx /etc/passwd" 2025-04-01 11:20:56 +02:00
miwr
de3194062d extraArgs: 
- |
      chmod o+rwx /etc/passwd
      chmod o+rwx /etc/group
 2025-04-01 11:16:07 +02:00
miwr
cda3fc8179 extraArgs: 
- chmod o+rwx /etc/passwd
    - chmod o+rwx /etc/group
 2025-04-01 11:15:20 +02:00
miwr
2dc751b5e3 chmod o+rwx /etc/passwd 
chmod o+rwx /etc/group
 2025-04-01 10:59:09 +02:00
miwr
12a4ed37f7 /etc/group 2025-04-01 10:51:43 +02:00
miwr
77b571b768 chown 100:100 /etc/passwd 2025-04-01 10:50:59 +02:00
miwr
6df0858cdf - name: init 
image: alpine:latest
 2025-04-01 10:45:20 +02:00
miwr
06fb6d223f runAsUser: 100 2025-04-01 10:21:07 +02:00
miwr
4f8eb0bc8b chmod o+rwx /var/log/openbao 2025-04-01 10:05:55 +02:00
miwr
1164768b9f runAsUser: 1 2025-03-31 15:53:54 +02:00
miwr
f66f437cdf runAsUser: 100 2025-03-31 15:48:42 +02:00
miwr
ce5bdf0226 runAsUser: 1 2025-03-31 15:35:06 +02:00
miwr
56c5cc2620 - name: alloy-data 
mountPath: /var/lib/
 2025-03-31 15:24:21 +02:00
miwr
458414e779 set -e 
mkdir -p /var/log/openbao
          chown 100:100 /var/log/openbao
          echo "logrotate❌100💯:/home/logrotate:/bin/sh" >> /etc/passwd
          echo "logrotate❌100:" >> /etc/group
          mkdir -p /home/logrotate
          # chown 100:100 /var/lib
 2025-03-31 15:09:30 +02:00
miwr
8eae08aaa9 securityContext: 
runAsUser: 0
 2025-03-31 15:04:11 +02:00
miwr
ba9452e03c chown 100:100 /var/lib 2025-03-31 14:55:39 +02:00
miwr
888d32c403 set -e 
mkdir -p /var/log/openbao
          chown 100:100 /var/log/openbao
          echo "logrotate❌100💯:/home/logrotate:/bin/sh" >> /etc/passwd
          echo "logrotate❌100:" >> /etc/group
          chown logrotate:logrotate /var/lib
 2025-03-31 14:49:48 +02:00
miwr
6f3effeaf5 # bao audit enable file file_path=stdout 2025-03-31 14:49:09 +02:00
miwr
fd02d55dda bao audit enable file file_path=stdout 2025-03-31 14:26:58 +02:00
miwr
63b17c9e32 echo "logrotate❌100💯:/home/logrotate:/bin/sh" >> /etc/passwd 
echo "logrotate❌100:" >> /etc/group
 2025-03-31 14:10:34 +02:00
miwr
f13bf825ff set -e 
chown 100:100 /var/lib
          tail -f /dev/null
 2025-03-31 14:03:43 +02:00
miwr
abd7da5cd3 image: alpine:latest 2025-03-31 13:58:12 +02:00
miwr
a42df6275c restart policy removed 2025-03-31 13:50:24 +02:00
miwr
5a802be864 - | 
set -e
          useradd -u 100 logrotate
          chown logrotate:logrotate /var/lib
          tail -f /dev/null
 2025-03-31 13:45:05 +02:00
miwr
bc6ed363e2 logrotate-priviledges 2025-03-31 13:38:33 +02:00
miwr
631be775f5 chown logrotate:logrotate /var/lib/logrotate.status 2025-03-31 13:28:37 +02:00
miwr
0107666fe2 logrotate-config-volume 2025-03-31 12:31:38 +02:00
miwr
e5ccae1aab - name: logrotate-config 
mountPath: /etc/logrotate.conf
          subPath: logrotate.conf
          readOnly: true
 2025-03-31 12:22:35 +02:00
miwr
f6d1842876 image: skymatic/logrotate:latest 2025-03-31 12:14:19 +02:00
miwr
508ecd3f12 imagePullPolicy: IfNotPresent 2025-03-31 12:07:24 +02:00
miwr
5e47caaee1 - name: logrotate 
image: imroc/logrotate:latest
      env:
        - name: LOGROTATE_FILE_PATTERN
          value: "/var/log/nginx/nginx_*.log"
        - name: LOGROTATE_FILESIZE
          value: "20M"
        - name: LOGROTATE_FILENUM
          value: "10"
        - name: CRON_EXPR
          value: "*/1 * * * *"
        - name: CROND_LOGLEVEL
          value: "7"
 2025-03-31 11:54:31 +02:00
miwr
0485a8fb76 image: skymatic/logrotate:latest 2025-03-31 11:42:14 +02:00
miwr
17f578dde2 blacklabelops/logrotate 2025-03-31 11:20:56 +02:00
miwr
a35aefc376 image: debian:stable-slim 2025-03-31 11:07:40 +02:00
miwr
398c94fbc8 alpine:latest 2025-03-31 11:02:11 +02:00
miwr
30f0c6f218 debian:stable-slim 2025-03-31 10:54:23 +02:00
miwr
06303ef355 bao audit enable -path="file" file file_path=/openbao/logs/openbao/openbao.log 2025-03-31 10:30:15 +02:00
miwr
08471dee47 bao audit enable -path="file" file file_path=/var/log/openbao/openbao.log 2025-03-31 10:25:48 +02:00
miwr
881b65fcec apiVersion: apps/v1 
kind: DaemonSet
metadata:
  name: openbao-logging-dir
  namespace: openbao
spec:
  selector:
    matchLabels:
      app: openbao-logging-dir
  template:
    metadata:
      labels:
        app: openbao-logging-dir
    spec:
      initContainers:
      - name: creator
        image: busybox
        command: ["/bin/sh", "-c"]
        args:
        - |
          set -e
          mkdir -p /var/log/openbao
          chown 100:100 /var/log/openbao
        securityContext:
          runAsUser: 0
        volumeMounts:
        - name: host-log
          mountPath: /var/log
      containers:
      - name: running-container
        image: busybox
        command: ["sleep", "infinity"]
      volumes:
      - name: host-log
        hostPath:
          path: /var/log
          type: Directory
 2025-03-31 10:19:39 +02:00
miwr
3853370a8c # - name: logrotate-config 
#   mountPath: /etc/logrotate.conf
        #   subPath: logrotate.conf
 2025-03-31 10:10:59 +02:00
miwr
6acd284b83 - name: logrotate 
image: alpine:latest
      command: ["/bin/sh", "-c", "while true; do /usr/sbin/logrotate /etc/logrotate.conf; sleep 60; done"]
      securityContext:
        runAsUser: 100
      volumeMounts:
        - name: host-log-storage
          mountPath: /openbao/logs
        - name: logrotate-config
          mountPath: /etc/logrotate.conf
          subPath: logrotate.conf
 2025-03-31 10:03:59 +02:00
miwr
c79114f463 # bao audit enable file file_path=stdout 2025-03-27 13:43:26 +01:00
miwr
6a5be1257c bao audit enable file file_path=stdout 2025-03-27 13:19:45 +01:00
miwr
1cb714aabb volumeMounts: 
- mountPath: /var/log
    name: log-storage
    readOnly: false
 2025-03-26 15:51:24 +01:00
miwr
450b5ff1a8 # removed 2025-03-26 15:42:15 +01:00
miwr
aaaf905edc # rm -rf /openbao/data/* 2025-03-26 15:40:05 +01:00
miwr
bd89c91d52 forgot to add login 2025-03-26 15:31:49 +01:00
miwr
a9ad7c1c5c comments deleted 2025-03-26 15:24:19 +01:00
miwr
d057e9dae1 configuration added 2025-03-26 14:44:35 +01:00
Bot
55435a3ad2 feat(mailhog): IPCEICIS-3048 - added documentation 2025-03-24 17:09:44 +01:00
Stephan Lo
d0585fd2b7 feat(mailhog): IPCEICIS-3048 - mailhog deployed, ingress is https://<URL>/mailhog, forgje is configured 2025-03-20 23:57:52 +01:00
Christopher.Hase
65b74abeda Merge branch 'development' into alloy_implementation 2025-03-18 08:52:51 +00:00
richardrobertreitz
fc287acf58 Update template/stacks/ref-implementation/backstage-templates/entities/spring-petclinic/skeleton/.github/workflows/maven-build.yml 2025-03-17 21:50:50 +00:00
richardrobertreitz
94e3a759b2 Update template/stacks/core/crossplane-providers/provider-shell.yaml 2025-03-16 22:53:03 +00:00
richardrobertreitz
31b768eebc Update template/stacks/core/crossplane-providers/provider-kind.yaml 2025-03-16 22:51:03 +00:00
richardrobertreitz
9b5457e45f Update template/stacks/ref-implementation/backstage/manifests/install.yaml 
chore(backstage): adjust to forgejo.edf-bootstrap.cx.fg1.ffm.osc.live/devfw-cicd/backstage-edp:development
 2025-03-15 13:27:41 +00:00
Stephan Lo
c1b68bfdb2 chore(provider-shell): adjust to https://forgejo.edf-bootstrap.cx.fg1.ffm.osc.live/DevFW-CICD/-/packages/container/provider-shell/v0.1.3 2025-03-14 19:20:29 +01:00
Richard Robert Reitz
beeb1f916b Hofix for ArgoCD problems after path routing fix 2025-03-14 09:34:45 +01:00
richardrobertreitz
b42bba4379 Merge pull request 'IPCEICIS-2751_backstage' (#14) from IPCEICIS-2751_backstage into development 
Reviewed-on: #14
 2025-03-14 08:16:59 +00:00
richardrobertreitz
5cc22c5648 Update template/stacks/core/ingress-apps/argocd-server.yaml 2025-03-13 16:16:49 +00:00
richardrobertreitz
2f5a263511 Update template/stacks/core/argocd/values.yaml 2025-03-13 16:08:10 +00:00
richardrobertreitz
d8867b9e3a Update template/stacks/ref-implementation/backstage/manifests/install.yaml 2025-03-13 10:16:04 +00:00
miwr
415576c2cb unnecessary rule deleted 2025-03-13 10:26:56 +01:00
miwr
1e5fa94c47 rules in alloy's values.yaml adjusted 2025-03-13 10:19:45 +01:00
miwr
8f621647f5 rule { 
source_labels = ["__meta_kubernetes_pod_name", "__meta_kubernetes_pod_container_name"]
          action = "replace"
          target_label = "__path__"
          replacement = "/var/log/containers/$1_$2.log"
        }
 2025-03-13 10:08:59 +01:00
richardrobertreitz
74a77bfa3b Update template/stacks/ref-implementation/backstage/manifests/install.yaml 2025-03-13 09:00:38 +00:00
richardrobertreitz
3293f9cf5a Update template/stacks/ref-implementation/backstage/manifests/install.yaml 2025-03-13 08:33:06 +00:00
miwr
75f40e070c promtail references replaces with alloy in dashboard_loki_container.yaml 2025-03-12 15:55:41 +01:00
miwr
b462804f29 loki.source.kubernetes "all_pod_logs" { 
targets    = discovery.relabel.pod_logs.output
        forward_to = [loki.write.local_loki.receiver]
      }
 2025-03-12 15:28:20 +01:00
miwr
fbb5aeb32b forward_to = [loki.write.local_loki.receiver] 2025-03-12 15:20:35 +01:00
miwr
687322525b values.yaml for alloy edited 2025-03-12 15:18:59 +01:00
miwr
1682302b69 "#" are not allowed in config.alloy in values.yaml 2025-03-12 15:04:59 +01:00
miwr
8f62875529 config.alloy adjusted in values.yaml 2025-03-12 14:53:01 +01:00
miwr
ddaf06b29c loki reference changes 2025-03-12 14:39:36 +01:00
miwr
180b74697a config.alloy in values.yaml adjusted 2025-03-12 14:30:37 +01:00
miwr
3a5df11604 alloy implementation commented out 2025-03-12 14:22:29 +01:00
miwr
81e85ff518 config.alloy added to the values 2025-03-12 14:22:11 +01:00
miwr
dd7cd2fa91 alloy.uiPathPrefix: "/alloy" added 2025-03-12 13:47:07 +01:00
miwr
71fbdcb5e0 alloy implementation 2025-03-12 13:37:16 +01:00
Christopher.Hase
0d49c582f5 template/stacks/ref-implementation/backstage/manifests/install.yaml aktualisiert 2025-03-11 11:25:06 +00:00
richardrobertreitz
303d7b3a7e Update template/stacks/ref-implementation/backstage-templates/entities/spring-petclinic/skeleton/.github/workflows/maven-build.yml 2025-03-08 12:50:23 +00:00
richardrobertreitz
1ab8119063 Fixed kubectl download on Linux ARM64 VMs 2025-03-07 20:28:39 +00:00
Richard Robert Reitz
a9c69d6c24 adjusted retry backoff time 2025-03-04 19:23:19 +01:00
Richard Robert Reitz
c2cb410af8 Merge branch 'development' into IPCEICIS-764_grafana_sso 2025-03-04 19:21:48 +01:00
Richard Robert Reitz
d0cce6916d fixed argocd version 2025-03-04 19:06:11 +01:00
Richard Robert Reitz
aba4a4a088 shortened retry backoff 2025-03-04 19:03:36 +01:00
Richard Robert Reitz
4ae8f6fd15 shortened retry backoff 2025-03-04 18:49:55 +01:00
Your Name
1198250861 Merge branch 'development' into IPCEICIS-764_grafana_sso 2025-03-04 11:55:17 +01:00
Patrick Sy
d95ba7c12c
chore(petclinic): Removed unused workflow 
Disabled tests in maven workflow as there are currently dind problems
 2025-03-03 16:37:18 +01:00
Patrick Sy
8a38aee529
feat(runner): Added ubuntu-latest runner tag 2025-03-03 15:21:46 +01:00
Richard Robert Reitz
1ef1029e1f Added Grafana admin account 2025-03-02 17:26:29 +01:00
Richard Robert Reitz
63a694d17c Removed Grafana admin account 2025-03-02 17:09:02 +01:00
Richard Robert Reitz
6eb52e654c Refactored external secret for grafana keycloak client secret 2025-03-02 15:46:06 +01:00