Commit Graph

10 Commits (c8d1d51c11d3ea7400085243545f936ad27d0c82)

Author SHA1 Message Date
radex ec11a8173e kube/redis: explicit version and storage class, clean up
By forcing version to be explicit, we encourage users to pick the latest version when they first deploy, or to upgrade to latest from the old 5.0.4.

Also, non-existent storage class default is removed in favor of explicitly asking for storageClassName.

Change-Id: Ibf9113eae4c2be20bf273c7536176b42fac52256
Reviewed-on: https://gerrit.hackerspace.pl/c/hscloud/+/1796
Reviewed-by: q3k <q3k@hackerspace.pl>
Reviewed-by: radex <radex@hackerspace.pl>
2024-02-04 14:23:06 +00:00
radex 4ffc64d97d kube: add .volume field on PVCs and ConfigMaps
Change-Id: I93eec44bd6df4ecb0044a4797faa9bf6fd26802d
Reviewed-on: https://gerrit.hackerspace.pl/c/hscloud/+/1811
Reviewed-by: q3k <q3k@hackerspace.pl>
2023-12-04 20:33:37 +00:00
radex 36964dca3b kube: clean up PersistentVolumeClaims
There's no difference as far as jsonnet is concerned, but it may confuse newbies, as Service and SimpleIngress use double colon for its top-level kube helpers. This also removes any ambiguity as to whether this is manifested in final JSON. So we can make that a convention.

Change-Id: I01ad4ea63f4d5d8ee6e5d41c79637ba186548c6f
Reviewed-on: https://gerrit.hackerspace.pl/c/hscloud/+/1803
Reviewed-by: q3k <q3k@hackerspace.pl>
2023-11-24 20:37:53 +00:00
radex 8b8f3876a9 kube: add target:: convenience field to Service
Change-Id: If69116d93b6074136a36d98973e1aa997e2ebbef
Reviewed-on: https://gerrit.hackerspace.pl/c/hscloud/+/1802
Reviewed-by: q3k <q3k@hackerspace.pl>
2023-11-24 20:37:48 +00:00
radex f28cd62c0e *: Simplify kube.PersistentVolumeClaims
Change-Id: I0a3e44de9f1c4db146fd1e493741f5fe381da3ae
Reviewed-on: https://gerrit.hackerspace.pl/c/hscloud/+/1768
Reviewed-by: q3k <q3k@hackerspace.pl>
2023-11-18 12:36:00 +00:00
informatic 529e181497 app/matrix: appservice workers
This change extracts appservice workers (deployed and tested) and prepares for
federation sender workers extraction (still partially broken)

Change-Id: I2d63fe44538ea2a7c5fd492f6ce119bc35a9eb03
Reviewed-on: https://gerrit.hackerspace.pl/c/hscloud/+/1101
Reviewed-by: informatic <informatic@hackerspace.pl>
Reviewed-by: q3k <q3k@hackerspace.pl>
2022-05-01 08:17:57 +00:00
informatic 2759eb7a54 kube/redis: fix /data partition permissions
This has been encountered when introducing redis in our production
matrix deployment. /data partition is owned by root:root by default
otherwise.

Change-Id: Ic148ff25837c6e8da394a5124556481343ea2873
2021-01-31 20:07:29 +01:00
informatic 89a1ee90cd kube/redis: implement optional cfg.password option
If set, this enables internal redis authentication scheme. Supports
secretRefs, as well as values passed directly.

Change-Id: Ie902b8d79fdc4aa83ad8ad123e79f0bc80c1251f
2020-10-10 19:44:14 +02:00
q3k f8b4cd7b06 kube/redis: run as unprivileged user
Change-Id: If117384748cb6d06097742329095ae8936ed001c
2020-02-15 12:39:35 +01:00
q3k 6916f7e244 app/toot: start implementing redis 2019-04-04 16:54:00 +02:00