commit

2025-09-01 21:13:20 +02:00
parent 23ef2ce590
commit 666088c80d
24 changed files with 822 additions and 180 deletions
--- a/terraform/control-plane1.bu
+++ b/terraform/control-plane1.bu
@@ -129,27 +129,27 @@ storage:
    - path: /opt/bin/kubeadm
      mode: 0755
      contents:
-        source: "http://build-node.undercloud.local:3000/Undercloud/undercloud-infrastructure/raw/branch/main/k8s-binaries/kubeadm"
+        source: "http://git.undercloud.local:3000/Undercloud/undercloud-infrastructure/raw/branch/main/k8s-binaries/kubeadm"

    - path: /opt/bin/kubelet
      mode: 0755
      contents:
-        source: "http://build-node.undercloud.local:3000/Undercloud/undercloud-infrastructure/raw/branch/main/k8s-binaries/kubelet"
+        source: "http://git.undercloud.local:3000/Undercloud/undercloud-infrastructure/raw/branch/main/k8s-binaries/kubelet"

    - path: /opt/bin/kubectl
      mode: 0755
      contents:
-        source: "http://build-node.undercloud.local:3000/Undercloud/undercloud-infrastructure/raw/branch/main/k8s-binaries/kubectl"
+        source: "http://git.undercloud.local:3000/Undercloud/undercloud-infrastructure/raw/branch/main/k8s-binaries/kubectl"

    - path: /opt/bin/calicoctl
      mode: 0755
      contents:
-        source: "http://build-node.undercloud.local:3000/Undercloud/undercloud-infrastructure/raw/branch/main/k8s-binaries/calicoctl"
+        source: "http://git.undercloud.local:3000/Undercloud/undercloud-infrastructure/raw/branch/main/k8s-binaries/calicoctl"

    - path: /opt/bin/velero
      mode: 0755
      contents:
-        source: "http://build-node.undercloud.local:3000/Undercloud/undercloud-infrastructure/raw/branch/main/k8s-binaries/velero"
+        source: "http://git.undercloud.local:3000/Undercloud/undercloud-infrastructure/raw/branch/main/k8s-binaries/velero"

    - path: /etc/kubernetes/kubeadm-init.yaml
      mode: 0644
@@ -373,21 +373,21 @@ systemd:
        ExecStart=/bin/sh -c 'echo "witing 30s..."'
        ExecStart=/bin/sleep 30s
        ExecStart=/bin/sh -c 'echo "create calico namespace..."'
-        ExecStart=-/opt/bin/kubectl apply -f http://build-node.undercloud.local:3000/Undercloud/undercloud-infrastructure/raw/branch/main/calico-config/namespace.yaml
+        ExecStart=-/opt/bin/kubectl apply -f http://git.undercloud.local:3000/Undercloud/undercloud-infrastructure/raw/branch/main/calico-config/namespace.yaml
        ExecStart=/bin/sh -c 'echo "install tigera operator..."'
-        ExecStart=-/opt/bin/kubectl create -f http://build-node.undercloud.local:3000/Undercloud/undercloud-infrastructure/raw/branch/main/calico-config/operator-crds.yaml
-        ExecStart=-/opt/bin/kubectl create -f http://build-node.undercloud.local:3000/Undercloud/undercloud-infrastructure/raw/branch/main/calico-config/tigera-operator.yaml
+        ExecStart=-/opt/bin/kubectl create -f http://git.undercloud.local:3000/Undercloud/undercloud-infrastructure/raw/branch/main/calico-config/operator-crds.yaml
+        ExecStart=-/opt/bin/kubectl create -f http://git.undercloud.local:3000/Undercloud/undercloud-infrastructure/raw/branch/main/calico-config/tigera-operator.yaml
        ExecStart=/bin/sh -c 'echo "witing 60s..."'
        ExecStart=/bin/sleep 60s
        ExecStart=/bin/sh -c 'echo "witing for tigera operator... (20mini max)"'
        ExecStart=/opt/bin/kubectl wait deployment -n tigera-operator tigera-operator --for condition=Available=True --timeout=1200s
        ExecStart=/bin/sh -c 'echo "create clico custom ressources..."'
-        ExecStart=-/opt/bin/kubectl apply -f http://build-node.undercloud.local:3000/Undercloud/undercloud-infrastructure/raw/branch/main/calico-config/custom-resources.yaml
+        ExecStart=-/opt/bin/kubectl apply -f http://git.undercloud.local:3000/Undercloud/undercloud-infrastructure/raw/branch/main/calico-config/custom-resources.yaml
        
        ExecStart=/bin/sh -c 'echo "witing 3m.."'
        ExecStart=/bin/sleep 3m
        #ExecStart=/bin/sh -c 'echo "apply calico (calico-apiserver)..."'
-        #ExecStart=-/opt/bin/kubectl apply -f http://build-node.undercloud.local:3000/Undercloud/undercloud-infrastructure/raw/branch/main/calico-config/calico.yaml
+        #ExecStart=-/opt/bin/kubectl apply -f http://git.undercloud.local:3000/Undercloud/undercloud-infrastructure/raw/branch/main/calico-config/calico.yaml
        #ExecStart=/bin/sh -c 'echo "witing 1m..."'
        #ExecStart=/bin/sleep 2m
        ExecStart=/bin/sh -c 'echo "witing calico-apiserver... (20mini max)"'
@@ -395,11 +395,11 @@ systemd:
        ExecStart=/bin/sh -c 'echo "witing 120s..."'
        ExecStart=/bin/sleep 2m
        ExecStart=/bin/sh -c 'echo "apply calico-peers..."'
-        ExecStart=-/opt/bin/kubectl apply -f http://build-node.undercloud.local:3000/Undercloud/undercloud-infrastructure/raw/branch/main/calico-config/calico-peer.yaml
+        ExecStart=-/opt/bin/kubectl apply -f http://git.undercloud.local:3000/Undercloud/undercloud-infrastructure/raw/branch/main/calico-config/calico-peer.yaml
        ExecStart=/bin/sh -c 'echo "witing 60s..."'
        ExecStart=/bin/sleep 1m
        ExecStart=/bin/sh -c 'echo "apply calico-ippools..."'
-        ExecStart=-/opt/bin/kubectl apply -f http://build-node.undercloud.local:3000/Undercloud/undercloud-infrastructure/raw/branch/main/calico-config/ippools.yaml
+        ExecStart=-/opt/bin/kubectl apply -f http://git.undercloud.local:3000/Undercloud/undercloud-infrastructure/raw/branch/main/calico-config/ippools.yaml
        
        #ExecStart=/bin/sh -c 'echo "witing for whisker.."'
        #ExecStart=/opt/bin/kubectl wait deployment -n calico-system whisker --for condition=Available=True --timeout=1200s
@@ -412,6 +412,76 @@ systemd:
        RestartSec=120s
        [Install]
        WantedBy=multi-user.target
+    - name: install-ceph.service
+      enabled: true
+      contents: |
+        [Unit]
+        Wants=kubeadm-init.service
+        After=kubeadm-init.service
+
+        [Service]
+        StandardOutput=journal+console
+        StandardError=journal+console
+
+        ExecStart=/bin/sh -c 'echo "install.ceph.service started..."'
+        Environment=KUBECONFIG=/etc/kubernetes/admin.conf
+        Environment=DATASTORE_TYPE=kubernetes
+        Environment=PATH=/usr/bin/:/usr/sbin:/opt/bin
+        Type=oneshot
+        
+        StandardOutput=journal+console
+        StandardError=journal+console
+        ExecStart=/bin/sh -c 'echo "witing 30s..."'
+        ExecStart=/bin/sleep 30s
+        ExecStart=/bin/sh -c 'echo "create ceph namespace..."'
+        ExecStart=-/opt/bin/kubectl apply -f http://git.undercloud.local:3000/Undercloud/undercloud-infrastructure/raw/branch/main/ceph/namespace.yaml
+        ExecStart=-/opt/bin/kubectl apply -f http://git.undercloud.local:3000/Undercloud/undercloud-infrastructure/raw/branch/main/ceph/ceph-conf.yaml
+        ExecStart=-/opt/bin/kubectl apply -f http://git.undercloud.local:3000/Undercloud/undercloud-infrastructure/raw/branch/main/ceph/csi-cephfsplugin-provisioner.yaml
+        ExecStart=-/opt/bin/kubectl apply -f http://git.undercloud.local:3000/Undercloud/undercloud-infrastructure/raw/branch/main/ceph/csi-cephfsplugin.yaml
+        ExecStart=-/opt/bin/kubectl apply -f http://git.undercloud.local:3000/Undercloud/undercloud-infrastructure/raw/branch/main/ceph/csi-config-map.yaml
+        ExecStart=-/opt/bin/kubectl apply -f http://git.undercloud.local:3000/Undercloud/undercloud-infrastructure/raw/branch/main/ceph/csi-encryption-kms-config.yaml
+        ExecStart=-/opt/bin/kubectl apply -f http://git.undercloud.local:3000/Undercloud/undercloud-infrastructure/raw/branch/main/ceph/csi-nodeplugin-rbac.yaml
+        ExecStart=-/opt/bin/kubectl apply -f http://git.undercloud.local:3000/Undercloud/undercloud-infrastructure/raw/branch/main/ceph/csi-provisioner-rbac.yaml
+        ExecStart=-/opt/bin/kubectl apply -f http://git.undercloud.local:3000/Undercloud/undercloud-infrastructure/raw/branch/main/ceph/csi-driver.yaml
+        ExecStart=-/opt/bin/kubectl apply -f http://git.undercloud.local:3000/Undercloud/undercloud-infrastructure/raw/branch/main/ceph/secrets.yaml
+        ExecStart=-/opt/bin/kubectl apply -f http://git.undercloud.local:3000/Undercloud/undercloud-infrastructure/raw/branch/main/ceph/storage-class.yaml
+        
+        ExecStart=/usr/bin/systemctl disable install-ceph.service
+        #RemainAfterExit=true
+        Restart=on-failure
+        RestartSec=120s
+        [Install]
+        WantedBy=multi-user.target
+    - name: install-gitea.service
+      enabled: true
+      contents: |
+        [Unit]
+        Wants=install-ceph.service
+        After=install-ceph.service
+        [Service]
+        StandardOutput=journal+console
+        StandardError=journal+console
+        Environment=KUBECONFIG=/etc/kubernetes/admin.conf
+        Environment=DATASTORE_TYPE=kubernetes
+        Environment=PATH=/usr/bin/:/usr/sbin:/opt/bin
+        Type=oneshot
+        
+        ExecStart=/opt/bin/kubectl wait deployment -n ceph csi-cephfsplugin-provisioner --for condition=Available=True --timeout=1200s
+        ExecStart=/bin/sleep 4m
+        ExecStart=/opt/bin/kubectl apply -f http://git.undercloud.local:3000/Undercloud/undercloud-infrastructure/raw/branch/main/gitea/namespace.yaml
+        ExecStart=/opt/bin/kubectl apply -f http://git.undercloud.local:3000/Undercloud/undercloud-infrastructure/raw/branch/main/gitea/secrets.yaml
+        ExecStart=/opt/bin/kubectl apply -f http://git.undercloud.local:3000/Undercloud/undercloud-infrastructure/raw/branch/main/gitea/db.yaml
+        ExecStart=/bin/sleep 60s
+        ExecStart=/opt/bin/kubectl apply -f http://git.undercloud.local:3000/Undercloud/undercloud-infrastructure/raw/branch/main/gitea/adminer.yaml
+        ExecStart=/opt/bin/kubectl apply -f http://git.undercloud.local:3000/Undercloud/undercloud-infrastructure/raw/branch/main/gitea/gitea.yaml
+        ExecStart=/bin/sleep 3m
+        ExecStart=/opt/bin/kubectl exec deploy/gitea -n gitea -- /bin/startup.sh
+        
+        ExecStart=/usr/bin/systemctl disable install-gitea.service
+        Restart=on-failure
+        RestartSec=120s
+        [Install]
+        WantedBy=multi-user.target
    - name: install-argocd.service
      enabled: true
      contents: |
@@ -430,16 +500,16 @@ systemd:
        ExecStart=/opt/bin/kubectl wait deployment -n kube-system coredns --for condition=Available=True --timeout=600s
        
        ExecStart=/bin/sleep 1m
-        ExecStart=/opt/bin/kubectl apply -n argocd -f http://build-node.undercloud.local:3000/Undercloud/undercloud-infrastructure/raw/branch/main/argocd/namespace.yaml
-        ExecStart=/opt/bin/kubectl apply -n argocd -f http://build-node.undercloud.local:3000/Undercloud/undercloud-infrastructure/raw/branch/main/argocd/install.yaml
+        ExecStart=/opt/bin/kubectl apply -n argocd -f http://git.undercloud.local:3000/Undercloud/undercloud-infrastructure/raw/branch/main/argocd/namespace.yaml
+        ExecStart=/opt/bin/kubectl apply -n argocd -f http://git.undercloud.local:3000/Undercloud/undercloud-infrastructure/raw/branch/main/argocd/install.yaml
        ExecStart=/opt/bin/kubectl wait deployment -n argocd argocd-server --for condition=Available=True --timeout=600s

-        ExecStart=/opt/bin/kubectl apply -n argocd -f http://build-node.undercloud.local:3000/Undercloud/undercloud-infrastructure/raw/branch/main/argocd/repo.yaml
+        ExecStart=/opt/bin/kubectl apply -n argocd -f http://git.undercloud.local:3000/Undercloud/undercloud-infrastructure/raw/branch/main/argocd/repo.yaml
        ExecStart=/bin/sleep 10s
-        ExecStart=/opt/bin/kubectl apply -n argocd -f http://build-node.undercloud.local:3000/Undercloud/undercloud-infrastructure/raw/branch/main/argocd/apps.yaml
+        ExecStart=/opt/bin/kubectl apply -n argocd -f http://git.undercloud.local:3000/Undercloud/undercloud-infrastructure/raw/branch/main/argocd/apps.yaml

        ExecStart=/bin/sleep 10s
-        ExecStart=/opt/bin/kubectl apply -n argocd -f http://build-node.undercloud.local:3000/Undercloud/undercloud-infrastructure/raw/branch/main/argocd/ingress.yaml
+        ExecStart=/opt/bin/kubectl apply -n argocd -f http://git.undercloud.local:3000/Undercloud/undercloud-infrastructure/raw/branch/main/argocd/ingress.yaml


        #ExecStart=/opt/bin/kubectl apply -n argocd -f http://aux-balancer.undercloud.cf:3000/undercloud/k8aux-bootstrap/raw/branch/main/repos/k8aux-bootstrap.yaml
@@ -487,9 +557,9 @@ systemd:
          kubectl -n kube-system delete svc kube-dns --ignore-not-found ; \
          kubectl apply -f /etc/kubernetes/addons/kube-dns-fixed-svc.yaml ; \
          kubectl -n argocd delete svc argocd-server --ignore-not-found ; \
-          kubectl apply -f http://build-node.undercloud.local:3000/Undercloud/undercloud-infrastructure/raw/branch/main/argocd/service.yaml ; \
+          kubectl apply -f http://git.undercloud.local:3000/Undercloud/undercloud-infrastructure/raw/branch/main/argocd/service.yaml ; \
          kubectl -n calico-system delete svc whisker --ignore-not-found || true ; \
-          kubectl create -f http://build-node.undercloud.local:3000/Undercloud/undercloud-infrastructure/raw/branch/main/calico-config/whisker.yaml || true ; \
+          kubectl create -f http://git.undercloud.local:3000/Undercloud/undercloud-infrastructure/raw/branch/main/calico-config/whisker.yaml || true ; \
          echo "[pin-service-ips] done." \
        '