Drone--

2024-06-07 21:10:01 +10:00 · 2024-06-07 21:10:01 +10:00 · a682966f4d
commit a682966f4d
parent d8dd1c19d5
18 changed files with 0 additions and 320 deletions
--- a/services/DroneCI/_namespace-drone.yml
+++ b/services/DroneCI/_namespace-drone.yml
@ -1,4 +0,0 @@
-apiVersion: v1
-kind: Namespace
-metadata:
-  name: drone
--- a/services/DroneCI/deployment-drone.yaml
+++ b/services/DroneCI/deployment-drone.yaml
@ -1,69 +0,0 @@
-apiVersion: apps/v1
-kind: Deployment
-metadata:
-  name: drone
-  namespace: drone
-  labels:
-    app: drone
-spec:
-  replicas: 1
-  selector:
-    matchLabels:
-      app: drone
-  template:
-    metadata:
-      labels:
-        app: drone
-    spec:
-      serviceAccountName: drone
-      containers:
-      - name: drone
-        image: drone/drone:latest
-        env:
-        - name: DRONE_SERVER_PROTO
-          value: 'https'
-        - name: DRONE_SERVER_HOST
-          value: 'ci.spamasaurus.com'
-        - name: DRONE_SERVER_PORT
-          value: ':80'
-        - name: DRONE_TLS_AUTOCERT
-          value: 'false'
-        - name: DRONE_GITEA_SERVER
-          value: 'https://code.spamasaurus.com'
-        - name: DRONE_GIT_ALWAYS_AUTH
-          value: 'false'
-        - name: DRONE_AGENTS_ENABLED
-          value: 'true'
-        - name: DRONE_USER_CREATE
-          value: 'username:djpbessems,admin:true'
-        - name: DRONE_TMATE_ENABLED
-          value: 'false'
-        envFrom:
-        - secretRef:
-            name: drone
-        ports:
-          - name: ui
-            containerPort: 80
-        volumeMounts:
-        - mountPath: /data
-          name: flexvolsmb-drone-data
-      - name: drone-runner
-        image: drone/drone-runner-kube:latest
-        ports:
-        - containerPort: 3000
-        env:
-        - name: DRONE_RPC_HOST
-          value: 'ci.spamasaurus.com'
-        - name: DRONE_RPC_PROTO
-          value: 'https'
-        - name: DRONE_RUNNER_CAPACITY
-          value: '2'
-        - name: DRONE_RUNNER_MAX_PROCS
-          value: '3'
-        envFrom:
-        - secretRef:
-            name: drone
-      volumes:
-      - name: flexvolsmb-drone-data
-        persistentVolumeClaim:
-          claimName: flexvolsmb-drone-data
--- a/services/DroneCI/ingressroute-drone.yaml
+++ b/services/DroneCI/ingressroute-drone.yaml
@ -1,17 +0,0 @@
-apiVersion: traefik.containo.us/v1alpha1
-kind: IngressRoute
-metadata:
-  name: drone
-  namespace: drone
-spec:
-  entryPoints:
-    - websecure
-  routes:
-  - match: Host(`ci.spamasaurus.com`)
-    kind: Rule
-    services:
-    - name: drone
-      port: 80
-    middlewares:
-      - name: security-headers@file
-      - name: compression@file
--- a/services/DroneCI/persistentvolume-flexvolsmb-drone-certs.yaml
+++ b/services/DroneCI/persistentvolume-flexvolsmb-drone-certs.yaml
@ -1,18 +0,0 @@
-apiVersion: v1
-kind: PersistentVolume
-metadata:
-  name: flexvolsmb-drone-certs
-spec:
-  capacity:
-    storage: 10Gi
-  accessModes:
-    - ReadWriteMany
-  storageClassName: flexvolsmb-drone-certs
-  flexVolume:
-    driver: mount/smb
-    secretRef:
-      name: flexvolsmb-credentials
-    options:
-      opts: file_mode=0777,dir_mode=0777,iocharset=utf8
-      server: 192.168.154.225
-      share: /K3s.Volumes/traefikcertsdumper/export
--- a/services/DroneCI/persistentvolume-flexvolsmb-drone-data.yaml
+++ b/services/DroneCI/persistentvolume-flexvolsmb-drone-data.yaml
@ -1,18 +0,0 @@
-apiVersion: v1
-kind: PersistentVolume
-metadata:
-  name: flexvolsmb-drone-data
-spec:
-  capacity:
-    storage: 1Gi
-  accessModes:
-    - ReadWriteMany
-  storageClassName: flexvolsmb-drone-data
-  flexVolume:
-    driver: mount/smb
-    secretRef:
-      name: flexvolsmb-credentials
-    options:
-      opts: file_mode=0777,dir_mode=0777,iocharset=utf8,nobrl
-      server: 192.168.154.225
-      share: /K3s.Volumes/drone/data
--- a/services/DroneCI/persistentvolume-flexvolsmb-drone-output.yaml
+++ b/services/DroneCI/persistentvolume-flexvolsmb-drone-output.yaml
@ -1,18 +0,0 @@
-apiVersion: v1
-kind: PersistentVolume
-metadata:
-  name: flexvolsmb-drone-output
-spec:
-  capacity:
-    storage: 50Gi
-  accessModes:
-    - ReadWriteMany
-  storageClassName: flexvolsmb-drone-output
-  flexVolume:
-    driver: mount/smb
-    secretRef:
-      name: flexvolsmb-credentials
-    options:
-      opts: file_mode=0777,dir_mode=0777,iocharset=utf8
-      server: 192.168.154.225
-      share: /K3s.Volumes/lighttpd/websites/sn.itch.fyi/Repository/rel
--- a/services/DroneCI/persistentvolume-flexvolsmb-drone-scratch.yaml
+++ b/services/DroneCI/persistentvolume-flexvolsmb-drone-scratch.yaml
@ -1,18 +0,0 @@
-apiVersion: v1
-kind: PersistentVolume
-metadata:
-  name: flexvolsmb-drone-scratch
-spec:
-  capacity:
-    storage: 50Gi
-  accessModes:
-    - ReadWriteMany
-  storageClassName: flexvolsmb-drone-scratch
-  flexVolume:
-    driver: mount/smb
-    secretRef:
-      name: flexvolsmb-credentials
-    options:
-      opts: file_mode=0777,dir_mode=0777,iocharset=utf8
-      server: 192.168.154.225
-      share: /K3s.Volumes/drone/scratch
--- a/services/DroneCI/persistentvolumeclaim-flexvolsmb-drone-certs.yaml
+++ b/services/DroneCI/persistentvolumeclaim-flexvolsmb-drone-certs.yaml
@ -1,12 +0,0 @@
-apiVersion: v1
-kind: PersistentVolumeClaim
-metadata:
-  name: flexvolsmb-drone-certs
-  namespace: drone
-spec:
-  accessModes:
-    - ReadWriteMany
-  storageClassName: flexvolsmb-drone-certs
-  resources:
-    requests:
-      storage: 10Gi
--- a/services/DroneCI/persistentvolumeclaim-flexvolsmb-drone-data.yaml
+++ b/services/DroneCI/persistentvolumeclaim-flexvolsmb-drone-data.yaml
@ -1,12 +0,0 @@
-apiVersion: v1
-kind: PersistentVolumeClaim
-metadata:
-  name: flexvolsmb-drone-data
-  namespace: drone
-spec:
-  accessModes:
-    - ReadWriteMany
-  storageClassName: flexvolsmb-drone-data
-  resources:
-    requests:
-      storage: 1Gi
--- a/services/DroneCI/persistentvolumeclaim-flexvolsmb-drone-output.yaml
+++ b/services/DroneCI/persistentvolumeclaim-flexvolsmb-drone-output.yaml
@ -1,12 +0,0 @@
-apiVersion: v1
-kind: PersistentVolumeClaim
-metadata:
-  name: flexvolsmb-drone-output
-  namespace: drone
-spec:
-  accessModes:
-    - ReadWriteMany
-  storageClassName: flexvolsmb-drone-output
-  resources:
-    requests:
-      storage: 50Gi
--- a/services/DroneCI/persistentvolumeclaim-flexvolsmb-drone-scratch.yaml
+++ b/services/DroneCI/persistentvolumeclaim-flexvolsmb-drone-scratch.yaml
@ -1,12 +0,0 @@
-apiVersion: v1
-kind: PersistentVolumeClaim
-metadata:
-  name: flexvolsmb-drone-scratch
-  namespace: drone
-spec:
-  accessModes:
-    - ReadWriteMany
-  storageClassName: flexvolsmb-drone-scratch
-  resources:
-    requests:
-      storage: 50Gi
--- a/services/DroneCI/role-drone.yaml
+++ b/services/DroneCI/role-drone.yaml
@ -1,25 +0,0 @@
-kind: Role
-apiVersion: rbac.authorization.k8s.io/v1
-metadata:
-  name: drone
-  namespace: drone
-rules:
-  - apiGroups:
-      - ""
-    resources:
-      - secrets
-    verbs:
-      - create
-      - delete
-  - apiGroups:
-      - ""
-    resources:
-      - pods
-      - pods/log
-    verbs:
-      - get
-      - create
-      - delete
-      - list
-      - watch
-      - update
--- a/services/DroneCI/rolebinding-drone.yaml
+++ b/services/DroneCI/rolebinding-drone.yaml
@ -1,13 +0,0 @@
-kind: RoleBinding
-apiVersion: rbac.authorization.k8s.io/v1
-metadata:
-  name: drone
-  namespace: drone
-subjects:
-  - kind: ServiceAccount
-    name: drone
-    namespace: default
-roleRef:
-  kind: Role
-  name: drone
-  apiGroup: rbac.authorization.k8s.io
--- a/services/DroneCI/sealedsecret-drone.yaml
+++ b/services/DroneCI/sealedsecret-drone.yaml
@ -1,19 +0,0 @@
-apiVersion: bitnami.com/v1alpha1
-kind: SealedSecret
-metadata:
-  creationTimestamp: null
-  name: drone
-  namespace: drone
-spec:
-  encryptedData:
-    DRONE_GITEA_CLIENT_ID: AgCpCa3WzdcsQ102+c4RtkRGhxFqSKIn209dPd3E4eL6RgOAbPoeihxR+GslEwaapbt9VbkMS5O3uPNTqNEUDaz7s32S8qrmz2Ik7VLRGyKGvo/cQF2k0yzIEz1IZpgjNzpRWDgWN6LUBB01zEdZO2eGlEIFzJASfmLQdsYKb5shKMq+waObA1lUD/NHG2zhjXlXiYqCFqGh9sxFTudnrt+mVd8Yug2EOwStk5XDnMKh+xMJ3FWVry7tZlWGroa0PwGYnMV6JKCviFRdz1ksC8qu8D+ONAN10H9RhTq2pUtGErAGVew4hUKRUYbBP/jz5bZcJ0qhIHYLHbj67w1KuWflLt247EXXPYBeBkwhFBrKW9OowVttZJ/501mVpRwX/gdG7/CQhbzc5pgnMnVQiBQJbUM9f3xCPjJQp1KANkY4t353qx/+fd/OFwfwFiFqxPbvyC+e3IkxeyaFRb/U3zS6/Gsr3Ib1YTf8/3XUnmEJG86jyGycCNLapfdzubMtW7Z696GtXf0NbuUQ2ipE5k45fp5icIiskEHtub0bn2lu/9iZ1N765N5iFZ9f+GTSBAse7VqrjjUClNHLyp2UTOD7Y49ygo5QvmUr5RwQ8K9+MCkDBw1k4tB5+7CsFBez7C90zSKs/oWp78jHLcBglkR0wPQhPpuab50Fq+loGhF//DG2DPn5XKQveSF9kAglRNIHEDZ6HE/p0UEljxI6Nv3+vMjQPBUVPTKAlm+MyXOm9Qoyj2c=
-    DRONE_GITEA_CLIENT_SECRET: AgATrbXMSvR6QDM2LhWO+T4otJ4VPFYC0vmZgqlXRQweyj3dw4EB40CkFmWIniBWyPw4bu5OEU6t2EewXqz843uGKVDTO6SqVca8BW0bJnD6+wo38lI9bidBnuRZESWv13pBhjSqcqBNC26p7RNPBOQqwRhrPazsSYYPvum/em3Nsfsky7gq3LBwUIDJRmtHXYdkTbpJxtFsctGwKUHPVXQqIhn4Qg+Bq+dTfr2Oi83lvsS1bWDrxEGNTwQbuvyM+H/PEwfWNqgiw7y/+DYFD6WOxW8VChxhijcBZStTD1q7iu4RgSmQfhMUToC1lWmo+g2LBKyFWZDlOyOKEA6qeBNzscq2hCIbreEblD15vKN0bbNULC6wI4lQFtWgZelm8s4nrhNFMMGINLrik8i1kxk7u+nEs9/jfeaNryc2yPkaUwpd9IBiKjosJZtcmhw4dwLeoH6mlCZzI8QFbM+lZT/h3zX5o/vMDkMyHN3golxyHGmC6l75VVSPOOMMd7U+0MtieCMFqFrRwS1uuCsRMwulzddOWqKBLGj0j9Uwo6+GYRJvX/b4Cju23H8TZqoXiWGeEm5D3xnKv2HinchDkxGiD4x6mHlDOj6oMEyVsA648mE2zdRe/xSl6RU5Pmb81eZCOaW8tQz22d4SXlCI7SCcpJWunAQ5iLHtM6rJhB7ze4JASMJqAPH97bI51dCCF7mnWb2ACuCLm41/sUcLREGJlojnysPmCP7ape5gmWbGBggZESnBwc8GDNbG6Q==
-    DRONE_RPC_SECRET: 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
-  template:
-    metadata:
-      creationTimestamp: null
-      labels:
-        app: drone
-      name: drone
-      namespace: drone
-    type: Opaque
--- a/services/DroneCI/sealedsecret-flexvolsmb-credentials.yaml
+++ b/services/DroneCI/sealedsecret-flexvolsmb-credentials.yaml
@ -1,16 +0,0 @@
-apiVersion: bitnami.com/v1alpha1
-kind: SealedSecret
-metadata:
-  creationTimestamp: null
-  name: flexvolsmb-credentials
-  namespace: drone
-spec:
-  encryptedData:
-    password: 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
-    username: AgB4p+vxQ3syPB95KbG+zIp+6Apq9g8vCQjkKavlG6RWCtLUkSGVzr3U5VzRkShxzZ45WyeDp98llgfcZhwSAdh18Y/12rwcUx+taGRpuz2iddwko8FfI3jh4BFI9XZJ/XogpTI4YmbxdXAslpoJMhZ7lyy6evKIXGJ5VBa4nQwM9INIuc9G5MAH2XClu2KC6aDjlu4rB5S315iRWjk8cN8KVhajkuhNmhSciCHa5rTMzF4tBD4S/PdJpsZyQbXytAXlXipm6DopjJpzidrhsf/0hhtQGu/I3137ExnBstFMhWTVaZZA8imEfh/RyWUkScCSr1k/7wYhWmaIb9XhfVRTLnQty5Gof3evyh8yNj31s+KtBOjgmDRr+jq8L/b4GWoOWIRsCOWJNtKD5ZqxrZZN+t4KYZ/hKHfRKhCQb1SDfxFtd37hKGItrKOGMIdUBVZ1xQQKFxBZuiZoYkqdrrNIF9rntGpvsy4AcLfHNqSZLvqjeZ0QlQntBGE5wBKR/2NeVovd+ddTUbdhvZrzG2+9L4R3Oom0bG+1PUeOHp8HDdanEUtUjH0v/hdnZ/Uc+nem60H+z0Hi13W7JyLpSmVFGr9WnXd53zjGlzyf6GOK/uPC+Zq+14SbBBjbGskDQWs94tBIMY6F6LpP6ecaDBP4X4gKqb1G6aXvU3Mxw9el1IRpAskDJszbcb0q/03Nmo5xpuzOs30=
-  template:
-    metadata:
-      creationTimestamp: null
-      name: flexvolsmb-credentials
-      namespace: drone
-    type: mount/smb
--- a/services/DroneCI/service-drone.yaml
+++ b/services/DroneCI/service-drone.yaml
@ -1,12 +0,0 @@
-apiVersion: v1
-kind: Service
-metadata:
-  name: drone
-  namespace: drone
-spec:
-  ports:
-    - protocol: TCP
-      name: ui
-      port: 80
-  selector:
-    app: drone
--- a/services/DroneCI/serviceaccount-drone.yaml
+++ b/services/DroneCI/serviceaccount-drone.yaml
@ -1,7 +0,0 @@
-apiVersion: v1
-kind: ServiceAccount
-metadata:
-  name: drone
-  namespace: drone
-  labels:
-    app: drone
--- a/services/Gitea/persistentvolume-flexvolsmb-gitea-runner.yaml
+++ b/services/Gitea/persistentvolume-flexvolsmb-gitea-runner.yaml
@ -1,18 +0,0 @@
-apiVersion: v1
-kind: PersistentVolume
-metadata:
-  name: flexvolsmb-gitea-runner
-spec:
-  capacity:
-    storage: 1Gi
-  accessModes:
-    - ReadWriteMany
-  storageClassName: flexvolsmb-gitea-runner
-  flexVolume:
-    driver: mount/smb
-    secretRef:
-      name: flexvolsmb-credentials
-    options:
-      opts: file_mode=0777,dir_mode=0777,uid=1000,gid=1000,iocharset=utf8
-      server: 192.168.154.225
-      share: /K3s.Volumes/gitea/runner