Drone--
This commit is contained in:
parent
d8dd1c19d5
commit
a682966f4d
@ -1,4 +0,0 @@
|
|||||||
apiVersion: v1
|
|
||||||
kind: Namespace
|
|
||||||
metadata:
|
|
||||||
name: drone
|
|
@ -1,69 +0,0 @@
|
|||||||
apiVersion: apps/v1
|
|
||||||
kind: Deployment
|
|
||||||
metadata:
|
|
||||||
name: drone
|
|
||||||
namespace: drone
|
|
||||||
labels:
|
|
||||||
app: drone
|
|
||||||
spec:
|
|
||||||
replicas: 1
|
|
||||||
selector:
|
|
||||||
matchLabels:
|
|
||||||
app: drone
|
|
||||||
template:
|
|
||||||
metadata:
|
|
||||||
labels:
|
|
||||||
app: drone
|
|
||||||
spec:
|
|
||||||
serviceAccountName: drone
|
|
||||||
containers:
|
|
||||||
- name: drone
|
|
||||||
image: drone/drone:latest
|
|
||||||
env:
|
|
||||||
- name: DRONE_SERVER_PROTO
|
|
||||||
value: 'https'
|
|
||||||
- name: DRONE_SERVER_HOST
|
|
||||||
value: 'ci.spamasaurus.com'
|
|
||||||
- name: DRONE_SERVER_PORT
|
|
||||||
value: ':80'
|
|
||||||
- name: DRONE_TLS_AUTOCERT
|
|
||||||
value: 'false'
|
|
||||||
- name: DRONE_GITEA_SERVER
|
|
||||||
value: 'https://code.spamasaurus.com'
|
|
||||||
- name: DRONE_GIT_ALWAYS_AUTH
|
|
||||||
value: 'false'
|
|
||||||
- name: DRONE_AGENTS_ENABLED
|
|
||||||
value: 'true'
|
|
||||||
- name: DRONE_USER_CREATE
|
|
||||||
value: 'username:djpbessems,admin:true'
|
|
||||||
- name: DRONE_TMATE_ENABLED
|
|
||||||
value: 'false'
|
|
||||||
envFrom:
|
|
||||||
- secretRef:
|
|
||||||
name: drone
|
|
||||||
ports:
|
|
||||||
- name: ui
|
|
||||||
containerPort: 80
|
|
||||||
volumeMounts:
|
|
||||||
- mountPath: /data
|
|
||||||
name: flexvolsmb-drone-data
|
|
||||||
- name: drone-runner
|
|
||||||
image: drone/drone-runner-kube:latest
|
|
||||||
ports:
|
|
||||||
- containerPort: 3000
|
|
||||||
env:
|
|
||||||
- name: DRONE_RPC_HOST
|
|
||||||
value: 'ci.spamasaurus.com'
|
|
||||||
- name: DRONE_RPC_PROTO
|
|
||||||
value: 'https'
|
|
||||||
- name: DRONE_RUNNER_CAPACITY
|
|
||||||
value: '2'
|
|
||||||
- name: DRONE_RUNNER_MAX_PROCS
|
|
||||||
value: '3'
|
|
||||||
envFrom:
|
|
||||||
- secretRef:
|
|
||||||
name: drone
|
|
||||||
volumes:
|
|
||||||
- name: flexvolsmb-drone-data
|
|
||||||
persistentVolumeClaim:
|
|
||||||
claimName: flexvolsmb-drone-data
|
|
@ -1,17 +0,0 @@
|
|||||||
apiVersion: traefik.containo.us/v1alpha1
|
|
||||||
kind: IngressRoute
|
|
||||||
metadata:
|
|
||||||
name: drone
|
|
||||||
namespace: drone
|
|
||||||
spec:
|
|
||||||
entryPoints:
|
|
||||||
- websecure
|
|
||||||
routes:
|
|
||||||
- match: Host(`ci.spamasaurus.com`)
|
|
||||||
kind: Rule
|
|
||||||
services:
|
|
||||||
- name: drone
|
|
||||||
port: 80
|
|
||||||
middlewares:
|
|
||||||
- name: security-headers@file
|
|
||||||
- name: compression@file
|
|
@ -1,18 +0,0 @@
|
|||||||
apiVersion: v1
|
|
||||||
kind: PersistentVolume
|
|
||||||
metadata:
|
|
||||||
name: flexvolsmb-drone-certs
|
|
||||||
spec:
|
|
||||||
capacity:
|
|
||||||
storage: 10Gi
|
|
||||||
accessModes:
|
|
||||||
- ReadWriteMany
|
|
||||||
storageClassName: flexvolsmb-drone-certs
|
|
||||||
flexVolume:
|
|
||||||
driver: mount/smb
|
|
||||||
secretRef:
|
|
||||||
name: flexvolsmb-credentials
|
|
||||||
options:
|
|
||||||
opts: file_mode=0777,dir_mode=0777,iocharset=utf8
|
|
||||||
server: 192.168.154.225
|
|
||||||
share: /K3s.Volumes/traefikcertsdumper/export
|
|
@ -1,18 +0,0 @@
|
|||||||
apiVersion: v1
|
|
||||||
kind: PersistentVolume
|
|
||||||
metadata:
|
|
||||||
name: flexvolsmb-drone-data
|
|
||||||
spec:
|
|
||||||
capacity:
|
|
||||||
storage: 1Gi
|
|
||||||
accessModes:
|
|
||||||
- ReadWriteMany
|
|
||||||
storageClassName: flexvolsmb-drone-data
|
|
||||||
flexVolume:
|
|
||||||
driver: mount/smb
|
|
||||||
secretRef:
|
|
||||||
name: flexvolsmb-credentials
|
|
||||||
options:
|
|
||||||
opts: file_mode=0777,dir_mode=0777,iocharset=utf8,nobrl
|
|
||||||
server: 192.168.154.225
|
|
||||||
share: /K3s.Volumes/drone/data
|
|
@ -1,18 +0,0 @@
|
|||||||
apiVersion: v1
|
|
||||||
kind: PersistentVolume
|
|
||||||
metadata:
|
|
||||||
name: flexvolsmb-drone-output
|
|
||||||
spec:
|
|
||||||
capacity:
|
|
||||||
storage: 50Gi
|
|
||||||
accessModes:
|
|
||||||
- ReadWriteMany
|
|
||||||
storageClassName: flexvolsmb-drone-output
|
|
||||||
flexVolume:
|
|
||||||
driver: mount/smb
|
|
||||||
secretRef:
|
|
||||||
name: flexvolsmb-credentials
|
|
||||||
options:
|
|
||||||
opts: file_mode=0777,dir_mode=0777,iocharset=utf8
|
|
||||||
server: 192.168.154.225
|
|
||||||
share: /K3s.Volumes/lighttpd/websites/sn.itch.fyi/Repository/rel
|
|
@ -1,18 +0,0 @@
|
|||||||
apiVersion: v1
|
|
||||||
kind: PersistentVolume
|
|
||||||
metadata:
|
|
||||||
name: flexvolsmb-drone-scratch
|
|
||||||
spec:
|
|
||||||
capacity:
|
|
||||||
storage: 50Gi
|
|
||||||
accessModes:
|
|
||||||
- ReadWriteMany
|
|
||||||
storageClassName: flexvolsmb-drone-scratch
|
|
||||||
flexVolume:
|
|
||||||
driver: mount/smb
|
|
||||||
secretRef:
|
|
||||||
name: flexvolsmb-credentials
|
|
||||||
options:
|
|
||||||
opts: file_mode=0777,dir_mode=0777,iocharset=utf8
|
|
||||||
server: 192.168.154.225
|
|
||||||
share: /K3s.Volumes/drone/scratch
|
|
@ -1,12 +0,0 @@
|
|||||||
apiVersion: v1
|
|
||||||
kind: PersistentVolumeClaim
|
|
||||||
metadata:
|
|
||||||
name: flexvolsmb-drone-certs
|
|
||||||
namespace: drone
|
|
||||||
spec:
|
|
||||||
accessModes:
|
|
||||||
- ReadWriteMany
|
|
||||||
storageClassName: flexvolsmb-drone-certs
|
|
||||||
resources:
|
|
||||||
requests:
|
|
||||||
storage: 10Gi
|
|
@ -1,12 +0,0 @@
|
|||||||
apiVersion: v1
|
|
||||||
kind: PersistentVolumeClaim
|
|
||||||
metadata:
|
|
||||||
name: flexvolsmb-drone-data
|
|
||||||
namespace: drone
|
|
||||||
spec:
|
|
||||||
accessModes:
|
|
||||||
- ReadWriteMany
|
|
||||||
storageClassName: flexvolsmb-drone-data
|
|
||||||
resources:
|
|
||||||
requests:
|
|
||||||
storage: 1Gi
|
|
@ -1,12 +0,0 @@
|
|||||||
apiVersion: v1
|
|
||||||
kind: PersistentVolumeClaim
|
|
||||||
metadata:
|
|
||||||
name: flexvolsmb-drone-output
|
|
||||||
namespace: drone
|
|
||||||
spec:
|
|
||||||
accessModes:
|
|
||||||
- ReadWriteMany
|
|
||||||
storageClassName: flexvolsmb-drone-output
|
|
||||||
resources:
|
|
||||||
requests:
|
|
||||||
storage: 50Gi
|
|
@ -1,12 +0,0 @@
|
|||||||
apiVersion: v1
|
|
||||||
kind: PersistentVolumeClaim
|
|
||||||
metadata:
|
|
||||||
name: flexvolsmb-drone-scratch
|
|
||||||
namespace: drone
|
|
||||||
spec:
|
|
||||||
accessModes:
|
|
||||||
- ReadWriteMany
|
|
||||||
storageClassName: flexvolsmb-drone-scratch
|
|
||||||
resources:
|
|
||||||
requests:
|
|
||||||
storage: 50Gi
|
|
@ -1,25 +0,0 @@
|
|||||||
kind: Role
|
|
||||||
apiVersion: rbac.authorization.k8s.io/v1
|
|
||||||
metadata:
|
|
||||||
name: drone
|
|
||||||
namespace: drone
|
|
||||||
rules:
|
|
||||||
- apiGroups:
|
|
||||||
- ""
|
|
||||||
resources:
|
|
||||||
- secrets
|
|
||||||
verbs:
|
|
||||||
- create
|
|
||||||
- delete
|
|
||||||
- apiGroups:
|
|
||||||
- ""
|
|
||||||
resources:
|
|
||||||
- pods
|
|
||||||
- pods/log
|
|
||||||
verbs:
|
|
||||||
- get
|
|
||||||
- create
|
|
||||||
- delete
|
|
||||||
- list
|
|
||||||
- watch
|
|
||||||
- update
|
|
@ -1,13 +0,0 @@
|
|||||||
kind: RoleBinding
|
|
||||||
apiVersion: rbac.authorization.k8s.io/v1
|
|
||||||
metadata:
|
|
||||||
name: drone
|
|
||||||
namespace: drone
|
|
||||||
subjects:
|
|
||||||
- kind: ServiceAccount
|
|
||||||
name: drone
|
|
||||||
namespace: default
|
|
||||||
roleRef:
|
|
||||||
kind: Role
|
|
||||||
name: drone
|
|
||||||
apiGroup: rbac.authorization.k8s.io
|
|
@ -1,19 +0,0 @@
|
|||||||
apiVersion: bitnami.com/v1alpha1
|
|
||||||
kind: SealedSecret
|
|
||||||
metadata:
|
|
||||||
creationTimestamp: null
|
|
||||||
name: drone
|
|
||||||
namespace: drone
|
|
||||||
spec:
|
|
||||||
encryptedData:
|
|
||||||
DRONE_GITEA_CLIENT_ID: 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
|
|
||||||
DRONE_GITEA_CLIENT_SECRET: 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
|
|
||||||
DRONE_RPC_SECRET: AgBpDlIFB+xa56H5p1MrhrdDFPUYQ4bWKSFbgiI1y72eaFwMw8fpwhFpgLIwckxrieinLMzKOUuWYaOTNPLdIDyq72S4udUlAWx6wbSr2F4Fr9fZqsJ/aHP166DOGKRgDDVM5tLYgvwJkmhW+TDvFySeUC62t48wc9WXNA2+Uk+m0FHQIE3GveZ1RbuoqhWuNX2/KnPqM3t58Sj0l8z/apfXwSWKW47wioR6JSSQyWjM5J3YS8idMCp4YhpEStN23+D/cyAo8xSsN9fBGmyxeAQmsfZ3NG4LCDysOg1+uiTPcRrrLb7cE4JiUFq/gBvQrKbwa6S2iVquaCWrHAfkzPYuURqbAPwiNdGXVOhYxXfm9q4vwo9LAhanr7DZS/hReJI8zlUTBJqwi3O8nw6I+C38bmgFSTqsQMl4tuiAYc8PGP5lygC2xWdXL7iUWR1dydcyLRpZTqNrnHy+FqtXtJV8ZY6C5lixAdxeH+yLXUJ6HNzq46pQptW3dOyLv/WM3THY9lReMI4DMlGpABz7YLGjoSLiD17m9hBu0/Sedv4V2kPxdFleQqa5Ft+EHejULOdX+E104IYLbknR+cJemrh6EiEWU/rXCFtKsCuKhdqzhKkKJaZQ6XtoO0CMichqk104SUKirRrz+5bf2XFIzoGGI02lJV2fHvxx8KvME2U3XzyZDgb5wppI62yf/qXNQgMNenEzNL3aPXf+HSunqCc2PZr9s6fGu/n7iKE68EsbNg==
|
|
||||||
template:
|
|
||||||
metadata:
|
|
||||||
creationTimestamp: null
|
|
||||||
labels:
|
|
||||||
app: drone
|
|
||||||
name: drone
|
|
||||||
namespace: drone
|
|
||||||
type: Opaque
|
|
@ -1,16 +0,0 @@
|
|||||||
apiVersion: bitnami.com/v1alpha1
|
|
||||||
kind: SealedSecret
|
|
||||||
metadata:
|
|
||||||
creationTimestamp: null
|
|
||||||
name: flexvolsmb-credentials
|
|
||||||
namespace: drone
|
|
||||||
spec:
|
|
||||||
encryptedData:
|
|
||||||
password: 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
|
|
||||||
username: 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
|
|
||||||
template:
|
|
||||||
metadata:
|
|
||||||
creationTimestamp: null
|
|
||||||
name: flexvolsmb-credentials
|
|
||||||
namespace: drone
|
|
||||||
type: mount/smb
|
|
@ -1,12 +0,0 @@
|
|||||||
apiVersion: v1
|
|
||||||
kind: Service
|
|
||||||
metadata:
|
|
||||||
name: drone
|
|
||||||
namespace: drone
|
|
||||||
spec:
|
|
||||||
ports:
|
|
||||||
- protocol: TCP
|
|
||||||
name: ui
|
|
||||||
port: 80
|
|
||||||
selector:
|
|
||||||
app: drone
|
|
@ -1,7 +0,0 @@
|
|||||||
apiVersion: v1
|
|
||||||
kind: ServiceAccount
|
|
||||||
metadata:
|
|
||||||
name: drone
|
|
||||||
namespace: drone
|
|
||||||
labels:
|
|
||||||
app: drone
|
|
@ -1,18 +0,0 @@
|
|||||||
apiVersion: v1
|
|
||||||
kind: PersistentVolume
|
|
||||||
metadata:
|
|
||||||
name: flexvolsmb-gitea-runner
|
|
||||||
spec:
|
|
||||||
capacity:
|
|
||||||
storage: 1Gi
|
|
||||||
accessModes:
|
|
||||||
- ReadWriteMany
|
|
||||||
storageClassName: flexvolsmb-gitea-runner
|
|
||||||
flexVolume:
|
|
||||||
driver: mount/smb
|
|
||||||
secretRef:
|
|
||||||
name: flexvolsmb-credentials
|
|
||||||
options:
|
|
||||||
opts: file_mode=0777,dir_mode=0777,uid=1000,gid=1000,iocharset=utf8
|
|
||||||
server: 192.168.154.225
|
|
||||||
share: /K3s.Volumes/gitea/runner
|
|
Loading…
Reference in New Issue
Block a user