Refactor DroneCI
This commit is contained in:
		
							
								
								
									
										4
									
								
								services/DroneCI/_namespace-drone.yml
									
									
									
									
									
										Normal file
									
								
							
							
						
						
									
										4
									
								
								services/DroneCI/_namespace-drone.yml
									
									
									
									
									
										Normal file
									
								
							| @@ -0,0 +1,4 @@ | |||||||
|  | apiVersion: v1 | ||||||
|  | kind: Namespace | ||||||
|  | metadata: | ||||||
|  |   name: drone | ||||||
| @@ -1,276 +0,0 @@ | |||||||
| apiVersion: v1 |  | ||||||
| kind: Service |  | ||||||
| metadata: |  | ||||||
|   name: drone |  | ||||||
|   namespace: drone |  | ||||||
| spec: |  | ||||||
|   ports: |  | ||||||
|     - protocol: TCP |  | ||||||
|       name: ui |  | ||||||
|       port: 80 |  | ||||||
|   selector: |  | ||||||
|     app: drone |  | ||||||
| --- |  | ||||||
| apiVersion: apps/v1 |  | ||||||
| kind: Deployment |  | ||||||
| metadata: |  | ||||||
|   name: drone |  | ||||||
|   namespace: drone |  | ||||||
|   labels: |  | ||||||
|     app: drone |  | ||||||
| spec: |  | ||||||
|   replicas: 1 |  | ||||||
|   selector: |  | ||||||
|     matchLabels: |  | ||||||
|       app: drone |  | ||||||
|   template: |  | ||||||
|     metadata: |  | ||||||
|       labels: |  | ||||||
|         app: drone |  | ||||||
|     spec: |  | ||||||
|       serviceAccountName: drone |  | ||||||
|       containers: |  | ||||||
|       - name: drone |  | ||||||
|         image: drone/drone:latest |  | ||||||
|         env: |  | ||||||
|         - name: DRONE_SERVER_PROTO |  | ||||||
|           value: 'https' |  | ||||||
|         - name: DRONE_SERVER_HOST |  | ||||||
|           value: 'ci.spamasaurus.com' |  | ||||||
|         - name: DRONE_SERVER_PORT |  | ||||||
|           value: ':80' |  | ||||||
|         - name: DRONE_TLS_AUTOCERT |  | ||||||
|           value: 'false' |  | ||||||
|         - name: DRONE_GITEA_SERVER |  | ||||||
|           value: 'https://code.spamasaurus.com' |  | ||||||
|         - name: DRONE_GIT_ALWAYS_AUTH |  | ||||||
|           value: 'false' |  | ||||||
|         - name: DRONE_AGENTS_ENABLED |  | ||||||
|           value: 'true' |  | ||||||
|         - name: DRONE_USER_CREATE |  | ||||||
|           value: 'username:djpbessems,admin:true' |  | ||||||
|         - name: DRONE_TMATE_ENABLED |  | ||||||
|           value: 'false' |  | ||||||
|         envFrom: |  | ||||||
|         - secretRef: |  | ||||||
|             name: drone-secret |  | ||||||
|         ports: |  | ||||||
|           - name: ui |  | ||||||
|             containerPort: 80 |  | ||||||
|         volumeMounts: |  | ||||||
|         - mountPath: /data |  | ||||||
|           name: flexvolsmb-drone-data |  | ||||||
|       - name: drone-runner |  | ||||||
|         image: drone/drone-runner-kube:latest |  | ||||||
|         ports: |  | ||||||
|         - containerPort: 3000 |  | ||||||
|         env: |  | ||||||
|         - name: DRONE_RPC_HOST |  | ||||||
|           value: 'ci.spamasaurus.com' |  | ||||||
|         - name: DRONE_RPC_PROTO |  | ||||||
|           value: 'https' |  | ||||||
|         - name: DRONE_RUNNER_CAPACITY |  | ||||||
|           value: '2' |  | ||||||
|         - name: DRONE_RUNNER_MAX_PROCS |  | ||||||
|           value: '3' |  | ||||||
|         envFrom: |  | ||||||
|         - secretRef: |  | ||||||
|             name: drone-secret |  | ||||||
|       volumes: |  | ||||||
|       - name: flexvolsmb-drone-data |  | ||||||
|         persistentVolumeClaim: |  | ||||||
|           claimName: flexvolsmb-drone-data |  | ||||||
| --- |  | ||||||
| apiVersion: v1 |  | ||||||
| kind: ServiceAccount |  | ||||||
| metadata: |  | ||||||
|   name: drone |  | ||||||
|   namespace: drone |  | ||||||
|   labels: |  | ||||||
|     app: drone |  | ||||||
| --- |  | ||||||
| apiVersion: traefik.containo.us/v1alpha1 |  | ||||||
| kind: IngressRoute |  | ||||||
| metadata: |  | ||||||
|   name: drone |  | ||||||
|   namespace: drone |  | ||||||
| spec: |  | ||||||
|   entryPoints: |  | ||||||
|     - websecure |  | ||||||
|   routes: |  | ||||||
|   - match: Host(`ci.spamasaurus.com`) |  | ||||||
|     kind: Rule |  | ||||||
|     services: |  | ||||||
|     - name: drone |  | ||||||
|       port: 80 |  | ||||||
|     middlewares: |  | ||||||
|       - name: security-headers@file |  | ||||||
|       - name: compression@file |  | ||||||
| --- |  | ||||||
| apiVersion: v1 |  | ||||||
| kind: PersistentVolume |  | ||||||
| metadata: |  | ||||||
|   name: flexvolsmb-drone-data |  | ||||||
| spec: |  | ||||||
|   capacity: |  | ||||||
|     storage: 1Gi |  | ||||||
|   accessModes: |  | ||||||
|     - ReadWriteMany |  | ||||||
|   storageClassName: flexvolsmb-drone-data |  | ||||||
|   flexVolume: |  | ||||||
|     driver: mount/smb |  | ||||||
|     secretRef: |  | ||||||
|       name: flexvolsmb-credentials |  | ||||||
|     options: |  | ||||||
|       opts: file_mode=0777,dir_mode=0777,iocharset=utf8,nobrl |  | ||||||
|       server: 192.168.154.225 |  | ||||||
|       share: /K3s.Volumes/drone/data |  | ||||||
| --- |  | ||||||
| apiVersion: v1 |  | ||||||
| kind: PersistentVolumeClaim |  | ||||||
| metadata: |  | ||||||
|   name: flexvolsmb-drone-data |  | ||||||
|   namespace: drone |  | ||||||
| spec: |  | ||||||
|   accessModes: |  | ||||||
|     - ReadWriteMany |  | ||||||
|   storageClassName: flexvolsmb-drone-data |  | ||||||
|   resources: |  | ||||||
|     requests: |  | ||||||
|       storage: 1Gi |  | ||||||
| --- |  | ||||||
| apiVersion: v1 |  | ||||||
| kind: PersistentVolume |  | ||||||
| metadata: |  | ||||||
|   name: flexvolsmb-drone-certs |  | ||||||
| spec: |  | ||||||
|   capacity: |  | ||||||
|     storage: 10Gi |  | ||||||
|   accessModes: |  | ||||||
|     - ReadWriteMany |  | ||||||
|   storageClassName: flexvolsmb-drone-certs |  | ||||||
|   flexVolume: |  | ||||||
|     driver: mount/smb |  | ||||||
|     secretRef: |  | ||||||
|       name: flexvolsmb-credentials |  | ||||||
|     options: |  | ||||||
|       opts: file_mode=0777,dir_mode=0777,iocharset=utf8 |  | ||||||
|       server: 192.168.154.225 |  | ||||||
|       share: /K3s.Volumes/traefikcertsdumper/export |  | ||||||
| --- |  | ||||||
| apiVersion: v1 |  | ||||||
| kind: PersistentVolumeClaim |  | ||||||
| metadata: |  | ||||||
|   name: flexvolsmb-drone-certs |  | ||||||
|   namespace: drone |  | ||||||
| spec: |  | ||||||
|   accessModes: |  | ||||||
|     - ReadWriteMany |  | ||||||
|   storageClassName: flexvolsmb-drone-certs |  | ||||||
|   resources: |  | ||||||
|     requests: |  | ||||||
|       storage: 10Gi |  | ||||||
| --- |  | ||||||
| apiVersion: v1 |  | ||||||
| kind: PersistentVolume |  | ||||||
| metadata: |  | ||||||
|   name: flexvolsmb-drone-output |  | ||||||
| spec: |  | ||||||
|   capacity: |  | ||||||
|     storage: 50Gi |  | ||||||
|   accessModes: |  | ||||||
|     - ReadWriteMany |  | ||||||
|   storageClassName: flexvolsmb-drone-output |  | ||||||
|   flexVolume: |  | ||||||
|     driver: mount/smb |  | ||||||
|     secretRef: |  | ||||||
|       name: flexvolsmb-credentials |  | ||||||
|     options: |  | ||||||
|       opts: file_mode=0777,dir_mode=0777,iocharset=utf8 |  | ||||||
|       server: 192.168.154.225 |  | ||||||
|       share: /K3s.Volumes/lighttpd/websites/sn.itch.fyi/Repository/rel |  | ||||||
| --- |  | ||||||
| apiVersion: v1 |  | ||||||
| kind: PersistentVolumeClaim |  | ||||||
| metadata: |  | ||||||
|   name: flexvolsmb-drone-output |  | ||||||
|   namespace: drone |  | ||||||
| spec: |  | ||||||
|   accessModes: |  | ||||||
|     - ReadWriteMany |  | ||||||
|   storageClassName: flexvolsmb-drone-output |  | ||||||
|   resources: |  | ||||||
|     requests: |  | ||||||
|       storage: 50Gi |  | ||||||
| --- |  | ||||||
| apiVersion: v1 |  | ||||||
| kind: PersistentVolume |  | ||||||
| metadata: |  | ||||||
|   name: flexvolsmb-drone-scratch |  | ||||||
| spec: |  | ||||||
|   capacity: |  | ||||||
|     storage: 50Gi |  | ||||||
|   accessModes: |  | ||||||
|     - ReadWriteMany |  | ||||||
|   storageClassName: flexvolsmb-drone-scratch |  | ||||||
|   flexVolume: |  | ||||||
|     driver: mount/smb |  | ||||||
|     secretRef: |  | ||||||
|       name: flexvolsmb-credentials |  | ||||||
|     options: |  | ||||||
|       opts: file_mode=0777,dir_mode=0777,iocharset=utf8 |  | ||||||
|       server: 192.168.154.225 |  | ||||||
|       share: /K3s.Volumes/drone/scratch |  | ||||||
| --- |  | ||||||
| apiVersion: v1 |  | ||||||
| kind: PersistentVolumeClaim |  | ||||||
| metadata: |  | ||||||
|   name: flexvolsmb-drone-scratch |  | ||||||
|   namespace: drone |  | ||||||
| spec: |  | ||||||
|   accessModes: |  | ||||||
|     - ReadWriteMany |  | ||||||
|   storageClassName: flexvolsmb-drone-scratch |  | ||||||
|   resources: |  | ||||||
|     requests: |  | ||||||
|       storage: 50Gi |  | ||||||
| --- |  | ||||||
| kind: Role |  | ||||||
| apiVersion: rbac.authorization.k8s.io/v1 |  | ||||||
| metadata: |  | ||||||
|   name: drone |  | ||||||
|   namespace: drone |  | ||||||
| rules: |  | ||||||
|   - apiGroups: |  | ||||||
|       - "" |  | ||||||
|     resources: |  | ||||||
|       - secrets |  | ||||||
|     verbs: |  | ||||||
|       - create |  | ||||||
|       - delete |  | ||||||
|   - apiGroups: |  | ||||||
|       - "" |  | ||||||
|     resources: |  | ||||||
|       - pods |  | ||||||
|       - pods/log |  | ||||||
|     verbs: |  | ||||||
|       - get |  | ||||||
|       - create |  | ||||||
|       - delete |  | ||||||
|       - list |  | ||||||
|       - watch |  | ||||||
|       - update |  | ||||||
| --- |  | ||||||
| kind: RoleBinding |  | ||||||
| apiVersion: rbac.authorization.k8s.io/v1 |  | ||||||
| metadata: |  | ||||||
|   name: drone |  | ||||||
|   namespace: drone |  | ||||||
| subjects: |  | ||||||
|   - kind: ServiceAccount |  | ||||||
|     name: drone |  | ||||||
|     namespace: default |  | ||||||
| roleRef: |  | ||||||
|   kind: Role |  | ||||||
|   name: drone |  | ||||||
|   apiGroup: rbac.authorization.k8s.io |  | ||||||
							
								
								
									
										69
									
								
								services/DroneCI/deployment-drone.yaml
									
									
									
									
									
										Normal file
									
								
							
							
						
						
									
										69
									
								
								services/DroneCI/deployment-drone.yaml
									
									
									
									
									
										Normal file
									
								
							| @@ -0,0 +1,69 @@ | |||||||
|  | apiVersion: apps/v1 | ||||||
|  | kind: Deployment | ||||||
|  | metadata: | ||||||
|  |   name: drone | ||||||
|  |   namespace: drone | ||||||
|  |   labels: | ||||||
|  |     app: drone | ||||||
|  | spec: | ||||||
|  |   replicas: 1 | ||||||
|  |   selector: | ||||||
|  |     matchLabels: | ||||||
|  |       app: drone | ||||||
|  |   template: | ||||||
|  |     metadata: | ||||||
|  |       labels: | ||||||
|  |         app: drone | ||||||
|  |     spec: | ||||||
|  |       serviceAccountName: drone | ||||||
|  |       containers: | ||||||
|  |       - name: drone | ||||||
|  |         image: drone/drone:latest | ||||||
|  |         env: | ||||||
|  |         - name: DRONE_SERVER_PROTO | ||||||
|  |           value: 'https' | ||||||
|  |         - name: DRONE_SERVER_HOST | ||||||
|  |           value: 'ci.spamasaurus.com' | ||||||
|  |         - name: DRONE_SERVER_PORT | ||||||
|  |           value: ':80' | ||||||
|  |         - name: DRONE_TLS_AUTOCERT | ||||||
|  |           value: 'false' | ||||||
|  |         - name: DRONE_GITEA_SERVER | ||||||
|  |           value: 'https://code.spamasaurus.com' | ||||||
|  |         - name: DRONE_GIT_ALWAYS_AUTH | ||||||
|  |           value: 'false' | ||||||
|  |         - name: DRONE_AGENTS_ENABLED | ||||||
|  |           value: 'true' | ||||||
|  |         - name: DRONE_USER_CREATE | ||||||
|  |           value: 'username:djpbessems,admin:true' | ||||||
|  |         - name: DRONE_TMATE_ENABLED | ||||||
|  |           value: 'false' | ||||||
|  |         envFrom: | ||||||
|  |         - secretRef: | ||||||
|  |             name: drone | ||||||
|  |         ports: | ||||||
|  |           - name: ui | ||||||
|  |             containerPort: 80 | ||||||
|  |         volumeMounts: | ||||||
|  |         - mountPath: /data | ||||||
|  |           name: flexvolsmb-drone-data | ||||||
|  |       - name: drone-runner | ||||||
|  |         image: drone/drone-runner-kube:latest | ||||||
|  |         ports: | ||||||
|  |         - containerPort: 3000 | ||||||
|  |         env: | ||||||
|  |         - name: DRONE_RPC_HOST | ||||||
|  |           value: 'ci.spamasaurus.com' | ||||||
|  |         - name: DRONE_RPC_PROTO | ||||||
|  |           value: 'https' | ||||||
|  |         - name: DRONE_RUNNER_CAPACITY | ||||||
|  |           value: '2' | ||||||
|  |         - name: DRONE_RUNNER_MAX_PROCS | ||||||
|  |           value: '3' | ||||||
|  |         envFrom: | ||||||
|  |         - secretRef: | ||||||
|  |             name: drone | ||||||
|  |       volumes: | ||||||
|  |       - name: flexvolsmb-drone-data | ||||||
|  |         persistentVolumeClaim: | ||||||
|  |           claimName: flexvolsmb-drone-data | ||||||
							
								
								
									
										17
									
								
								services/DroneCI/ingressroute-drone.yaml
									
									
									
									
									
										Normal file
									
								
							
							
						
						
									
										17
									
								
								services/DroneCI/ingressroute-drone.yaml
									
									
									
									
									
										Normal file
									
								
							| @@ -0,0 +1,17 @@ | |||||||
|  | apiVersion: traefik.containo.us/v1alpha1 | ||||||
|  | kind: IngressRoute | ||||||
|  | metadata: | ||||||
|  |   name: drone | ||||||
|  |   namespace: drone | ||||||
|  | spec: | ||||||
|  |   entryPoints: | ||||||
|  |     - websecure | ||||||
|  |   routes: | ||||||
|  |   - match: Host(`ci.spamasaurus.com`) | ||||||
|  |     kind: Rule | ||||||
|  |     services: | ||||||
|  |     - name: drone | ||||||
|  |       port: 80 | ||||||
|  |     middlewares: | ||||||
|  |       - name: security-headers@file | ||||||
|  |       - name: compression@file | ||||||
| @@ -0,0 +1,18 @@ | |||||||
|  | apiVersion: v1 | ||||||
|  | kind: PersistentVolume | ||||||
|  | metadata: | ||||||
|  |   name: flexvolsmb-drone-certs | ||||||
|  | spec: | ||||||
|  |   capacity: | ||||||
|  |     storage: 10Gi | ||||||
|  |   accessModes: | ||||||
|  |     - ReadWriteMany | ||||||
|  |   storageClassName: flexvolsmb-drone-certs | ||||||
|  |   flexVolume: | ||||||
|  |     driver: mount/smb | ||||||
|  |     secretRef: | ||||||
|  |       name: flexvolsmb-credentials | ||||||
|  |     options: | ||||||
|  |       opts: file_mode=0777,dir_mode=0777,iocharset=utf8 | ||||||
|  |       server: 192.168.154.225 | ||||||
|  |       share: /K3s.Volumes/traefikcertsdumper/export | ||||||
							
								
								
									
										18
									
								
								services/DroneCI/persistentvolume-flexvolsmb-drone-data.yaml
									
									
									
									
									
										Normal file
									
								
							
							
						
						
									
										18
									
								
								services/DroneCI/persistentvolume-flexvolsmb-drone-data.yaml
									
									
									
									
									
										Normal file
									
								
							| @@ -0,0 +1,18 @@ | |||||||
|  | apiVersion: v1 | ||||||
|  | kind: PersistentVolume | ||||||
|  | metadata: | ||||||
|  |   name: flexvolsmb-drone-data | ||||||
|  | spec: | ||||||
|  |   capacity: | ||||||
|  |     storage: 1Gi | ||||||
|  |   accessModes: | ||||||
|  |     - ReadWriteMany | ||||||
|  |   storageClassName: flexvolsmb-drone-data | ||||||
|  |   flexVolume: | ||||||
|  |     driver: mount/smb | ||||||
|  |     secretRef: | ||||||
|  |       name: flexvolsmb-credentials | ||||||
|  |     options: | ||||||
|  |       opts: file_mode=0777,dir_mode=0777,iocharset=utf8,nobrl | ||||||
|  |       server: 192.168.154.225 | ||||||
|  |       share: /K3s.Volumes/drone/data | ||||||
| @@ -0,0 +1,18 @@ | |||||||
|  | apiVersion: v1 | ||||||
|  | kind: PersistentVolume | ||||||
|  | metadata: | ||||||
|  |   name: flexvolsmb-drone-output | ||||||
|  | spec: | ||||||
|  |   capacity: | ||||||
|  |     storage: 50Gi | ||||||
|  |   accessModes: | ||||||
|  |     - ReadWriteMany | ||||||
|  |   storageClassName: flexvolsmb-drone-output | ||||||
|  |   flexVolume: | ||||||
|  |     driver: mount/smb | ||||||
|  |     secretRef: | ||||||
|  |       name: flexvolsmb-credentials | ||||||
|  |     options: | ||||||
|  |       opts: file_mode=0777,dir_mode=0777,iocharset=utf8 | ||||||
|  |       server: 192.168.154.225 | ||||||
|  |       share: /K3s.Volumes/lighttpd/websites/sn.itch.fyi/Repository/rel | ||||||
| @@ -0,0 +1,18 @@ | |||||||
|  | apiVersion: v1 | ||||||
|  | kind: PersistentVolume | ||||||
|  | metadata: | ||||||
|  |   name: flexvolsmb-drone-scratch | ||||||
|  | spec: | ||||||
|  |   capacity: | ||||||
|  |     storage: 50Gi | ||||||
|  |   accessModes: | ||||||
|  |     - ReadWriteMany | ||||||
|  |   storageClassName: flexvolsmb-drone-scratch | ||||||
|  |   flexVolume: | ||||||
|  |     driver: mount/smb | ||||||
|  |     secretRef: | ||||||
|  |       name: flexvolsmb-credentials | ||||||
|  |     options: | ||||||
|  |       opts: file_mode=0777,dir_mode=0777,iocharset=utf8 | ||||||
|  |       server: 192.168.154.225 | ||||||
|  |       share: /K3s.Volumes/drone/scratch | ||||||
| @@ -0,0 +1,12 @@ | |||||||
|  | apiVersion: v1 | ||||||
|  | kind: PersistentVolumeClaim | ||||||
|  | metadata: | ||||||
|  |   name: flexvolsmb-drone-certs | ||||||
|  |   namespace: drone | ||||||
|  | spec: | ||||||
|  |   accessModes: | ||||||
|  |     - ReadWriteMany | ||||||
|  |   storageClassName: flexvolsmb-drone-certs | ||||||
|  |   resources: | ||||||
|  |     requests: | ||||||
|  |       storage: 10Gi | ||||||
| @@ -0,0 +1,12 @@ | |||||||
|  | apiVersion: v1 | ||||||
|  | kind: PersistentVolumeClaim | ||||||
|  | metadata: | ||||||
|  |   name: flexvolsmb-drone-data | ||||||
|  |   namespace: drone | ||||||
|  | spec: | ||||||
|  |   accessModes: | ||||||
|  |     - ReadWriteMany | ||||||
|  |   storageClassName: flexvolsmb-drone-data | ||||||
|  |   resources: | ||||||
|  |     requests: | ||||||
|  |       storage: 1Gi | ||||||
| @@ -0,0 +1,12 @@ | |||||||
|  | apiVersion: v1 | ||||||
|  | kind: PersistentVolumeClaim | ||||||
|  | metadata: | ||||||
|  |   name: flexvolsmb-drone-output | ||||||
|  |   namespace: drone | ||||||
|  | spec: | ||||||
|  |   accessModes: | ||||||
|  |     - ReadWriteMany | ||||||
|  |   storageClassName: flexvolsmb-drone-output | ||||||
|  |   resources: | ||||||
|  |     requests: | ||||||
|  |       storage: 50Gi | ||||||
| @@ -0,0 +1,12 @@ | |||||||
|  | apiVersion: v1 | ||||||
|  | kind: PersistentVolumeClaim | ||||||
|  | metadata: | ||||||
|  |   name: flexvolsmb-drone-scratch | ||||||
|  |   namespace: drone | ||||||
|  | spec: | ||||||
|  |   accessModes: | ||||||
|  |     - ReadWriteMany | ||||||
|  |   storageClassName: flexvolsmb-drone-scratch | ||||||
|  |   resources: | ||||||
|  |     requests: | ||||||
|  |       storage: 50Gi | ||||||
							
								
								
									
										25
									
								
								services/DroneCI/role-drone.yaml
									
									
									
									
									
										Normal file
									
								
							
							
						
						
									
										25
									
								
								services/DroneCI/role-drone.yaml
									
									
									
									
									
										Normal file
									
								
							| @@ -0,0 +1,25 @@ | |||||||
|  | kind: Role | ||||||
|  | apiVersion: rbac.authorization.k8s.io/v1 | ||||||
|  | metadata: | ||||||
|  |   name: drone | ||||||
|  |   namespace: drone | ||||||
|  | rules: | ||||||
|  |   - apiGroups: | ||||||
|  |       - "" | ||||||
|  |     resources: | ||||||
|  |       - secrets | ||||||
|  |     verbs: | ||||||
|  |       - create | ||||||
|  |       - delete | ||||||
|  |   - apiGroups: | ||||||
|  |       - "" | ||||||
|  |     resources: | ||||||
|  |       - pods | ||||||
|  |       - pods/log | ||||||
|  |     verbs: | ||||||
|  |       - get | ||||||
|  |       - create | ||||||
|  |       - delete | ||||||
|  |       - list | ||||||
|  |       - watch | ||||||
|  |       - update | ||||||
							
								
								
									
										13
									
								
								services/DroneCI/rolebinding-drone.yaml
									
									
									
									
									
										Normal file
									
								
							
							
						
						
									
										13
									
								
								services/DroneCI/rolebinding-drone.yaml
									
									
									
									
									
										Normal file
									
								
							| @@ -0,0 +1,13 @@ | |||||||
|  | kind: RoleBinding | ||||||
|  | apiVersion: rbac.authorization.k8s.io/v1 | ||||||
|  | metadata: | ||||||
|  |   name: drone | ||||||
|  |   namespace: drone | ||||||
|  | subjects: | ||||||
|  |   - kind: ServiceAccount | ||||||
|  |     name: drone | ||||||
|  |     namespace: default | ||||||
|  | roleRef: | ||||||
|  |   kind: Role | ||||||
|  |   name: drone | ||||||
|  |   apiGroup: rbac.authorization.k8s.io | ||||||
| @@ -1,27 +0,0 @@ | |||||||
| { |  | ||||||
|   "kind": "SealedSecret", |  | ||||||
|   "apiVersion": "bitnami.com/v1alpha1", |  | ||||||
|   "metadata": { |  | ||||||
|     "name": "drone-secret", |  | ||||||
|     "namespace": "default", |  | ||||||
|     "creationTimestamp": null |  | ||||||
|   }, |  | ||||||
|   "spec": { |  | ||||||
|     "template": { |  | ||||||
|       "metadata": { |  | ||||||
|         "name": "drone-secret", |  | ||||||
|         "namespace": "default", |  | ||||||
|         "creationTimestamp": null, |  | ||||||
|         "labels": { |  | ||||||
|           "app": "drone" |  | ||||||
|         } |  | ||||||
|       }, |  | ||||||
|       "data": null |  | ||||||
|     }, |  | ||||||
|     "encryptedData": { |  | ||||||
|       "DRONE_GITEA_CLIENT_ID": "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", |  | ||||||
|       "DRONE_GITEA_CLIENT_SECRET": "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", |  | ||||||
|       "DRONE_RPC_SECRET": "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" |  | ||||||
|     } |  | ||||||
|   } |  | ||||||
| } |  | ||||||
							
								
								
									
										19
									
								
								services/DroneCI/sealedsecret-drone.yaml
									
									
									
									
									
										Normal file
									
								
							
							
						
						
									
										19
									
								
								services/DroneCI/sealedsecret-drone.yaml
									
									
									
									
									
										Normal file
									
								
							| @@ -0,0 +1,19 @@ | |||||||
|  | apiVersion: bitnami.com/v1alpha1 | ||||||
|  | kind: SealedSecret | ||||||
|  | metadata: | ||||||
|  |   creationTimestamp: null | ||||||
|  |   name: drone | ||||||
|  |   namespace: drone | ||||||
|  | spec: | ||||||
|  |   encryptedData: | ||||||
|  |     DRONE_GITEA_CLIENT_ID: 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 | ||||||
|  |     DRONE_GITEA_CLIENT_SECRET: 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 | ||||||
|  |     DRONE_RPC_SECRET: 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 | ||||||
|  |   template: | ||||||
|  |     metadata: | ||||||
|  |       creationTimestamp: null | ||||||
|  |       labels: | ||||||
|  |         app: drone | ||||||
|  |       name: drone | ||||||
|  |       namespace: drone | ||||||
|  |     type: Opaque | ||||||
							
								
								
									
										12
									
								
								services/DroneCI/service-drone.yaml
									
									
									
									
									
										Normal file
									
								
							
							
						
						
									
										12
									
								
								services/DroneCI/service-drone.yaml
									
									
									
									
									
										Normal file
									
								
							| @@ -0,0 +1,12 @@ | |||||||
|  | apiVersion: v1 | ||||||
|  | kind: Service | ||||||
|  | metadata: | ||||||
|  |   name: drone | ||||||
|  |   namespace: drone | ||||||
|  | spec: | ||||||
|  |   ports: | ||||||
|  |     - protocol: TCP | ||||||
|  |       name: ui | ||||||
|  |       port: 80 | ||||||
|  |   selector: | ||||||
|  |     app: drone | ||||||
							
								
								
									
										7
									
								
								services/DroneCI/serviceaccount-drone.yaml
									
									
									
									
									
										Normal file
									
								
							
							
						
						
									
										7
									
								
								services/DroneCI/serviceaccount-drone.yaml
									
									
									
									
									
										Normal file
									
								
							| @@ -0,0 +1,7 @@ | |||||||
|  | apiVersion: v1 | ||||||
|  | kind: ServiceAccount | ||||||
|  | metadata: | ||||||
|  |   name: drone | ||||||
|  |   namespace: drone | ||||||
|  |   labels: | ||||||
|  |     app: drone | ||||||
		Reference in New Issue
	
	Block a user