reformat common-services

.gitlab-ci.yml

@@ -15,9 +15,30 @@ push:staging:
     - apk update && apk add gettext
   script:
     - export $(cat $ENV | xargs)
-    - for namespace in namespaces/*.yaml; do envsubst < $namespace > $namespace.tmp; mv $namespace.tmp $namespace; done
-    - for svc in common-services/*/*.yaml; do envsubst < $svc > $svc.tmp; mv $svc.tmp $svc; done
-    - for val in values/*.yaml; do envsubst < $val > $val.tmp; mv $val.tmp $val; done
+    - echo "Update namespaces"
+    - |
+      for namespace in namespaces/*.yaml;
+      do envsubst < $namespace > $namespace.tmp;
+      mv $namespace.tmp $namespace;
+      done
+    - echo "Update manifests"
+    - |
+      for svc in manifests/common-services/*/*.yaml;
+      do envsubst < $svc > $svc.tmp; mv $svc.tmp $svc;
+      done
+    - echo "Deploy secrets"
+    - |
+      for secret in secrets/*.yaml;
+      do envsubst < $secret | kubectl apply -f -;
+      done
+    - echo "Deploy values ConfigMaps"
+    - |
+      for val in values/*.yaml;
+      do envsubst < $val > $val.tmp;
+      kubectl create configmap -n manifests/common-services $(basename "${val%.*}")-values -o yaml --dry-run=client --from-file=$val.tmp | kubectl apply -f -;
+      rm $val.tmp;
+      done
+    - echo "Pushing updated manifests in ${} branch"
     - |
       git config user.name "Bot Auto Deploy"
       git config user.email "autodeploy@mediactivegroup.com"

common-services/gitlab-agent/secrets.yaml

@@ -1,9 +0,0 @@
----
-apiVersion: v1
-kind: Secret
-metadata:
-  name: gitlab-agent-token
-  namespace: common-services
-type: Opaque
-stringData:
-   token: "${GITLAB_AGENT_TOKEN}"

common-services/gitlab-runner/secrets.yaml

@@ -1,10 +0,0 @@
----
-apiVersion: v1
-kind: Secret
-metadata:
-  name: gitlab-runner-token
-  namespace: common-services
-type: Opaque
-data:
-  runner-registration-token: "" # need to leave as an empty string for compatibility reasons
-  runner-token: ${GITLAB_RUNNER_TOKEN}

flux/staging/flux-system/gotk-sync.yaml

@@ -46,7 +46,7 @@ metadata:
   namespace: flux-system
 spec:
   interval: 1m0s
-  path: ./common-services
+  path: ./manifests/common-services
   prune: true
   sourceRef:
     kind: GitRepository

manifests/common-services/cert-manager/certificate.yaml

@@ -40,16 +40,6 @@ spec:
         ingress:
           class: traefik
 
----
-apiVersion: v1
-kind: Secret
-metadata:
-  name: cloudflare-api-token-secret
-  namespace: common-services
-type: Opaque
-stringData:
-  api-token: ${CERT_MANAGER_CLOUDFLARE_API_TOKEN}
-
 ---
 apiVersion: cert-manager.io/v1
 kind: ClusterIssuer
@@ -104,6 +94,7 @@ spec:
             name: cloudflare-api-token-secret
             key: api-token
 
+# TODO: décommenter et template ce certificat
 #---
 #apiVersion: cert-manager.io/v1
 #kind: Certificate

manifests/common-services/cert-manager/release.yaml

@@ -27,5 +27,6 @@ spec:
         kind: HelmRepository
         name: jetstack
         namespace: common-services
-      valuesFiles:
-        - ../values/cert-manager.yaml
+  valuesFrom:
+    - kind: ConfigMap
+      name: cert-manager-values

manifests/common-services/gitlab-runner/release.yaml

@@ -23,5 +23,6 @@ spec:
         kind: HelmRepository
         name: gitlab-runner
         namespace: common-services
-      valuesFiles:
-        - ../values/gitlab-runner.yaml
+  valuesFrom:
+    - kind: ConfigMap
+      name: gitlab-runner-values

manifests/common-services/grafana/release.yaml

@@ -22,5 +22,6 @@ spec:
         kind: HelmRepository
         name: grafana
         namespace: common-services
-      valuesFiles:
-        - ../values/grafana.yaml
+  valuesFrom:
+    - kind: ConfigMap
+      name: grafana-values

manifests/common-services/mariadb/release.yaml

@@ -23,5 +23,6 @@ spec:
         kind: HelmRepository
         name: bitnami
         namespace: common-services
-      valuesFiles:
-        - ../values/mariadb.yaml
+  valuesFrom:
+    - kind: ConfigMap
+      name: mariadb-values

manifests/common-services/prometheus/release.yaml

@@ -22,5 +22,6 @@ spec:
         kind: HelmRepository
         name: prometheus-community
         namespace: common-services
-      valuesFiles:
-        - ../values/prometheus.yaml
+  valuesFrom:
+    - kind: ConfigMap
+      name: prometheus-values

manifests/common-services/traefik/release.yaml

@@ -22,5 +22,6 @@ spec:
         kind: HelmRepository
         name: traefik
         namespace: common-services
-      valuesFiles:
-        - ../values/traefik.yaml
+  valuesFrom:
+    - kind: ConfigMap
+      name: traefik-values

namespaces/common-services.yaml

@@ -3,15 +3,3 @@ apiVersion: v1
 kind: Namespace
 metadata:
   name: common-services
-
----
-apiVersion: v1
-kind: Secret
-metadata:
-  name: docker-registry-credentials
-  namespace: common-services
-type: kubernetes.io/dockerconfigjson
-data:
-  # Uses a deployment token defined on the "LDC Web" group (docker-registry-credentials)
-  .dockerconfigjson: >-
-    ${DOCKER_AUTH_CONFIG}

namespaces/production.yaml

@@ -3,15 +3,3 @@ apiVersion: v1
 kind: Namespace
 metadata:
   name: production
-
----
-apiVersion: v1
-kind: Secret
-metadata:
-  name: docker-registry-credentials
-  namespace: production
-type: kubernetes.io/dockerconfigjson
-data:
-  # Uses a deployment token defined on the "LDC Web" group (docker-registry-credentials)
-  .dockerconfigjson: >-
-    ${DOCKER_AUTH_CONFIG}

namespaces/review.yaml

@@ -3,15 +3,3 @@ apiVersion: v1
 kind: Namespace
 metadata:
   name: review
-
----
-apiVersion: v1
-kind: Secret
-metadata:
-  name: docker-registry-credentials
-  namespace: review
-type: kubernetes.io/dockerconfigjson
-data:
-  # Uses a deployment token defined on the "LDC Web" group (docker-registry-credentials)
-  .dockerconfigjson: >-
-    ${DOCKER_AUTH_CONFIG}

namespaces/staging.yaml

@@ -3,15 +3,3 @@ apiVersion: v1
 kind: Namespace
 metadata:
   name: staging
-
----
-apiVersion: v1
-kind: Secret
-metadata:
-  name: docker-registry-credentials
-  namespace: staging
-type: kubernetes.io/dockerconfigjson
-data:
-  # Uses a deployment token defined on the "LDC Web" group (docker-registry-credentials)
-  .dockerconfigjson: >-
-    ${DOCKER_AUTH_CONFIG}

namespaces/velero.yaml

@@ -3,15 +3,3 @@ apiVersion: v1
 kind: Namespace
 metadata:
   name: velero
-
----
-apiVersion: v1
-kind: Secret
-metadata:
-  name: docker-registry-credentials
-  namespace: velero
-type: kubernetes.io/dockerconfigjson
-data:
-  # Uses a deployment token defined on the "LDC Web" group (docker-registry-credentials)
-  .dockerconfigjson: >-
-    ${DOCKER_AUTH_CONFIG}

secrets/common-services.yaml

@@ -0,0 +1,60 @@
+---
+
+### common-services ###
+
+---
+apiVersion: v1
+kind: Secret
+metadata:
+  name: docker-registry-credentials
+  namespace: common-services
+type: kubernetes.io/dockerconfigjson
+data:
+  # Uses a deployment token defined on the "LDC Web" group (docker-registry-credentials)
+  .dockerconfigjson: >-
+    ${DOCKER_AUTH_CONFIG}
+
+---
+
+### cert-manager ###
+
+---
+apiVersion: v1
+kind: Secret
+metadata:
+  name: cloudflare-api-token-secret
+  namespace: common-services
+type: Opaque
+stringData:
+  api-token: ${CERT_MANAGER_CLOUDFLARE_API_TOKEN}
+
+---
+
+### gitlab-agent ###
+
+---
+apiVersion: v1
+kind: Secret
+metadata:
+  name: gitlab-agent-token
+  namespace: common-services
+type: Opaque
+stringData:
+   token: "${GITLAB_AGENT_TOKEN}"
+
+---
+
+### gitlab-runner ###
+
+---
+apiVersion: v1
+kind: Secret
+metadata:
+  name: gitlab-runner-token
+  namespace: common-services
+type: Opaque
+data:
+  runner-registration-token: "" # need to leave as an empty string for compatibility reasons
+  runner-token: ${GITLAB_RUNNER_TOKEN}
+
+---

secrets/production.yaml

@@ -0,0 +1,15 @@
+---
+
+### production ###
+
+---
+apiVersion: v1
+kind: Secret
+metadata:
+  name: docker-registry-credentials
+  namespace: production
+type: kubernetes.io/dockerconfigjson
+data:
+  # Uses a deployment token defined on the "LDC Web" group (docker-registry-credentials)
+  .dockerconfigjson: >-
+    ${DOCKER_AUTH_CONFIG}

secrets/review.yaml

@@ -0,0 +1,15 @@
+---
+
+### review ###
+
+---
+apiVersion: v1
+kind: Secret
+metadata:
+  name: docker-registry-credentials
+  namespace: review
+type: kubernetes.io/dockerconfigjson
+data:
+  # Uses a deployment token defined on the "LDC Web" group (docker-registry-credentials)
+  .dockerconfigjson: >-
+    ${DOCKER_AUTH_CONFIG}

secrets/staging.yaml

@@ -0,0 +1,15 @@
+---
+
+### staging ###
+
+---
+apiVersion: v1
+kind: Secret
+metadata:
+  name: docker-registry-credentials
+  namespace: staging
+type: kubernetes.io/dockerconfigjson
+data:
+  # Uses a deployment token defined on the "LDC Web" group (docker-registry-credentials)
+  .dockerconfigjson: >-
+    ${DOCKER_AUTH_CONFIG}