feat: Remove MariaDB from common-services

README.md

@@ -8,7 +8,6 @@
 | FluxCD       | no flux      | 2.3.0      | 2.3.0                | 2.13.0             |
 | Git-agent    | 16.9.3       | 16.9.3     | 17.1.0               | 2.30               |
 | Git-runner   | 16.9.1       | 16.9.1     | 17.0.1               | 0.62.1             |
-| MariaDB      | 10.10        | 1.13.2     | 1.13.2               | 18.2.4             |
 | Prometheus   | 0.60.1       | 0.74.0     | 0.74.0               | 60.2.0             |
 | Traefik      | 2.9.6        | 3.0.2      | 3.0.2                | 28.3.0             |
 | Velero       | 1.10.1       | 1.13.2     | 1.13.2               | 6.7.0              |

flux/kustomizations/kustomization.yaml

@@ -7,7 +7,6 @@ resources:
   - gitlab-runner.yaml
   - hashicorp-vault.yaml
   - ldc-custom.yaml
-  - mariadb.yaml
   - meilisearch.yaml
   - namespaces.yaml
   - prometheus-stack.yaml

flux/kustomizations/mariadb.yaml

@@ -1,26 +0,0 @@
----
-apiVersion: kustomize.toolkit.fluxcd.io/v1
-kind: Kustomization
-metadata:
-  name: mariadb
-  namespace: flux-system
-spec:
-  interval: 30s
-  path: ./infrastructure/mariadb
-  prune: false
-  sourceRef:
-    kind: GitRepository
-    name: flux-system
-  dependsOn:
-    - name: external-secrets-resources
-      namespace: flux-system
-  healthChecks:
-    - apiVersion: source.toolkit.fluxcd.io/v1
-      kind: HelmRepository
-      name: bitnami
-      namespace: common-services
-    - apiVersion: helm.toolkit.fluxcd.io/v2
-      kind: HelmRelease
-      name: mariadb
-      namespace: common-services
-  timeout: 5m

infrastructure/hashicorp-vault/external-secrets/resources/kustomization.yaml

@@ -7,7 +7,6 @@ resources:
   - gitlab-agent.yaml
   - gitlab-runner.yaml
   - hashicorp-vault.yaml
-  - mariadb.yaml
   - prometheus-stack.yaml
   - review.yaml
   - staging.yaml

infrastructure/hashicorp-vault/external-secrets/resources/mariadb.yaml

@@ -1,28 +0,0 @@
-apiVersion: external-secrets.io/v1beta1
-kind: ExternalSecret
-metadata:
-  name: mariadb-credentials
-  namespace: common-services
-spec:
-  refreshInterval: "15s"
-  secretStoreRef:
-    name: vault-secret-store
-    kind: ClusterSecretStore
-  target:
-    name: mariadb-credentials
-    template:
-      engineVersion: v2
-      type: Opaque
-      data:
-        mariadb-password: "{{ .password }}"
-        mariadb-replication-password: "{{ .root_password }}"
-        mariadb-root-password: "{{ .root_password }}"
-  data:
-    - secretKey: root_password
-      remoteRef:
-        key: secret/mariadb
-        property: root_password
-    - secretKey: password
-      remoteRef:
-        key: secret/mariadb
-        property: password

infrastructure/mariadb/helm-release.yaml

@@ -1,31 +0,0 @@
----
-apiVersion: helm.toolkit.fluxcd.io/v2
-kind: HelmRelease
-metadata:
-  name: mariadb
-  namespace: common-services
-spec:
-  interval: 1m0s
-  chart:
-    spec:
-      chart: mariadb
-      version: 18.2.4
-      sourceRef:
-        kind: HelmRepository
-        name: bitnami
-        namespace: common-services
-  values:
-
-    image:
-      repository: bitnamilegacy/mariadb
-      tag: 11.3.2-debian-12-r6
-
-    auth:
-      existingSecret: mariadb-credentials
-
-    primary:
-      persistence:
-        storageClass: "csi-cinder-high-speed"
-        size: 60Gi
-
-      resourcesPreset: "${MARIADB_RESOURCES_REQUEST}"

infrastructure/mariadb/helm-repository.yaml

@@ -1,10 +0,0 @@
----
-apiVersion: source.toolkit.fluxcd.io/v1
-kind: HelmRepository
-metadata:
-  name: bitnami
-  namespace: common-services
-spec:
-  interval: 1h0m0s
-  url: oci://registry-1.docker.io/bitnamicharts
-  type: "oci"

infrastructure/mariadb/kustomization.yaml

@@ -1,5 +0,0 @@
-apiVersion: kustomize.config.k8s.io/v1beta1
-kind: Kustomization
-resources:
-  - helm-repository.yaml
-  - helm-release.yaml

infrastructure/traefik/helm-release.yaml

@@ -31,7 +31,6 @@ spec:
       - "--entryPoints.web.proxyProtocol.trustedIPs=${OVH_LOAD_BALANCER_EGRESS_IP}/32"
       - "--entryPoints.websecure.proxyProtocol.trustedIPs=${OVH_LOAD_BALANCER_EGRESS_IP}/32"
       - "--entryPoints.websecure.forwardedHeaders.trustedIPs=${OVH_LOAD_BALANCER_EGRESS_IP}/32"
-      - "--entryPoints.mariadb.proxyProtocol.trustedIPs=${OVH_LOAD_BALANCER_EGRESS_IP}/32"
 
     additionalArguments:
       - "--log.level=DEBUG"
@@ -76,11 +75,6 @@ spec:
         expose:
           default: false
         protocol: TCP
-      mariadb:
-        port: 54322
-        expose:
-          default: true
-        protocol: TCP
 
     providers:
       kubernetesCRD:
@@ -257,23 +251,6 @@ spec:
             customResponseHeaders:
               Cross-Origin-Opener-Policy: "same-origin"
 
-      - apiVersion: traefik.io/v1alpha1
-        kind: MiddlewareTCP
-        metadata:
-          name: ipwhitelist-acces-mariadb
-          namespace: common-services
-        spec:
-          ipAllowList:
-            sourceRange:
-              - 46.18.126.208/28 # LDC
-              - 62.193.56.48/32 # OPENevents - Bureau Neuville
-              - 86.65.205.240/28 # LDC
-              - 135.125.42.176/28 # LDC
-              - 149.202.23.64/26 # LDC
-              - 151.80.95.176/28 # LDC
-              - 217.15.92.64/28 # LDC
-              - 10.124.0.0/16 # Kubernetes internal resources
-
       - apiVersion: traefik.io/v1alpha1
         kind: Middleware
         metadata:
@@ -352,23 +329,6 @@ spec:
               - 78.46.215.1 # UptimeRobot
               - 91.99.101.207 # UptimeRobot
 
-      - apiVersion: traefik.io/v1alpha1
-        kind: IngressRouteTCP
-        metadata:
-          name: mariadb-ingressroutetcp
-          namespace: common-services
-        spec:
-          entryPoints:
-            - mariadb
-          routes:
-            - match: HostSNI(`*`) # Hostname to match
-              middlewares:
-                - name: ipwhitelist-acces-mariadb
-                  namespace: common-services
-              services:
-                - name: mariadb
-                  port: 3306
-
       # AJOUT : Service Octavia en parallèle
       - apiVersion: v1
         kind: Service
@@ -397,10 +357,6 @@ spec:
               port: 443
               targetPort: 8443
               protocol: TCP
-            - name: mariadb
-              port: 54322
-              targetPort: 54322
-              protocol: TCP
 
       - apiVersion: v1
         kind: Service