locmai / humble Goto Github PK
View Code? Open in Web Editor NEWJust a humble project
Home Page: https://humble.maibaloc.com
License: GNU General Public License v3.0
Just a humble project
Home Page: https://humble.maibaloc.com
License: GNU General Public License v3.0
Prepare to cut the release before the Humble Revamp started.
Lints:
Tests:
PRs check:
Hi, I noticed that you are using bank-vaults operator. Do you know what version of vault is the operator using?
I noticed that hashicorp has released vault version 1.12.x and somewhere in the bank-vaults config it mentioned vault 1.6.2 I wonder if that is the image version they use or an actual vault version number.
A few options:
Using this provider: https://registry.terraform.io/providers/integrations/github/latest/docs
Configure the webhook to notfiy ArgoCD after every push. No share secret required.
We now have the base chart at https://github.com/locmai/charts/tree/main/charts/excalidraw - a few extra steps required to have the collaboration feature:
Setup sidecar mechanism to dynamically inject the dashboards into the main grafana
This issue will be started after #35 with the initial secrets.
Letting CloudFlare handles all the HTTPS requests doesn't meet all requirements for some component (like Keycloak)
Need an instance of cert-manager for dynamically self-signing the certs.
Provision Apache Directory Server
This issue lists Renovate updates and detected dependencies. Read the Dependency Dashboard docs to learn more.
Renovate tried to run on this repository, but found these problems.
These updates have been manually edited so Renovate will no longer make changes. To discard all commits and start over, click on a checkbox.
Warning
Renovate failed to look up the following dependencies: Failed to look up helm package glance
, Failed to look up helm package secret-generator
.
Files affected: apps/templates/glance.yaml
, platform/templates/global-secrets.yaml
These updates have all been created already. Click a checkbox below to force a retry/rebase of any.
cassandra
, coroot
, http
)metal/roles/pxe-server/files/docker-compose.yml
Dockerfile.tools
metal/roles/pxe-server/files/dnsmasq/Dockerfile
alpine 3.20
metal/roles/pxe-server/files/http/Dockerfile
nginx 1.27.0-alpine
.github/workflows/pr-checks.yaml
amannn/action-semantic-pull-request v5
actions/checkout v4
azure/setup-helm v4
actions/setup-python v5
helm/chart-testing-action v2.6.1
.github/workflows/release-please.yaml
google-github-actions/release-please-action v4
.github/workflows/renovate.yaml
actions/checkout v4.1.7
renovatebot/github-action v40.2.4
bootstrap/argocd/Chart.yaml
argo-cd 7.3.11
platform/Chart.yaml
common 2.20.5
docs/requirements.txt
mergedeep ==1.3.4
python-dateutil ==2.9.0.post0
PyYAML ==6.0.1
pyyaml_env_tag ==0.1
six ==1.16.0
global/_modules/external-dns/providers.tf
global/_modules/external-dns/versions.tf
cloudflare ~> 4.38.0
http ~> 3.4.0
kubernetes ~> 2.31.0
hashicorp/terraform >= 1.0.0
global/prod/terragrunt.hcl
global/stag/terragrunt.hcl
apps/templates/excalidraw.yaml
excalidraw 0.0.3
apps/templates/glance.yaml
glance 0.1.0
apps/templates/homepage.yaml
app-template 2.6.0
apps/templates/jellyfin.yaml
app-template 2.6.0
apps/templates/speedtest.yaml
app-template 2.6.0
global/templates/cloudflared.yaml
cloudflared 0.4.3
global/templates/external-dns.yaml
external-dns 1.14.5
platform/templates/cassandra.yaml
cassandra 11.3.11
platform/templates/coroot.yaml
coroot 0.14.1
platform/templates/dexidp.yaml
dex 0.18.0
platform/templates/external-secrets.yaml
external-secrets 0.9.20
platform/templates/global-secrets.yaml
secret-generator 0.1.10
platform/templates/kanidm.yaml
app-template 2.6.0
platform/templates/reloader.yaml
reloader 1.0.119
platform/templates/temporal.yaml
temporal 0.32.0
system/templates/cert-manager.yaml
cert-manager v1.15.2
system/templates/cilium-monitor.yaml
cilium-monitor 0.0.3
system/templates/ingress-nginx.yaml
ingress-nginx 4.11.1
system/templates/loki.yaml
loki-stack 2.10.2
system/templates/mimir.yaml
mimir-distributed 5.4.0
system/templates/monitoring.yaml
kube-prometheus-stack 61.6.0
system/templates/opentelemetry.yaml
opentelemetry-collector 0.100.0
system/templates/tracing.yaml
jaeger 0.51.6
apps/templates/excalidraw.yaml
excalidraw 0.0.3
apps/templates/glance.yaml
glance 0.1.0
apps/templates/homepage.yaml
app-template 2.6.0
apps/templates/jellyfin.yaml
app-template 2.6.0
apps/templates/speedtest.yaml
app-template 2.6.0
global/templates/cloudflared.yaml
cloudflared 0.4.3
global/templates/external-dns.yaml
external-dns 1.14.5
platform/templates/cassandra.yaml
cassandra 11.3.11
platform/templates/coroot.yaml
coroot 0.14.1
platform/templates/dexidp.yaml
dex 0.18.0
platform/templates/external-secrets.yaml
external-secrets 0.9.20
platform/templates/global-secrets.yaml
secret-generator 0.1.10
platform/templates/kanidm.yaml
app-template 2.6.0
platform/templates/reloader.yaml
reloader 1.0.119
platform/templates/temporal.yaml
temporal 0.32.0
system/templates/cert-manager.yaml
cert-manager v1.15.2
system/templates/cilium-monitor.yaml
cilium-monitor 0.0.3
system/templates/ingress-nginx.yaml
ingress-nginx 4.11.1
system/templates/loki.yaml
loki-stack 2.10.2
system/templates/mimir.yaml
mimir-distributed 5.4.0
system/templates/monitoring.yaml
kube-prometheus-stack 61.6.0
system/templates/opentelemetry.yaml
opentelemetry-collector 0.100.0
system/templates/tracing.yaml
jaeger 0.51.6
From provisioning flow, after Vault installation, we will need to initialize Vault with root token, shared keys and unseal it. Then enable Kubernetes authentication and feed the initial secret set into Vault.
Write a script that:
Refs:
Khue is reworking the Dev VM mode. Wait for him to finish that then we could hack the new reworked mode from his project.
Add branching model and refactor all the targetRevision for each environment. Trim up to dev/prod only, stag is just an extra env.
Update the document as well.
Update 04/22/2022:
Review the full list of the landscape and update the icons/ref.
Complete the Saleor charts at:
Then deploy it with the ingress to https://saleor.maibaloc.com
Replace the default CNI (Flannel) with Cilium to provide networking, observability, and security solution with the eBPF-based dataplane.
There is an error with this repository's Renovate configuration that needs to be fixed. As a precaution, Renovate will stop PRs until it is resolved.
Location: .*repoURL: (?<registryUrl>(?!{{ .Values.global.repoURL }}|'https://github.com/locmai/humble-grafana-dashboards.git').*?)\n
Error type: Invalid regular expression: .*repoURL: (?(?!{{ .Values.global.repoURL }}|'https://github.com/locmai/humble-grafana-dashboards.git').*?)\n
Deploy this server on layer 1 node 01: https://github.com/Place1/wg-access-server
AC1: Could access the VPN via this server.
Simply add excalidraw app deployment. The chart is set here https://github.com/locmai/charts/tree/main/charts/excalidraw
This issue lists Renovate updates and detected dependencies. Read the Dependency Dashboard docs to learn more.
These problems occurred while renovating this repository.
These updates have been manually edited so Renovate will no longer make changes. To discard all commits and start over, click on a checkbox.
Markdown
, alpine
, argo-cd
, argo-events
, argo-workflows
, authentik
, base
, cert-manager
, cloudflare
, cloudflared
, colorama
, consul
, cortex
, descheduler
, etcd
, external-dns
, external-secrets
, gateway
, gitea
, http
, ingress-nginx
, istiod
, kube-prometheus-stack
, kubernetes
, kured
, loki-stack
, longhorn
, memcached
, metallb
, mimir-distributed
, minio
, nginx
, opentelemetry-collector
, renovatebot/github-action
, rich
)These are blocked by an existing closed PR and will not be recreated unless you click a checkbox below.
platform/kustomization/tekton/tasks/goodbye.yaml
ubuntu no version found
platform/kustomization/tekton/tasks/helloworld.yaml
docker/whalesay latest
metal/roles/pxe-server/files/docker-compose.yml
metal/roles/pxe-server/files/dhcp/Dockerfile
alpine 20220715
metal/roles/pxe-server/files/http/Dockerfile
nginx 1.22.0-alpine
metal/roles/pxe-server/files/tftp/Dockerfile
alpine 20220715
platform/files/Dockerfile
python 3.10-slim-buster
tools/Dockerfile
archlinux no version found
.github/workflows/conventional-pr.yaml
amannn/action-semantic-pull-request v4
.github/workflows/renovate.yaml
actions/checkout v2.0.0
renovatebot/github-action v32.118.0
bootstrap/argocd/values.yaml
alpine 3.15
bootstrap/argocd/Chart.yaml
argo-cd 4.6.1
docs/requirements.txt
click ==8.1.3
ghp-import ==2.1.0
importlib-metadata ==4.12.0
Jinja2 ==3.1.2
Markdown ==3.3.7
MarkupSafe ==2.1.1
mergedeep ==1.3.4
mkdocs ==1.3.0
mkdocs-material ==8.3.9
mkdocs-material-extensions ==1.0.3
packaging ==21.3
Pygments ==2.12.0
pymdown-extensions ==9.5
pyparsing ==3.0.9
python-dateutil ==2.8.2
PyYAML ==6.0
pyyaml_env_tag ==0.1
six ==1.16.0
watchdog ==2.1.9
zipp ==3.8.1
tools/requirements.txt
colorama ==0.4.4
commonmark ==0.9.1
Pygments ==2.12.0
rich ==12.4.1
apps/templates/consul.yaml
consul 0.44.0
apps/templates/cortex.yaml
cortex 1.4.0
apps/templates/dashy-landscape.yaml
dashy 0.0.2
apps/templates/dendrite.yaml
dendrite 6.0.0
apps/templates/element.yaml
elementweb 0.0.3
apps/templates/filebrowser.yaml
filebrowser 0.0.2
apps/templates/memcached.yaml
memcached 6.0.18
apps/templates/microservices-demo.yaml
microservices-demo 0.0.1
apps/templates/nfs.yaml
nfs-server-provisioner 1.4.0
apps/templates/yutaops.yaml
yuta 0.0.2
bootstrap/root/templates/apps.yaml
undefined {{ .Values.apps.targetRevision }}
bootstrap/root/templates/bootstrap.yaml
undefined {{ .Values.global.targetRevision }}
bootstrap/root/templates/global.yaml
undefined {{ .Values.global.targetRevision }}
bootstrap/root/templates/platform.yaml
undefined {{ .Values.platform.targetRevision }}
bootstrap/root/templates/system.yaml
undefined {{ .Values.system.targetRevision }}
global/templates/cloudflared.yaml
cloudflared 0.3.3
global/templates/external-dns.yaml
external-dns 6.4.1
platform/templates/argo-events.yaml
argo-events 2.0.0
platform/templates/argo-workflow.yaml
argo-workflows 0.15.0
platform/templates/authentik.yaml
authentik 2022.4.3
platform/templates/etcd.yaml
etcd 8.1.3
platform/templates/external-secrets.yaml
external-secrets 0.5.3
platform/templates/gitea.yaml
gitea 5.0.8
platform/templates/kustom-init-secrets.yaml
undefined main
platform/templates/kustom-tekton.yaml
undefined {{ .Values.tekton.targetRevision }}
platform/templates/mimir.yaml
mimir-distributed 2.0.14
platform/templates/minio.yaml
minio 11.5.1
platform/templates/secret-generator.yaml
undefined {{ .Values.secretGenerator.targetRevision }}
platform/templates/trow.yaml
trow 0.3.5
system/templates/cert-manager.yaml
cert-manager v1.8.0
system/templates/dashboard.yaml
undefined {{ .Values.dashboard.targetRevision }}
system/templates/descheduler.yaml
descheduler 0.23.2
system/templates/ingress-nginx.yaml
ingress-nginx 4.1.1
system/templates/istio-base.yaml
base 1.13.4
system/templates/istio-gateway.yaml
gateway 1.13.4
system/templates/istio-istiod.yaml
istiod 1.13.4
system/templates/kured.yaml
kured 2.14.1
system/templates/kustom-system-upgrade.yaml
undefined {{ .Values.systemUpgrade.targetRevision }}
system/templates/loki.yaml
loki-stack 2.6.4
system/templates/longhorn.yaml
longhorn 1.2.4
system/templates/metallb.yaml
metallb 0.12.1
system/templates/monitoring.yaml
kube-prometheus-stack 37.0.0
system/templates/opentelemetry.yaml
opentelemetry-collector 0.17.0
system/templates/tracing.yaml
jaeger 0.51.6
global/_modules/external-dns/main.tf
undefined no version found
undefined no version found
undefined no version found
undefined no version found
undefined no version found
undefined no version found
undefined no version found
undefined no version found
global/_modules/external-dns/providers.tf
cloudflare no version found
global/_modules/external-dns/versions.tf
hashicorp/terraform ~> 1.2.0
cloudflare ~> 3.15.0
kubernetes ~> 2.11.0
http ~> 2.1.0
global/prod/terragrunt.hcl
undefined no version found
global/stag/terragrunt.hcl
undefined no version found
Provide a simple static security scan/check for the following cases:
Note: Policy enforcement like OPA should be in another issue considered the size of the implementation for it.
Deploy Cortex: https://github.com/locmai/humble/blob/main/apps/templates/cortex.yaml
Items:
Just an issue to mark this done - as hacked from khuedoan again
There is an error with this repository's Renovate configuration that needs to be fixed. As a precaution, Renovate will stop PRs until it is resolved.
Location: renovate-pin-dependencies
Error type: Renovate branch is protected
Message: Renovate cannot push to its branch because branch protection has been enabled.
Add a set of system maintainers/house cleaners:
Consider more works for the future:
A declarative, efficient, and flexible JavaScript library for building user interfaces.
๐ Vue.js is a progressive, incrementally-adoptable JavaScript framework for building UI on the web.
TypeScript is a superset of JavaScript that compiles to clean JavaScript output.
An Open Source Machine Learning Framework for Everyone
The Web framework for perfectionists with deadlines.
A PHP framework for web artisans
Bring data to life with SVG, Canvas and HTML. ๐๐๐
JavaScript (JS) is a lightweight interpreted programming language with first-class functions.
Some thing interesting about web. New door for the world.
A server is a program made to process requests and deliver data to clients.
Machine learning is a way of modeling and interpreting data that allows a piece of software to respond intelligently.
Some thing interesting about visualization, use data art
Some thing interesting about game, make everyone happy.
We are working to build community through open source technology. NB: members must have two-factor auth.
Open source projects and samples from Microsoft.
Google โค๏ธ Open Source for everyone.
Alibaba Open Source for everyone
Data-Driven Documents codes.
China tencent open source team.