🚀 drone

auricom · Nov 17, 2022 · ceb2b4f · ceb2b4f
1 parent 1918add
commit ceb2b4f
Show file tree

Hide file tree

Showing 11 changed files with 115 additions and 40 deletions.
diff --git a/...drone-kubernetes-secrets/helmrelease.yaml → ...rone-kubernetes-secrets/helm-release.yaml b/...drone-kubernetes-secrets/helmrelease.yaml → ...rone-kubernetes-secrets/helm-release.yaml
@@ -16,4 +16,8 @@ spec:
   values:
     env:
       KUBERNETES_NAMESPACE: default
-      SECRET_KEY: ${DRONE_PLUGIN_SECRET}
+  valuesFrom:
+    - targetPath: env.SECRET_KEY
+      kind: Secret
+      name: drone
+      valuesKey: DRONE_SECRET_PLUGIN_TOKEN
diff --git a/cluster/apps/development/drone/drone-kubernetes-secrets/kustomization.yaml b/cluster/apps/development/drone/drone-kubernetes-secrets/kustomization.yaml
@@ -0,0 +1,5 @@
+---
+apiVersion: kustomize.config.k8s.io/v1beta1
+kind: Kustomization
+resources:
+  - helm-release.yaml
diff --git a/...pment/drone/drone-runner/helmrelease.yaml → ...drone/drone-runner-kube/helm-release.yaml b/...pment/drone/drone-runner/helmrelease.yaml → ...drone/drone-runner-kube/helm-release.yaml
@@ -2,6 +2,7 @@ apiVersion: helm.toolkit.fluxcd.io/v2beta1
 kind: HelmRelease
 metadata:
   name: drone-runner-kube
+  namespace: default
 spec:
   interval: 1h
   chart:
@@ -12,13 +13,23 @@ spec:
         kind: HelmRepository
         name: drone
         namespace: flux-system
+  dependsOn:
+    - name: drone-kubernetes-secrets
+      namespace: default
   values:
     image:
       repository: drone/drone-runner-kube
       tag: 1.0.0-beta.5
     env:
       DRONE_NAMESPACE_DEFAULT: default
-      DRONE_RPC_HOST: drone.default.svc
-      DRONE_RPC_SECRET: ${DRONE_RPC_SECRET}
+      DRONE_RPC_HOST: drone.default.svc:8080
       DRONE_SECRET_PLUGIN_ENDPOINT: http://drone-kubernetes-secrets.default.svc:3000
-      DRONE_SECRET_PLUGIN_TOKEN: ${DRONE_SECRET_PLUGIN_TOKEN}
+  valuesFrom:
+    - targetPath: env.DRONE_RPC_SECRET
+      kind: Secret
+      name: drone
+      valuesKey: DRONE_RPC_SECRET
+    - targetPath: env.DRONE_SECRET_PLUGIN_TOKEN
+      kind: Secret
+      name: drone
+      valuesKey: DRONE_SECRET_PLUGIN_TOKEN
diff --git a/cluster/apps/development/drone/drone-runner-kube/kustomization.yaml b/cluster/apps/development/drone/drone-runner-kube/kustomization.yaml
@@ -0,0 +1,5 @@
+---
+apiVersion: kustomize.config.k8s.io/v1beta1
+kind: Kustomization
+resources:
+  - helm-release.yaml
diff --git a/cluster/apps/development/drone/helm-release.yaml b/cluster/apps/development/drone/helm-release.yaml
@@ -0,0 +1,65 @@
+apiVersion: helm.toolkit.fluxcd.io/v2beta1
+kind: HelmRelease
+metadata:
+  name: drone
+  namespace: default
+spec:
+  interval: 1h
+  chart:
+    spec:
+      chart: drone
+      version: 0.6.4
+      sourceRef:
+        kind: HelmRepository
+        name: drone
+        namespace: flux-system
+  dependsOn:
+    - name: drone-runner-kube
+      namespace: default
+    - name: gitea
+      namespace: default
+    - name: postgres-cluster
+      namespace: default
+  values:
+    image:
+      repository: drone/drone
+      tag: 2.15.0
+    persistentVolume:
+      enabled: false
+    env:
+      DRONE_DATABASE_DRIVER: postgres
+      DRONE_GIT_ALWAYS_AUTH: true
+      DRONE_GITEA_SERVER: https://gitea.${SECRET_CLUSTER_DOMAIN}
+      DRONE_SERVER_HOST: &host drone.${SECRET_CLUSTER_DOMAIN}
+      DRONE_SERVER_PROTO: https
+      DRONE_SERVER_PROXY_HOST: drone.default.svc
+      DRONE_SERVER_PROXY_PROTO: http
+      DRONE_USER_CREATE: username:context,admin:true
+    ingress:
+      enabled: true
+      className: nginx
+      hosts:
+        - host: *host
+          paths:
+            - path: /
+              pathType: Prefix
+      tls:
+        - hosts:
+            - *host
+  valuesFrom:
+    - targetPath: env.DRONE_DATABASE_DATASOURCE
+      kind: Secret
+      name: drone
+      valuesKey: DRONE_DATABASE_DATASOURCE
+    - targetPath: env.DRONE_GITEA_CLIENT_ID
+      kind: Secret
+      name: drone
+      valuesKey: DRONE_GITEA_CLIENT_ID
+    - targetPath: env.DRONE_GITEA_CLIENT_SECRET
+      kind: Secret
+      name: drone
+      valuesKey: DRONE_GITEA_CLIENT_SECRET
+    - targetPath: env.DRONE_RPC_SECRET
+      kind: Secret
+      name: drone
+      valuesKey: DRONE_RPC_SECRET
diff --git a/cluster/apps/development/drone/helmrelease.yaml b/cluster/apps/development/drone/helmrelease.yaml
diff --git a/cluster/apps/development/drone/kustomization.yaml b/cluster/apps/development/drone/kustomization.yaml
@@ -0,0 +1,8 @@
+---
+apiVersion: kustomize.config.k8s.io/v1beta1
+kind: Kustomization
+resources:
+  - drone-kubernetes-secrets
+  - drone-runner-kube
+  - helm-release.yaml
+  - secret.sops.yaml
diff --git a/cluster/apps/development/drone/secret.sops.yaml b/cluster/apps/development/drone/secret.sops.yaml
@@ -6,6 +6,7 @@ metadata:
     namespace: default
 type: Opaque
 stringData:
+    DRONE_DATABASE_DATASOURCE: ENC[AES256_GCM,data:nKt4kz7WR4ma7eoOqHsGbOlStX0APLzhxkYVTo3bZhVl8n+YlG7xl3OpLQ/1fyJnC5Q5jqnRZbLqD3a98J9nQtM9ZJ+ayVRcmktli2sjVTa8a63XWQ6jxsOIfqCTvVk=,iv:x9gj3MY5h9Jg0yMxtWe3WlIr/Jg79ljPQhkDllvS5UQ=,tag:khub5u0PCfO0yFFwDeOZAg==,type:str]
     DRONE_GITEA_CLIENT_ID: ENC[AES256_GCM,data:tcXCVpdKB16QrXd35BhWtafVKgs/BlxWkxK9iQ+sm/wTUren,iv:/zEGKJzuaurIAOWXAhtsRnxkIwmzqrAZkW7rfAaTEVQ=,tag:XnHiNYyHUjsLgnTl62wQPQ==,type:str]
     DRONE_GITEA_CLIENT_SECRET: ENC[AES256_GCM,data:wEIM5nc+cmc18ujFztAQQKO0YFXVtH90G+C4yCQOZlUf1xu9R1t2M0iLB7aP+y1lfxo3cgfiT+k=,iv:Nish+j12JfctzLGLXJ6Gle4sJLTDSlPnVMQ9L1BRRTs=,tag:uXWDbzpE13p5X/BnsKvQPQ==,type:str]
     DRONE_RPC_SECRET: ENC[AES256_GCM,data:O+YljkHzgFe4HSgSRkosuTTFpaOPSyAjeVpC39BKSIU=,iv:H8SO0S8TL060mnKCOBPWexUNdYwUmyVPdetuoto6uck=,tag:XU8JCsippp0Gadptpuwuog==,type:str]
@@ -25,8 +26,8 @@ sops:
             ZUZsSDdUYXFVb3JROEFnaC8yRU1zZ0UK1klzjeo3oaS6n1Apy0nY746ax2Uxxddg
             Mn61QDtkPf8FLNBC3tFTe3pWzhWseD/89WaW3f3GScJxy34SFUZxLQ==
             -----END AGE ENCRYPTED FILE-----
-    lastmodified: "2022-11-16T22:16:36Z"
-    mac: ENC[AES256_GCM,data:xdULdxELfUl/xFtjZtd84/fI9LOR0WAS37gc9li+9weRBQf2GlrqX2Kv/4iBly+5mpWqoDN+I+eV0ZR+ZHKhAsKlg3EyF4qRl017iNf3vI/ksbhx65khb+HI6v4iLLhpX4OprD9c2v4TC3IniWLTCwF6wirVerKTCyO7Bh18bos=,iv:T7yQ1y0J1ViOZp+v3PxeXtrur5/QuwpWgdgLs9moO5M=,tag:X9CPFPWXTXgSQh752vdR3g==,type:str]
+    lastmodified: "2022-11-16T22:53:09Z"
+    mac: ENC[AES256_GCM,data:rKVm0DNrWZD7D5KanrINScClRJss9FhYUR1Xvz7lIKB3mRBuEpLYFQg84e+B6GTwa4p96EG/QICEAyY7T/7uNiZ6s2lLW7BEZsFH8HTJMk/KTwX15Pn5yg7qEiGwjWDSESTSGNDl9uOlVmpoDJz4xZY+DRUaJXVp33/y89eb82w=,iv:S5fpYjLd00gq8moMq00BHLPI2O3dfNAS3VU3yNHwpAg=,tag:DtMk+Pex/WjighefoGkRfQ==,type:str]
     pgp: []
     encrypted_regex: ^(data|stringData)$
     version: 3.7.3
diff --git a/cluster/apps/development/kustomization.yaml b/cluster/apps/development/kustomization.yaml
@@ -1,4 +1,5 @@
 apiVersion: kustomize.config.k8s.io/v1beta1
 kind: Kustomization
 resources:
+  - drone
   - gitea
diff --git a/cluster/charts/drone-charts.yaml b/cluster/charts/drone-charts.yaml
@@ -0,0 +1,8 @@
+apiVersion: source.toolkit.fluxcd.io/v1beta2
+kind: HelmRepository
+metadata:
+  name: drone
+  namespace: flux-system
+spec:
+  interval: 1h
+  url: https://charts.drone.io
diff --git a/cluster/charts/kustomization.yaml b/cluster/charts/kustomization.yaml
@@ -7,6 +7,7 @@ resources:
   - cert-manager-webhook-ovh.yaml
   - cloudnative-pg-charts.yaml
   - descheduler-charts.yaml
+  - drone-charts.yaml
   - dysnix-charts.yaml
   - emxq-charts.yaml
   - external-dns-charts.yaml