Jack Jackson
496c2f13b0
Expand (and explicitly specify storageclass of) Vault storage
...
Due to currently-unknown fault, my Vault storage got full up (I
_suspect_ it's due to not setting a default TTL on Tokens, and so they
all hung around. Surprised they were created at such a rate, but w/e). I
wasn't able to directly expand the volume - and, anyway, it's on
Longhorn which is a Storage Provisioner that I'm moving away from - so
the solution was to:
* Create a temporary PV (on FreeNas, though that doesn't actually
matter) and copy data onto it (by mounting both it and the existing
Volume onto a debug pod, using a variant of [this
script](https://blog.scubbo.org/posts/pvc-debug-pod/ ))
* Delete the existing PVC and PV
* Make this update, and sync
* A new _empty_ PV will be created (and probably populated with some
stuff)
* Scale-down the StatefulSet, do the double-mount-to-debug-pod trick
again, and copy data from the temporary PV onto this one
* Delete Debug Pod, re-scale-up StatefulSet...and hope that there's
nothing stateful in the data which means that copying it from one
volume to another makes it invalid (e.g. if encrypted with an
encryption key which would change on a new spin-up of the pod - which
_seems_ unlikely, but 🤷 )
2024-06-04 14:07:45 -07:00
Jack Jackson
e798564692
First steps in Crossplane-Vault integration
2024-05-08 23:45:39 -07:00
Jack Jackson
bcb2bd28d7
Enable sabnzbd
2024-05-08 07:35:36 -07:00
Jack Jackson
4c82c014f8
Add vault-sourced secret in Drone setup
2024-04-21 14:02:43 -07:00
Jack Jackson
1926560274
Jsonnify Drone
2024-04-21 13:08:41 -07:00
Jack Jackson
b856fd2bc5
Set up Vault Secrets Operator
...
Prerequisite that Vault is configured with authentication per
https://developer.hashicorp.com/vault/tutorials/kubernetes/vault-secrets-operator#configure-vault
The plan would eventually be to manage Vault objects via
[Crossplane](https://www.crossplane.io/ ).
2024-04-21 12:46:01 -07:00
Jack Jackson
3140ea8b0d
Correctly represent env variable
2024-04-20 13:45:13 -07:00
Jack Jackson
185af7901a
Remove initContainer backup approach
2024-04-20 13:21:41 -07:00
Jack Jackson
b4c9947e4c
Try including date in backup name
2024-04-19 21:32:13 -07:00
Jack Jackson
6d338157fa
Put Keycloak backup volumes in right namespace
2024-04-19 21:01:26 -07:00
Jack Jackson
abc71fd7f1
Set securityContext to permit truenas file operations
2024-04-10 17:49:16 -07:00
Jack Jackson
40427c0426
Add Keycloak Backup job
2024-04-06 17:33:07 -07:00
Jack Jackson
a98d915658
Add backup as crontab
2024-04-06 14:53:42 -07:00
Jack Jackson
68f83a23b3
Install keycloak
2024-04-06 13:20:14 -07:00
Jack Jackson
de944bac48
Remove Grafana Oncall
2024-03-12 19:10:13 -07:00
Jack Jackson
b107f1e839
Dehelmify, and install Crossplane via Jsonnet
...
Need to remove `Chart.yaml` so that Argo doesn't try to treat
`app-of-apps/` as a Helm application (because that would stop it from
using Jsonnet parsing).
2024-03-12 18:49:06 -07:00
Jack Jackson
d1e000dc10
Avoid Drone-runner on the cursed node
2024-02-19 13:42:35 -08:00
Jack Jackson
7c3364fef9
Addressing Sonarr DB Migration error
2024-02-17 18:44:14 -08:00
Jack Jackson
3dfc818f5f
First attempt at installing OpenProject
2024-01-14 20:00:56 -08:00
Jack Jackson
a3b154adf8
Mount Truenas directly at /data
2023-12-08 21:45:58 -08:00
Jack Jackson
5548684b7a
Create admin Drone user
2023-12-01 22:56:40 -08:00
Jack Jackson
657942071a
Fully migrate to TrueNas for Nzbget
2023-11-28 19:17:16 -08:00
Jack Jackson
feee5d6979
Add Blog application
2023-11-24 14:28:36 -08:00
Jack Jackson
ab1bc63f84
Re-enable Vault
...
Note that I was wrong before - there was no need to disable while
setting up TrueNAS, because Vault suggests using integrated storage.
2023-10-30 22:13:46 -07:00
Jack Jackson
7eb215f7fa
Remove Longhorn Media volumes now fully migrated
2023-10-04 10:00:57 -07:00
Jack Jackson
69b15c1ad6
Temporarily mount TrueNAS to Jellyfin as Read-Write to transfer data from Longhorn volumes
2023-10-01 19:40:59 -07:00
Jack Jackson
a3e807c406
Mount TrueNAS volume for Usenet Downloads
2023-09-30 16:53:15 -07:00
Jack Jackson
499d3acaf5
Mount TrueNas volume on all appropriate containers
2023-09-30 14:50:15 -07:00
Jack Jackson
b183c2bf6b
Reintroduce TrueNAS storage after reconfiguration
2023-09-23 20:13:43 -07:00
Jack Jackson
58bc49412e
Remove TrueNAS volume from Jellyfin while reconfiguring
2023-09-23 19:27:59 -07:00
Jack Jackson
0bc8d9b219
Temporarily delete Vault app while I reconfigure TrueNAS
2023-09-23 19:13:59 -07:00
Jack Jackson
7373ba6346
Introduce TrueNas volume for Jellyfin
2023-09-22 22:39:43 -07:00
Jack Jackson
9689cbc52e
Enable Ingress
2023-09-20 21:38:34 -07:00
Jack Jackson
1dd97e7338
Deploy Vault
2023-09-20 20:53:44 -07:00
Jack Jackson
6f73b57afe
Add Affinity in Jellyfin Metrics
2023-08-30 20:08:48 -07:00
Jack Jackson
98ae54614b
Bind Drone Runner to arm64 node
2023-08-30 19:47:57 -07:00
Jack Jackson
311c15b4a8
Update Oncall versions
2023-08-26 18:34:10 -07:00
Jack Jackson
22bc25bc1d
Update to latest Grafana version
2023-08-26 17:41:26 -07:00
Jack Jackson
f73941fb8c
Add Private Apps
2023-08-05 18:54:57 -07:00
Jack Jackson
a0957a85ea
Re-add Oncall, having removed Retained PersistentVolumes
2023-07-27 17:31:35 -07:00
Jack Jackson
f22892e482
Remove Oncall - still need postgres password passthrough
2023-07-26 21:48:38 -07:00
Jack Jackson
f2cd112341
Re-enable Grafana Oncall
...
Setting redis `nodeSelector` as per [Bitnami
chart](https://github.com/bitnami/charts/blob/main/bitnami/redis/values.yaml )
2023-07-26 21:08:38 -07:00
Jack Jackson
9fdb389814
Disable Grafana Oncall
2023-07-26 19:53:08 -07:00
Jack Jackson
ed039061bd
Try Grafana Oncall on x86
2023-07-26 19:21:17 -07:00
Jack Jackson
b13c2a3c50
Fully remove volume 4
2023-07-26 18:52:50 -07:00
Jack Jackson
8d2b346490
Unmount large volume - just wait for NAS
2023-07-26 18:19:48 -07:00
Jack Jackson
9c84e93e65
Create larger volume now rasnu2 is available
2023-07-26 14:20:01 -07:00
Jack Jackson
dd63fb1d2c
Longhorn TV volume 3
2023-07-26 00:02:14 -07:00
Jack Jackson
766998c026
Second Longhorn TV Volume
2023-07-25 14:34:51 -07:00
Jack Jackson
a01a1a68f4
Revert "Temporarily mount base media dir as ReadWriteMany to copy data out to Longhorn volume"
...
This reverts commit 2d622ee971c9bad617b3f9c55d48254c81219b27.
2023-07-25 09:25:02 -07:00
