Skip to content

Commit 32eab1a

Browse files
committed
test rsync container with filebrowser
1 parent 3695a76 commit 32eab1a

File tree

7 files changed

+33
-90
lines changed

7 files changed

+33
-90
lines changed

.envrc

-1
Original file line numberDiff line numberDiff line change
@@ -1,7 +1,6 @@
11
#shellcheck disable=SC2148,SC2155
22
export KUBECONFIG="$(expand_path ./kubeconfig)"
33
export SOPS_AGE_KEY_FILE=$(expand_path ~/.config/sops/age/keys.txt)
4-
54
export LOCAL_ANSIBLE_PYTHON_INTERPRETER=$(which python)
65
PATH_add "$(expand_path ./.venv/bin)"
76
export VIRTUAL_ENV="$(expand_path ./.venv)"

.taskfiles/flux.yaml

+10
Original file line numberDiff line numberDiff line change
@@ -95,6 +95,16 @@ tasks:
9595
requires:
9696
vars: ["cluster"]
9797

98+
# https://github.com/fluxcd/helm-controller/issues/454#issuecomment-962208864
99+
retry:
100+
desc: Restart specific helmrelease
101+
cmds:
102+
- flux --context {{.cluster}} suspend hr {{.hr}} -n {{.ns}}
103+
- sleep 2
104+
- flux --context {{.cluster}} resume hr {{.hr}} -n {{.ns}}
105+
requires:
106+
vars: ["cluster", "ns", "hr"]
107+
98108
delete-tunnel:
99109
desc: |
100110
Force delete cloudflared tunnel release to stop external ingress

kubernetes/main/apps/default/filebrowser/app/helmrelease.yaml

+22
Original file line numberDiff line numberDiff line change
@@ -60,6 +60,19 @@ spec:
6060
cpu: 100m
6161
limits:
6262
memory: 2Gi
63+
# # 1. Disable `runAsNonRoot` for rsync container
64+
# # 2. Add service on port 22
65+
# rsync:
66+
# image:
67+
# repository: docker.io/axiom/rsync-server
68+
# tag: latest
69+
# env:
70+
# USERNAME: root
71+
# PASSWORD: asdf
72+
# AUTHORIZED_KEYS: ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABgQDPaYZO7t/sFHOXXf/GJZz2mmoR91jHZtA8Zp0FlgXvBXJ1JJx/0MQa3iFzssdKe9pSSA/rNduDl38EFdye2r66LdD/0z0Id3xIhZ2noD/rNr7kslkzmZTdCfnY7mWIYjdZfXdTqicJTSms0RkC9mJoLQqhUMIIgXe5ZvQJPuPFaVWDUMTou6kdUUBcVJ/Y19BbGu86dc1QXM+qThzZRLr5tjLLR6Edy7Du+bckBHmoGhfMa+hSOaJklucpvzeB4GeEwQnilGuFzkRjUQv0d/P0Ytuamu1IJiqmUCZEkuQlifNQZp/b6+mfN3RHhKV8qwRpXN3bPTWBBAcNpdRVXtP575fiQfa7/soglz9GH9u7E8r/jabECu+rcwOgX1b1TQ0ZxIQJwyj6T0A5RKsoDAdKOSKIYGmFw75k2Lft4tn2cFLC/OvbMYaDpum3VmFSMn6DjSbxjWZ3BpMVJzmXzW8h363GANL6CEWlnf/rXO3M2EcMmOFr00ekAL0HAYIbQbk=
73+
# securityContext:
74+
# allowPrivilegeEscalation: false
75+
# runAsUser: 0
6376
defaultPodOptions:
6477
securityContext:
6578
runAsNonRoot: true
@@ -75,6 +88,15 @@ spec:
7588
ports:
7689
http:
7790
port: *port
91+
# rsync:
92+
# controller: filebrowser
93+
# type: LoadBalancer
94+
# annotations:
95+
# io.cilium/lb-ipam-ips: "${LB_SSH_SERVER_ADDR}"
96+
# ports:
97+
# rsync:
98+
# port: 22
99+
# protocol: TCP
78100
ingress:
79101
app:
80102
className: internal

kubernetes/main/apps/default/ssh-server/app/helmrelease.yaml

-62
This file was deleted.

kubernetes/main/apps/default/ssh-server/app/kustomization.yaml

-6
This file was deleted.

kubernetes/main/apps/default/ssh-server/ks.yaml

-20
This file was deleted.

scripts/wip.sh

+1-1
Original file line numberDiff line numberDiff line change
@@ -1,4 +1,4 @@
1-
#!/bin/bash
1+
#!/usr/bin/env bash
22

33
# Usage: create WIP commit
44
# push to current branch

0 commit comments

Comments
 (0)