Fix lint errors
Some checks reported errors
continuous-integration/drone/push Build encountered an error
Some checks reported errors
continuous-integration/drone/push Build encountered an error
This commit is contained in:
parent
1e83f14bbe
commit
1891a63281
GPG key ID:
DA7B27055C66D6DE
4 changed files with 118 additions and 118 deletions
|
|
@ -16,7 +16,7 @@ Déploie l'usine logiciel dans Kubernetes.
|
||||||
|
|
||||||
- un registre docker (plus tard) [registry docker](https://github.com/cesanta/docker_auth/tree/main/chart/docker-auth)
|
- un registre docker (plus tard) [registry docker](https://github.com/cesanta/docker_auth/tree/main/chart/docker-auth)
|
||||||
|
|
||||||
- un registre de chart helm: [chartmuseum](https://artifacthub.io/packages/helm/chartmuseum/chartmuseum) (Manque l'authentification sur l'API) voir [artifacthub](https://github.com/artifacthub/hub)
|
- un registre de chart kubernetes.core.helm://github.com/artifacthub/hub)
|
||||||
|
|
||||||
- un scanner de vulnérabilité (plus tard aussi) [clair](https://github.com/quay/clair) avec [klar](https://github.com/optiopay/klar)
|
- un scanner de vulnérabilité (plus tard aussi) [clair](https://github.com/quay/clair) avec [klar](https://github.com/optiopay/klar)
|
||||||
- [How To: Build Your Own Clair and Docker Registry Environment!](https://www.x-cellent.com/blog/build-your-own-clair-registry/)
|
- [How To: Build Your Own Clair and Docker Registry Environment!](https://www.x-cellent.com/blog/build-your-own-clair-registry/)
|
||||||
|
|
|
||||||
|
|
@ -1,16 +1,16 @@
|
||||||
my_context: minikube
|
my_context: minikube
|
||||||
#traefik_version: "2.1"
|
# traefik_version: "2.1"
|
||||||
#traefik_namespace: traefik
|
# traefik_namespace: traefik
|
||||||
gitea_namespace: gitea
|
gitea_namespace: gitea
|
||||||
#gitea_storage_classname:
|
# gitea_storage_classname:
|
||||||
#gitea_certificate: certificate_secret_name
|
# gitea_certificate: certificate_secret_name
|
||||||
|
|
||||||
drone_namespace: "drone"
|
drone_namespace: "drone"
|
||||||
#drone_version: "2"
|
# drone_version: "2"
|
||||||
drone_runner_namespace: "drone-runner"
|
drone_runner_namespace: "drone-runner"
|
||||||
#drone_certificate: certificate_secret_name
|
# drone_certificate: certificate_secret_name
|
||||||
#drone_storage_classname:
|
# drone_storage_classname:
|
||||||
trivy_namespace: trivy
|
trivy_namespace: trivy
|
||||||
trivy_version: 0.30.2
|
trivy_version: 0.30.2
|
||||||
#trivy_storage_classname:
|
# trivy_storage_classname:
|
||||||
chartmuseum_namespace: chartmuseum
|
chartmuseum_namespace: chartmuseum
|
||||||
|
|
|
||||||
|
|
@ -6,6 +6,6 @@ galaxy_info:
|
||||||
galaxy_tags: []
|
galaxy_tags: []
|
||||||
license: GPL2
|
license: GPL2
|
||||||
platforms:
|
platforms:
|
||||||
- name: kubernetes
|
- name: kubernetes
|
||||||
version:
|
version:
|
||||||
- all
|
- all
|
||||||
|
|
|
||||||
212
tasks/main.yml
212
tasks/main.yml
|
|
@ -2,7 +2,7 @@
|
||||||
- name: Gitea setup
|
- name: Gitea setup
|
||||||
block:
|
block:
|
||||||
- name: Install Gitea dynamic files
|
- name: Install Gitea dynamic files
|
||||||
k8s:
|
kubernetes.core.k8s:
|
||||||
state: present
|
state: present
|
||||||
context: "{{ my_context }}"
|
context: "{{ my_context }}"
|
||||||
merge_type: merge
|
merge_type: merge
|
||||||
|
|
@ -13,7 +13,7 @@
|
||||||
- gitea-IngressRoute.yml.j2
|
- gitea-IngressRoute.yml.j2
|
||||||
# - gitea-IngressRouteTCP.yml.j2
|
# - gitea-IngressRouteTCP.yml.j2
|
||||||
# - name: Install Gitea static files
|
# - name: Install Gitea static files
|
||||||
# k8s:
|
# kubernetes.core.k8s:
|
||||||
# state: present
|
# state: present
|
||||||
# context: "{{ my_context }}"
|
# context: "{{ my_context }}"
|
||||||
# merge_type: merge
|
# merge_type: merge
|
||||||
|
|
@ -40,93 +40,93 @@
|
||||||
# https://github.com/drone/charts/tree/master/charts
|
# https://github.com/drone/charts/tree/master/charts
|
||||||
- name: Drone setup
|
- name: Drone setup
|
||||||
block:
|
block:
|
||||||
- name: Defined drone repository
|
- name: Defined drone repository
|
||||||
kubernetes.core.helm_repository:
|
kubernetes.core.helm_repository:
|
||||||
name: drone
|
name: drone
|
||||||
repo_url: "https://charts.drone.io"
|
repo_url: "https://charts.drone.io"
|
||||||
tags:
|
tags:
|
||||||
- drone-server
|
- drone-server
|
||||||
- drone-runner
|
- drone-runner
|
||||||
- drone
|
- drone
|
||||||
|
|
||||||
- name: Drone install
|
- name: Drone install
|
||||||
kubernetes.core.helm:
|
kubernetes.core.helm:
|
||||||
context: "{{ my_context }}"
|
context: "{{ my_context }}"
|
||||||
name: drone
|
name: drone
|
||||||
chart_ref: drone/drone
|
chart_ref: drone/drone
|
||||||
release_namespace: "{{ drone_namespace }}"
|
release_namespace: "{{ drone_namespace }}"
|
||||||
create_namespace: yes
|
create_namespace: true
|
||||||
values: "{{ lookup('template', 'drone-helm-value.yaml.j2') | from_yaml }}"
|
values: "{{ lookup('template', 'drone-helm-value.yaml.j2') | from_yaml }}"
|
||||||
tags:
|
tags:
|
||||||
- drone-server
|
- drone-server
|
||||||
- drone
|
- drone
|
||||||
|
|
||||||
- name: Drone Runner install
|
- name: Drone Runner install
|
||||||
kubernetes.core.helm:
|
kubernetes.core.helm:
|
||||||
context: "{{ my_context }}"
|
context: "{{ my_context }}"
|
||||||
name: drone
|
name: drone
|
||||||
chart_ref: drone/drone-runner-kube
|
chart_ref: drone/drone-runner-kube
|
||||||
release_namespace: "{{ drone_runner_namespace }}"
|
release_namespace: "{{ drone_runner_namespace }}"
|
||||||
create_namespace: yes
|
create_namespace: true
|
||||||
values: "{{ lookup('template', 'drone-runner-helm-value.yaml.j2') | from_yaml }}"
|
values: "{{ lookup('template', 'drone-runner-helm-value.yaml.j2') | from_yaml }}"
|
||||||
tags:
|
tags:
|
||||||
- drone-runner
|
- drone-runner
|
||||||
- drone
|
- drone
|
||||||
|
|
||||||
# https://github.com/aquasecurity/trivy/tree/main/helm/trivy
|
# https://github.com/aquasecurity/trivy/tree/main/helm/trivy
|
||||||
- name: Trivy Setup
|
- name: Trivy Setup
|
||||||
block:
|
block:
|
||||||
# - name: Git clone stable repo on HEAD
|
# - name: Git clone stable repo on HEAD
|
||||||
# ansible.builtin.git:
|
# ansible.builtin.git:
|
||||||
# repo: "https://github.com/aquasecurity/trivy.git"
|
# repo: "https://github.com/aquasecurity/trivy.git"
|
||||||
# dest: tmp/trivy
|
# dest: tmp/trivy
|
||||||
# version: "{{ trivy_version }}"
|
# version: "{{ trivy_version }}"
|
||||||
- name: Defined trivy repository
|
- name: Defined trivy repository
|
||||||
kubernetes.core.helm_repository:
|
kubernetes.core.helm_repository:
|
||||||
name: aquasecurity
|
name: aquasecurity
|
||||||
repo_url: "https://aquasecurity.github.io/helm-charts/"
|
repo_url: "https://aquasecurity.github.io/helm-charts/"
|
||||||
- name: Deploy trivy chart
|
- name: Deploy trivy chart
|
||||||
kubernetes.core.helm:
|
kubernetes.core.helm:
|
||||||
state: present
|
state: present
|
||||||
name: trivy
|
name: trivy
|
||||||
context: "{{ my_context }}"
|
context: "{{ my_context }}"
|
||||||
chart_ref: aquasecurity/trivy
|
chart_ref: aquasecurity/trivy
|
||||||
release_namespace: "{{ trivy_namespace }}"
|
release_namespace: "{{ trivy_namespace }}"
|
||||||
create_namespace: true
|
create_namespace: true
|
||||||
# values:
|
# values:
|
||||||
# image:
|
# image:
|
||||||
# tag: "{{ trivy_version }}"
|
# tag: "{{ trivy_version }}"
|
||||||
# persistence:
|
# persistence:
|
||||||
# storageClass: "{{ trivy_storage_classname }}"
|
# storageClass: "{{ trivy_storage_classname }}"
|
||||||
# trivy:
|
# trivy:
|
||||||
# gitHubToken: ""
|
# gitHubToken: ""
|
||||||
# cache:
|
# cache:
|
||||||
# redis:
|
# redis:
|
||||||
# enabled: false
|
# enabled: false
|
||||||
# url: "" # e.g. redis://redis.redis.svc:6379
|
# url: "" # e.g. redis://redis.redis.svc:6379
|
||||||
# ingress:
|
# ingress:
|
||||||
# enabled: false
|
# enabled: false
|
||||||
# annotations: {}
|
# annotations: {}
|
||||||
# # kubernetes.io/ingress.class: traefik
|
# # kubernetes.io/ingress.class: traefik
|
||||||
# hosts:
|
# hosts:
|
||||||
# - host: trivy.{{ cluster_domain }}
|
# - host: trivy.{{ cluster_domain }}
|
||||||
|
|
||||||
tags:
|
tags:
|
||||||
- trivy
|
- trivy
|
||||||
|
|
||||||
#- name: Registry setup
|
#- name: Registry setup
|
||||||
# block:
|
# block:
|
||||||
# - name: Defined Registry repository
|
# - name: Defined Registry repository
|
||||||
# kubernetes.core.helm_repository:
|
# kubernetes.core.helm_repository:
|
||||||
# name: cesanta
|
# name: cesanta
|
||||||
# repo_url: "https://cesanta.github.io/docker_auth/"
|
# repo_url: "https://cesanta.github.io/docker_auth/"
|
||||||
# - name: Deploy latest version of Registry
|
# - name: Deploy latest version of Registry
|
||||||
# kubernetes.core.helm:
|
# kubernetes.core.helm:
|
||||||
# context: "{{ my_context }}"
|
# context: "{{ my_context }}"
|
||||||
# name: docker-auth
|
# name: docker-auth
|
||||||
# chart_ref: cesanta/docker-auth
|
# chart_ref: cesanta/docker-auth
|
||||||
# release_namespace: "{{ registry_namespace }}"
|
# release_namespace: "{{ registry_namespace }}"
|
||||||
# values: "{{ lookup('template', 'registry-value.yaml.j2') | from_yaml }}"
|
# values: "{{ lookup('template', 'registry-value.yaml.j2') | from_yaml }}"
|
||||||
# tags:
|
# tags:
|
||||||
# - registry
|
# - registry
|
||||||
|
|
||||||
|
|
@ -134,35 +134,35 @@
|
||||||
# https://artifacthub.io/packages/helm/chartmuseum/chartmuseum
|
# https://artifacthub.io/packages/helm/chartmuseum/chartmuseum
|
||||||
- name: ChartMuseum Setup
|
- name: ChartMuseum Setup
|
||||||
block:
|
block:
|
||||||
- name: Defined ChartMuseum repository
|
- name: Defined ChartMuseum repository
|
||||||
kubernetes.core.helm_repository:
|
kubernetes.core.helm_repository:
|
||||||
name: chartmuseum
|
name: chartmuseum
|
||||||
repo_url: "https://chartmuseum.github.io/charts"
|
repo_url: "https://chartmuseum.github.io/charts"
|
||||||
- name: Deploy trivy chart from local path
|
- name: Deploy trivy chart from local path
|
||||||
kubernetes.core.helm:
|
kubernetes.core.helm:
|
||||||
state: present
|
state: present
|
||||||
name: chartmuseum
|
name: chartmuseum
|
||||||
context: "{{ my_context }}"
|
context: "{{ my_context }}"
|
||||||
chart_ref: chartmuseum/chartmuseum
|
chart_ref: chartmuseum/chartmuseum
|
||||||
release_namespace: "{{ chartmuseum_namespace }}"
|
release_namespace: "{{ chartmuseum_namespace }}"
|
||||||
create_namespace: true
|
create_namespace: true
|
||||||
values:
|
values:
|
||||||
persistence:
|
persistence:
|
||||||
enabled: true
|
enabled: true
|
||||||
# path: "/storage"
|
# path: "/storage"
|
||||||
# storageClass:
|
# storageClass:
|
||||||
accessMode: ReadWriteOnce
|
accessMode: ReadWriteOnce
|
||||||
size: 2Gi
|
size: 2Gi
|
||||||
env:
|
env:
|
||||||
open:
|
open:
|
||||||
STORAGE: local
|
STORAGE: local
|
||||||
extraArgs: []
|
extraArgs: []
|
||||||
ingress:
|
ingress:
|
||||||
enabled: true
|
enabled: true
|
||||||
annotations: {}
|
annotations: {}
|
||||||
labels: {}
|
labels: {}
|
||||||
hosts[0]:
|
hosts[0]:
|
||||||
name: chartmuseum.{{ cluster_domain }}
|
name: chartmuseum.{{ cluster_domain }}
|
||||||
|
|
||||||
tags:
|
tags:
|
||||||
- chartmuseum
|
- chartmuseum
|
||||||
|
|
|
||||||
Loading…
Add table
Add a link
Reference in a new issue