post-fail fixes pt.1

argo/apps/values.yaml

@@ -29,7 +29,7 @@ helmApps:
     namespace: prometheus
     repoURL: https://prometheus-community.github.io/helm-charts
     chart: kube-prometheus-stack
-    revision: 65.6.0
+    revision: 66.3.0
   - app: goldpinger
     namespace: goldpinger
     repoURL: https://okgolove.github.io/helm-charts

helm/forgejo/install.sh

@@ -1,6 +1,6 @@
 #!/bin/bash
 
-CHART_VERSION=8.1.0
+CHART_VERSION=10.1.1
 NAMESPACE=gitea
 VAULT_AUTH_NAMESPACE="k8s-teapot"
 

helm/forgejo/pv.yaml

@@ -0,0 +1,38 @@
+apiVersion: v1
+kind: PersistentVolume
+metadata:
+  annotations:
+    longhorn.io/volume-scheduling-error: ""
+    pv.kubernetes.io/provisioned-by: driver.longhorn.io
+    volume.kubernetes.io/provisioner-deletion-secret-name: longhorn-encryption
+    volume.kubernetes.io/provisioner-deletion-secret-namespace: longhorn-system
+  name: pvc-04e95cac-441e-4cd8-afbb-670ab8ba4c4d
+spec:
+  accessModes:
+  - ReadWriteOnce
+  capacity:
+    storage: 20Gi
+  claimRef:
+    apiVersion: v1
+    kind: PersistentVolumeClaim
+    name: data-gitea-0
+    namespace: gitea
+  csi:
+    driver: driver.longhorn.io
+    fsType: ext4
+    nodePublishSecretRef:
+      name: longhorn-encryption
+      namespace: longhorn-system
+    nodeStageSecretRef:
+      name: longhorn-encryption
+      namespace: longhorn-system
+    volumeAttributes:
+      encrypted: "true"
+      fromBackup: ""
+      fsType: ext4
+      numberOfReplicas: "3"
+      staleReplicaTimeout: "120"
+    volumeHandle: pvc-04e95cac-441e-4cd8-afbb-670ab8ba4c4d
+  persistentVolumeReclaimPolicy: Retain
+  storageClassName: longhorn-encrypted-retain
+  volumeMode: Filesystem

helm/forgejo/pvc.yaml

@@ -10,3 +10,4 @@ spec:
   resources:
     requests:
       storage: 20Gi
+  volumeName: pvc-04e95cac-441e-4cd8-afbb-670ab8ba4c4d

helm/longhorn/install.sh

@@ -1,7 +1,7 @@
 #!/bin/bash
 CHART_VERSION=1.7.2
 
-#helm repo add longhorn https://charts.longhorn.io
+helm repo add longhorn https://charts.longhorn.io
 helm repo update
 helm upgrade --install \
 	longhorn \

scripts/vault-config-operator-vault.sh

@@ -18,7 +18,7 @@ vault policy write vault-config-operator vault-config-operator.hcl
 rm vault-config-operator.hcl
 
 HOST_IP=$(ip addr show eth0 | grep -Po 'inet \K[\d.]+')
-TOKEN="$(kubectl get secret serviceaccounttoken -n ${NAMESPACE} -o go-template='{{ .data.token }}' | base64 -d)"
+TOKEN="$(kubectl get secret serviceaccounttoken -n vco -o go-template='{{ .data.token }}' | base64 -d)"
 
 vault write auth/${VAULT_AUTH_NAMESPACE}/role/vault-config-operator \
     bound_service_account_names=vault-config-operator,controller-manager,default \