3 Commits

Author	SHA1	Message	Date
Jeff McCune	4c5429b64a	(#22) Ceph CSI for Metal clusters ... This patch adds the ceph-csi-rbd helm chart component to the metal cluster type. The purpose is to enable PersistentVolumeClaims on ois metal clusters. Cloud clusters like GKE and EKS are expected to skip rendering the metal type. Helm values are handled with CUE. The ceph secret is managed as an ExternalSecret resource, appended to the rendered output by cue and the holos cli. Use: ❯ holos render --cluster-name=k2 ~/workspace/holos-run/holos/docs/examples/platforms/reference/clusters/metal/... 2:45PM INF render.go:40 rendered prod-metal-ceph version=0.47.0 status=ok action=rendered name=prod-metal-ceph	2024-02-28 14:46:03 -08:00
Jeff McCune	3343d226e5	(#14) Fix namespaces "external-secrets" not found ... Needed for the `prod-secrets-eso` component to reconcile with flux. NAME REVISION SUSPENDED READY MESSAGE flux-system main@sha1:28b9ab6b False True Applied revision: main@sha1:28b9ab6b prod-secrets-eso main@sha1:28b9ab6b False True Applied revision: main@sha1:28b9ab6b prod-secrets-eso-creds-refresher main@sha1:28b9ab6b False True Applied revision: main@sha1:28b9ab6b prod-secrets-namespaces main@sha1:28b9ab6b False True Applied revision: main@sha1:28b9ab6b	2024-02-26 20:53:43 -08:00
Jeff McCune	0771bd6b6c	Configure namespaces in the provisioner cluster ... The provisioner cluster is a worker-less autopilot cluster that provides secrets to other clusters in the platform. The `eso-creds-refresher` Job in the holos-system namespace of each other cluster refreshes service account tokens for SecretStores. This patch adds the IAM structure for the Job implemented by Namespace, ServiceAccount, Role, and RoleBinding api objects.	2024-02-19 21:37:13 -08:00