From e4b27d75392f99595e0c25a61acabb6683c68ae7 Mon Sep 17 00:00:00 2001 From: Vargha Csongor Date: Thu, 26 Dec 2024 13:31:00 +0100 Subject: [PATCH] remove zitadel --- deployment/zitadel-argo.yaml | 22 ------ deployment/zitadel/certificate.yaml | 97 ------------------------- deployment/zitadel/ingressRoute.yaml | 26 ------- deployment/zitadel/kustomization.yaml | 58 --------------- deployment/zitadel/postgres-values.yaml | 26 ------- deployment/zitadel/secrets.yaml | 23 ------ deployment/zitadel/values.yaml | 55 -------------- kustomization.yaml | 1 - 8 files changed, 308 deletions(-) delete mode 100644 deployment/zitadel-argo.yaml delete mode 100644 deployment/zitadel/certificate.yaml delete mode 100644 deployment/zitadel/ingressRoute.yaml delete mode 100644 deployment/zitadel/kustomization.yaml delete mode 100644 deployment/zitadel/postgres-values.yaml delete mode 100644 deployment/zitadel/secrets.yaml delete mode 100644 deployment/zitadel/values.yaml diff --git a/deployment/zitadel-argo.yaml b/deployment/zitadel-argo.yaml deleted file mode 100644 index bab456a..0000000 --- a/deployment/zitadel-argo.yaml +++ /dev/null @@ -1,22 +0,0 @@ -apiVersion: argoproj.io/v1alpha1 -kind: Application -metadata: - name: zitadel -spec: - project: generations-heritage-vv - source: - repoURL: 'https://github.com/vcscsvcscs/GenerationsHeritage' - path: deployment/zitadel - targetRevision: feature/rework-deployment-to-docker-compose - kustomize: - namespace: generations-heritage - destination: - server: 'https://kubernetes.default.svc' - namespace: generations-heritage - syncPolicy: - automated: - selfHeal: true - syncOptions: - - CreateNamespace=true - - ServerSideApply=true - \ No newline at end of file diff --git a/deployment/zitadel/certificate.yaml b/deployment/zitadel/certificate.yaml deleted file mode 100644 index 7a87e08..0000000 --- a/deployment/zitadel/certificate.yaml +++ /dev/null @@ -1,97 +0,0 @@ -apiVersion: cert-manager.io/v1 -kind: Issuer -metadata: - name: trust-manager-selfsigned-issuer -spec: - selfSigned: {} ---- -apiVersion: cert-manager.io/v1 -kind: Certificate -metadata: - name: zitadel-root-certificate -spec: - isCA: true - commonName: zitadel-root-certificate-ca - secretName: zitadel-root-certificate-ca-secret - privateKey: - algorithm: ECDSA - size: 256 - issuerRef: - name: trust-manager-selfsigned-issuer - kind: Issuer - group: cert-manager.io ---- -apiVersion: cert-manager.io/v1 -kind: Issuer -metadata: - name: zitadel-ca-issuer -spec: - ca: - secretName: zitadel-root-certificate-ca-secret ---- -apiVersion: trust.cert-manager.io/v1alpha1 -kind: Bundle -metadata: - name: in-cluster-trust-bundle -spec: - sources: - - useDefaultCAs: true - - secret: - name: "zitadel-root-certificate-ca-secret" - key: "tls.crt" - target: - configMap: - key: "trust-bundle.pem" ---- -# Certificate for PostgreSQL -apiVersion: cert-manager.io/v1 -kind: Certificate -metadata: - name: postgres-certificate - namespace: default -spec: - duration: 8760h # 1 year - renewBefore: 720h # 30 days - commonName: "db-postgresql" - dnsNames: - - "postgresql" - - "db-postgresql" - - "zitadel" - secretName: postgres-cert - privateKey: - algorithm: RSA - encoding: PKCS1 - size: 2048 - usages: - - key encipherment - - data encipherment - issuerRef: - name: zitadel-ca-issuer - kind: Issuer - ---- -# Certificate for Zitadel -apiVersion: cert-manager.io/v1 -kind: Certificate -metadata: - name: zitadel-certificate - namespace: default -spec: - duration: 8760h # 1 year - renewBefore: 720h # 30 days - commonName: "zitadel" - dnsNames: - - "postgresql" - - "db-postgresql" - - "zitadel" - secretName: zitadel-cert - privateKey: - algorithm: RSA - encoding: PKCS1 - size: 2048 - usages: - - key encipherment - - data encipherment - issuerRef: - name: zitadel-ca-issuer - kind: Issuer \ No newline at end of file diff --git a/deployment/zitadel/ingressRoute.yaml b/deployment/zitadel/ingressRoute.yaml deleted file mode 100644 index 988e2e9..0000000 --- a/deployment/zitadel/ingressRoute.yaml +++ /dev/null @@ -1,26 +0,0 @@ -apiVersion: traefik.containo.us/v1alpha1 -kind: IngressRoute -metadata: - name: zitadel-server - annotations: - argocd.argoproj.io/hook: PostSync -spec: - entryPoints: - - websecure - routes: - - kind: Rule - match: Host(`zitadel.varghacsongor.hu`) - priority: 10 - services: - - name: zitadel - port: 8080 - passHostHeader: true - - kind: Rule - match: Host(`zitadel.varghacsongor.hu`) && Headers(`Content-Type`, `application/grpc`) - priority: 11 - services: - - name: zitadel - port: 8080 - scheme: h2c - passHostHeader: true - tls: {} diff --git a/deployment/zitadel/kustomization.yaml b/deployment/zitadel/kustomization.yaml deleted file mode 100644 index ddf72c0..0000000 --- a/deployment/zitadel/kustomization.yaml +++ /dev/null @@ -1,58 +0,0 @@ -apiVersion: kustomize.config.k8s.io/v1beta1 -kind: Kustomization -namespace: generations-heritage - -resources: - - ./certificate.yaml - - ./secrets.yaml - - ./ingressRoute.yaml - -helmCharts: - - name: postgresql - repo: oci://registry-1.docker.io/bitnamicharts/ - releaseName: postgresql - namespace: generations-heritage - version: 16.0.6 - valuesFile: postgres-values.yaml - - name: zitadel - repo: https://charts.zitadel.com - releaseName: zitadel - namespace: generations-heritage - version: 8.5.0 - valuesFile: ./values.yaml - -patches: - - target: - kind: CronJob - patch: | - - op: replace - path: /apiVersion - value: batch/v1 - - target: - name: zitadel-setup - kind: Job - patch: | - - op: add - path: /metadata/annotations/argocd.argoproj.io~1sync-wave - value: 4 - - target: - name: zitadel-setup - kind: Job - patch: | - - op: add - path: /metadata/annotations/argocd.argoproj.io~1hook - value: Sync - - target: - name: zitadel-init - kind: Job - patch: | - - op: add - path: /metadata/annotations/argocd.argoproj.io~1sync-wave - value: 3 - - target: - name: zitadel-init - kind: Job - patch: | - - op: add - path: /metadata/annotations/argocd.argoproj.io~1hook - value: Sync \ No newline at end of file diff --git a/deployment/zitadel/postgres-values.yaml b/deployment/zitadel/postgres-values.yaml deleted file mode 100644 index 08ba6ab..0000000 --- a/deployment/zitadel/postgres-values.yaml +++ /dev/null @@ -1,26 +0,0 @@ -annotations: - argocd.argoproj.io/hook: Sync - -global: - postgresql: - auth: - existingSecret: postgres-auth - secretKeys: - adminPasswordKey: admin-password - -volumePermissions: - enabled: true - -tls: - enabled: true - certificatesSecret: postgres-cert - certFilename: tls.crt - certKeyFilename: tls.key - -primary: - persistence: - size: 2Gi - -init: - jobAnnotations: - argocd.argoproj.io/hook: Sync diff --git a/deployment/zitadel/secrets.yaml b/deployment/zitadel/secrets.yaml deleted file mode 100644 index 87e449d..0000000 --- a/deployment/zitadel/secrets.yaml +++ /dev/null @@ -1,23 +0,0 @@ -apiVersion: v1 -kind: Secret -metadata: - name: zitadel-masterkey - annotations: - argocd.argoproj.io/hook: PreSync - labels: - secret-generator.cs.sap.com/enabled: "true" -stringData: - masterkey: "%generate" - admin-password: "%generate" ---- -apiVersion: v1 -kind: Secret -metadata: - name: postgres-auth - annotations: - argocd.argoproj.io/hook: PreSync - labels: - secret-generator.cs.sap.com/enabled: "true" -stringData: - admin-password: "abc" - user-password: "%generate" diff --git a/deployment/zitadel/values.yaml b/deployment/zitadel/values.yaml deleted file mode 100644 index ca0f3a7..0000000 --- a/deployment/zitadel/values.yaml +++ /dev/null @@ -1,55 +0,0 @@ -zitadel: - selfSignedCert: - enabled: true - masterkeySecretName: zitadel-masterkey - configmapConfig: - ExternalSecure: true - ExternalDomain: zitadel.varghacsongor.hu - ExternalPort: 443 - Database: - Postgres: - Host: postgresql - Port: 5432 - Database: zitadel - MaxOpenConns: 20 - MaxIdleConns: 10 - MaxConnLifetime: 30m - MaxConnIdleTime: 5m - User: - Username: zitadel - SSL: - Mode: verify-full - Admin: - Username: postgres - SSL: - Mode: verify-full - - dbSslCaCrtSecret: zitadel-root-certificate-ca-secret - dbSslAdminCrtSecret: postgres-cert - dbSslUserCrtSecret: zitadel-cert - -annotations: - argocd.argoproj.io/sync-wave: "5" - argocd.argoproj.io/hook: Sync - -env: - - name: ZITADEL_FIRSTINSTANCE_ORG_HUMAN_USERNAME - value: admin - - - name: ZITADEL_FIRSTINSTANCE_ORG_HUMAN_PASSWORD - valueFrom: - secretKeyRef: - name: zitadel-masterkey - key: admin-password - - - name: ZITADEL_DATABASE_POSTGRES_USER_PASSWORD - valueFrom: - secretKeyRef: - name: postgres-auth - key: user-password - - - name: ZITADEL_DATABASE_POSTGRES_ADMIN_PASSWORD - valueFrom: - secretKeyRef: - name: postgres-auth - key: admin-password \ No newline at end of file diff --git a/kustomization.yaml b/kustomization.yaml index 50814fd..4c8a7cb 100644 --- a/kustomization.yaml +++ b/kustomization.yaml @@ -6,7 +6,6 @@ resources: - ./deployment/cert-issuer.yaml - ./deployment/server-transport.yaml - ./deployment/project-argo.yaml - - ./deployment/zitadel-argo.yaml - ./deployment/memgraph-argo.yaml - ./deployment/auth-service-argo.yaml - ./deployment/backend-argo.yaml