remove zitadel

This commit is contained in:
2024-12-26 13:31:00 +01:00
parent 30e236446a
commit e4b27d7539
8 changed files with 0 additions and 308 deletions

View File

@@ -1,22 +0,0 @@
apiVersion: argoproj.io/v1alpha1
kind: Application
metadata:
name: zitadel
spec:
project: generations-heritage-vv
source:
repoURL: 'https://github.com/vcscsvcscs/GenerationsHeritage'
path: deployment/zitadel
targetRevision: feature/rework-deployment-to-docker-compose
kustomize:
namespace: generations-heritage
destination:
server: 'https://kubernetes.default.svc'
namespace: generations-heritage
syncPolicy:
automated:
selfHeal: true
syncOptions:
- CreateNamespace=true
- ServerSideApply=true

View File

@@ -1,97 +0,0 @@
apiVersion: cert-manager.io/v1
kind: Issuer
metadata:
name: trust-manager-selfsigned-issuer
spec:
selfSigned: {}
---
apiVersion: cert-manager.io/v1
kind: Certificate
metadata:
name: zitadel-root-certificate
spec:
isCA: true
commonName: zitadel-root-certificate-ca
secretName: zitadel-root-certificate-ca-secret
privateKey:
algorithm: ECDSA
size: 256
issuerRef:
name: trust-manager-selfsigned-issuer
kind: Issuer
group: cert-manager.io
---
apiVersion: cert-manager.io/v1
kind: Issuer
metadata:
name: zitadel-ca-issuer
spec:
ca:
secretName: zitadel-root-certificate-ca-secret
---
apiVersion: trust.cert-manager.io/v1alpha1
kind: Bundle
metadata:
name: in-cluster-trust-bundle
spec:
sources:
- useDefaultCAs: true
- secret:
name: "zitadel-root-certificate-ca-secret"
key: "tls.crt"
target:
configMap:
key: "trust-bundle.pem"
---
# Certificate for PostgreSQL
apiVersion: cert-manager.io/v1
kind: Certificate
metadata:
name: postgres-certificate
namespace: default
spec:
duration: 8760h # 1 year
renewBefore: 720h # 30 days
commonName: "db-postgresql"
dnsNames:
- "postgresql"
- "db-postgresql"
- "zitadel"
secretName: postgres-cert
privateKey:
algorithm: RSA
encoding: PKCS1
size: 2048
usages:
- key encipherment
- data encipherment
issuerRef:
name: zitadel-ca-issuer
kind: Issuer
---
# Certificate for Zitadel
apiVersion: cert-manager.io/v1
kind: Certificate
metadata:
name: zitadel-certificate
namespace: default
spec:
duration: 8760h # 1 year
renewBefore: 720h # 30 days
commonName: "zitadel"
dnsNames:
- "postgresql"
- "db-postgresql"
- "zitadel"
secretName: zitadel-cert
privateKey:
algorithm: RSA
encoding: PKCS1
size: 2048
usages:
- key encipherment
- data encipherment
issuerRef:
name: zitadel-ca-issuer
kind: Issuer

View File

@@ -1,26 +0,0 @@
apiVersion: traefik.containo.us/v1alpha1
kind: IngressRoute
metadata:
name: zitadel-server
annotations:
argocd.argoproj.io/hook: PostSync
spec:
entryPoints:
- websecure
routes:
- kind: Rule
match: Host(`zitadel.varghacsongor.hu`)
priority: 10
services:
- name: zitadel
port: 8080
passHostHeader: true
- kind: Rule
match: Host(`zitadel.varghacsongor.hu`) && Headers(`Content-Type`, `application/grpc`)
priority: 11
services:
- name: zitadel
port: 8080
scheme: h2c
passHostHeader: true
tls: {}

View File

@@ -1,58 +0,0 @@
apiVersion: kustomize.config.k8s.io/v1beta1
kind: Kustomization
namespace: generations-heritage
resources:
- ./certificate.yaml
- ./secrets.yaml
- ./ingressRoute.yaml
helmCharts:
- name: postgresql
repo: oci://registry-1.docker.io/bitnamicharts/
releaseName: postgresql
namespace: generations-heritage
version: 16.0.6
valuesFile: postgres-values.yaml
- name: zitadel
repo: https://charts.zitadel.com
releaseName: zitadel
namespace: generations-heritage
version: 8.5.0
valuesFile: ./values.yaml
patches:
- target:
kind: CronJob
patch: |
- op: replace
path: /apiVersion
value: batch/v1
- target:
name: zitadel-setup
kind: Job
patch: |
- op: add
path: /metadata/annotations/argocd.argoproj.io~1sync-wave
value: 4
- target:
name: zitadel-setup
kind: Job
patch: |
- op: add
path: /metadata/annotations/argocd.argoproj.io~1hook
value: Sync
- target:
name: zitadel-init
kind: Job
patch: |
- op: add
path: /metadata/annotations/argocd.argoproj.io~1sync-wave
value: 3
- target:
name: zitadel-init
kind: Job
patch: |
- op: add
path: /metadata/annotations/argocd.argoproj.io~1hook
value: Sync

View File

@@ -1,26 +0,0 @@
annotations:
argocd.argoproj.io/hook: Sync
global:
postgresql:
auth:
existingSecret: postgres-auth
secretKeys:
adminPasswordKey: admin-password
volumePermissions:
enabled: true
tls:
enabled: true
certificatesSecret: postgres-cert
certFilename: tls.crt
certKeyFilename: tls.key
primary:
persistence:
size: 2Gi
init:
jobAnnotations:
argocd.argoproj.io/hook: Sync

View File

@@ -1,23 +0,0 @@
apiVersion: v1
kind: Secret
metadata:
name: zitadel-masterkey
annotations:
argocd.argoproj.io/hook: PreSync
labels:
secret-generator.cs.sap.com/enabled: "true"
stringData:
masterkey: "%generate"
admin-password: "%generate"
---
apiVersion: v1
kind: Secret
metadata:
name: postgres-auth
annotations:
argocd.argoproj.io/hook: PreSync
labels:
secret-generator.cs.sap.com/enabled: "true"
stringData:
admin-password: "abc"
user-password: "%generate"

View File

@@ -1,55 +0,0 @@
zitadel:
selfSignedCert:
enabled: true
masterkeySecretName: zitadel-masterkey
configmapConfig:
ExternalSecure: true
ExternalDomain: zitadel.varghacsongor.hu
ExternalPort: 443
Database:
Postgres:
Host: postgresql
Port: 5432
Database: zitadel
MaxOpenConns: 20
MaxIdleConns: 10
MaxConnLifetime: 30m
MaxConnIdleTime: 5m
User:
Username: zitadel
SSL:
Mode: verify-full
Admin:
Username: postgres
SSL:
Mode: verify-full
dbSslCaCrtSecret: zitadel-root-certificate-ca-secret
dbSslAdminCrtSecret: postgres-cert
dbSslUserCrtSecret: zitadel-cert
annotations:
argocd.argoproj.io/sync-wave: "5"
argocd.argoproj.io/hook: Sync
env:
- name: ZITADEL_FIRSTINSTANCE_ORG_HUMAN_USERNAME
value: admin
- name: ZITADEL_FIRSTINSTANCE_ORG_HUMAN_PASSWORD
valueFrom:
secretKeyRef:
name: zitadel-masterkey
key: admin-password
- name: ZITADEL_DATABASE_POSTGRES_USER_PASSWORD
valueFrom:
secretKeyRef:
name: postgres-auth
key: user-password
- name: ZITADEL_DATABASE_POSTGRES_ADMIN_PASSWORD
valueFrom:
secretKeyRef:
name: postgres-auth
key: admin-password