rig major updates

This commit is contained in:
2026-09-22 05:15:49 -03:00
parent 9c963514f1
commit 2a0a793f19
64 changed files with 1762 additions and 645 deletions

View File

@@ -1,26 +0,0 @@
# EXAMPLE PROFILE (optional): copy to data.env, then PROFILE=data; overlays the defaults.
# data — postgres, redis and airflow (upstream images) in the `data` namespace.
# Notes: docs/notes/env.md
PROFILE_NAME=data
K8S_VERSION=v1_36
# Order matters: addons.sh installs in the order listed, and airflow refuses to
# start without a metadata database, so postgres comes first.
ADDONS="metallb postgres redis airflow"
# local, not none — see the defaults in lib/config.sh: `none` has no outward-push guard.
REGISTRY_MODE=local
INGRESS_MODE=hostport
DNS_MODE=hosts
# Namespace for the dependency containers.
DATA_NAMESPACE=data
# Postgres identity. The password is generated once by postgres.sh and kept.
POSTGRES_DB=app
POSTGRES_USER=app
POSTGRES_STORAGE=2Gi
AIRFLOW_ADMIN_USER=admin
# Reach the databases with port-forward, e.g.
# kubectl -n data port-forward svc/postgres 5432:5432

View File

@@ -1,8 +1,9 @@
# EXAMPLE PROFILE (optional): copy to client.env, then PROFILE=client; overlays the defaults.
# client — images via a pull-through cache of the corporate registry, TLS and metrics addons.
# EXAMPLE PROFILE (optional): copy to mirror.env, then PROFILE=mirror; overlays the defaults.
# mirror — images via a pull-through cache of an internal registry, TLS and metrics addons.
# A profile says how this machine reaches the world; what runs is an overlay's business.
# Notes: docs/notes/env.md
PROFILE_NAME=client
PROFILE_NAME=mirror
K8S_VERSION=v1_36
ADDONS="metallb cert-manager metrics-server"
REGISTRY_MODE=mirror
@@ -15,6 +16,6 @@ DNS_MODE=hosts
# HTTPS_PORT=443
# Set these in ctrl/.env (gitignored), not here:
# REGISTRY_REMOTE_URL=https://artifactory.corp.example/artifactory/api/docker/docker-virtual
# REGISTRY_REMOTE_URL=https://registry.internal.example/api/docker/docker-virtual
# REGISTRY_USER / REGISTRY_PASSWORD
# REGISTRY_CA_FILE=/path/to/corp-root-ca.crt
# REGISTRY_CA_FILE=/path/to/internal-root-ca.crt