rig major updates
This commit is contained in:
@@ -2,18 +2,12 @@
|
||||
|
||||
## addons.sh
|
||||
|
||||
Each addon is its own idempotent script in `ctrl/addons/` — adding one is adding
|
||||
a file, not editing a dispatcher.
|
||||
Each addon is its own idempotent script — adding one is adding a file, not editing a dispatcher. `ADDONS` names them, in install order; the overlay's `addons/<name>.sh` is found before rig's `ctrl/addons/<name>.sh`, and every one runs from rig's `ctrl/` with `RIG_CTRL` exported, wherever its file lives (see [overlay.md](overlay.md)).
|
||||
|
||||
## airflow.sh
|
||||
## What rig ships, and what it does not
|
||||
|
||||
Airflow needs a metadata database before it will start at all, so the script
|
||||
refuses rather than rolls a pod that will CrashLoopBackOff while the real problem
|
||||
(postgres missing from `ADDONS`) stays invisible in the logs.
|
||||
rig's own addons make the *cluster* work, and are useless outside one: metallb, cert-manager, metrics-server. Things a workload happens to need — a database, a cache, a scheduler — are the workload's, and which workload needs which is not rig's business, so they live with the overlay. `examples/data/addons/` has postgres, redis and airflow as a worked example; an overlay that wants them copies them in.
|
||||
|
||||
One pod on `standalone`, matching the compose cabinet: migration, admin user,
|
||||
scheduler and webserver in a single container. The official chart's five
|
||||
deployments model an installation; switching this on means wanting pipelines.
|
||||
|
||||
## cert-manager.sh
|
||||
|
||||
@@ -47,27 +41,3 @@ kind nodes serve kubelet metrics over a self-signed cert, so the standard
|
||||
manifest never becomes ready without `--kubelet-insecure-tls`. That is fine here
|
||||
(it is a local cluster) and is the single most common reason metrics-server sits
|
||||
at 0/1 on kind.
|
||||
|
||||
## postgres.sh — cabinets
|
||||
|
||||
A cabinet is a public service dropped into the environment as-is — the upstream
|
||||
image, unmodified, reachable at a known address. `postgres.sh` is the cluster
|
||||
half of it; the compose half is a `service.yml` beside a `cabinet.json`. The
|
||||
declaration is made once and both paths read it, so nothing is remembered twice.
|
||||
|
||||
## postgres.sh — plain manifests, one replica
|
||||
|
||||
Plain manifests rather than a helm chart, matching the other addons: a chart repo
|
||||
is a network dependency, and the offline example profile exists precisely so
|
||||
there is a path with none. The image is pinned in `ctrl/versions.env` and can be
|
||||
preloaded into a local registry like every other image here.
|
||||
|
||||
One replica on a PVC. This models a dependency for local work, not a
|
||||
highly-available database, and pretending otherwise on a kind node would be a
|
||||
more elaborate lie rather than a more useful one.
|
||||
|
||||
## redis.sh
|
||||
|
||||
Cache, and the broker anything queue-shaped runs on. No persistence: a broker
|
||||
that loses its queue on restart is the honest local model, and a PVC here buys
|
||||
nothing but a volume to clean up.
|
||||
|
||||
Reference in New Issue
Block a user