AllardDCS/kubernetes
1
0
Fork 0
Code Issues Pull Requests Actions Packages Projects Releases Wiki Activity

eindelijk weer eens een push

Browse Source
This commit is contained in:
allard
2026-05-31 16:07:30 +02:00
parent 01cff8e165
commit ff21c258e0
2747 changed files with 302316 additions and 131101 deletions
Download Patch File Download Diff File Expand all files Collapse all files
dev/traefik/README.md
+8
View File
@@ -1,3 +1,11 @@
#opletten:
in de nieuwe versies van traefik is het transferren van grote bestanden (>10Mb) geblokkeerd. Dit moet je voor uploaden van images vergroten:
additionalArguments:
- "--serversTransport.maxRequestBodyBytes=2073741824"
1) traefik installeren via helmchart:
helm repo add traefik https://helm.traefik.io/traefik
helm repo update
dev/traefik/clusterrole.yaml
-11
View File
@@ -1,11 +0,0 @@
apiVersion: rbac.authorization.k8s.io/v1
kind: ClusterRole
metadata:
name: traefik
rules:
- apiGroups: ["traefik.io"]
resources: ["ingressroutes", "ingressroutesstatus"]
verbs: ["get", "list", "watch", "create", "update", "delete"]
- apiGroups: [""]
resources: ["services", "endpoints", "pods", "secrets"]
verbs: ["get", "list", "watch"]
dev/traefik/clusterrolebinding.yaml
-12
View File
@@ -1,12 +0,0 @@
apiVersion: rbac.authorization.k8s.io/v1
kind: ClusterRoleBinding
metadata:
name: traefik-ingressroute
roleRef:
apiGroup: rbac.authorization.k8s.io
kind: ClusterRole
name: traefik
subjects:
- kind: ServiceAccount
name: traefik
namespace: traefik
dev/traefik/ingressroute-dashboard.yaml
+2
View File
@@ -12,3 +12,5 @@ spec:
services:
- name: api@internal
kind: TraefikService
tls:
certResolver: letsencrypt
dev/traefik/traefik-pvc.yaml
+2 -2
View File
@@ -13,8 +13,8 @@ spec:
- hard
- nfsvers=4.1
nfs:
server: 192.168.2.110
path: /mnt/nfs_share/traefik/dev
server: 192.168.2.111
path: /mnt/nfs_share/dev/traefik
readOnly: false
---
apiVersion: v1
dev/traefik/values.123
Executable
+220
View File
@@ -0,0 +1,220 @@
additionalArguments:
- "--serversTransport.maxRequestBodyBytes=2073741824"
additionalVolumeMounts: []
affinity: {}
autoscaling:
enabled: false
certificatesResolvers:
letsencrypt:
acme:
email: admin@allarddcs.nl
storage: /data/acme.json
httpChallenge:
entryPoint: web
commonLabels: {}
deployment:
additionalContainers: []
additionalVolumes: []
annotations: {}
dnsConfig: {}
enabled: true
imagePullSecrets: []
initContainers:
- name: volume-permissions
image: busybox:latest
command: ["sh", "-c", "touch /data/acme.json; chmod -v 600 /data/acme.json"]
volumeMounts:
- mountPath: /data
name: data
kind: Deployment
labels: {}
lifecycle: {}
minReadySeconds: 0
podAnnotations: {}
podLabels: {}
replicas: 1
runtimeClassName: null
shareProcessNamespace: false
terminationGracePeriodSeconds: 60
env:
envFrom: []
experimental:
kubernetesGateway:
enabled: false
plugins: {}
extraObjects: []
global:
# Adjust timeout settings for Traefik
timeout:
connect: 60s # Time to wait for a connection to establish (default: 30s)
read: 600s # Increase read timeout for longer responses (default: 60s)
write: 600s
hostNetwork: false
image:
pullPolicy: Always
registry: docker.io
repository: traefik
tag: ""
ingressClass:
enabled: true
isDefaultClass: true
ingressRoute:
dashboard:
annotations: {}
enabled: true
entryPoints:
- traefik
labels: {}
matchRule: PathPrefix(`/dashboard`) || PathPrefix(`/api`)
healthcheck:
annotations: {}
enabled: true
entryPoints:
- traefik
labels: {}
matchRule: PathPrefix(`/ping`)
middlewares: []
tls: {}
livenessProbe:
failureThreshold: 3
initialDelaySeconds: 2
periodSeconds: 10
successThreshold: 1
timeoutSeconds: 2
logs:
access:
enabled: false
fields:
general:
defaultmode: keep
names: {}
headers:
defaultmode: drop
names: {}
filters: {}
general:
level: ERROR
#metrics:
# prometheus:
# entryPoint: metrics
nodeSelector: {}
persistence:
enabled: true
existingClaim: traefik-pvc
path: /data
podDisruptionBudget:
enabled: false
podSecurityContext:
fsGroupChangePolicy: OnRootMismatch
runAsGroup: 65532
runAsNonRoot: true
runAsUser: 65532
podSecurityPolicy:
enabled: false
ports:
# metrics:
# exposedPort: 9100
# port: 9100
# protocol: TCP
traefik:
expose:
default: true
exposedPort: 9000
port: 9000
protocol: TCP
web:
expose:
default: true
exposedPort: 80
port: 8000
protocol: TCP
allowACMEByPass: true
websecure:
expose:
default: true
exposedPort: 443
http3:
enabled: false
port: 8443
protocol: TCP
allowACMEByPass: true
transport:
respondingTimeouts:
readTimeout: 0 # @schema type:[string, integer, null]
writeTimeout: 0 # @schema type:[string, integer, null]
idleTimeout: 0 # @schema type:[string, integer, null]
lifeCycle:
requestAcceptGraceTimeout: # @schema type:[string, integer, null]
graceTimeOut: # @schema type:[string, integer, null]
keepAliveMaxRequests: # @schema type:[integer, null]; minimum:0
keepAliveMaxTime: # @schema type:[string, integer, null]
priorityClassName: ""
providers:
file:
content: ""
enabled: false
watch: true
kubernetesCRD:
allowCrossNamespace: false
allowEmptyServices: false
allowExternalNameServices: false
enabled: true
namespaces: []
kubernetesIngress:
allowEmptyServices: false
allowExternalNameServices: false
disableIngressClassLookup: false
enabled: true
namespaces: []
publishedService:
enabled: false
rbac:
enabled: true
namespaced: false
secretResourceNames: []
readinessProbe:
failureThreshold: 1
initialDelaySeconds: 2
periodSeconds: 10
successThreshold: 1
timeoutSeconds: 2
resources:
requests:
memory: "512Mi"
cpu: "500m"
limits:
memory: "1Gi"
cpu: "1"
securityContext:
allowPrivilegeEscalation: false
capabilities:
drop:
- ALL
readOnlyRootFilesystem: true
service:
additionalServices: {}
annotations: {}
annotationsTCP: {}
annotationsUDP: {}
enabled: true
externalIPs: []
labels: {}
loadBalancerSourceRanges: []
single: true
spec: {}
type: LoadBalancer
serviceAccount:
name: ""
serviceAccountAnnotations: {}
startupProbe: null
tlsOptions: {}
tlsStore: {}
tolerations: []
topologySpreadConstraints: []
tracing: {}
updateStrategy:
rollingUpdate:
maxSurge: 1
maxUnavailable: 0
type: RollingUpdate
volumes: []
dev/traefik/values.yaml
Executable → Regular
+7 -202
View File
@@ -1,9 +1,3 @@
USER-SUPPLIED VALUES:
additionalArguments: []
additionalVolumeMounts: []
affinity: {}
autoscaling:
enabled: false
certificatesResolvers:
letsencrypt:
acme:
@@ -11,16 +5,8 @@ certificatesResolvers:
storage: /data/acme.json
httpChallenge:
entryPoint: web
commonLabels: {}
core:
defaultRuleSyntax: v2
deployment:
additionalContainers: []
additionalVolumes: []
annotations: {}
dnsConfig: {}
enabled: true
imagePullSecrets: []
initContainers:
- name: volume-permissions
image: busybox:latest
@@ -28,171 +14,23 @@ deployment:
volumeMounts:
- mountPath: /data
name: data
kind: Deployment
labels: {}
lifecycle: {}
minReadySeconds: 0
podAnnotations: {}
podLabels: {}
replicas: 1
runtimeClassName: null
shareProcessNamespace: false
terminationGracePeriodSeconds: 60
env:
envFrom: []
experimental:
kubernetesGateway:
enabled: false
plugins: {}
extraObjects: []
globalArguments:
- --global.checknewversion
- --global.sendanonymoususage
global:
# Adjust timeout settings for Traefik
timeout:
connect: 60s # Time to wait for a connection to establish (default: 30s)
read: 600s # Increase read timeout for longer responses (default: 60s)
write: 600s
hostNetwork: false
image:
pullPolicy: Always
registry: docker.io
repository: traefik
tag: ""
ingressClass:
enabled: true
isDefaultClass: true
ingressRoute:
dashboard:
annotations: {}
enabled: true
entryPoints:
- traefik
labels: {}
matchRule: PathPrefix(`/dashboard`) || PathPrefix(`/api`)
middlewares: []
tls: {}
healthcheck:
annotations: {}
enabled: true
entryPoints:
- traefik
labels: {}
matchRule: PathPrefix(`/ping`)
middlewares: []
tls: {}
livenessProbe:
failureThreshold: 3
initialDelaySeconds: 2
periodSeconds: 10
successThreshold: 1
timeoutSeconds: 2
logs:
access:
enabled: false
fields:
general:
defaultmode: keep
names: {}
headers:
defaultmode: drop
names: {}
filters: {}
general:
level: ERROR
#metrics:
# prometheus:
# entryPoint: metrics
nodeSelector: {}
persistence:
enabled: true
existingClaim: traefik-pvc
path: /data
podDisruptionBudget:
enabled: false
podSecurityContext:
fsGroupChangePolicy: OnRootMismatch
runAsGroup: 65532
runAsNonRoot: true
runAsUser: 65532
podSecurityPolicy:
enabled: false
ports:
# metrics:
# exposedPort: 9100
# port: 9100
# protocol: TCP
traefik:
expose:
default: true
exposedPort: 9000
port: 9000
protocol: TCP
web:
expose:
default: true
exposedPort: 80
port: 8000
protocol: TCP
allowACMEByPass: true
websecure:
respondingTimeouts:
readTimeout: 600
expose:
default: true
exposedPort: 443
http3:
enabled: false
middlewares: []
port: 8443
protocol: TCP
allowACMEByPass: true
tls:
certResolver: ""
domains: []
enabled: true
options: ""
transport:
respondingTimeouts:
readTimeout: 0 # @schema type:[string, integer, null]
writeTimeout: 0 # @schema type:[string, integer, null]
idleTimeout: 0 # @schema type:[string, integer, null]
lifeCycle:
requestAcceptGraceTimeout: # @schema type:[string, integer, null]
graceTimeOut: # @schema type:[string, integer, null]
keepAliveMaxRequests: # @schema type:[integer, null]; minimum:0
keepAliveMaxTime: # @schema type:[string, integer, null]
priorityClassName: ""
providers:
file:
content: ""
enabled: false
watch: true
kubernetesCRD:
allowCrossNamespace: false
allowEmptyServices: false
allowExternalNameServices: false
enabled: true
namespaces: []
kubernetesIngress:
allowEmptyServices: false
allowExternalNameServices: false
disableIngressClassLookup: false
enabled: true
namespaces: []
publishedService:
enabled: false
rbac:
enabled: true
namespaced: false
secretResourceNames: []
readinessProbe:
failureThreshold: 1
initialDelaySeconds: 2
periodSeconds: 10
successThreshold: 1
timeoutSeconds: 2
readTimeout: 0
writeTimeout: 0
idleTimeout: 0
resources:
requests:
memory: "512Mi"
@@ -200,36 +38,3 @@ resources:
limits:
memory: "1Gi"
cpu: "1"
securityContext:
allowPrivilegeEscalation: false
capabilities:
drop:
- ALL
readOnlyRootFilesystem: true
service:
additionalServices: {}
annotations: {}
annotationsTCP: {}
annotationsUDP: {}
enabled: true
externalIPs: []
labels: {}
loadBalancerSourceRanges: []
single: true
spec: {}
type: LoadBalancer
serviceAccount:
name: ""
serviceAccountAnnotations: {}
startupProbe: null
tlsOptions: {}
tlsStore: {}
tolerations: []
topologySpreadConstraints: []
tracing: {}
updateStrategy:
rollingUpdate:
maxSurge: 1
maxUnavailable: 0
type: RollingUpdate
volumes: []