Files
base-infra/config.yml
Felix Nehrke 91f81b8726 Add concourse as the foundational CI tool to k8s-cluster
This change allows to add a concourse-server to the kubernetes cluster.
2025-11-28 00:28:25 +01:00

48 lines
1.6 KiB
YAML

all:
vars:
api_endpoint: "{{ hostvars[groups['server'][0]]['ansible_host'] | default(groups['server'][0]) }}"
cert_manager_state: present
cert_manager_version: v1.18.2
letsencrypt_clusterissuers:
staging:
server: https://acme-staging-v02.api.letsencrypt.org/directory
email: "{{ vault_letsencrypt_issuer_email }}"
prod:
server: https://acme-v02.api.letsencrypt.org/directory
email: "{{ vault_letsencrypt_issuer_email }}"
gitea_chart_version: 12.3.0
gitea_state: present
gitea_host: gitea.nehrke.info
gitea_certificate_issuer: letsencrypt-prod
gitea_image_pull_policy: Always
gitea_image_registry_secret: "{{ vault_gitea_pull_registry_secret | b64encode }}"
gitea_admin_user: "{{ vault_gitea_admin_user }}"
gitea_admin_password: "{{ vault_gitea_admin_password }}"
gitea_admin_email: "{{ vault_gitea_admin_email }}"
concourse_state: present
concourse_chart_version: 19.0.2
concourse_certificate_issuer: letsencrypt-prod
concourse_host: ci.nehrke.info
concourse_local_users: "{{ vault_concourse_local_users }}"
concourse_worker_replicas: 2
k3s_cluster:
vars:
ansible_user: root
# note the space between the IPs!
dns_servers: 8.8.8.8 8.8.4.4
agent:
vars:
ansible_ssh_common_args: -o StrictHostKeyChecking=accept-new -o ProxyCommand="ssh -p {{ hostvars[groups['server'][0]]['ansible_port'] }} -W %h:%p -q root@{{ api_endpoint }}"
k3s_version: v1.31.6+k3s1
server:
vars:
ansible_ssh_common_args: '-o StrictHostKeyChecking=accept-new'
k3s_version: v1.31.6+k3s1