feat(helm): clusters update

flux/clusters/dev-cm/patches/apps.yaml

@@ -14,6 +14,9 @@ spec:
           name: halo
         spec:
           values:
+            externalDatabase:
+              host: cnpg17-cluster-hk-rw.infra-data
+              existingSecret: cnpg17-cluster-hk-app
             affinity:
               podAffinity:
                 preferredDuringSchedulingIgnoredDuringExecution:

flux/clusters/dev-cm/patches/infra-data-post.yaml

@@ -3,6 +3,7 @@ kind: Kustomization
 metadata:
   name: infra-data-post
 spec:
+  path: ./flux/clusters/dev-cm/infra-data-post
   patches:
     - target:
         kind: Cluster

flux/clusters/dev-cm/patches/infra-gitops.yaml

@@ -14,6 +14,16 @@ spec:
           name: gitea
         spec:
           values:
+            gitea:
+              config:
+                database:
+                  HOST: cnpg17-cluster-sh-rw.infra-data:5432
+              additionalConfigFromEnvs:
+                - name: GITEA__DATABASE__PASSWD
+                  valueFrom:
+                    secretKeyRef:
+                      name: cnpg17-cluster-sh-app
+                      key: password
             affinity:
               podAffinity:
                 preferredDuringSchedulingIgnoredDuringExecution:

flux/clusters/dev-cm/patches/infra-monitor.yaml

@@ -55,6 +55,14 @@ spec:
               nodeSelector:
                 kubernetes.io/hostname: hwa
             grafana:
+              envValueFrom:
+                GF_DATABASE_PASSWORD:
+                  secretKeyRef:
+                    name: cnpg17-cluster-sh-app
+                    key: password
+              grafana.ini:
+                database:
+                  host: cnpg17-cluster-sh-rw.infra-data:5432
               affinity:
                 podAffinity:
                   preferredDuringSchedulingIgnoredDuringExecution:

flux/clusters/dev-cm/patches/infra-net.yaml

@@ -48,6 +48,43 @@ spec:
           name: crowdsec
         spec:
           values:
+            lapi:
+              env:
+                - name: DB_PASSWORD
+                  valueFrom:
+                    secretKeyRef:
+                      name: cnpg17-cluster-hk-app
+                      key: password
+              affinity:
+                nodeAffinity:
+                  preferredDuringSchedulingIgnoredDuringExecution:
+                    - weight: 1
+                      preference:
+                        matchExpressions:
+                          - key: topology.kubernetes.io/region
+                            operator: In
+                            values:
+                              - cn-hk
+            config:
+              config.yaml.local: |
+                db_config:
+                  type: postgresql
+                  host: cnpg17-cluster-hk-rw.infra-data
+                  port: 5432
+                  db_name: crowdsec
+                  user: app
+                  password: ${DB_PASSWORD}
+                  sslmode: require
+                api:
+                  server:
+                    auto_registration:
+                      enabled: true
+                      token: "${REGISTRATION_TOKEN}"
+                      allowed_ranges:
+                        - "127.0.0.1/32"
+                        - "192.168.0.0/16"
+                        - "172.16.0.0/12"
+                        - "10.0.0.0/8"
             agent:
               affinity:
                 podAffinity:
@@ -70,17 +107,6 @@ spec:
                             operator: In
                             values:
                               - cn-hk
-            lapi:
-              affinity:
-                nodeAffinity:
-                  preferredDuringSchedulingIgnoredDuringExecution:
-                    - weight: 1
-                      preference:
-                        matchExpressions:
-                          - key: topology.kubernetes.io/region
-                            operator: In
-                            values:
-                              - cn-hk
     - target:
         kind: HelmRelease
         name: tailscale-derp-hk