feat(infra): k3s foundation — cert-manager, Longhorn config, in-cluster data tier · 153d7053ca - dezky

feat(infra): k3s foundation — cert-manager, Longhorn config, in-cluster data tier

ci / typecheck (map[dir:apps/website name:website]) (push) Failing after 10m58s

Details

ci / typecheck (map[dir:apps/portal name:portal]) (push) Failing after 11m56s

Details

ci / typecheck (map[dir:apps/booking name:booking]) (push) Failing after 14m0s

Details

ci / typecheck (map[dir:services/platform-api name:platform-api]) (push) Has been cancelled

Details

ci / test (push) Has been cancelled

Details

Adds the production cluster foundation (authored + applied live on node1):
- cert-manager via the k3s HelmChart controller + letsencrypt staging/prod
  ClusterIssuers (HTTP-01 / Traefik).
- Longhorn config for single-node (values: replica=1, default StorageClass,
  Retain) + backup-to-Hetzner-Object-Storage credential template.
- In-cluster data tier (dezky-data): Postgres 16 (with Authentik+OCIS DB init),
  MongoDB 7, Redis 7 as StatefulSets on Longhorn, + secret template.
- bootstrap.sh: install open-iscsi/nfs-common + enable iscsid (Longhorn prereq).
- RUNBOOK.md: full reproducible node1 build order.

Real secrets are generated on-box and kept in Bitwarden — never in git.

This commit is contained in:

Ronni Baslund

2026-06-08 18:39:31 +02:00

parent 65a68ee126

commit 153d7053ca

17 changed files with 733 additions and 1 deletions

									
										infrastructure/production/fleet/data/namespace.yaml
									
		+6
		
												View File
												
				@@ -0,0 +1,6 @@

				apiVersion: v1

				kind: Namespace

				metadata:

				  name: dezky-data

				  labels:

				    app.kubernetes.io/part-of: dezky