Commit graph

1864 commits

Author SHA1 Message Date
7f99b80dbe maint/update_nixpkgs: init 2020-10-10 17:10:33 +00:00
e0969055f6 ops/nixos: make references to nixpkgs modules use relative paths 2020-10-10 19:39:26 +00:00
11a7fefe1c totoro: add openshift dependencies, tailscale expose 192.168.1.0/24 2020-09-13 15:16:03 +00:00
949c86e816 kusakabe: enable send-proxy-v2 for requests to OKD haproxy 2020-10-06 00:29:37 +00:00
04c3a8431b go/openshiftauth: init
This is a small "library" for wrapping binaries with magic OAuth authentication based on the automatically-injected k8s service account tokens and OpenShift's OAuth service.

There's an example of this deployed at https://example-lukegb-openshiftauth-test.apps.k8s.lukegb.tech/.

The main pieces of setup that need to happen is:

* Set "serviceAccount" in pod definition
* Add Route for pod
* Edit serviceaccount and add metadata.annotations, e.g.:
    serviceaccounts.openshift.io/oauth-redirectreference.first: >-
      {"kind":"OAuthRedirectReference","apiVersion":"v1","reference":{"kind":"Route","name":"example"}}
2020-10-04 14:38:56 +01:00
9bd61285a7 third_party/gopkgs: import some more packages 2020-10-04 14:36:31 +01:00
b71cc68f24 go: move go.mod to go folder 2020-10-04 11:33:08 +01:00
014d1c881a twitterchiver/archiver: store mapping of tweet ID to user ID that saw it 2020-10-04 03:42:02 +01:00
68d8fa6d42 third_party/go: inject SSL_CERT_FILE into built containers 2020-10-04 03:14:53 +01:00
382dad7c6d marukuru: add nix config to deployer container 2020-10-04 03:00:03 +01:00
3325bac83b Backed out changeset 0a0814edc45e 2020-10-04 02:58:42 +01:00
190606746c ops/nixos/lib/common: add the binary cache credentials to nix.envVars 2020-10-04 02:56:34 +01:00
3b268f67c6 dockerpush: try to use the CI nix cache 2020-10-04 02:44:15 +01:00
9934098c50 gitlab-ci: move dockerpush into hack shell script 2020-10-04 02:36:18 +01:00
cb4100412a gitlab-ci: add docker-images push 2020-10-04 02:34:09 +01:00
d0e40e4a6b nix/pkgs: add crane 2020-10-04 02:33:44 +01:00
c384c31248 twitterchiver: move archiver to subattribute 2020-10-04 01:25:36 +01:00
ee7ad0adfd kusakabe: also expose k8s apiserver 2020-10-04 01:15:58 +01:00
225dfdc114 misc: fix up reuse lint 2020-10-04 01:08:07 +01:00
dd3c58548d go/twitterchiver: init 2020-10-04 01:07:59 +01:00
ededad92d0 third_party: add gopkgs (for twitterchiver, tbd) 2020-10-04 01:04:18 +01:00
27f446fa8e porcorosso: enable podman 2020-10-04 01:03:28 +01:00
67d0361ce6 third_party: init tvl 2020-10-04 01:03:12 +01:00
Default email
c4fb0432ae Project import generated by Copybara.
GitOrigin-RevId: 3fc1143a04da49a92c3663813c6a0c1e8ccd477f
2020-09-29 23:42:59 -04:00
00c94273fd go/twitterchiver: init 2020-10-04 00:17:35 +01:00
2c613bf2f1 porcorosso: switch back to nvidia 2020-10-04 00:11:45 +01:00
4b878360f5 kusakabe: add postgresql for twitterchiver 2020-10-03 23:13:20 +00:00
2b4f4d6b16 kusakabe: revamp config as VM host 2020-10-02 14:21:49 +00:00
7b53535355 misc: fix up after nixpkgs update 2020-09-30 17:39:34 +00:00
Default email
58f8944c92 Project import generated by Copybara.
GitOrigin-RevId: 5aba0fe9766a7201a336249fd6cb76e0d7ba2faf
2020-09-24 23:45:31 -05:00
ae0eda1ba8 marukuru: disable gitlab's built-in prometheus instance 2020-09-30 16:09:41 +00:00
0a3a2043b1 porcorosso: switch to intel for X11; I'm on the move 2020-08-22 17:07:43 +01:00
75a3933c16 merge: resolve oops 2020-09-07 11:07:17 +00:00
ea8020262c ops/nixos/lib/common: add rsync 2020-09-07 10:59:47 +00:00
b90d0bb99d marukuru/deployer: add rsync 2020-09-07 10:50:17 +00:00
03e5dbd72e kusakabe: enable libvirtd 2020-09-07 10:47:43 +00:00
35a2c6b33d 3p/nixpkgs: allow disabling nix in nixos 2020-09-06 23:49:50 +00:00
96f736ab7e marukuru/deployer: add rsync 2020-09-07 11:05:24 +00:00
054c4ee1dd porcorosso: remove obsolete fonts.fontconfig.penultimate option 2020-09-06 17:02:27 +00:00
Default email
0eaa97ffad Project import generated by Copybara.
GitOrigin-RevId: c59ea8b8a0e7f927e7291c14ea6cd1bd3a16ff38
2020-08-20 19:08:02 +02:00
ab0f4b5863 ops/nixos/lib/common: replace deployer password with ! 2020-09-06 16:45:56 +00:00
7b61a7e558 marukuru: migrate to virtualisation.oci-containers 2020-09-06 16:38:54 +00:00
00a0e1d9ee gitlab-ci: add kusakabe 2020-09-06 16:27:45 +00:00
863c7028f0 ops/nixos: add tailscale to common 2020-09-06 16:26:48 +00:00
36cca90e55 ops/nixos: add kusakabe 2020-09-05 18:37:06 +00:00
9f90e567f2 nix/pkgs: update plex-pass 2020-09-04 16:54:53 +00:00
a71cb99af8 nixos/porcorosso: add totoro as a builder 2020-07-19 18:47:40 +01:00
24ba5c1c36 nixos: abstract out distributed builds 2020-07-19 18:20:21 +01:00
6b2df5840e nix/pkgs/copybara: update for new nixpkgs 2020-07-19 18:11:09 +01:00
d629c95212 ops/nixos/totoro: add oven-media-engine 2020-07-19 17:59:20 +01:00