re-init k8s cluster, recompute sealedsecrets

docs/src/core/infrastructure/runbooks.md

@@ -51,7 +51,7 @@ Sometimes, releases will be stuck in an `uninstalling` state. This command quick
 3. Create a sealed secret from the previously created manifest:
 
     ```sh
-    kubeseal --secret-file my_secret.yaml --sealed-secret-file my_sealed_secret.yaml
+    kubeseal --controller-name bt-sealed-secrets --controller-namespace bt --secret-file my_secret.yaml --sealed-secret-file my_sealed_secret.yaml
     ```
 
     If the name of the secret might change across installations, add `--scope=namespace-wide` to the `kubeseal` command. For example, `bt-dev-secret` and `bt-prod-secret` are different names. Deployment without `--scope=namespace-wide` will cause a `no key could decrypt secret` error. More details on [the kubeseal documentation](https://github.com/bitnami-labs/sealed-secrets?tab=readme-ov-file#scopes).

infra/app/templates/backend.yaml

@@ -67,17 +67,16 @@ metadata:
     {{- include "bt-app.backendLabels" . | nindent 4 }}
 spec:
   encryptedData:
-    GOOGLE_CLIENT_ID: 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
-    GOOGLE_CLIENT_SECRET: AgBkRfkLsHUfNkrjUKsmhWeOhWUEUlLT6GwUr9qlI5Wl/8vo/AVLaQhHLVcgVyh/V9y2dDXeZQ6+G/Ui5CxJi55nmp/K0dgHf05NDl7PWYHTh6cjBraA46thkH6cE5ZYmBXi1oMC2AkyPZ9t/7soZApgrwfBPhDBVB8D+uhq+EvjZZTzqRmlW6ap9o65MEVmJyCySeVMEUYwipqo6VqgKXvqBF1vSkZocRCkBxxx9qBOwQabGZK9Lydi5MGMnb7kizZemlq4dyrrdVpuuAx0glDF0AVypWY1Zu9jkPhEXNkreRIUaVmuONlG2H8nr8qc/n4PJluQSTWHAcVKz/ty2t19G66gGL3luUQlZjcicfg0e3gNylgaQUyYkuKIPxoift+87iumxUKXb01s5lc04ZWvOzRGO9fKrIivXBnzm6SL45GFX6sCI8oOxfAR/IrR8BrsnuefgZYQMHbdzVPSlr8wxMj+FsflQziFWPjs/Lee0zanwN77/l9NY7FYedU4/t8jzZvAiL9sC9Hfp8dMB9Oj0z2u1ZZrCkT092fOB2aVRItDbgLmGsBAzZ9z2JCRrlSHrKMMqxObbnunWFOyh8/LNZfJqJhlsMZge8L5ufkJW0RnIoPAjGAtKAK3iO5bTbLSktJ3+4C3BBVtQCkKZe1Adq5oOK7Nk/OmkRUO6sHw2JUJSGO21B77KUi6zRKog6FvEMzK3o2CU1dSheAAyT47OX+8W9RTtH8=
-    SESSION_SECRET: AgBf3JL5xg/O0G07S9xCy8QzKR4TqN9Q4AA7Sbh2ioMF9Y4xBEh7cVJmQDdHvaGWTeed0YjFSWJL1OUlAW+dOyY8soAznY2RM20TL4QT5oYIR62kQUKWb0KNANsnUGju+MngvHBLpDv5cjD9CayQZA8U0s30jbASwAG6LDGdJgWs2xyDkE/+SBcD0zUoia5UpzgH2NFHsXf0Z4kBYT+L6amsyqASaeTJRTWpALs0NZQmAyAstzVflIlUNBw3bfwGKx3GOve8+5MEodJEKcf0bdtEPgPtOxCN3d937M11zzcF/whFHbZAHD2uMPqZbgfAaRG6mHKSViGyOlTNMihTok1cV2MT0XFUvT9BlSDJyMrBU538F15A6x9HihaDvN0ThN5xTxn0IGGEn2EJwlkT4z/RjtS11cUaS4vPYtlL/tgLFRHqWIixc9UvtF4JSElbVi9Kx9oIq20U48mSSLcdklnwmwFw5sO/stB3BAQISHqNBUK0kWObKhb3fcwUCaS8sR9oDbThFJ1fTqsM5K07eoBx1G2B209PUsQOLIxcNmdX/ZASjVxn+cGIVmOvEJo8mnDlWO75s8BnhXoqeygMuCzr/dppVbEZABCvBFiE1rD1zooyigBtgnMKwQhYxk5r9glUPmD+wsgS7L5xsfHd0B65S4JyIFEjvlYR0omv5nW7Ubgor4D1ztBfhXs1LbXwp7RWwpUmCRvw1tGd
+    GOOGLE_CLIENT_ID: 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
+    GOOGLE_CLIENT_SECRET: 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
+    SESSION_SECRET: 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
   template:
     metadata:
       annotations:
         sealedsecrets.bitnami.com/namespace-wide: "true"
       name: {{ include "bt-app.backendName" .}}-secret
       labels:
-        {{- include "bt-app.backendLabels" . | nindent 4 }}
-    type: Opaque
+        {{- include "bt-app.backendLabels" . | nindent 8 }}
 
 ---
 

infra/app/templates/updater.yaml

@@ -60,17 +60,17 @@ metadata:
     {{- include "bt-app.updaterLabels" . | nindent 4 }}
 spec:
   encryptedData:
-    SIS_CLASS_APP_ID: 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
-    SIS_CLASS_APP_KEY: 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
-    SIS_COURSE_APP_ID: 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
-    SIS_COURSE_APP_KEY: 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
-    SIS_TERM_APP_ID: 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
-    SIS_TERM_APP_KEY: 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
+    SIS_CLASS_APP_ID: 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
+    SIS_CLASS_APP_KEY: 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
+    SIS_COURSE_APP_ID: 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
+    SIS_COURSE_APP_KEY: AgCMxRrdzahAW8r5NDMln/ZRHjwCnsH7PzRQ8L8yfWOfnWyv+lPzSyhmz5b3qyYxUA6ZPbsw3M0+T60g+XeLO/bo6QoAPZRyugMFKNDAEg5fqqQd4OeO6DV1EHlrC0597a9wgnd0Ub2kq1vS712/hiAc6+qV2nCR8OFPBIw7AXHnXTke23s/Td5atQXMLY5bCiehZx7X+P713mq7/AHfWsUc/K7rEuSavg5dUS4FMf9dIQfySU4mZV10fOuLFt+VwwMYxp4p7jPD0+Apx47hjzs2MGab/861dt3m0PLOQ388Iz9jV7jvKYsHaBlJKJj7NgPc9F1ZXity2c1reKe4O8mm4bwgbZrguyzaHEmRSO33RnJUiBZXUmZDAbllGWRAglp3hHiIF9XFvdYEyw2Hv4gYkrfO6CUyWyrxQjuXuJn7/JLJJcmpLd3P0fOebqxjAXzC6JsdUjeOig1hyI4bwtMOl3hPcdQ1x4M/wX08BNlgikHykN642oRGDLfVCjOY4lYo/5mGmImcS5Jmfzv29UQfBQzz4mncIILH9DYOaG3wu8GaQr/ehdamdXUO495Ld7QY1EJGxJ8yxEhtKaabZRrtS6Db91xvq2dyGWNkkdO1+++h6MP6oc6S+oxiwDBUlENeS5cQ3v0Ej8Dur0vVcWAie0MiybgNs1SIQZrETZusCXs/s5y40UxM+FFinmveCqgrbcQgzo+GhVStY7rrqsd/AIQ6gDcslKXBgvzV7fZ38w==
+    SIS_TERM_APP_ID: AgAwtUcVanOABPOOrrVhWl8g7YkeXNzWMvFgnRE9myjc2cp5/SWJNdia1blPFTwwgVGWcnwTC1htANuJtXjqER19Z5sXmfNY0iowPLQVEsF/tpHeAq75ZrituxgjaOlPeKBNfXAjJS8XcX68miRbP5REUnlYk+FoBfGHUdHhefd249n5jgXwR1IIEUSC0TSnn2KIDvutDMS5e2sEpi4clBwBojSRgiMHO+Y9HsBQlQtTkRU0Sui3cDqjQYRfjR40ato72wl1N6HDgloorYgxRUXu9sGnq6tbIXkOwcRba9y/3p6c4JbBInRSm+H21mV1EYl8WlHlSXulWgnsAO9WGo/dmSmBb0+P1tkWkb4xtavvzVWRu/2qvSIvcjdpzyhfp5JqGVBjNyMh1b3t6Z4gf6f8qn1wfk3w8drNMzMK65XuReVJmUKrWfKDysKiPXa8fTDlcLZCiTghlDDiwjzv2Ie3+pJHlBOaELbmnhfrJZ63+Ir4ezKjJ8HWxHwlkweqUNJDdRXA5sxBY1EhY0zC5sG/ryjVu8jpZdX0APw+VdkA+O9FYrRucBHfDlpkZHx11rkUO2b/1/MVJq6D3Ew6GxfB3DVod4o7WJQAll2jq7a29hkf25URmtvHN8sxkoGuZOpLsITVeYJxevsBwwMWpsFy6KTfHRHYR9g8duoPG5QKZ74fx9bOVezrrTyuCE1k+cQNq9M4Lmt7Aw==
+    SIS_TERM_APP_KEY: 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
   template:
     metadata:
       annotations:
         sealedsecrets.bitnami.com/namespace-wide: "true"
       name: {{ include "bt-app.updaterName" . }}-secret
       labels:
-        {{- include "bt-app.updaterLabels" . | nindent 4 }}
+        {{- include "bt-app.updaterLabels" . | nindent 8 }}
 {{ end }}

infra/base/templates/cloudflare-stanfurdtime-sealed-secret.yaml

@@ -2,10 +2,11 @@ apiVersion: bitnami.com/v1alpha1
 kind: SealedSecret
 metadata:
   name: cloudflare-api-token-stanfurdtime-secret
+  namespace: bt
 spec:
   encryptedData:
-    api-token: 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
+    api-token: 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
   template:
     metadata:
       name: cloudflare-api-token-stanfurdtime-secret
-    type: Opaque
+      namespace: bt

infra/base/templates/issuer.yaml

@@ -1,3 +1,4 @@
+{{ /* https://cert-manager.io/docs/configuration/acme/dns01/cloudflare/#api-tokens */ }}
 apiVersion: cert-manager.io/v1
 kind: Issuer
 metadata:

infra/init.sh

@@ -13,13 +13,13 @@ helm repo add metallb https://metallb.github.io/metallb
 # BASE INFRASTRUCTURE
 # ===================
 
-helm install bt-sealed-secrets bitnami-labs/sealed-secrets --version 2.15.0 --namespace=bt --create-namespace
-helm install bt-metallb metallb/metallb --version 0.14.3 --namespace=bt
-helm install bt-cert-manager cert-manager/cert-manager --set installCRDs=true --version 1.14.1 --namespace=bt
-helm install bt-ingress-nginx ingress-nginx/ingress-nginx --version 4.9.1 --namespace=bt
+helm install bt-sealed-secrets bitnami-labs/sealed-secrets --version 2.17.0 --namespace=bt --create-namespace
+helm install bt-metallb metallb/metallb --version 0.14.9 --namespace=bt
+helm install bt-cert-manager cert-manager/cert-manager --set crds.enabled=true --version 1.16.2 --namespace=bt
+helm install bt-ingress-nginx ingress-nginx/ingress-nginx --version 4.12.0 --namespace=bt
 
 helm package ./infra/base --version 1.0.0 --dependency-update
-helm push ./base-1.0.0.tgz oci://registry-1.docker.io/octoberkeleytime/bt-base
+helm push ./bt-base-1.0.0.tgz oci://registry-1.docker.io/octoberkeleytime
 helm install bt-base oci://registry-1.docker.io/octoberkeleytime/bt-base --namespace=bt \
     --version=1.0.0
 
@@ -28,9 +28,9 @@ helm install bt-base oci://registry-1.docker.io/octoberkeleytime/bt-base --names
 # ==========
 
 helm package ./infra/mongo --version 1.0.0 --dependency-update
-helm push ./mongo-1.0.0.tgz oci://registry-1.docker.io/octoberkeleytime/bt-mongo
+helm push ./bt-mongo-1.0.0.tgz oci://registry-1.docker.io/octoberkeleytime
 helm package ./infra/redis --version 1.0.0 --dependency-update
-helm push ./redis-1.0.0.tgz oci://registry-1.docker.io/octoberkeleytime/bt-redis
+helm push ./bt-redis-1.0.0.tgz oci://registry-1.docker.io/octoberkeleytime
 
 # ==========
 # PRODUCTION
@@ -65,9 +65,8 @@ helm install bt-stage-app oci://registry-1.docker.io/octoberkeleytime/bt-app --n
     --set frontend.image.tag=latest \
     --set backend.image.tag=latest \
     --set host=staging.stanfurdtime.com \
-    --set mongoUri=mongodb://bt-stage-mongo-mongodb.bt.svc.cluster.local:27017/bt \
-    --set redisUri=redis://bt-stage-redis-master.bt.svc.cluster.local:6379 \
-# TODO(core): change mongoUri to replicaset
+    --set mongoUri=mongodb://bt-stage-mongo-mongodb-0.bt-stage-mongo-mongodb-headless.bt.svc.cluster.local:27017/bt \
+    --set redisUri=redis://bt-stage-redis-master.bt.svc.cluster.local:6379
 
 # ==========
 # DEVELOPMENT