pikasTech-unidesk/config/hwlab-node-control-plane.yaml

version: 1
kind: hwlab-node-control-plane
metadata:
  owner: unidesk
  relatedIssues:
    - 290
    - 1119
imagePolicy:
  requireReproducibleBuildSource: true
  forbidPrivateOrNodeLocalImagesAsInputs: true
  allowNodeLocalRegistryAsBuildOutput: true
  requiredSourceKinds:
    - dockerfile
    - docker-compose
nodes:
  D601:
    route: D601
    kubeRoute: D601:k3s
    registry:
      endpoint: 127.0.0.1:5000
    egressProxy:
      mode: k8s-service-cluster-ip
      namespace: platform-infra
      serviceName: sub2api-egress-proxy
      port: 10808
      noProxy:
        - localhost
        - 127.0.0.1
        - ::1
        - 127.0.0.1:5000
        - localhost:5000
        - .svc
        - .svc.cluster.local
        - .cluster.local
        - kubernetes
        - kubernetes.default
        - kubernetes.default.svc
        - 10.0.0.0/8
        - 10.42.0.0/16
        - 10.43.0.0/16
        - 172.16.0.0/12
        - 192.168.0.0/16
        - 82.156.23.220
        - 74.48.78.17
        - hyueapi.com
        - .hyueapi.com

targets:
  - id: d601-v03
    node: D601
    lane: v03
    enabled: true
    ciNamespace: hwlab-ci
    runtimeNamespace: hwlab-v03
    source:
      repository: pikasTech/HWLAB
      branch: v0.3
    gitops:
      branch: v0.3-gitops
      path: deploy/gitops/node/d601/runtime-v03
    gitMirror:
      namespace: devops-infra
      serviceReadName: git-mirror-http
      serviceWriteName: git-mirror-write
      cachePvcName: hwlab-git-mirror-cache
      cachePvcStorage: 20Gi
      cacheHostPath: /var/lib/rancher/k3s/storage/hwlab-d601-v03-git-mirror-cache
      servicePort: 8080
      deploymentReplicas: 1
      secretName: git-mirror-github-ssh
      syncConfigMapName: git-mirror-sync-script
      syncJobPrefix: git-mirror-hwlab-d601-v03-sync-manual
      flushJobPrefix: git-mirror-hwlab-d601-v03-flush-manual
      readUrl: http://git-mirror-http.devops-infra.svc.cluster.local/pikasTech/HWLAB.git
      writeUrl: http://git-mirror-write.devops-infra.svc.cluster.local/pikasTech/HWLAB.git
    tekton:
      pipelineName: hwlab-d601-v03-ci-image-publish
      serviceAccountName: hwlab-d601-v03-tekton-runner
      pipelineRunPrefix: hwlab-d601-v03-ci-poll
      toolsImage:
        output: 127.0.0.1:5000/hwlab/hwlab-ci-node-tools:node22-alpine-bun-v1
        sourceKind: dockerfile
        context: .
        dockerfileInline:
          filename: hwlab-ci-node-tools.public.Dockerfile
          lines:
            - ARG NODE_IMAGE=docker.io/library/node:22-bookworm-slim
            - ARG BUN_IMAGE=docker.io/oven/bun:1.3.13
            - ARG TOOLS_BASE_IMAGE=docker.io/buildpack-deps:bookworm-scm
            - ARG PYTHON_IMAGE=docker.io/library/python:3.12-slim-bookworm
            - ARG DOCKER_CLI_IMAGE=docker.io/docker:29-cli
            - FROM ${BUN_IMAGE} AS bun-runtime
            - FROM ${NODE_IMAGE} AS node-runtime
            - FROM ${PYTHON_IMAGE} AS python-runtime
            - FROM ${DOCKER_CLI_IMAGE} AS docker-cli-runtime
            - FROM ${TOOLS_BASE_IMAGE}
            - ARG HTTP_PROXY
            - ARG HTTPS_PROXY
            - ARG ALL_PROXY
            - ARG NO_PROXY
            - ARG http_proxy
            - ARG https_proxy
            - ARG all_proxy
            - ARG no_proxy
            - COPY --from=node-runtime /usr/local /usr/local
            - COPY --from=bun-runtime /usr/local/bin/bun /usr/local/bin/bun
            - COPY --from=python-runtime /usr/local /usr/local
            - COPY --from=docker-cli-runtime /usr/local/bin/docker /usr/local/bin/docker
            - RUN ln -sf /usr/local/bin/bun /usr/local/bin/bunx
            - RUN node --version && npm --version && bun --version && git --version && python3 --version && docker --version && ssh -V
        buildArgs:
          NODE_IMAGE: docker.io/library/node:22-bookworm-slim
          BUN_IMAGE: docker.io/oven/bun:1.3.13
          TOOLS_BASE_IMAGE: docker.io/buildpack-deps:bookworm-scm
          PYTHON_IMAGE: docker.io/library/python:3.12-slim-bookworm
          DOCKER_CLI_IMAGE: docker.io/docker:29-cli
        buildNetwork: host
        publicBaseImages:
          - docker.io/library/node:22-bookworm-slim
          - docker.io/oven/bun:1.3.13
          - docker.io/buildpack-deps:bookworm-scm
          - docker.io/library/python:3.12-slim-bookworm
          - docker.io/docker:29-cli
        buildOwner: D601
        buildMode: node-local
    argo:
      namespace: argocd
      projectName: hwlab-d601
      applicationName: hwlab-d601-v03
      applicationFile: application-d601-v03.yaml
      install:
        enabled: true
        sourceKind: url
        version: v3.4.2
        manifestUrl: https://raw.githubusercontent.com/argoproj/argo-cd/v3.4.2/manifests/install.yaml
        fieldManager: unidesk-hwlab-node-argocd
        imagePullPolicy: IfNotPresent
        preloadImages:
          - 127.0.0.1:5000/hwlab/argocd:v3.4.2
          - 127.0.0.1:5000/hwlab/dex:v2.45.0
          - 127.0.0.1:5000/hwlab/redis:8.2.3-alpine
        imageRewrites:
          - source: quay.io/argoproj/argocd:v3.4.2
            pullImage: quay.m.daocloud.io/argoproj/argocd:v3.4.2
            target: 127.0.0.1:5000/hwlab/argocd:v3.4.2
          - source: ghcr.io/dexidp/dex:v2.45.0
            pullImage: ghcr.m.daocloud.io/dexidp/dex:v2.45.0
            target: 127.0.0.1:5000/hwlab/dex:v2.45.0
          - source: public.ecr.aws/docker/library/redis:8.2.3-alpine
            pullImage: docker.m.daocloud.io/library/redis:8.2.3-alpine
            target: 127.0.0.1:5000/hwlab/redis:8.2.3-alpine
        requiredCrds:
          - applications.argoproj.io
          - appprojects.argoproj.io
        expectedDeployments:
          - argocd-applicationset-controller
          - argocd-dex-server
          - argocd-notifications-controller
          - argocd-redis
          - argocd-repo-server
          - argocd-server
        expectedStatefulSets:
          - argocd-application-controller
        readinessTimeoutSeconds: 600