Skip to content

Commit f0b0d25

Browse files
ddelnanoddelnano
authored
Changes to deploy prod cloud (#9)
* Add prod secrets and sops config Signed-off-by: Dom Del Nano <ddelnano@gmail.com> * Temporary cloud_deps changes to get cloud deployed Signed-off-by: Dom Del Nano <ddelnano@gmail.com> * Add private/prod kustomize manifests Signed-off-by: Dom Del Nano <ddelnano@gmail.com> * Remove node selector from all deployments Signed-off-by: Dom Del Nano <ddelnano@gmail.com> * Add script bundle for upcoming demo that includes sql injection pxl script Signed-off-by: Dom Del Nano <ddelnano@gmail.com> * Fix plugin load job by allowing skaffold to override the image Signed-off-by: Dom Del Nano <ddelnano@gmail.com> * Revert change to OSS configs to remove nodeSelector Signed-off-by: Dom Del Nano <ddelnano@gmail.com> * Revert node selector changes to OSS configs in favor of private cloud_deps patches Signed-off-by: Dom Del Nano <ddelnano@gmail.com> * Reduce prod NATs volume size Signed-off-by: Dom Del Nano <ddelnano@gmail.com> * Replace remaining pixielabs.ai link and remove wording about being free Signed-off-by: Dom Del Nano <ddelnano@gmail.com> * Logos before switching to different color logos Signed-off-by: Dom Del Nano <ddelnano@gmail.com> * Add yaml header to fix linting issues Signed-off-by: Dom Del Nano <ddelnano@gmail.com> * Use lighter logo for dark mode and update font color to match. Size logo appropriately Signed-off-by: Dom Del Nano <ddelnano@gmail.com> * Fix license for private configurable files Signed-off-by: Dom Del Nano <ddelnano@gmail.com> * Fix linting issues Signed-off-by: Dom Del Nano <ddelnano@gmail.com> * Opt out a few UI files from copybara until changes are upstream Signed-off-by: Dom Del Nano <ddelnano@gmail.com> * Update favicon and add PodMonitoring resource (unsuccessfully) for custom prometheus metrics Signed-off-by: Dom Del Nano <ddelnano@gmail.com> * Switch back to monochrome logo Signed-off-by: Dom Del Nano <ddelnano@gmail.com> * Add additional copybara excludes to correct file Signed-off-by: Dom Del Nano <ddelnano@gmail.com> * Add private configurables that will be available upstream Signed-off-by: Dom Del Nano <ddelnano@gmail.com> * Add private signup message configurable Signed-off-by: Dom Del Nano <ddelnano@gmail.com> --------- Signed-off-by: Dom Del Nano <ddelnano@gmail.com>
1 parent 2b46539 commit f0b0d25

41 files changed

Lines changed: 641 additions & 8 deletions

Some content is hidden

Large Commits have some content hidden by default. Use the searchbox below for content that may be hidden.

‎.arclint‎

Lines changed: 1 addition & 3 deletions
Original file line numberDiff line numberDiff line change
@@ -15,9 +15,7 @@
1515
"(^k8s/devinfra/prow/prowjob_customresourcedefinition.yaml$)",
1616
"(^k8s/operator/crd/base/px\\.dev_viziers\\.yaml$)",
1717
"(^private/users/)",
18-
"(^private\/credentials\/.*\\.sh)",
19-
"(^private\/credentials\/.*\\.sh)",
20-
"(^private\/credentials\/.*\\.yaml)",
18+
"(^private\/.*\\.yaml)",
2119
"(^src/operator/client/versioned/)",
2220
"(^src/operator/apis/px.dev/v1alpha1/zz_generated.deepcopy.go)",
2321
"(^src/stirling/bpf_tools/bcc_bpf/system-headers)",

‎.sops.yaml‎

Lines changed: 2 additions & 0 deletions
Original file line numberDiff line numberDiff line change
@@ -1,5 +1,7 @@
11
---
22
creation_rules:
3+
- path_regex: private\/prod\/.*yaml$
4+
gcp_kms: projects/csmc-prod/locations/global/keyRings/prod-keyring/cryptoKeys/sops-key
35
- path_regex: private\/staging\/.*yaml$
46
gcp_kms: projects/csmc-staging/locations/global/keyRings/staging-keyring/cryptoKeys/sops-key
57
- path_regex: private\/testing\/.*yaml$

‎private/cloud_deps/prod/elastic_node_selector_patch.yaml‎

Lines changed: 11 additions & 0 deletions
Original file line numberDiff line numberDiff line change
@@ -0,0 +1,11 @@
1+
---
2+
- op: test
3+
path: /spec/nodeSets/0/podTemplate/spec/nodeSelector/node-size
4+
value: large
5+
- op: test
6+
path: /spec/nodeSets/1/podTemplate/spec/nodeSelector/node-size
7+
value: large
8+
- op: remove
9+
path: /spec/nodeSets/0/podTemplate/spec/nodeSelector
10+
- op: remove
11+
path: /spec/nodeSets/1/podTemplate/spec/nodeSelector

‎private/cloud_deps/prod/kustomization.yaml‎

Lines changed: 17 additions & 0 deletions
Original file line numberDiff line numberDiff line change
@@ -0,0 +1,17 @@
1+
---
2+
apiVersion: kustomize.config.k8s.io/v1beta1
3+
kind: Kustomization
4+
namespace: plc
5+
resources:
6+
- ../../../k8s/cloud_deps/prod
7+
patches:
8+
- path: nats_storage_patch.yaml
9+
target:
10+
kind: StatefulSet
11+
name: pl-nats
12+
- path: node_selector_patch.yaml
13+
target:
14+
kind: StatefulSet
15+
- path: elastic_node_selector_patch.yaml
16+
target:
17+
kind: Elasticsearch

‎private/cloud_deps/prod/nats_storage_patch.yaml‎

Lines changed: 7 additions & 0 deletions
Original file line numberDiff line numberDiff line change
@@ -0,0 +1,7 @@
1+
---
2+
- op: test
3+
path: /spec/volumeClaimTemplates/0/spec/resources/requests/storage
4+
value: 200Gi
5+
- op: replace
6+
path: /spec/volumeClaimTemplates/0/spec/resources/requests/storage
7+
value: 50Gi

‎private/cloud_deps/prod/node_selector_patch.yaml‎

Lines changed: 6 additions & 0 deletions
Original file line numberDiff line numberDiff line change
@@ -0,0 +1,6 @@
1+
---
2+
- op: test
3+
path: /spec/template/spec/nodeSelector/node-size
4+
value: large
5+
- op: remove
6+
path: /spec/template/spec/nodeSelector

‎private/prod/announcement_config.yaml‎

Lines changed: 10 additions & 0 deletions
Original file line numberDiff line numberDiff line change
@@ -0,0 +1,10 @@
1+
---
2+
apiVersion: v1
3+
kind: ConfigMap
4+
metadata:
5+
name: pl-announcement-config
6+
data:
7+
# Flip this flag to enable announce kit for changelogs, release notes etc.
8+
ANNOUNCEMENT_ENABLED: "false"
9+
# The URL for the announce kit widget.
10+
ANNOUNCE_WIDGET_URL: ""

‎private/prod/auth_connector_config.yaml‎

Lines changed: 10 additions & 0 deletions
Original file line numberDiff line numberDiff line change
@@ -0,0 +1,10 @@
1+
---
2+
apiVersion: v1
3+
kind: ConfigMap
4+
metadata:
5+
name: pl-auth-connector-config
6+
data:
7+
# Pixie can be used as an auth connector with other products. By calling "api/auth/<connector_name>",
8+
# Pixie can send user info and access tokens to other products through the given callback URL.
9+
PL_AUTH_CONNECTOR_NAME: ""
10+
PL_AUTH_CONNECTOR_CALLBACK_URL: ""

‎private/prod/auth_deployment.yaml‎

Lines changed: 24 additions & 0 deletions
Original file line numberDiff line numberDiff line change
@@ -0,0 +1,24 @@
1+
---
2+
apiVersion: apps/v1
3+
kind: Deployment
4+
metadata:
5+
name: auth-server
6+
labels:
7+
db: pgsql
8+
spec:
9+
template:
10+
spec:
11+
containers:
12+
- name: auth-server
13+
env:
14+
- name: PL_AUTH0_CLIENT_ID
15+
valueFrom:
16+
secretKeyRef:
17+
name: cloud-auth0-secrets
18+
key: auth0-client-id
19+
optional: true
20+
- name: PL_AUTH0_CLIENT_SECRET
21+
valueFrom:
22+
secretKeyRef:
23+
name: cloud-auth0-secrets
24+
key: auth0-client-secret

‎private/prod/backend_config.yaml‎

Lines changed: 4 additions & 0 deletions
Original file line numberDiff line numberDiff line change
@@ -0,0 +1,4 @@
1+
---
2+
- op: replace
3+
path: /spec/securityPolicy/name
4+
value: ""

0 commit comments

Comments
 (0)