immich-app/yucca
1
0
Fork 0
mirror of https://github.com/immich-app/yucca.git synced 2026-09-30 13:33:00 +08:00
Code Issues Packages Projects Releases Wiki Activity

feat(admin): make the whole thing benchmarkable (#330)

Browse Source
This commit is contained in:
Antoine Lecompte
2026-07-24 11:15:09 -04:00
committed by GitHub
parent 001207e886
commit ecf969ba3e
37 changed files with 2323 additions and 10 deletions
Download Patch File Download Diff File Expand all files Collapse all files
tf/deployment/prod/htz-fsn1/fabric/discovery.tf
+8
View File
@@ -34,6 +34,14 @@ output "discovery" {
private = module.addr_cls1.private_cidr
}
}
# Management-host roster (from ../mgmt-hosts.yaml) so yuctl can pick a
# site-local ssh target (e.g. `yuctl tools bench`) without a checkout.
mgmt_hosts = [
for name, h in local.mgmt_hosts : {
name = name
public_ip = h.public_ip
}
]
}
}
}
tf/deployment/prod/htz-fsn1/talos/secrets.tf
+4
View File
@@ -161,6 +161,10 @@ resource "kubernetes_secret_v1" "yucca_admin_api" {
JWT_PRIVATE_KEY = tls_private_key.yucca_admin_jwt.private_key_pem_pkcs8
OIDC_ADMIN_CLIENT_ID = var.yucca_oidc_admin_client_id
OIDC_ADMIN_CLIENT_SECRET = var.yucca_oidc_admin_client_secret
# Restic repository tokens (POST /repository/:id/url, used by yuctl tools
# bench): deliberately the yucca_jwt SIGNING key — michael only accepts
# tokens from that keypair. Admin session JWTs stay on yucca_admin_jwt.
RESTIC_JWT_PRIVATE_KEY = tls_private_key.yucca_jwt.private_key_pem_pkcs8
}
lifecycle {
tf/deployment/staging/austin/talos/secrets.tf
+4
View File
@@ -175,6 +175,10 @@ resource "kubernetes_secret_v1" "yucca_admin_api" {
JWT_PRIVATE_KEY = tls_private_key.yucca_admin_jwt[0].private_key_pem_pkcs8
OIDC_ADMIN_CLIENT_ID = var.yucca_oidc_admin_client_id
OIDC_ADMIN_CLIENT_SECRET = var.yucca_oidc_admin_client_secret
# Restic repository tokens (POST /repository/:id/url, used by yuctl tools
# bench): deliberately the yucca_jwt SIGNING key — michael only accepts
# tokens from that keypair. Admin session JWTs stay on yucca_admin_jwt.
RESTIC_JWT_PRIVATE_KEY = tls_private_key.yucca_jwt[0].private_key_pem_pkcs8
}
lifecycle {