mirror of
https://github.com/immich-app/yucca.git
synced 2026-09-30 13:33:00 +08:00
Antoine Lecompte
c6985d902c
* feat: introduce partition/region/ceph-cluster model across the stack
Formalize partition -> region -> {one k8s cluster, many ceph clusters} and
thread it through every layer plus a new yuctl ops CLI.
- tf: deployment/<partition>/<region>/<stack> layout; terragrunt path-parse +
state key yucca/<partition>/<region>/<stack>; per-region region.hcl (role,
site_id, datacenter, provider_code, domain); env->partition / site->region
renames (NetBird object names byte-identical); standardized per-stack
`discovery` output contract (secrets as op:// refs).
- k8s: clusters/<partition>/<region>/ (staging/austin, prod/htz-fsn1, dev/local);
role-based kustomize components (primary/secondary); hybrid cluster-settings
(TF-rendered identity + human fragment); dev-mirror folded into dev/local;
charts regrouped into charts/{apps,platform,lib,dev}.
- ci: infra.yml partition/region discovery matrix; partition-keyed path filters;
<partition>-<region> environment gates; image-versions path moves.
- ansible: inventories under <partition>-<region>/<cluster>.
- yuctl: Go/cobra CLI reading the discovery contract from TF state.
- Retire the sietch-talos libvirt VM cluster (dev@local is the k3d cluster);
ceph inventory_dirname -> <partition>-<region>/<cluster>.
Verified: mise k8s:validate green (3 clusters); yuctl go build/vet; tofu
validate pre-merge (all 9 stacks). Live-staging state migration NOT run.
* fix typo
* commit
15 lines
580 B
YAML
15 lines
580 B
YAML
---
|
|
# Static shared vars for the htz-fsn1 mgmt hosts.
|
|
#
|
|
# Host/user/addressing data is TF-GENERATED at run time (hosts.yml,
|
|
# host_vars/*.yml, users.generated.yml) by tf/render/ansible-mgmt from the
|
|
# Terraform sources (mgmt-hosts.yaml, fabric-addressing, identity). Edit those,
|
|
# not the generated files. Only truly-static config lives here.
|
|
|
|
timezone: UTC
|
|
mgmt_domain: fsn.htz.futo.cloud
|
|
|
|
# NetBird "mgmt" setup key — NOT hardcoded; passed at run time by
|
|
# `mise run mgmt:ansible` from op://yucca_tf_prod/NETBIRD_YUCCA_PROD_<REGION>_MGMT_SETUP_KEY.
|
|
mgmt_netbird_setup_key: ""
|