application resource refactoring

seichi-onp-k8s/cluster-boot-up/scripts/nodes/k8s-node-setup.sh

@@ -80,22 +80,16 @@ EOF
 sudo sysctl --system
 
 ## Install containerd
-apt-get update && apt-get install -y apt-transport-https curl gnupg2
-sudo mkdir -p /etc/apt/keyrings
-curl -fsSL https://download.docker.com/linux/ubuntu/gpg | sudo gpg --dearmor -o /etc/apt/keyrings/docker.gpg
- echo \
-  "deb [arch=$(dpkg --print-architecture) signed-by=/etc/apt/keyrings/docker.gpg] https://download.docker.com/linux/ubuntu \
-  $(lsb_release -cs) stable" | sudo tee /etc/apt/sources.list.d/docker.list > /dev/null
-sudo apt-get update && sudo apt-get install -y containerd.io
+sudo apt-get update && sudo apt-get install -y containerd apt-transport-https curl gnupg2
 
 # Configure containerd
 sudo mkdir -p /etc/containerd
 sudo containerd config default | sudo tee /etc/containerd/config.toml > /dev/null
-sudo sed -i 's#sandbox_image = "registry.k8s.io/pause:3.6"#sandbox_image = "registry.k8s.io/pause:3.9"#g' /etc/containerd/config.toml
-if grep -q "SystemdCgroup = true" "/etc/containerd/config.toml"; then
+sudo sed -i 's#sandbox_image = "registry.k8s.io/pause:3.8"#sandbox_image = "registry.k8s.io/pause:3.9"#g' /etc/containerd/config.toml
+if grep -q "systemd_cgroup = true" "/etc/containerd/config.toml"; then
 echo "Config found, skip rewriting..."
 else
-sed -i -e "s/SystemdCgroup \= false/SystemdCgroup \= true/g" /etc/containerd/config.toml
+sed -i -e "s/systemd_cgroup \= false/systemd_cgroup \= true/g" /etc/containerd/config.toml
 fi
 
 sudo systemctl restart containerd
@@ -117,7 +111,6 @@ sysctl --system
 # Install kubeadm
 curl -fsSL https://pkgs.k8s.io/core:/stable:/v1.28/deb/Release.key | sudo gpg --dearmor -o /etc/apt/keyrings/kubernetes-apt-keyring.gpg
 echo 'deb [signed-by=/etc/apt/keyrings/kubernetes-apt-keyring.gpg] https://pkgs.k8s.io/core:/stable:/v1.28/deb/ /' | sudo tee /etc/apt/sources.list.d/kubernetes.list
-apt-get update
 apt-get install -y kubeadm=1.28.4-1.1 kubectl=1.28.4-1.1 kubelet=1.28.4-1.1
 apt-mark hold kubelet kubectl
 
@@ -193,7 +186,7 @@ EOF
 echo "net.ipv4.ip_nonlocal_bind = 1" >> /etc/sysctl.conf
 sysctl -p
 
-apt-get update && apt-get -y install keepalived
+apt-get -y install keepalived
 
 cat > /etc/keepalived/keepalived.conf <<EOF
 # Define the script used to check if haproxy is still working

seichi-onp-k8s/manifests/seichi-kubernetes/apps/cloudflared-tunnel-exits/http-exits.yaml

@@ -127,6 +127,8 @@ spec:
           prune: true
           selfHeal: true
           allowEmpty: true
+        syncOptions:
+          - ServerSideApply=true
         retry:
           limit: -1
           backoff:

seichi-onp-k8s/manifests/seichi-kubernetes/apps/cloudflared-tunnel-exits/https-exits.yaml

@@ -74,6 +74,8 @@ spec:
           prune: true
           selfHeal: true
           allowEmpty: true
+        syncOptions:
+          - ServerSideApply=true
         retry:
           limit: -1
           backoff:

seichi-onp-k8s/manifests/seichi-kubernetes/apps/cloudflared-tunnel-exits/tcp-exits.yaml

@@ -58,6 +58,8 @@ spec:
           prune: true
           selfHeal: true
           allowEmpty: true
+        syncOptions:
+          - ServerSideApply=true
         retry:
           limit: -1
           backoff:

seichi-onp-k8s/manifests/seichi-kubernetes/apps/cluster-wide-apps/app-of-other-apps/cilium.yaml

@@ -110,3 +110,5 @@ spec:
     automated:
       prune: true
       selfHeal: true
+    syncOptions:
+      - ServerSideApply=true

seichi-onp-k8s/manifests/seichi-kubernetes/apps/cluster-wide-apps/app-of-other-apps/kubernetes-secret-generator.yaml

@@ -18,3 +18,5 @@ spec:
     automated:
       prune: true
       selfHeal: true
+    syncOptions:
+      - ServerSideApply=true

seichi-onp-k8s/manifests/seichi-kubernetes/apps/cluster-wide-apps/app-of-other-apps/loki.yaml

@@ -69,8 +69,9 @@ spec:
             enabled: true
             additionalLabels:
               release: prometheus
-
   syncPolicy:
     automated:
       prune: true
       selfHeal: true
+    syncOptions:
+      - ServerSideApply=true

seichi-onp-k8s/manifests/seichi-kubernetes/apps/cluster-wide-apps/app-of-other-apps/minio.yaml

@@ -34,3 +34,5 @@ spec:
     automated:
       prune: true
       selfHeal: true
+    syncOptions:
+      - ServerSideApply=true

seichi-onp-k8s/manifests/seichi-kubernetes/apps/cluster-wide-apps/app-of-other-apps/prometheus-operator.yaml

@@ -151,5 +151,4 @@ spec:
       prune: true
       selfHeal: true
     syncOptions:
-      - CreateNamespace=true
       - ServerSideApply=true

seichi-onp-k8s/manifests/seichi-kubernetes/apps/cluster-wide-apps/app-of-other-apps/prometheus-snmp-exporter.yaml

@@ -72,7 +72,6 @@ spec:
       prune: true
       selfHeal: true
     syncOptions:
-      - CreateNamespace=true
       - ServerSideApply=true
 ---
 apiVersion: v1

seichi-onp-k8s/manifests/seichi-kubernetes/apps/cluster-wide-apps/app-of-other-apps/pyroscope-ebpf.yaml

@@ -21,5 +21,4 @@ spec:
       prune: true
       selfHeal: true
     syncOptions:
-      - CreateNamespace=true
       - ServerSideApply=true

seichi-onp-k8s/manifests/seichi-kubernetes/apps/cluster-wide-apps/app-of-other-apps/pyroscope.yaml

@@ -25,5 +25,4 @@ spec:
       prune: true
       selfHeal: true
     syncOptions:
-      - CreateNamespace=true
       - ServerSideApply=true

seichi-onp-k8s/manifests/seichi-kubernetes/apps/cluster-wide-apps/app-of-other-apps/seichi-debug-minecrafts-on-seichiassist-prs.yaml

@@ -43,4 +43,4 @@ spec:
           backoff:
             duration: 5s
             factor: 2
-            maxDuration: 2m
+            maxDuration: 2m

seichi-onp-k8s/manifests/seichi-kubernetes/apps/cluster-wide-apps/synology-csi-storageclass/storageclass.yaml

@@ -12,18 +12,3 @@ parameters:
   formatOptions: '--nodiscard'
 reclaimPolicy: Retain
 allowVolumeExpansion: true
----
-apiVersion: storage.k8s.io/v1
-kind: StorageClass
-metadata:
-  name: synology-iscsi-storage-temp
-  annotations:
-    storageclass.kubernetes.io/is-default-class: "false"
-provisioner: csi.san.synology.com
-parameters:
-  dsm: '192.168.16.240'
-  location: '/volume1'
-  csi.storage.k8s.io/fstype: 'btrfs'
-  formatOptions: '--nodiscard'
-reclaimPolicy: Delete
-allowVolumeExpansion: true

seichi-onp-k8s/manifests/seichi-kubernetes/apps/root/apps.yaml

@@ -140,6 +140,8 @@ spec:
       prune: true
       selfHeal: true
       allowEmpty: true
+    syncOptions:
+      - ServerSideApply=true
     retry:
       limit: -1
       backoff:
@@ -178,6 +180,8 @@ spec:
           prune: true
           selfHeal: true
           allowEmpty: true
+        syncOptions:
+          - ServerSideApply=true
         retry:
           limit: -1
           backoff:
@@ -216,6 +220,8 @@ spec:
           prune: true
           selfHeal: true
           allowEmpty: true
+        syncOptions:
+          - ServerSideApply=true
         retry:
           limit: -1
           backoff:

seichi-onp-k8s/manifests/seichi-kubernetes/apps/seichi-debug-gateway/bungeecord/bungeesemaphore-redis.yaml

@@ -79,3 +79,5 @@ spec:
     automated:
       prune: true
       selfHeal: true
+    syncOptions:
+      - ServerSideApply=true

seichi-onp-k8s/manifests/seichi-kubernetes/apps/seichi-debug-gateway/bungeecord/redisbungee-redis.yaml

@@ -79,3 +79,5 @@ spec:
     automated:
       prune: true
       selfHeal: true
+    syncOptions:
+      - ServerSideApply=true

seichi-onp-k8s/manifests/seichi-kubernetes/apps/seichi-minecraft/redis/bungeesemaphore-redis.yaml

@@ -79,3 +79,5 @@ spec:
     automated:
       prune: true
       selfHeal: true
+    syncOptions:
+      - ServerSideApply=true

seichi-onp-k8s/manifests/seichi-kubernetes/apps/seichi-minecraft/redis/redisbungee-redis.yaml

@@ -79,3 +79,5 @@ spec:
     automated:
       prune: true
       selfHeal: true
+    syncOptions:
+      - ServerSideApply=true