config: add elastx specific config

elastisys · Feb 21, 2025 · e686519 · e686519
1 parent 395e779
commit e686519
Show file tree

Hide file tree

Showing 3 changed files with 153 additions and 5 deletions.
diff --git a/config/providers/elastx/common-config.yaml b/config/providers/elastx/common-config.yaml
@@ -7,7 +7,9 @@ networkPolicies:
     openstack:
       enabled: true
       ips:
-        - set-me
+        - 217.61.244.51/32
+        - 217.61.244.53/32
+        - 217.61.244.55/32
       ports:
         - 5000
         - 8774
@@ -22,19 +24,29 @@ networkPolicies:
 objectStorage:
   type: s3
   s3:
-    region: set-me
-    regionEndpoint: set-me
+    region: us-east-1
+    regionEndpoint: https://swift.elastx.cloud
     forcePathStyle: true
 ingressNginx:
   controller:
     config:
-      useProxyProtocol: false
+      useProxyProtocol: true
     useHostPort: false
     service:
       enabled: true
       type: LoadBalancer
-      annotations: {}
+      annotations:
+        loadbalancer.openstack.org/proxy-protocol: "true"
       allocateLoadBalancerNodePorts: true
 opa:
   rejectLoadBalancerService:
     enabled: false
+  controllerManager:
+    topologySpreadConstraints:
+      - labelSelector:
+          matchLabels:
+            app: gatekeeper
+            control-plane: controller-manager
+        maxSkew: 1
+        topologyKey: topology.kubernetes.io/zone
+        whenUnsatisfiable: DoNotSchedule
diff --git a/config/providers/elastx/sc-config.yaml b/config/providers/elastx/sc-config.yaml
@@ -17,3 +17,130 @@ objectStorage:
 thanos:
   objectStorage:
     type: swift
+  receiver:
+    affinity:
+      nodeAffinity:
+        requiredDuringSchedulingIgnoredDuringExecution:
+          nodeSelectorTerms:
+            - matchExpressions:
+                - key: topology.kubernetes.io/zone
+                  operator: In
+                  values:
+                    - sto1
+                    - sto2
+    topologySpreadConstraints:
+      - labelSelector:
+          matchLabels:
+            app.kubernetes.io/component: receive
+            app.kubernetes.io/instance: thanos-receiver
+            app.kubernetes.io/name: thanos
+        maxSkew: 1
+        topologyKey: topology.kubernetes.io/zone
+        whenUnsatisfiable: DoNotSchedule
+      - labelSelector:
+          matchLabels:
+            app.kubernetes.io/component: receive
+            app.kubernetes.io/instance: thanos-receiver
+            app.kubernetes.io/name: thanos
+        maxSkew: 1
+        topologyKey: kubernetes.io/hostname
+        whenUnsatisfiable: DoNotSchedule
+  ruler:
+    topologySpreadConstraints:
+      - labelSelector:
+          matchLabels:
+            app.kubernetes.io/name: thanos
+            app.kubernetes.io/instance: thanos-receiver
+            app.kubernetes.io/component: ruler
+        maxSkew: 1
+        topologyKey: topology.kubernetes.io/zone
+        whenUnsatisfiable: DoNotSchedule
+      - labelSelector:
+          matchLabels:
+            app.kubernetes.io/name: thanos
+            app.kubernetes.io/instance: thanos-receiver
+            app.kubernetes.io/component: ruler
+        maxSkew: 1
+        topologyKey: kubernetes.io/hostname
+        whenUnsatisfiable: DoNotSchedule
+  query:
+    topologySpreadConstraints:
+      - labelSelector:
+          matchLabels:
+            app.kubernetes.io/name: thanos
+            app.kubernetes.io/instance: thanos-query
+            app.kubernetes.io/component: query
+        maxSkew: 1
+        topologyKey: topology.kubernetes.io/zone
+        whenUnsatisfiable: DoNotSchedule
+      - labelSelector:
+          matchLabels:
+            app.kubernetes.io/name: thanos
+            app.kubernetes.io/instance: thanos-query
+            app.kubernetes.io/component: query
+        maxSkew: 1
+        topologyKey: kubernetes.io/hostname
+        whenUnsatisfiable: DoNotSchedule
+opensearch:
+  masterNode:
+    affinity:
+      podAntiAffinity:
+        preferredDuringSchedulingIgnoredDuringExecution:
+          - podAffinityTerm:
+              topologyKey: topology.kubernetes.io/zone
+            weight: 1
+  dataNode:
+    affinity:
+      podAntiAffinity:
+        preferredDuringSchedulingIgnoredDuringExecution:
+          - podAffinityTerm:
+              topologyKey: topology.kubernetes.io/zone
+            weight: 1
+  clientNode:
+    affinity:
+      podAntiAffinity:
+        preferredDuringSchedulingIgnoredDuringExecution:
+          - podAffinityTerm:
+              topologyKey: topology.kubernetes.io/zone
+            weight: 1
+dex:
+  topologySpreadConstraints:
+    - labelSelector:
+        matchLabels:
+          app.kubernetes.io/name: dex
+      maxSkew: 1
+      topologyKey: topology.kubernetes.io/zone
+      whenUnsatisfiable: DoNotSchedule
+    - labelSelector:
+        matchLabels:
+          app.kubernetes.io/name: dex
+      maxSkew: 1
+      topologyKey: kubernetes.io/hostname
+      whenUnsatisfiable: DoNotSchedule
+prometheus:
+  alertmanagerSpec:
+    affinity:
+      nodeAffinity:
+        requiredDuringSchedulingIgnoredDuringExecution:
+          nodeSelectorTerms:
+            - matchExpressions:
+                - key: topology.kubernetes.io/zone
+                  operator: In
+                  values:
+                    - sto1
+                    - sto2
+    topologySpreadConstraints:
+      - labelSelector:
+          matchLabels:
+            app.kubernetes.io/name: alertmanager
+            app.kubernetes.io/instance: kube-prometheus-stack-alertmanager
+        maxSkew: 1
+        topologyKey: topology.kubernetes.io/zone
+        whenUnsatisfiable: DoNotSchedule
+      - labelSelector:
+          matchLabels:
+            app.kubernetes.io/name: alertmanager
+            app.kubernetes.io/instance: kube-prometheus-stack-alertmanager
+        maxSkew: 1
+        topologyKey: kubernetes.io/hostname
+        whenUnsatisfiable: DoNotSchedule
diff --git a/config/providers/elastx/wc-config.yaml b/config/providers/elastx/wc-config.yaml
@@ -0,0 +1,9 @@
+hnc:
+  webhook:
+    topologySpreadConstraints:
+      - labelSelector:
+          matchLabels:
+            app.kubernetes.io/component: hnc-webhook
+        maxSkew: 1
+        topologyKey: topology.kubernetes.io/zone
+        whenUnsatisfiable: DoNotSchedule