homepage annotations

bootstrap.sh

@@ -28,6 +28,7 @@ Bootstrap()
 Gitea()
 {
     echo "Installing secret..."
+    kubectl apply -f "secrets/"
     kubectl apply -f "private/${CLUSTER}/gitea-repo-main.yaml"
     kubectl apply -f "private/${CLUSTER}/main.key"
 }

infra/base/homepage/homepage-extra-rbac.yaml

@@ -1,21 +0,0 @@
-apiVersion: rbac.authorization.k8s.io/v1
-kind: ClusterRole
-metadata:
-  name: homepage-services-reader
-rules:
-- apiGroups: [""]
-  resources: ["services"]
-  verbs: ["get", "list", "watch"]
----
-apiVersion: rbac.authorization.k8s.io/v1
-kind: ClusterRoleBinding
-metadata:
-  name: homepage-services-reader
-roleRef:
-  apiGroup: rbac.authorization.k8s.io
-  kind: ClusterRole
-  name: homepage-services-reader
-subjects:
-- kind: ServiceAccount
-  name: homepage
-  namespace: homepage

infra/base/homepage/homepage-widget-credentials-sealed.yaml

@@ -1,16 +0,0 @@
----
-apiVersion: bitnami.com/v1alpha1
-kind: SealedSecret
-metadata:
-  creationTimestamp: null
-  name: homepage-widget-credentials
-  namespace: homepage
-spec:
-  encryptedData:
-    HOMEPAGE_VAR_GITEA_TOKEN: AgAVN1C931EQpn+sodr3CpjlhORfJVTW8aUr+pGZQb+65Pb8QLGeVGVa7Jv60gDJUX3r+93/jMrEbCOeDL6I4qCz/V35wMCxFZLnXIdkmto0W4MKt6cK8To1/OP7EhQJOGBlSuOFsrwoy+HDtvLIqmyF0nrxhTusm9/NHrw+gCVwSTPhiAX1MCuSOSRWpbXvyNphW8j7aqUaV6ixDt424Fe4alEIShYELcS3EX/VPgsf2p2bhvBRCQOh3LEprkuxSFMuPfCBk06TPTbIN4saNVm0Ke0zW/pxkVNSiIxEnKjOmpPJtacsfWN7du+nQbx276G2qvWrf+iawJVq0Z/SLikA/NUFBL6EjSRfgE3cSOri8sbxsd0AycsFGyp98EM29wE+WOQl52M/lwl02EmCivqkICSO7Jp9pM1ScbmRMa5vcnupsGbVDxhRKLqxhAskt/BXDkRzvHN31gH3YmelES3JuqNMHV0urFxmX2oOX9Pxbtv63csc+zhy1Ui5aoex7TPnLdk7kYLSAE2MSrzT6wHvVhBC5kNnDYVrLehvJrT+eNh0MOLx2wkuJmIOxRAGUyNi5DfDnP6qnvj2aefEymLuOXAIUXH8DbeBtrjsd74HX2hhIfBlPkXvhJR3ks7i5RXjK2/YYHkgJ+nJoW80S9N7ciaRy103g74TNJZt6QzzL5Vb80qZ6yQOD4G081KmTLDmhHjJVIIv9M3nLh2s0IeBV3/Z5qHZmtjN7sSaKAn4MIr5FaH9quhx
-    HOMEPAGE_VAR_GRAFANA_TOKEN: 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
-  template:
-    metadata:
-      creationTimestamp: null
-      name: homepage-widget-credentials
-      namespace: homepage

infra/base/homepage/kustomization.yaml

@@ -2,5 +2,3 @@ apiVersion: kustomize.config.k8s.io/v1beta1
 kind: Kustomization
 resources:
 - homepage.yaml
-- homepage-widget-credentials-sealed.yaml
-- homepage-extra-rbac.yaml

infra/values/base/argocd-values.yaml

@@ -39,8 +39,11 @@ server:
       gethomepage.dev/name: "ArgoCD"
       gethomepage.dev/description: "GitOps continuous delivery"
       gethomepage.dev/group: "DevOps"
-      gethomepage.dev/icon: "argo-cd"
+      gethomepage.dev/icon: "argocd"
       gethomepage.dev/href: "https://argocd.forteapps.net"
+      gethomepage.dev/widget.type: "argocd"
+      gethomepage.dev/widget.url: "https://argocd.forteapps.net"
+      # gethomepage.dev/widget.key: "{{HOMEPAGE_VAR_ARGOCD_TOKEN}}"
     tls: true
   extraArgs:
   - --insecure

infra/values/base/gitea-values.yaml

@@ -122,7 +122,7 @@ ingress:
     gethomepage.dev/href: "https://git.forteapps.net"
     gethomepage.dev/widget.type: "gitea"
     gethomepage.dev/widget.url: "https://git.forteapps.net"
-    gethomepage.dev/widget.key: "{{HOMEPAGE_VAR_GITEA_TOKEN}}"
+    # gethomepage.dev/widget.key: "{{HOMEPAGE_VAR_GITEA_TOKEN}}"
   hosts:
   - host: git.forteapps.net
     paths:

infra/values/base/grafana-values.yaml

@@ -9,15 +9,15 @@ ingress:
     gethomepage.dev/group: "Monitoring"
     gethomepage.dev/icon: "grafana"
     gethomepage.dev/href: "https://grafana.forteapps.net"
+    gethomepage.dev/widget.type: "grafana"
+    gethomepage.dev/widget.url: "https://grafana.forteapps.net"
+    # gethomepage.dev/widget.username: "{{HOMEPAGE_VAR_GRAFANA_USER}}"
+    # gethomepage.dev/widget.password: "{{HOMEPAGE_VAR_GRAFANA_PASSWORD}}"
   tls:
   - secretName: grafana-tls
     hosts:
     - grafana.forteapps.net
 
-persistence:
-  enabled: true
-  size: 1Gi
-
 resources:
   requests:
     cpu: 50m

infra/values/base/homepage-values.yaml

@@ -14,21 +14,17 @@ config:
   # Scan all namespaces for services with gethomepage.dev/enabled: "true"
   kubernetes:
     mode: cluster
-    traefik: true
 
   settings:
     title: "Forte Platform"
     headerStyle: clean
     layout:
-      Apps:
+      DevOps:
         style: row
         columns: 4
       Identity:
         style: row
         columns: 4
-      DevOps:
-        style: row
-        columns: 4
       Monitoring:
         style: row
         columns: 4
@@ -43,19 +39,14 @@ config:
         showLabel: true
         label: "Cluster"
       nodes:
-        show: true
+        show: false
-        cpu: true
+  # Both empty — all entries come from K8s service annotations
-        memory: true
-        showLabel: true
-  # In-cluster entries come from K8s service annotations.
-  # External (out-of-cluster) services are listed here statically.
   bookmarks: []
-  services:
+  services: []
-  - Apps:
+  # Widget API credentials (optional — add via SealedSecret + envFrom below)
-    - Forte Feedback:
+  # Homepage reads HOMEPAGE_VAR_* env vars and substitutes them in widget annotations.
-        href: https://feedback.forteapps.net
+  # Example: gethomepage.dev/widget.key: "{{HOMEPAGE_VAR_GRAFANA_TOKEN}}"
-        description: Fortes internal feedback app
+  # To enable: create a sealed secret and add envFrom to load it.
-        icon: forte
 
 resources:
   requests:
@@ -64,10 +55,3 @@ resources:
   limits:
     cpu: 100m
     memory: 256Mi
-
-env:
-- name: HOMEPAGE_ALLOWED_HOSTS
-  value: start.forteapps.net
-envFrom:
-- secretRef:
-    name: homepage-widget-credentials

infra/values/upc-dev/databunker-values.yaml

@@ -1,10 +1,3 @@
 ingress:
   enabled: true
   host: databunker.forteapps.net
-  annotations:
-    gethomepage.dev/enabled: "true"
-    gethomepage.dev/name: "Databunker"
-    gethomepage.dev/description: "Secure Database for PII and PCI Records"
-    gethomepage.dev/group: "Identity"
-    gethomepage.dev/icon: "adminer"
-    gethomepage.dev/href: "https://databunker.forteapps.net"