Makefile

@@ -0,0 +1,9 @@
+FOLDERS := infra/traefik infra/storage infra/monitoring infra/authelia apps/namesny-com apps/mlflow apps/gitea apps/code-server
+
+all: $(FOLDERS)
+
+$(FOLDERS):
+	@echo "Deploying $@..."
+	cd $(CURDIR)/$@ && kustomize build --enable-helm --enable-alpha-plugins --enable-exec . | kubectl apply -f -
+
+.PHONY: deploy $(FOLDERS)

apps/gitea/secret-generator.yaml

@@ -8,6 +8,5 @@ metadata:
           path: ksops
 files:
 - ./gitea-admin-secret.enc.yaml
-- ./renovate-bot-secret.enc.yaml
 - ./runner-secret.enc.yaml
 

apps/mlflow/mlflow-deployment.yaml

@@ -30,6 +30,15 @@ spec:
             name: minio-admin-secret
         - secretRef:
             name: minio-user-secret
+      - name: init-db-upgrade
+        image: git.namesny.com/cluster/mlflow:latest
+        envFrom:
+        - secretRef:
+            name: mlflow-secret
+        command: ["/bin/sh", "-c"]
+        args:
+          - mlflow db upgrade $MLFLOW_BACKEND_STORE_URI;
+            exit 0;
       containers:
       - name: mlflow
         image: git.namesny.com/cluster/mlflow:latest

infra/authelia/kustomization.yaml

@@ -6,7 +6,6 @@ namespace: auth
 resources:
 - namespace.yaml
 - ingress.yaml
-- basic-auth-middleware.yaml
 - forward-auth-middleware.yaml
 
 generators: