allineamento

2026-07-17 10:00:09 +02:00
parent 20d506407a
commit 6ffb202579
24 changed files with 714 additions and 30 deletions
--- a/add-on/Istruzioni_kubeedge.txt
+++ b/add-on/Istruzioni_kubeedge.txt
@@ -117,6 +117,11 @@ wget https://github.com/kubernetes-sigs/cri-tools/releases/download/$VERSION/cri
 sudo tar zxvf crictl-$VERSION-linux-amd64.tar.gz -C /usr/local/bin
 rm -f crictl-$VERSION-linux-amd64.tar.gz

+
+
+Taint:kubectl taint nodes edge-node-2 edgenode=true:NoExecute
+Label: kubectl label node edge-node-2 edgeproject=resilki
+
 edge-cleanup.sh:

 #!/bin/bash
@@ -273,4 +278,18 @@ done
  
  
 verifica :  
-mosquitto_sub -h localhost -t sensors/home/livingroom  
+mosquitto_sub -h localhost -t sensors/home/livingroom  
+
+#### modifiche per rasperry##############################################
+
+#cgroups
+vi /boot/firmware/cmdline.txt
+Add cgroup parameters:Add the following to the end of the existing line (do not create a new line):
+textcgroup_enable=cpuset cgroup_enable=memory cgroup_memory=1
+
+#streaming
+su /etc/kubeedge/config/edgecore.yaml
+modules:
+  edgeStream:
+    enable: true
+
--- a/add-on/RabbitMQ.txt
+++ b/add-on/RabbitMQ.txt
@@ -21,7 +21,7 @@ spec:
  replicas: 1
  resources:
    requests:
-      cpu: 1
+      cpu: 500m
      memory: 1Gi
    limits:
      cpu: 1
@@ -33,7 +33,7 @@ spec:
      collect_statistics_interval = 10000
  persistence:
    storageClassName: csi-rbdfs-sc
-    storage: "5Gi"
+    storage: "2Gi"
  affinity:
    podAntiAffinity:
      requiredDuringSchedulingIgnoredDuringExecution:
--- a/add-on/act-runner.yaml
+++ b/add-on/act-runner.yaml
@@ -0,0 +1,58 @@
+apiVersion: apps/v1
+kind: Deployment
+metadata:
+  name: gitea-act-runner-dind
+spec:
+  replicas: 1
+  selector:
+    matchLabels:
+      app: gitea-act-runner-dind
+  template:
+    metadata:
+      labels:
+        app: gitea-act-runner-dind
+    spec:
+      containers:
+      - name: runner
+        image: vegardit/gitea-act-runner:dind-latest
+        securityContext:
+          privileged: true
+        env:
+        - name: GITEA_INSTANCE_URL
+          value: "http://gitea.italiadatacenter.com"
+        - name: GITEA_RUNNER_REGISTRATION_TOKEN
+          valueFrom:
+            secretKeyRef:
+              name: gitea-runner-secret
+              key: registration-token
+        volumeMounts:
+        - name: data
+          mountPath: /data
+        - name: docker-storage
+          mountPath: /var/lib/docker
+      volumes:
+      - name: data
+        persistentVolumeClaim:
+          claimName: gitea-runner-data-pvc
+      - name: docker-storage
+        emptyDir: {}
+---
+---
+apiVersion: v1
+kind: Secret
+metadata:
+  name: gitea-runner-secret
+type: Opaque
+stringData:
+  registration-token: "Yx9aGssgXzcsoX75KOpFY1OliQz5cO9bTR0tuo4Z"
+---
+apiVersion: v1
+kind: PersistentVolumeClaim
+metadata:
+  name: gitea-runner-pvc
+spec:
+  accessModes:
+  - ReadWriteOnce
+  resources:
+    requests:
+      storage: 10Gi
--- a/add-on/certm.yaml
+++ b/add-on/certm.yaml
@@ -0,0 +1,139 @@
+apiVersion: apps/v1
+kind: Deployment
+metadata:
+  annotations:
+    deployment.kubernetes.io/revision: "1"
+    meta.helm.sh/release-name: cert-manager
+    meta.helm.sh/release-namespace: cert-manager
+  creationTimestamp: "2026-02-08T14:54:09Z"
+  generation: 1
+  labels:
+    app: cert-manager
+    app.kubernetes.io/component: controller
+    app.kubernetes.io/instance: cert-manager
+    app.kubernetes.io/managed-by: Helm
+    app.kubernetes.io/name: cert-manager
+    app.kubernetes.io/version: v1.19.3
+    helm.sh/chart: cert-manager-v1.19.3
+  name: cert-manager
+  namespace: cert-manager
+  resourceVersion: "90308180"
+  uid: addcc5cd-6990-45bc-81c0-8a5b84388744
+spec:
+  progressDeadlineSeconds: 600
+  replicas: 1
+  revisionHistoryLimit: 10
+  selector:
+    matchLabels:
+      app.kubernetes.io/component: controller
+      app.kubernetes.io/instance: cert-manager
+      app.kubernetes.io/name: cert-manager
+  strategy:
+    rollingUpdate:
+      maxSurge: 25%
+      maxUnavailable: 25%
+    type: RollingUpdate
+  template:
+    metadata:
+      annotations:
+        prometheus.io/path: /metrics
+        prometheus.io/port: "9402"
+        prometheus.io/scrape: "true"
+      labels:
+        app: cert-manager
+        app.kubernetes.io/component: controller
+        app.kubernetes.io/instance: cert-manager
+        app.kubernetes.io/managed-by: Helm
+        app.kubernetes.io/name: cert-manager
+        app.kubernetes.io/version: v1.19.3
+        helm.sh/chart: cert-manager-v1.19.3
+    spec:
+      initContainers:
+      - name: resolve-gateway
+        image: busybox:1.35
+        command:
+          - sh
+          - -c
+          - |
+            GW_IP=$(getent hosts main-gateway-nginx.nginx-gateway.svc.cluster.local 2>/dev/null | awk '{print $1}')
+            if [ -n "$GW_IP" ]; then
+              echo "$GW_IP main-gateway-nginx.nginx-gateway.svc.cluster.local" >> /etc/hosts
+              echo "$GW_IP main-gateway-nginx" >> /etc/hosts
+              echo "Risoluzione aggiunta: $GW_IP main-gateway-nginx"
+            else
+              echo "Avviso: impossibile risolvere main-gateway-nginx.nginx-gateway.svc.cluster.local"
+            fi
+      containers:
+      - args:
+        - --v=2
+        - --config=/var/cert-manager/config/config.yaml
+        - --cluster-resource-namespace=$(POD_NAMESPACE)
+        - --leader-election-namespace=kube-system
+        - --acme-http01-solver-image=quay.io/jetstack/cert-manager-acmesolver:v1.19.3
+        - --max-concurrent-challenges=60
+        env:
+        - name: POD_NAMESPACE
+          valueFrom:
+            fieldRef:
+              apiVersion: v1
+              fieldPath: metadata.namespace
+        image: quay.io/jetstack/cert-manager-controller:v1.19.3
+        imagePullPolicy: IfNotPresent
+        livenessProbe:
+          failureThreshold: 8
+          httpGet:
+            path: /livez
+            port: http-healthz
+            scheme: HTTP
+          initialDelaySeconds: 10
+          periodSeconds: 10
+          successThreshold: 1
+          timeoutSeconds: 15
+        name: cert-manager-controller
+        ports:
+        - containerPort: 9402
+          name: http-metrics
+          protocol: TCP
+        - containerPort: 9403
+          name: http-healthz
+          protocol: TCP
+        resources: {}
+        securityContext:
+          allowPrivilegeEscalation: false
+          capabilities:
+            drop:
+            - ALL
+          readOnlyRootFilesystem: true
+        terminationMessagePath: /dev/termination-log
+        terminationMessagePolicy: File
+        volumeMounts:
+        - mountPath: /var/cert-manager/config
+          name: config
+      dnsPolicy: ClusterFirst
+      enableServiceLinks: false
+      hostAliases:
+        - ip: "127.0.0.1"
+          hostnames:
+            - "localhost.local"
+            - "example.local"
+        # Aggiungi altri domini locali qui:
+        # - ip: "10.0.0.1"
+        #   hostnames:
+        #     - "internal.domain"
+        #     - "api.domain"
+      nodeSelector:
+        kubernetes.io/os: linux
+      restartPolicy: Always
+      schedulerName: default-scheduler
+      securityContext:
+        runAsNonRoot: true
+        seccompProfile:
+          type: RuntimeDefault
+      serviceAccount: cert-manager
+      serviceAccountName: cert-manager
+      terminationGracePeriodSeconds: 30
+      volumes:
+      - configMap:
+          defaultMode: 420
+          name: cert-manager
+        name: config
--- a/add-on/dbgate.docker
+++ b/add-on/dbgate.docker
--- a/add-on/dbgate.yaml
+++ b/add-on/dbgate.yaml
@@ -3,6 +3,20 @@ kind: Namespace
 metadata:
  name: dbgate
 ---
+apiVersion: v1
+kind: ConfigMap
+metadata:
+  name: dbgate-data
+  namespace: dbgate
+data:
+  # Aggiungere qui i file di configurazione iniziali di dbgate (es. connections.yaml)
+  # I file verranno montati in /root/.dbgate nel container.
+  # Esempio:
+  # connections.yaml: |
+  #   - id: con1
+  #     engine: mysql@dbgate-plugin-mysql
+  #     ...
+---
 apiVersion: apps/v1
 kind: Deployment
 metadata:
@@ -33,6 +47,10 @@ spec:
            - name: CONNECTIONS
              value: ""

+          volumeMounts:
+            - name: dbgate-data
+              mountPath: /root/.dbgate
+
          resources:
            requests:
              cpu: "100m"
@@ -40,7 +58,12 @@ spec:

            limits:
              cpu: "500m"
-              memory: "512Mi"  
+              memory: "512Mi"
+
+      volumes:
+        - name: dbgate-data
+          configMap:
+            name: dbgate-data
 ---
 apiVersion: v1
 kind: Service
--- a/add-on/dns.json
+++ b/add-on/dns.json
@@ -0,0 +1,62 @@
+{
+  "response": {
+    "zone": {
+      "name": "italiadatacenter.com",
+      "type": "Primary",
+      "lastModified": "2026-06-17T06:07:53.4067414Z",
+      "disabled": false,
+      "soaSerial": 2026061700,
+      "internal": false,
+      "catalog": null,
+      "dnssecStatus": "Unsigned",
+      "hasDnssecPrivateKeys": false,
+      "notifyFailed": false,
+      "notifyFailedFor": []
+    },
+    "records": [
+      {
+        "name": "italiadatacenter.com",
+        "type": "NS",
+        "ttl": 14400,
+        "ttlString": "4h",
+        "disabled": false,
+        "rData": {
+          "nameServer": "pt.idc"
+        },
+        "dnssecStatus": "Unknown",
+        "lastUsedOn": "0001-01-01T00:00:00",
+        "lastModified": "2026-03-27T08:57:05.078Z",
+        "expiryTtl": 0,
+        "expiryTtlString": "0s"
+      },
+      {
+        "name": "italiadatacenter.com",
+        "type": "SOA",
+        "ttl": 900,
+        "ttlString": "15m",
+        "disabled": false,
+        "rData": {
+          "primaryNameServer": "pt.idc",
+          "responsiblePerson": "hostadmin@italiadatacenter.com",
+          "serial": 2026061700,
+          "refresh": 900,
+          "retry": 300,
+          "expire": 604800,
+          "minimum": 900,
+          "refreshString": "15m",
+          "retryString": "5m",
+          "expireString": "1w",
+          "minimumString": "15m",
+          "useSerialDateScheme": true
+        },
+        "dnssecStatus": "Unknown",
+        "lastUsedOn": "2026-06-17T17:37:31.9215889Z",
+        "lastModified": "2026-03-27T08:57:05.078Z",
+        "expiryTtl": 0,
+        "expiryTtlString": "0s"
+      }
+    ]
+  },
+  "server": "pt.idc",
+  "status": "ok"
+}
--- a/add-on/migrazione
+++ b/add-on/migrazione
@@ -0,0 +1,64 @@
+microservices
+ ./run_st2idc.sh sporteams-platform/microservices/tornei sporteams/tornei ./st_transform.env
+ ./run_st2idc.sh sporteams-platform/microservices/accessi sporteams/accessi ./st_transform.env
+ ./run_st2idc.sh sporteams-platform/microservices/sponsor sporteams/sponsor ./st_transform.env
+ ./run_st2idc.sh sporteams-platform/microservices/eventi-club sporteams/eventi-club ./st_transform.env
+ ./run_st2idc.sh sporteams-platform/microservices/notifiche sporteams/notifiche ./st_transform.env
+ ./run_st2idc.sh sporteams-platform/microservices/convocazioni sporteams/convocazioni ./st_transform.env
+ ./run_st2idc.sh sporteams-platform/microservices/eventi-wow sporteams/eventi-wow ./st_transform.env
+ ./run_st2idc.sh sporteams-platform/microservices/gare sporteams/gare ./st_transform.env
+ ./run_st2idc.sh sporteams-platform/microservices/referti sporteams/referti ./st_transform.env
+ ./run_st2idc.sh sporteams-platform/microservices/mail-sms sporteams/mail-sms ./st_transform.env
+ ./run_st2idc.sh sporteams-platform/microservices/anagrafiche sporteams/anagrafiche ./st_transform.env
+ ./run_st2idc.sh sporteams-platform/microservices/allenamenti sporteams/allenamenti ./st_transform.env
+ ./run_st2idc.sh sporteams-platform/microservices/strutture sporteams/strutture ./st_transform.env
+ ./run_st2idc.sh sporteams-platform/microservices/localita sporteams/localita ./st_transform.env
+ ./run_st2idc.sh sporteams-platform/microservices/companies sporteams/companies ./st_transform.env
+ ./run_st2idc.sh sporteams-platform/microservices/moduli sporteams/moduli ./st_transform.env
+
+progetti
+  ./run_st2idc.sh sporteams-platform/progetti/club/club-backend sporteams/club-backend ./st_transform.env
+  ./run_st2idc.sh sporteams-platform/progetti/club/club-frontend sporteams/club-frontend ./st_transform.env
+  
+  
+  
+  
+ lnd tornei
+ staysafe lite
+ giornalista 4.0
+ geco
+ 
+
+commesse
+ enba
+ sestra
+ ncslab
+ app camminatori
+
+
+microservices esterni
+ prenotazioni-enba
+ accessi-enba
+ prenotazioni-csi
+ accessi-csi 
+ prenotazioni-club
+ accessi-club  (microservizio giuneco per gli accessi per club)
+
+frontend:
+ homepage
+ wow-festival
+ match
+
+gateway:
+ webhooks
+ licenze
+ gateway accessi
+ wow-festival2
+ csi
+ mockapi
+ match
+ 
+cross services
+ supertoken
+ mongodb
+ nocodb 
--- a/add-on/migrazione
+++ b/add-on/migrazione
@@ -0,0 +1,49 @@
+Limec Club
+
+
+Run clonazioni:
+
+
+./run_st2idc.sh sporteams-platform/progetti/limec/microservices/accessi Sporteams/limecaccessi ./limec_transform.env true
+./run_st2idc.sh sporteams-platform/progetti/limec/microservices/strutture Sporteams/limecstrutture ./limec_transform.env true
+./run_st2idc.sh sporteams-platform/progetti/limec/microservices/convocazioni Sporteams/limecconvocazioni ./limec_transform.env true
+./run_st2idc.sh sporteams-platform/progetti/limec/microservices/mail-sms Sporteams/limecmail-sms ./limec_transform.env true
+./run_st2idc.sh sporteams-platform/progetti/limec/microservices/sponsor Sporteams/limecsponsor ./limec_transform.env true
+./run_st2idc.sh sporteams-platform/progetti/limec/microservices/piano-carriere Sporteams/limecpiano-carriere ./limec_transform.env true
+./run_st2idc.sh sporteams-platform/progetti/limec/limec-licenze Sporteams/limec-licenze ./limec_transform.env true
+./run_st2idc.sh sporteams-platform/progetti/limec/limec-backend Sporteams/limec-backend ./limec_transform.env true
+./run_st2idc.sh sporteams-platform/progetti/limec/limec-frontend Sporteams/limec-frontend ./limec_transform.env true
+./run_st2idc.sh sporteams-platform/progetti/limec/microservices/anagrafiche Sporteams/limecanagrafiche ./limec_transform.env true 
+./run_st2idc.sh sporteams-platform/progetti/limec/cross-services/supertokens Sporteams/limecsupertokens ./limec_transform.env true
+./run_st2idc.sh sporteams-platform/progetti/limec/microservices/moduli Sporteams/limecmoduli ./limec_transform.env true
+./run_st2idc.sh sporteams-platform/progetti/limec/microservices/companies Sporteams/limeccompanies ./limec_transform.env true
+./run_st2idc.sh sporteams-platform/progetti/limec/microservices/eventi-club Sporteams/limeceventi-club ./limec_transform.env true
+./run_st2idc.sh sporteams-platform/progetti/limec/microservices/gare Sporteams/  ./limec_transform.env true
+./run_st2idc.sh sporteams-platform/progetti/limec/microservices/notifiche Sporteams/limecnotifiche ./limec_transform.env true 
+./run_st2idc.sh sporteams-platform/progetti/limec/microservices/allenamenti Sporteams/limecallenamenti ./limec_transform.env true 
+
+
+# Modalità completa
+./clone-and-transform.sh -u https://gitlab.com -t glpat-xxx -r group/proj -d ./repo
+
+# Modalità transformation (skip GitLab clone)
+./clone-and-transform.sh -transformation -d ./existing-repo --gitea-repo group/proj -f ./transform.env
+
+
+limec-backend-dev                     ["gateway-limec-dev.pigreco66.it"]           30h
+limec-frontend-dev                    ["limecdev.pigreco66.it"]                    22h
+limeccompanies-dev                    ["limeccompaniesdev.pigreco66.it"]           5d2h
+limeceventi-club-dev                  ["limeceventiclubdev.pigreco66.it"]          3d17h
+limecmoduli-dev                       ["limecmoduliapidev.pigreco66.it"]           4d3h
+limecsupertokens-dev                  ["limecsupertokensdev.pigreco66.it"]         5d7
+
+nest.limecaccessi-dev.svc.cluster.local
+nest.limecsponsor-dev.svc.cluster.local
+nest.limecanagrafiche-dev.svc.cluster.local
+
+- gateway-limec-dev.pigreco66.it
+- limecdev.pigreco66.it     
+- limeccompaniesdev.pigreco66.it
+- limeceventiclubdev.pigreco66.it  
+- limecmoduliapidev.pigreco66.it   
+- limecsupertokensdev.pigreco66.it
--- a/add-on/migrazione
+++ b/add-on/migrazione
@@ -0,0 +1,54 @@
+Walk4All
+acc398
+accessi
+accessi_microservizio
+agim
+allenamenti
+anagrafiche
+anagrafiche_info
+asdgestold
+autocertificazioni
+camminatori
+club
+cmdb
+companies
+contatti
+convocazioni
+csi
+enba
+eventi
+eventi_wow
+gare
+geco
+licenze
+localita
+mail_sms
+match
+moduli
+moduli_info
+nocodb
+notifiche
+pgare
+piano_carriere
+referti
+segdigi
+segdigiold
+sestra
+sonar
+sonarq9
+sponsor
+sporteams-app
+strutture
+supertokens
+supertokens_match
+supertokens_sestra
+tornei
+
+
+./backuppg.sh dbdev16 anagrafiche postgresql-16-postgresql-0
+
+SELECT './backuppg.sh dbdev16 '||datname||' postgresql-16-postgresql-0'
+FROM pg_database
+WHERE datistemplate = false
+  AND datname <> 'postgres'
+ORDER BY datname
--- a/add-on/nfs-service.yaml
+++ b/add-on/nfs-service.yaml
@@ -0,0 +1,10 @@
+apiVersion: v1
+kind: PersistentVolumeClaim
+metadata:
+  name: nfs-backend
+spec:
+  accessModes:
+    - ReadWriteOnce
+  resources:
+    requests:
+      storage: 500Gi
--- a/add-on/postgresql.sh
+++ b/add-on/postgresql.sh
@@ -76,6 +76,26 @@ backup:


 --- pgadmin -------------------
+apiVersion: v1
+kind: ConfigMap
+metadata:
+  name: pgadmin-servers
+data:
+  servers.json: |
+    {
+      "Servers": {
+        "1": {
+          "Name": "pg-test-rw",
+          "Group": "Servers",
+          "Host": "leodeancluster-rw.leodean-dev.svc.cluster.local",
+          "Port": 5432,
+          "MaintenanceDB": "leodean",
+          "Username": "leodeanAdmin",
+          "SSLMode": "disable"
+        }
+      }
+    }
+---
 apiVersion: apps/v1
 kind: Deployment
 metadata:
@@ -100,6 +120,17 @@ spec:
              value: pgadmin@italiadatacenter.com
            - name: PGADMIN_DEFAULT_PASSWORD
              value: KAYQE1QA7uwUZ8uI
+            - name: PGADMIN_SERVER_JSON_FILE
+              value: /pgadmin4/servers.json
+          volumeMounts:
+            - name: pgadmin-servers-json
+              mountPath: /pgadmin4/servers.json
+              subPath: servers.json
+              readOnly: true
+      volumes:
+        - name: pgadmin-servers-json
+          configMap:
+            name: pgadmin-servers
 ---
 apiVersion: v1
 kind: Service
--- a/add-on/verdaccio.txt
+++ b/add-on/verdaccio.txt
@@ -0,0 +1,2 @@
+helm repo add verdaccio https://charts.verdaccio.org
+helm install npm verdaccio/verdaccio