feat: добавлены аддоны CSI-S3, CSI-Ceph, CSI-GlusterFS, Vaultwarden

- CSI-S3 (ctrox/csi-s3): монтирование S3/MinIO бакетов как PVC,
  авто-интеграция с addon_minio через internal MinIO endpoint
- Rook-Ceph (csi-ceph): distributed block (RWO) и filesystem (RWX) storage,
  оператор Helm + CephCluster CRD + StorageClasses, опциональный Dashboard Ingress
- CSI GlusterFS: установка glusterfs-client на все ноды, CSI Driver из GitHub
  releases, StorageClass с Heketi provisioner, Endpoints для прямых подключений
- Vaultwarden (guerzon/vaultwarden): self-hosted Bitwarden, авто-версия,
  SMTP smtp.yandex.ru:465/force_tls, WebSocket, ingress TLS, ServiceMonitor

Обновлены: playbooks/addons.yml (8 пропущенных аддонов + 4 новых),
group_vars/all/addons.yml (флаги + комментарии конфигурации),
vault.yml.example (vaultwarden_admin_token, smtp_password, heketi_secret),
Makefile (PHONY + 4 новых цели)
This commit is contained in:
Sergey Antropoff
2026-04-25 18:19:22 +03:00
parent 5dc0fbcd3a
commit a209b8a9bf
20 changed files with 891 additions and 0 deletions

View File

@@ -135,3 +135,99 @@
when: addon_crowdsec | default(false) | bool
roles:
- role: "{{ playbook_dir }}/../addons/crowdsec/role"
- name: Install Harbor
hosts: k3s_master[0]
gather_facts: false
become: true
when: addon_harbor | default(false) | bool
roles:
- role: "{{ playbook_dir }}/../addons/harbor/role"
- name: Install Gitea
hosts: k3s_master[0]
gather_facts: false
become: true
when: addon_gitea | default(false) | bool
roles:
- role: "{{ playbook_dir }}/../addons/gitea/role"
- name: Install ownCloud OCIS
hosts: k3s_master[0]
gather_facts: false
become: true
when: addon_owncloud | default(false) | bool
roles:
- role: "{{ playbook_dir }}/../addons/owncloud/role"
- name: Install Nextcloud
hosts: k3s_master[0]
gather_facts: false
become: true
when: addon_nextcloud | default(false) | bool
roles:
- role: "{{ playbook_dir }}/../addons/nextcloud/role"
- name: Install Loki
hosts: k3s_master[0]
gather_facts: false
become: true
when: addon_loki | default(false) | bool
roles:
- role: "{{ playbook_dir }}/../addons/loki/role"
- name: Install Promtail
hosts: k3s_master[0]
gather_facts: false
become: true
when: addon_promtail | default(false) | bool
roles:
- role: "{{ playbook_dir }}/../addons/promtail/role"
- name: Install Tempo
hosts: k3s_master[0]
gather_facts: false
become: true
when: addon_tempo | default(false) | bool
roles:
- role: "{{ playbook_dir }}/../addons/tempo/role"
- name: Install Pushgateway
hosts: k3s_master[0]
gather_facts: false
become: true
when: addon_pushgateway | default(false) | bool
roles:
- role: "{{ playbook_dir }}/../addons/pushgateway/role"
- name: Install CSI S3 Driver
hosts: k3s_master[0]
gather_facts: false
become: true
when: addon_csi_s3 | default(false) | bool
roles:
- role: "{{ playbook_dir }}/../addons/csi-s3/role"
- name: Install Rook-Ceph
hosts: k3s_master[0]
gather_facts: false
become: true
when: addon_csi_ceph | default(false) | bool
roles:
- role: "{{ playbook_dir }}/../addons/csi-ceph/role"
- name: Install CSI GlusterFS Driver
hosts: k3s_master[0]
gather_facts: true
become: true
when: addon_csi_glusterfs | default(false) | bool
roles:
- role: "{{ playbook_dir }}/../addons/csi-glusterfs/role"
- name: Install Vaultwarden
hosts: k3s_master[0]
gather_facts: false
become: true
when: addon_vaultwarden | default(false) | bool
roles:
- role: "{{ playbook_dir }}/../addons/vaultwarden/role"