feat: cleanup some defaults

charts/all/sandbox/templates/peer-pods-cm.yaml

@@ -8,7 +8,7 @@ metadata:
 data:
   CLOUD_PROVIDER: "azure"
   VXLAN_PORT: "9000"
-  AZURE_INSTANCE_SIZE: "Standard_DC2as_v5" # CoCo peer pod
+  AZURE_INSTANCE_SIZE: "{{ .Values.global.coco.azure.defaultVMFlavour }}" 
   AZURE_INSTANCE_SIZES: "Standard_DC2as_v5,Standard_DC4as_v5,Standard_DC8as_v5,Standard_DC16as_v5"
   AZURE_RESOURCE_GROUP: "{{ .Values.global.azure.clusterResGroup }}"
   AZURE_REGION: "{{ .Values.global.azure.clusterRegion }}"

overrides/values-AWS.yaml

@@ -24,3 +24,7 @@
 #       # Using 'default' as that exists everywhere
 #       project: default
 #       path: common/letsencrypt
+
+global:
+  objectStorage:
+    backingStorageClass: "gp3-csi"

overrides/values-Azure.yaml

@@ -0,0 +1,31 @@
+# The following snippet can be commented out in oroder
+# to enable letsencrypt certificates on API endpoint and default
+# ingress of the cluster
+# It is currently very experimental and unsupported.
+# PLEASE read https://github.com/hybrid-cloud-patterns/common/tree/main/letsencrypt#readme
+# for all the limitations around it
+
+
+global:
+  objectStorage:
+    backingStorageClass: "managed-storage"
+
+
+# letsencrypt:
+#   enabled: true
+#   api_endpoint: true
+#   # FIXME: tweak this to match your region
+#   region: eu-central-1
+#   server: https://acme-v02.api.letsencrypt.org/directory
+#   # server: https://acme-staging-v02.api.letsencrypt.org/directory
+#   # FIXME: set this to your correct email
+#   email: iwashere@iwashere.com
+#
+# clusterGroup:
+#   applications:
+#     letsencrypt:
+#       name: letsencrypt
+#       namespace: letsencrypt
+#       # Using 'default' as that exists everywhere
+#       project: default
+#       path: common/letsencrypt

values-hub.yaml → values-allInOne.yaml

@@ -1,7 +1,7 @@
 # This is currently configured as an 'all in one' deployment
 
 clusterGroup:
-  name: hub
+  name: allInOne
   isHubCluster: true
   namespaces:
   - open-cluster-management
@@ -75,6 +75,7 @@ clusterGroup:
   - hub
   - vault
   - trustee
+  - auth
   - golang-external-secrets
   - sandbox
   - openshift-storage
@@ -146,7 +147,7 @@ clusterGroup:
     htpassword:
       name: htpassword
       namespace: openshift-config
-      project: config
+      project: auth
       path: charts/all/htpassword
 
 

values-global.yaml

@@ -30,12 +30,15 @@ global:
     pvcStorage: true
     replicas: 3
     storagePool: 50Gi
-    backingStorageClass: "managed-csi" # push into override file
+    backingStorageClass: ""
     # IF ODF exists we don't need to deploy an storage system
     existingODF: false
     odfStorageSystem: "ocs-external-storagecluster-storagesystem"
 
 main:
-  clusterGroupName: hub
+  # WARNING
+  # This default configuration uses a single cluster on azure.
+  # It funamentally violates the separation of duties.
+  clusterGroupName: allInOne
   multiSourceConfig:
     enabled: true