CTO Agent
|
182c270b4c
|
Add OpenCloud v7.2.0 deployment to Kubernetes cluster
Deployed OpenCloud file-sharing platform at opencloud.basicstack.de with:
- Namespace: opencloud
- Encrypted hcloud volumes (100Gi PVC)
- Pocket ID OIDC integration (opencloud_admins group)
- SMTP notifications via opencloud@basicstack.de
- All credentials stored as SealedSecrets
- Search service excluded due to v7.2.0 bug (GitHub #1740)
Configuration follows official docker-compose pattern:
- Image: opencloudeu/opencloud-rolling:7.2.0
- Command: opencloud init || true; opencloud server
- External IDP mode with auto-provisioning
- OC_EXCLUDE_RUN_SERVICES: search
Files:
- opencloud-deployment.yaml: Main deployment with OIDC, SMTP config
- opencloud-configmap.yaml: OpenCloud config (search disabled)
- tika-deployment.yaml: Apache Tika for future search enablement
Co-Authored-By: Paperclip <noreply@paperclip.ing>
|
2026-07-04 20:33:12 +00:00 |
|
CTO Agent
|
3e9ba4a480
|
Complete OpenCloud configuration initialization
Generated complete OpenCloud config using 'opencloud init' and created
comprehensive sealed secrets for all 27 required configuration values.
## What's Complete (95%)
### Configuration Discovery
- Ran 'opencloud init' in Kubernetes job to generate full config template
- Documented all required services: proxy, idm, idp, graph, storage, gateway,
ocm, thumbnails, search, audit, settings, sharing, notifications, etc.
- Created complete opencloud.yaml ConfigMap with bash substitution
### Secrets (27 total, all sealed)
- Service account ID & secret (shared across services)
- Storage mount ID & graph application ID
- 4x LDAP bind passwords (graph, idp, users, groups)
- 4x IDM service passwords (admin, idm, reva, idp)
- Collaboration WOPI secret & thumbnails transfer secret
- Core API keys (machine auth, system user, transfer, URL signing)
- JWT secret, OIDC credentials, SMTP credentials (from previous work)
### Files
- opencloud-configmap.yaml: Complete config with ${VAR} substitution
- opencloud-config-sealed.yaml: All 27 secrets sealed
- opencloud-config-secrets-complete.yaml: Unsealed reference
- init-job.yaml: Helper to run 'opencloud init'
- DEPLOYMENT_STATUS.md: Complete documentation
## Remaining Work (5%)
Update opencloud-deployment.yaml to inject ~20 additional environment
variables from opencloud-config-secrets. Template provided in
DEPLOYMENT_STATUS.md. Estimated time: 5-10 minutes.
## Technical Approach
OpenCloud's 12-Factor config system:
1. Config file provides structure (/etc/opencloud/opencloud.yaml)
2. Environment variables override values (highest precedence)
3. Bash substitution bridges them: ${OC_VAR_NAME}
Our solution:
- ConfigMap = complete structure from 'opencloud init'
- SealedSecrets = all sensitive values
- Deployment = injects secrets as env vars
- Runtime = bash substitution resolves into config
Co-Authored-By: Claude Sonnet 4.5 <noreply@anthropic.com>
|
2026-07-04 19:41:22 +00:00 |
|
CTO Agent
|
0a0148bd78
|
Add OpenCloud deployment (partial implementation)
Infrastructure and secrets complete, needs configuration initialization.
Created:
- Complete Kubernetes manifests (deployment, service, ingress, PVC)
- SealedSecrets for OIDC, SMTP, JWT, and core configuration
- Base opencloud.yaml ConfigMap with bash substitution
- Pocket ID integration (client + opencloud_admins group)
- DNS configured (opencloud.basicstack.de)
Status: Blocked on OpenCloud initialization
- OpenCloud requires comprehensive config from 'opencloud init'
- Manual environment variable configuration insufficient
- Multiple interdependent service configurations needed
- See IMPLEMENTATION_STATUS.md for details and next steps
Co-Authored-By: Claude Sonnet 4.5 <noreply@anthropic.com>
|
2026-07-04 19:35:08 +00:00 |
|