Control Center deployment on Kubernetes control planes

[noctarius]

This PR adds the deployment of the control center on Kubernetes-based control planes. The http endpoint of the control center is attached to haproxy under the /controlcenter/ subpath.

[noctarius]

@geoffrey1330 since I enable port 443 on nginx, is it possible that nginx now wants to be able to forward all paths as TLS? 😅

Any thoughts? 🫣 https://github.com/simplyblock-io/sbcli/actions/runs/16706226623/job/47284723492?pr=548

...
vm.overcommit_memory = 1
+ sudo mkdir -p /etc/simplyblock
+ sudo chmod 777 /etc/simplyblock
+ sudo sh -c 'echo 1 >  /proc/sys/vm/drop_caches'
+ sudo sed -i 's/^#\?\s*ProcessSizeMax=.*/ProcessSizeMax=10G/' /etc/systemd/coredump.conf
2025-08-03 14:51:35,369: INFO: Installing dependencies > Done
2025-08-03 14:51:35,384: WARNING: Retrying (Retry(total=2, connect=None, read=None, redirect=None, status=None)) after connection broken by 'SSLError(SSLCertVerificationError(1, '[SSL: CERTIFICATE_VERIFY_FAILED] certificate verify failed: self-signed certificate in certificate chain (_ssl.c:1133)'))': /api/v1/nodes
2025-08-03 14:51:35,387: WARNING: Retrying (Retry(total=1, connect=None, read=None, redirect=None, status=None)) after connection broken by 'SSLError(SSLCertVerificationError(1, '[SSL: CERTIFICATE_VERIFY_FAILED] certificate verify failed: self-signed certificate in certificate chain (_ssl.c:1133)'))': /api/v1/nodes
2025-08-03 14:51:35,390: WARNING: Retrying (Retry(total=0, connect=None, read=None, redirect=None, status=None)) after connection broken by 'SSLError(SSLCertVerificationError(1, '[SSL: CERTIFICATE_VERIFY_FAILED] certificate verify failed: self-signed certificate in certificate chain (_ssl.c:1133)'))': /api/v1/nodes
Traceback (most recent call last):
Operation failed:  HTTPSConnectionPool(host='192.168.10.111', port=6443): Max retries exceeded with url: /api/v1/nodes (Caused by SSLError(SSLCertVerificationError(1, '[SSL: CERTIFICATE_VERIFY_FAILED] certificate verify failed: self-signed certificate in certificate chain (_ssl.c:1133)')))
  File "/usr/local/lib/python3.9/site-packages/urllib3/connectionpool.py", line 716, in urlopen
    httplib_response = self._make_request(
  File "/usr/local/lib/python3.9/site-packages/urllib3/connectionpool.py", line 404, in _make_request
    self._validate_conn(conn)
  File "/usr/local/lib/python3.9/site-packages/urllib3/connectionpool.py", line 1061, in _validate_conn
    conn.connect()
  File "/usr/local/lib/python3.9/site-packages/urllib3/connection.py", line 419, in connect
    self.sock = ssl_wrap_socket(
  File "/usr/local/lib/python3.9/site-packages/urllib3/util/ssl_.py", line 462, in ssl_wrap_socket
    ssl_sock = _ssl_wrap_socket_impl(sock, context, tls_in_tls)
  File "/usr/local/lib/python3.9/site-packages/urllib3/util/ssl_.py", line 504, in _ssl_wrap_socket_impl
    return ssl_context.wrap_socket(sock)
  File "/usr/lib64/python3.9/ssl.py", line 501, in wrap_socket
    return self.sslsocket_class._create(
  File "/usr/lib64/python3.9/ssl.py", line 1074, in _create
    self.do_handshake()
  File "/usr/lib64/python3.9/ssl.py", line 1343, in do_handshake
    self._sslobj.do_handshake()
ssl.SSLCertVerificationError: [SSL: CERTIFICATE_VERIFY_FAILED] certificate verify failed: self-signed certificate in certificate chain (_ssl.c:1133)
...

[geoffrey1330]

@geoffrey1330 since I enable port 443 on nginx, is it possible that nginx now wants to be able to forward all paths as TLS? 😅

Any thoughts? 🫣 https://github.com/simplyblock-io/sbcli/actions/runs/16706226623/job/47284723492?pr=548

...
vm.overcommit_memory = 1
+ sudo mkdir -p /etc/simplyblock
+ sudo chmod 777 /etc/simplyblock
+ sudo sh -c 'echo 1 >  /proc/sys/vm/drop_caches'
+ sudo sed -i 's/^#\?\s*ProcessSizeMax=.*/ProcessSizeMax=10G/' /etc/systemd/coredump.conf
2025-08-03 14:51:35,369: INFO: Installing dependencies > Done
2025-08-03 14:51:35,384: WARNING: Retrying (Retry(total=2, connect=None, read=None, redirect=None, status=None)) after connection broken by 'SSLError(SSLCertVerificationError(1, '[SSL: CERTIFICATE_VERIFY_FAILED] certificate verify failed: self-signed certificate in certificate chain (_ssl.c:1133)'))': /api/v1/nodes
2025-08-03 14:51:35,387: WARNING: Retrying (Retry(total=1, connect=None, read=None, redirect=None, status=None)) after connection broken by 'SSLError(SSLCertVerificationError(1, '[SSL: CERTIFICATE_VERIFY_FAILED] certificate verify failed: self-signed certificate in certificate chain (_ssl.c:1133)'))': /api/v1/nodes
2025-08-03 14:51:35,390: WARNING: Retrying (Retry(total=0, connect=None, read=None, redirect=None, status=None)) after connection broken by 'SSLError(SSLCertVerificationError(1, '[SSL: CERTIFICATE_VERIFY_FAILED] certificate verify failed: self-signed certificate in certificate chain (_ssl.c:1133)'))': /api/v1/nodes
Traceback (most recent call last):
Operation failed:  HTTPSConnectionPool(host='192.168.10.111', port=6443): Max retries exceeded with url: /api/v1/nodes (Caused by SSLError(SSLCertVerificationError(1, '[SSL: CERTIFICATE_VERIFY_FAILED] certificate verify failed: self-signed certificate in certificate chain (_ssl.c:1133)')))
  File "/usr/local/lib/python3.9/site-packages/urllib3/connectionpool.py", line 716, in urlopen
    httplib_response = self._make_request(
  File "/usr/local/lib/python3.9/site-packages/urllib3/connectionpool.py", line 404, in _make_request
    self._validate_conn(conn)
  File "/usr/local/lib/python3.9/site-packages/urllib3/connectionpool.py", line 1061, in _validate_conn
    conn.connect()
  File "/usr/local/lib/python3.9/site-packages/urllib3/connection.py", line 419, in connect
    self.sock = ssl_wrap_socket(
  File "/usr/local/lib/python3.9/site-packages/urllib3/util/ssl_.py", line 462, in ssl_wrap_socket
    ssl_sock = _ssl_wrap_socket_impl(sock, context, tls_in_tls)
  File "/usr/local/lib/python3.9/site-packages/urllib3/util/ssl_.py", line 504, in _ssl_wrap_socket_impl
    return ssl_context.wrap_socket(sock)
  File "/usr/lib64/python3.9/ssl.py", line 501, in wrap_socket
    return self.sslsocket_class._create(
  File "/usr/lib64/python3.9/ssl.py", line 1074, in _create
    self.do_handshake()
  File "/usr/lib64/python3.9/ssl.py", line 1343, in do_handshake
    self._sslobj.do_handshake()
ssl.SSLCertVerificationError: [SSL: CERTIFICATE_VERIFY_FAILED] certificate verify failed: self-signed certificate in certificate chain (_ssl.c:1133)
...

@noctarius Did you set nginx.ingress.kubernetes.io/ssl-redirect: "true" ?

[geoffrey1330]

@geoffrey1330 since I enable port 443 on nginx, is it possible that nginx now wants to be able to forward all paths as TLS? 😅

Any thoughts? 🫣 https://github.com/simplyblock-io/sbcli/actions/runs/16706226623/job/47284723492?pr=548

...
vm.overcommit_memory = 1
+ sudo mkdir -p /etc/simplyblock
+ sudo chmod 777 /etc/simplyblock
+ sudo sh -c 'echo 1 >  /proc/sys/vm/drop_caches'
+ sudo sed -i 's/^#\?\s*ProcessSizeMax=.*/ProcessSizeMax=10G/' /etc/systemd/coredump.conf
2025-08-03 14:51:35,369: INFO: Installing dependencies > Done
2025-08-03 14:51:35,384: WARNING: Retrying (Retry(total=2, connect=None, read=None, redirect=None, status=None)) after connection broken by 'SSLError(SSLCertVerificationError(1, '[SSL: CERTIFICATE_VERIFY_FAILED] certificate verify failed: self-signed certificate in certificate chain (_ssl.c:1133)'))': /api/v1/nodes
2025-08-03 14:51:35,387: WARNING: Retrying (Retry(total=1, connect=None, read=None, redirect=None, status=None)) after connection broken by 'SSLError(SSLCertVerificationError(1, '[SSL: CERTIFICATE_VERIFY_FAILED] certificate verify failed: self-signed certificate in certificate chain (_ssl.c:1133)'))': /api/v1/nodes
2025-08-03 14:51:35,390: WARNING: Retrying (Retry(total=0, connect=None, read=None, redirect=None, status=None)) after connection broken by 'SSLError(SSLCertVerificationError(1, '[SSL: CERTIFICATE_VERIFY_FAILED] certificate verify failed: self-signed certificate in certificate chain (_ssl.c:1133)'))': /api/v1/nodes
Traceback (most recent call last):
Operation failed:  HTTPSConnectionPool(host='192.168.10.111', port=6443): Max retries exceeded with url: /api/v1/nodes (Caused by SSLError(SSLCertVerificationError(1, '[SSL: CERTIFICATE_VERIFY_FAILED] certificate verify failed: self-signed certificate in certificate chain (_ssl.c:1133)')))
  File "/usr/local/lib/python3.9/site-packages/urllib3/connectionpool.py", line 716, in urlopen
    httplib_response = self._make_request(
  File "/usr/local/lib/python3.9/site-packages/urllib3/connectionpool.py", line 404, in _make_request
    self._validate_conn(conn)
  File "/usr/local/lib/python3.9/site-packages/urllib3/connectionpool.py", line 1061, in _validate_conn
    conn.connect()
  File "/usr/local/lib/python3.9/site-packages/urllib3/connection.py", line 419, in connect
    self.sock = ssl_wrap_socket(
  File "/usr/local/lib/python3.9/site-packages/urllib3/util/ssl_.py", line 462, in ssl_wrap_socket
    ssl_sock = _ssl_wrap_socket_impl(sock, context, tls_in_tls)
  File "/usr/local/lib/python3.9/site-packages/urllib3/util/ssl_.py", line 504, in _ssl_wrap_socket_impl
    return ssl_context.wrap_socket(sock)
  File "/usr/lib64/python3.9/ssl.py", line 501, in wrap_socket
    return self.sslsocket_class._create(
  File "/usr/lib64/python3.9/ssl.py", line 1074, in _create
    self.do_handshake()
  File "/usr/lib64/python3.9/ssl.py", line 1343, in do_handshake
    self._sslobj.do_handshake()
ssl.SSLCertVerificationError: [SSL: CERTIFICATE_VERIFY_FAILED] certificate verify failed: self-signed certificate in certificate chain (_ssl.c:1133)
...

Also i have an open PR that will support TLS maybe you can try using the approach from the PR

#561