Merge branch 'main' of ssh://git.xirion.net:2222/olympus/flux

cluster/apps/presidential-paradise/zookeeper/deployment.yaml

@@ -0,0 +1,45 @@
+apiVersion: apps/v1
+kind: Deployment
+metadata:
+  name: zookeeper
+  namespace: presidential-paradise
+  labels:
+    app: zookeeper
+spec:
+  replicas: 3
+  selector:
+    matchLabels:
+      app: zookeeper
+  strategy:
+    type: RollingUpdate
+    rollingUpdate:
+      maxSurge: 34%
+      maxUnavailable: 34%
+  template:
+    metadata:
+      name: zookeeper
+      labels:
+        app: zookeeper
+    spec:
+      containers:
+      - name: zookeeper
+        image: docker.io/0x76/zookeeper:manual
+        ports:
+          - containerPort: 8085
+        env:
+          - name: LANG
+            value: C.UTF-8
+          - name: HOSTNAME
+            valueFrom:
+              fieldRef:
+                fieldPath: status.podIP
+          - name: SERVICE_NAME
+            value: zookeeper-private.default.svc.cluster.local
+        resources: {}
+        securityContext:
+          privileged: false
+          procMount: Default
+        terminationMessagePath: /dev/termination-log
+        terminationMessagePolicy: File
+      dnsPolicy: ClusterFirst
+      terminationGracePeriodSeconds: 30

cluster/apps/presidential-paradise/zookeeper/ingress.yaml

@@ -0,0 +1,18 @@
+apiVersion: networking.k8s.io/v1
+kind: Ingress
+metadata:
+  name: zookeeper
+  namespace: presidential-paradise
+spec:
+  rules:
+  - host: "zookeeper.0x76.dev"
+    http:
+      paths:
+      - path: /
+        pathType: Prefix
+        backend:
+          service:
+            name: zookeeper
+            port:
+              number: 8085
+

cluster/apps/presidential-paradise/zookeeper/kustomization.yaml

@@ -0,0 +1,6 @@
+apiVersion: kustomize.config.k8s.io/v1beta1
+kind: Kustomization
+resources:
+  - deployment.yaml
+  - svc.yaml
+  - ingress.yaml

cluster/apps/presidential-paradise/zookeeper/svc.yaml

@@ -0,0 +1,24 @@
+apiVersion: v1
+kind: Service
+metadata:
+  name: zookeeper-private
+  namespace: presidential-paradise
+spec:
+  clusterIP: None
+  ports:
+  - name: epmd
+    port: 4369
+  selector:
+    app: zookeeper
+---
+apiVersion: v1
+kind: Service
+metadata:
+  name: zookeeper
+  namespace: presidential-paradise
+spec:
+  ports:
+  - name: http
+    port: 8085
+  selector:
+    app: zookeeper

cluster/base/flux-system/charts/helm/external-secrets-charts.yaml

@@ -0,0 +1,10 @@
+---
+apiVersion: source.toolkit.fluxcd.io/v1beta1
+kind: HelmRepository
+metadata:
+  name: external-secrets-charts
+  namespace: flux-system
+spec:
+  interval: 15m0s
+  url: https://charts.external-secrets.io
+

cluster/base/flux-system/charts/helm/kustomization.yaml

@@ -3,3 +3,5 @@ kind: Kustomization
 resources:
   - metallb-charts.yaml
   - traefik-charts.yaml
+  - external-secrets-charts.yaml
+

cluster/core/external-secrets/external-secrets/helm-release.yaml

@@ -0,0 +1,24 @@
+---
+apiVersion: helm.toolkit.fluxcd.io/v2beta1
+kind: HelmRelease
+metadata:
+  name: external-secrets
+  namespace: external-secrets
+spec:
+  interval: 5m
+  chart:
+    spec:
+      # renovate: registryUrl=https://charts.external-secrets.io
+      chart: external-secrets
+      version: 0.3.7
+      sourceRef:
+        kind: HelmRepository
+        name: external-secrets-charts
+        namespace: flux-system
+      interval: 5m
+  values:
+    installCRDs: false
+  install:
+    crds: Skip
+  upgrade:
+    crds: Skip

cluster/core/external-secrets/external-secrets/kustomization.yaml

@@ -0,0 +1,5 @@
+---
+apiVersion: kustomize.config.k8s.io/v1beta1
+kind: Kustomization
+resources:
+  - helm-release.yaml

cluster/core/external-secrets/kustomization.yaml

@@ -0,0 +1,5 @@
+---
+apiVersion: kustomize.config.k8s.io/v1beta1
+kind: Kustomization
+resources:
+  - external-secrets

cluster/core/kustomization.yaml

@@ -3,3 +3,5 @@ kind: Kustomization
 resources:
   - namespaces
   - networking
+  - external-secrets
+

cluster/core/namespaces/external-secrets.yaml

@@ -0,0 +1,5 @@
+---
+apiVersion: v1
+kind: Namespace
+metadata:
+  name: external-secrets

cluster/core/namespaces/kustomization.yaml

@@ -3,3 +3,5 @@ kind: Kustomization
 resources:
   - presidential-paradise.yaml
   - networking.yaml
+  - external-secrets.yaml
+

cluster/crds/external-secrets/crds.yaml

@@ -0,0 +1,31 @@
+---
+apiVersion: source.toolkit.fluxcd.io/v1beta1
+kind: GitRepository
+metadata:
+  name: external-secrets-crd-source
+  namespace: flux-system
+spec:
+  interval: 30m
+  url: https://github.com/external-secrets/external-secrets.git
+  ref:
+    # renovate: registryUrl=https://charts.external-secrets.io chart=external-secrets
+    tag: v0.3.7
+  ignore: |
+    # exclude all
+    /*
+    # path to crds
+    !/deploy/crds/
+---
+apiVersion: kustomize.toolkit.fluxcd.io/v1beta2
+kind: Kustomization
+metadata:
+  name: external-secrets-crds
+  namespace: flux-system
+spec:
+  interval: 15m
+  prune: false
+  wait: true
+  sourceRef:
+    kind: GitRepository
+    name: external-secrets-crd-source
+

cluster/crds/external-secrets/kustomization.yaml

@@ -0,0 +1,4 @@
+apiVersion: kustomize.config.k8s.io/v1beta1
+kind: Kustomization
+resources:
+  - crds.yaml

cluster/crds/kustomization.yaml

@@ -2,3 +2,4 @@ apiVersion: kustomize.config.k8s.io/v1beta1
 kind: Kustomization
 resources:
  - traefik
+ - external-secrets