Deploy isolated Old IPMI browser behind Authentik in oldimpi

bootstrap/kustomization.yaml

@@ -149,3 +149,5 @@ resources:
 - ghostfolio-postgresql.yaml
 - ghostfolio-valkey.yaml
 - ghostfolio.yaml
+- oldipmi-project.yaml
+- oldipmi.yaml

bootstrap/oldipmi-project.yaml

@@ -0,0 +1,28 @@
+apiVersion: argoproj.io/v1alpha1
+kind: AppProject
+metadata:
+  name: oldipmi
+  namespace: argocd
+spec:
+  description: Isolated legacy IPMI browser
+  sourceRepos:
+    - https://brunner.ninja/charts
+    - https://code.brunner.ninja/feedc0de/homelab-gitops.git
+  destinations:
+    - namespace: oldimpi
+      server: https://kubernetes.default.svc
+  namespaceResourceWhitelist:
+    - group: ''
+      kind: ConfigMap
+    - group: ''
+      kind: Service
+    - group: apps
+      kind: Deployment
+    - group: networking.k8s.io
+      kind: Ingress
+    - group: networking.k8s.io
+      kind: NetworkPolicy
+    - group: cilium.io
+      kind: CiliumNetworkPolicy
+    - group: traefik.io
+      kind: Middleware

bootstrap/oldipmi.yaml

@@ -0,0 +1,36 @@
+apiVersion: argoproj.io/v1alpha1
+kind: Application
+metadata:
+  name: oldipmi
+  namespace: argocd
+spec:
+  project: oldipmi
+  sources:
+    - repoURL: https://brunner.ninja/charts
+      chart: oldipmi
+      targetRevision: 0.0.0
+      helm:
+        releaseName: oldipmi
+        valueFiles:
+          - $values/apps/oldipmi/values.yaml
+    - repoURL: https://code.brunner.ninja/feedc0de/homelab-gitops.git
+      targetRevision: main
+      ref: values
+    - repoURL: https://code.brunner.ninja/feedc0de/homelab-gitops.git
+      targetRevision: main
+      path: apps/oldipmi/resources
+  destination:
+    server: https://kubernetes.default.svc
+    namespace: oldimpi
+  syncPolicy:
+    automated:
+      enabled: true
+      prune: false
+      selfHeal: true
+    managedNamespaceMetadata:
+      labels:
+        pod-security.kubernetes.io/enforce: baseline
+        pod-security.kubernetes.io/audit: restricted
+        pod-security.kubernetes.io/warn: restricted
+    syncOptions:
+      - CreateNamespace=true