From 7a46ee8d0b8377089d0f52c481daa8d581b8585a Mon Sep 17 00:00:00 2001 From: 0xFEEDC0DE64 Date: Mon, 19 Oct 2026 08:43:11 +0200 Subject: [PATCH] Stage Argo apps for next five services --- apps/30-birthday/values.yaml | 13 ++++++++++++ apps/metrics-server/values.yaml | 1 + apps/mktxp/values.yaml | 6 ++++++ apps/phppgadmin/values.yaml | 22 ++++++++++++++++++++ apps/traefik-error-pages/values.yaml | 29 +++++++++++++++++++++++++++ bootstrap/30-birthday.yaml | 21 +++++++++++++++++++ bootstrap/metrics-server-project.yaml | 29 +++++++++++++++++++++++++++ bootstrap/metrics-server.yaml | 21 +++++++++++++++++++ bootstrap/mktxp.yaml | 21 +++++++++++++++++++ bootstrap/phppgadmin.yaml | 21 +++++++++++++++++++ bootstrap/traefik-error-pages.yaml | 21 +++++++++++++++++++ 11 files changed, 205 insertions(+) create mode 100644 apps/30-birthday/values.yaml create mode 100644 apps/metrics-server/values.yaml create mode 100644 apps/mktxp/values.yaml create mode 100644 apps/phppgadmin/values.yaml create mode 100644 apps/traefik-error-pages/values.yaml create mode 100644 bootstrap/30-birthday.yaml create mode 100644 bootstrap/metrics-server-project.yaml create mode 100644 bootstrap/metrics-server.yaml create mode 100644 bootstrap/mktxp.yaml create mode 100644 bootstrap/phppgadmin.yaml create mode 100644 bootstrap/traefik-error-pages.yaml diff --git a/apps/30-birthday/values.yaml b/apps/30-birthday/values.yaml new file mode 100644 index 0000000..5824871 --- /dev/null +++ b/apps/30-birthday/values.yaml @@ -0,0 +1,13 @@ +origin: https://30.brunner.ninja +trustAuthentik: true +secrets: + invitation: 30-birthday-invitation + +persistence: + existingClaim: 30-birthday-data + +ingress: + enabled: true + host: 30.brunner.ninja + ingressClassName: traefik + tlsSecretName: brunner-ninja-tls diff --git a/apps/metrics-server/values.yaml b/apps/metrics-server/values.yaml new file mode 100644 index 0000000..8abcd1c --- /dev/null +++ b/apps/metrics-server/values.yaml @@ -0,0 +1 @@ +kubeletInsecureTls: true diff --git a/apps/mktxp/values.yaml b/apps/mktxp/values.yaml new file mode 100644 index 0000000..66811a1 --- /dev/null +++ b/apps/mktxp/values.yaml @@ -0,0 +1,6 @@ +existingConfigSecret: mktxp-credentials + +serviceMonitor: + enabled: true + labels: + release: prometheus diff --git a/apps/phppgadmin/values.yaml b/apps/phppgadmin/values.yaml new file mode 100644 index 0000000..7bebe90 --- /dev/null +++ b/apps/phppgadmin/values.yaml @@ -0,0 +1,22 @@ +ingress: + enabled: true + host: phppgadmin.brunner.ninja + ingressClassName: traefik + entrypoints: websecure + +servers: + - description: arschrock + host: arschrock + port: 5432 + sslmode: allow + defaultdb: template1 + - description: nextcloud-postgresql.nextcloud.svc.cluster.local + host: nextcloud-postgresql.nextcloud.svc.cluster.local + - description: postgresql.default.svc.cluster.local + host: postgresql.default.svc.cluster.local + - description: postgresql.authentik.svc.cluster.local + host: postgresql.authentik.svc.cluster.local + - description: postgresql.gramps.svc.cluster.local + host: postgresql.gramps.svc.cluster.local + - description: postgresql.matrix.svc.cluster.local + host: postgresql.matrix.svc.cluster.local diff --git a/apps/traefik-error-pages/values.yaml b/apps/traefik-error-pages/values.yaml new file mode 100644 index 0000000..0b35170 --- /dev/null +++ b/apps/traefik-error-pages/values.yaml @@ -0,0 +1,29 @@ +fullnameOverride: traefik-error-pages + +branding: + reverseProxyName: brunner.ninja Reverse Proxy + authenticationName: brunner.ninja Auth + clusterReachedText: The request reached the basement cluster + +auth: + enabled: true + marker: authentik + contextMiddlewareName: authentik-error-context + forwardMiddlewareName: authentik-forward + checkedMiddlewareName: authentik-error-checked + chainMiddlewareName: authentik + forwardAddress: http://authentik-server.authentik.svc.cluster.local/outpost.goauthentik.io/auth/traefik + trustForwardHeader: true + responseHeaders: + - X-authentik-username + - X-authentik-groups + - X-authentik-entitlements + - X-authentik-email + - X-authentik-name + - X-authentik-uid + - X-authentik-jwt + - X-authentik-meta-jwks + - X-authentik-meta-outpost + - X-authentik-meta-provider + - X-authentik-meta-app + - X-authentik-meta-version diff --git a/bootstrap/30-birthday.yaml b/bootstrap/30-birthday.yaml new file mode 100644 index 0000000..2295185 --- /dev/null +++ b/bootstrap/30-birthday.yaml @@ -0,0 +1,21 @@ +apiVersion: argoproj.io/v1alpha1 +kind: Application +metadata: + name: 30-birthday + namespace: argocd +spec: + project: homelab + sources: + - repoURL: https://brunner.ninja/charts + chart: 30-birthday + targetRevision: 0.0.0 + helm: + releaseName: 30-birthday + valueFiles: + - $values/apps/30-birthday/values.yaml + - repoURL: https://code.brunner.ninja/feedc0de/homelab-gitops.git + targetRevision: main + ref: values + destination: + server: https://kubernetes.default.svc + namespace: default diff --git a/bootstrap/metrics-server-project.yaml b/bootstrap/metrics-server-project.yaml new file mode 100644 index 0000000..c41bed1 --- /dev/null +++ b/bootstrap/metrics-server-project.yaml @@ -0,0 +1,29 @@ +apiVersion: argoproj.io/v1alpha1 +kind: AppProject +metadata: + name: metrics-server + namespace: argocd +spec: + description: Metrics Server and the aggregated metrics API + sourceRepos: + - https://brunner.ninja/charts + - https://code.brunner.ninja/feedc0de/homelab-gitops.git + destinations: + - namespace: kube-system + server: https://kubernetes.default.svc + clusterResourceWhitelist: + - group: apiregistration.k8s.io + kind: APIService + - group: rbac.authorization.k8s.io + kind: ClusterRole + - group: rbac.authorization.k8s.io + kind: ClusterRoleBinding + namespaceResourceWhitelist: + - group: "" + kind: Service + - group: "" + kind: ServiceAccount + - group: apps + kind: Deployment + - group: rbac.authorization.k8s.io + kind: RoleBinding diff --git a/bootstrap/metrics-server.yaml b/bootstrap/metrics-server.yaml new file mode 100644 index 0000000..ec4f70c --- /dev/null +++ b/bootstrap/metrics-server.yaml @@ -0,0 +1,21 @@ +apiVersion: argoproj.io/v1alpha1 +kind: Application +metadata: + name: metrics-server + namespace: argocd +spec: + project: metrics-server + sources: + - repoURL: https://brunner.ninja/charts + chart: metrics-server + targetRevision: 0.0.0 + helm: + releaseName: metrics-server + valueFiles: + - $values/apps/metrics-server/values.yaml + - repoURL: https://code.brunner.ninja/feedc0de/homelab-gitops.git + targetRevision: main + ref: values + destination: + server: https://kubernetes.default.svc + namespace: kube-system diff --git a/bootstrap/mktxp.yaml b/bootstrap/mktxp.yaml new file mode 100644 index 0000000..06ae38e --- /dev/null +++ b/bootstrap/mktxp.yaml @@ -0,0 +1,21 @@ +apiVersion: argoproj.io/v1alpha1 +kind: Application +metadata: + name: mktxp + namespace: argocd +spec: + project: homelab + sources: + - repoURL: https://brunner.ninja/charts + chart: mktxp + targetRevision: 0.0.0 + helm: + releaseName: mktxp + valueFiles: + - $values/apps/mktxp/values.yaml + - repoURL: https://code.brunner.ninja/feedc0de/homelab-gitops.git + targetRevision: main + ref: values + destination: + server: https://kubernetes.default.svc + namespace: default diff --git a/bootstrap/phppgadmin.yaml b/bootstrap/phppgadmin.yaml new file mode 100644 index 0000000..a12ce42 --- /dev/null +++ b/bootstrap/phppgadmin.yaml @@ -0,0 +1,21 @@ +apiVersion: argoproj.io/v1alpha1 +kind: Application +metadata: + name: phppgadmin + namespace: argocd +spec: + project: homelab + sources: + - repoURL: https://brunner.ninja/charts + chart: phppgadmin + targetRevision: 0.0.0 + helm: + releaseName: phppgadmin + valueFiles: + - $values/apps/phppgadmin/values.yaml + - repoURL: https://code.brunner.ninja/feedc0de/homelab-gitops.git + targetRevision: main + ref: values + destination: + server: https://kubernetes.default.svc + namespace: default diff --git a/bootstrap/traefik-error-pages.yaml b/bootstrap/traefik-error-pages.yaml new file mode 100644 index 0000000..1ee1269 --- /dev/null +++ b/bootstrap/traefik-error-pages.yaml @@ -0,0 +1,21 @@ +apiVersion: argoproj.io/v1alpha1 +kind: Application +metadata: + name: traefik-error-pages + namespace: argocd +spec: + project: homelab + sources: + - repoURL: https://brunner.ninja/charts + chart: traefik-error-pages + targetRevision: 0.0.0 + helm: + releaseName: traefik-error-pages + valueFiles: + - $values/apps/traefik-error-pages/values.yaml + - repoURL: https://code.brunner.ninja/feedc0de/homelab-gitops.git + targetRevision: main + ref: values + destination: + server: https://kubernetes.default.svc + namespace: default