From 0889a03cf3a50bd2121b2554ccb79f9cfe8fe189 Mon Sep 17 00:00:00 2001
From: auricom <27022259+auricom@users.noreply.github.com>
Date: Mon, 12 Sep 2022 23:09:38 +0200
Subject: [PATCH] =?UTF-8?q?=F0=9F=9A=80=20redis?=
MIME-Version: 1.0
Content-Type: text/plain; charset=UTF-8
Content-Transfer-Encoding: 8bit

---
 cluster/apps/databases/kustomization.yaml     |  6 +++
 .../apps/databases/redis/helm-release.yaml    | 41 +++++++++++++++++++
 .../apps/databases/redis/kustomization.yaml   |  7 ++++
 cluster/apps/databases/redis/secret.sops.yaml | 29 +++++++++++++
 cluster/apps/kustomization.yaml               |  1 +
 5 files changed, 84 insertions(+)
 create mode 100644 cluster/apps/databases/kustomization.yaml
 create mode 100644 cluster/apps/databases/redis/helm-release.yaml
 create mode 100644 cluster/apps/databases/redis/kustomization.yaml
 create mode 100644 cluster/apps/databases/redis/secret.sops.yaml

diff --git a/cluster/apps/databases/kustomization.yaml b/cluster/apps/databases/kustomization.yaml
new file mode 100644
index 000000000..956b40aa5
--- /dev/null
+++ b/cluster/apps/databases/kustomization.yaml
@@ -0,0 +1,6 @@
+---
+apiVersion: kustomize.config.k8s.io/v1beta1
+kind: Kustomization
+namespace: default
+resources:
+  - redis
diff --git a/cluster/apps/databases/redis/helm-release.yaml b/cluster/apps/databases/redis/helm-release.yaml
new file mode 100644
index 000000000..0d61381e7
--- /dev/null
+++ b/cluster/apps/databases/redis/helm-release.yaml
@@ -0,0 +1,41 @@
+---
+apiVersion: helm.toolkit.fluxcd.io/v2beta1
+kind: HelmRelease
+metadata:
+  name: &app redis
+  namespace: default
+spec:
+  interval: 15m
+  chart:
+    spec:
+      chart: redis
+      version: 17.1.4
+      sourceRef:
+        kind: HelmRepository
+        name: bitnami-charts
+        namespace: flux-system
+  install:
+    createNamespace: true
+    remediation:
+      retries: 5
+  upgrade:
+    remediation:
+      retries: 5
+  values:
+    global:
+      imageRegistry: public.ecr.aws
+      storageClass: rook-ceph-block
+    auth:
+      enabled: false
+      sentinel: false
+      # existingSecret: *app
+    sentinel:
+      enabled: true
+      masterSet: redis-master
+      getMasterTimeout: 10
+      startupProbe:
+        failureThreshold: 2
+    metrics:
+      enabled: true
+      serviceMonitor:
+        enabled: true
diff --git a/cluster/apps/databases/redis/kustomization.yaml b/cluster/apps/databases/redis/kustomization.yaml
new file mode 100644
index 000000000..cd2471e19
--- /dev/null
+++ b/cluster/apps/databases/redis/kustomization.yaml
@@ -0,0 +1,7 @@
+---
+apiVersion: kustomize.config.k8s.io/v1beta1
+kind: Kustomization
+namespace: default
+resources:
+  - secret.sops.yaml
+  - helm-release.yaml
diff --git a/cluster/apps/databases/redis/secret.sops.yaml b/cluster/apps/databases/redis/secret.sops.yaml
new file mode 100644
index 000000000..f6c0a35b9
--- /dev/null
+++ b/cluster/apps/databases/redis/secret.sops.yaml
@@ -0,0 +1,29 @@
+# yamllint disable
+apiVersion: v1
+kind: Secret
+metadata:
+    name: redis
+    namespace: default
+type: Opaque
+stringData:
+    redis-password: ENC[AES256_GCM,data:jDOKfnXB3U1z/aV86U5euK27edk=,iv:9a946UDG5b8CdjVFqcIG5Hfyz/L62gxN4SEhj3Uzo8Q=,tag:/2ZfSSzXnjEcqXhEV/aHFg==,type:str]
+sops:
+    kms: []
+    gcp_kms: []
+    azure_kv: []
+    hc_vault: []
+    age:
+        - recipient: age1hhurqwmfvl9m3vh3hk8urulfzcdsrep2ax2neazqt435yhpamu3qj20asg
+          enc: |
+            -----BEGIN AGE ENCRYPTED FILE-----
+            YWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IFgyNTUxOSBBVWZVaFFvMVJRRWR1eUU3
+            QzI5cjNscE83czk0TG9Ra1JvVmExa0hWbWt3Ck1YY1htcXhDamwxY1pVcE0wS2U3
+            WWNQbTJFK1dFdEhkMk8vbG9pQlJzN1kKLS0tIDBUTUZhMUF2VVJhbFNpQ1FTNWZC
+            ZUZsSDdUYXFVb3JROEFnaC8yRU1zZ0UK1klzjeo3oaS6n1Apy0nY746ax2Uxxddg
+            Mn61QDtkPf8FLNBC3tFTe3pWzhWseD/89WaW3f3GScJxy34SFUZxLQ==
+            -----END AGE ENCRYPTED FILE-----
+    lastmodified: "2022-09-12T21:08:53Z"
+    mac: ENC[AES256_GCM,data:vTtJo+nCb8eK9f4jUJHbq2zUXb8kZf5P91qPsfOfBV1wgMbM3YtlkKQFYsg/eAac/JBoRvUGhzsyFc/MEX3mCGVsU8BQ5cPuM54EVGAkrOAHzm3dXVqf1FDVwfeSXuMZ4iHsfKSyTPLcoZfJq5WQ9p/hIA3PSVsVQrmElS4S8/E=,iv:AxOjOctewK7bUrrSH+kfravg7UKBawUD1q/QBdpPDVw=,tag:j5/wMeAh+FdG/RDOpBt4jw==,type:str]
+    pgp: []
+    encrypted_regex: ^(data|stringData)$
+    version: 3.7.3
diff --git a/cluster/apps/kustomization.yaml b/cluster/apps/kustomization.yaml
index c0d2fc549..28fb69c8d 100644
--- a/cluster/apps/kustomization.yaml
+++ b/cluster/apps/kustomization.yaml
@@ -2,6 +2,7 @@ apiVersion: kustomize.config.k8s.io/v1beta1
 kind: Kustomization
 resources:
   - data
+  - databases
   - development
   - home-automation
   - kasten-io