new gitops template

cluster/apps/networking/unifi/helm-release.yaml

@@ -0,0 +1,72 @@
+---
+apiVersion: helm.toolkit.fluxcd.io/v2beta1
+kind: HelmRelease
+metadata:
+  name: unifi
+  namespace: networking
+spec:
+  interval: 5m
+  chart:
+    spec:
+      # renovate: registryUrl=https://k8s-at-home.com/charts/
+      chart: unifi
+      version: 2.0.0
+      sourceRef:
+        kind: HelmRepository
+        name: k8s-at-home-charts
+        namespace: flux-system
+      interval: 5m
+  values:
+    controllerType: deployment
+    strategy:
+      type: Recreate
+    image:
+      repository: jacobalberty/unifi
+      tag: 6.1.71
+      pullPolicy: IfNotPresent
+    persistence:
+      enabled: true
+      existingClaim: unifi-config
+    timezone: "Europe/Paris"
+    runAsRoot: false
+    ingress:
+      enabled: true
+      annotations:
+        kubernetes.io/ingress.class: "nginx"
+        nginx.ingress.kubernetes.io/backend-protocol: "HTTPS"
+        nginx.ingress.kubernetes.io/proxy-body-size: 10m
+      hosts:
+        - unifi.${SECRET_CLUSTER_DOMAIN}
+      tls:
+        - hosts:
+            - unifi.${SECRET_CLUSTER_DOMAIN}
+    guiService:
+      type: LoadBalancer
+      externalIPs:
+        - ${CLUSTER_LB_UNIFI}
+      externalTrafficPolicy: Local
+      annotations:
+        prometheus.io/probe: "true"
+        prometheus.io/protocol: tcp
+    controllerService:
+      type: LoadBalancer
+      externalIPs:
+        - ${CLUSTER_LB_UNIFI}
+      externalTrafficPolicy: Local
+      annotations:
+        prometheus.io/probe: "true"
+        prometheus.io/protocol: tcp
+    stunService:
+      type: LoadBalancer
+      externalIPs:
+        - ${CLUSTER_LB_UNIFI}
+      externalTrafficPolicy: Local
+    discoveryService:
+      type: LoadBalancer
+      externalIPs:
+        - ${CLUSTER_LB_UNIFI}
+      externalTrafficPolicy: Local
+    resources:
+      requests:
+        memory: 2Gi
+        cpu: 100m

cluster/apps/networking/unifi/kustomization.yaml

@@ -0,0 +1,5 @@
+apiVersion: kustomize.config.k8s.io/v1beta1
+kind: Kustomization
+resources:
+  - helm-release.yaml
+  - volume.yaml

cluster/apps/networking/unifi/volume.yaml

@@ -0,0 +1,13 @@
+---
+apiVersion: v1
+kind: PersistentVolumeClaim
+metadata:
+  name: unifi-config
+  namespace: networking
+spec:
+  accessModes:
+    - ReadWriteOnce
+  storageClassName: longhorn-backups
+  resources:
+    requests:
+      storage: 10Gi