new gitops template

cluster/base/apps.yaml

@@ -0,0 +1,27 @@
+---
+apiVersion: kustomize.toolkit.fluxcd.io/v1beta1
+kind: Kustomization
+metadata:
+  name: apps
+  namespace: flux-system
+spec:
+  interval: 10m0s
+  dependsOn:
+    - name: core
+    - name: secrets
+  path: ./cluster/apps
+  prune: true
+  sourceRef:
+    kind: GitRepository
+    name: flux-system
+  decryption:
+    provider: sops
+    secretRef:
+      name: sops-gpg
+  postBuild:
+    substitute: {}
+    substituteFrom:
+      - kind: ConfigMap
+        name: cluster-settings
+      - kind: Secret
+        name: cluster-secrets

cluster/base/cluster-settings.yaml

@@ -0,0 +1,18 @@
+---
+apiVersion: v1
+kind: ConfigMap
+metadata:
+  namespace: flux-system
+  name: cluster-settings
+data:
+  CLUSTER_LB_K8SGATEWAY: 192.168.169.100
+  CLUSTER_LB_INGRESS: 192.168.169.101
+  CLUSTER_LB_HASS: 192.168.169.102
+  CLUSTER_LB_UNIFI: 192.168.169.103
+  CLUSTER_LB_GITEA: 192.168.169.104
+  CLUSTER_LB_QBITTORRENT: 192.168.169.105
+  CLUSTER_LB_RESILIOSYNC: 192.168.169.106
+  CLUSTER_LB_VERNEMQ: 192.168.169.107
+  CLUSTER_LB_LOKI_SYSLOG: 192.168.169.108
+  CLUSTER_LB_TDARR: 192.168.169.110
+  LOCAL_LAN: 192.168.8.0/22

cluster/base/core.yaml

@@ -0,0 +1,26 @@
+---
+apiVersion: kustomize.toolkit.fluxcd.io/v1beta1
+kind: Kustomization
+metadata:
+  name: core
+  namespace: flux-system
+spec:
+  interval: 10m0s
+  dependsOn:
+    - name: secrets
+  path: ./cluster/core
+  prune: true
+  sourceRef:
+    kind: GitRepository
+    name: flux-system
+  decryption:
+    provider: sops
+    secretRef:
+      name: sops-gpg
+  postBuild:
+    substitute: {}
+    substituteFrom:
+      - kind: ConfigMap
+        name: cluster-settings
+      - kind: Secret
+        name: cluster-secrets

cluster/base/flux-system/charts/banzaicloud-charts.yaml

@@ -0,0 +1,10 @@
+---
+apiVersion: source.toolkit.fluxcd.io/v1beta1
+kind: HelmRepository
+metadata:
+  name: banzaicloud-charts
+  namespace: flux-system
+spec:
+  interval: 10m
+  url: https://kubernetes-charts.banzaicloud.com
+  timeout: 3m

cluster/base/flux-system/charts/bitnami-charts.yaml

@@ -0,0 +1,10 @@
+---
+apiVersion: source.toolkit.fluxcd.io/v1beta1
+kind: HelmRepository
+metadata:
+  name: bitnami-charts
+  namespace: flux-system
+spec:
+  interval: 10m
+  url: https://charts.bitnami.com/bitnami
+  timeout: 3m

cluster/base/flux-system/charts/coredns-charts.yaml

@@ -0,0 +1,10 @@
+---
+apiVersion: source.toolkit.fluxcd.io/v1beta1
+kind: HelmRepository
+metadata:
+  name: coredns-charts
+  namespace: flux-system
+spec:
+  interval: 10m
+  url: https://coredns.github.io/helm
+  timeout: 3m

cluster/base/flux-system/charts/drone-charts.yaml

@@ -0,0 +1,10 @@
+---
+apiVersion: source.toolkit.fluxcd.io/v1beta1
+kind: HelmRepository
+metadata:
+  name: drone-charts
+  namespace: flux-system
+spec:
+  interval: 10m
+  url: https://charts.drone.io
+  timeout: 3m

cluster/base/flux-system/charts/fairwinds-charts.yaml

@@ -0,0 +1,10 @@
+---
+apiVersion: source.toolkit.fluxcd.io/v1beta1
+kind: HelmRepository
+metadata:
+  name: fairwinds-charts
+  namespace: flux-system
+spec:
+  interval: 10m
+  url: https://charts.fairwinds.com/stable
+  timeout: 3m

cluster/base/flux-system/charts/falco-security-charts.yaml

@@ -0,0 +1,10 @@
+---
+apiVersion: source.toolkit.fluxcd.io/v1beta1
+kind: HelmRepository
+metadata:
+  name: falco-security-charts
+  namespace: flux-system
+spec:
+  interval: 10m
+  url: https://falcosecurity.github.io/charts
+  timeout: 3m

cluster/base/flux-system/charts/gitea-charts.yaml

@@ -0,0 +1,10 @@
+---
+apiVersion: source.toolkit.fluxcd.io/v1beta1
+kind: HelmRepository
+metadata:
+  name: gitea-charts
+  namespace: flux-system
+spec:
+  interval: 10m
+  url: https://dl.gitea.io/charts
+  timeout: 3m

cluster/base/flux-system/charts/grafana-loki-charts.yaml

@@ -0,0 +1,10 @@
+---
+apiVersion: source.toolkit.fluxcd.io/v1beta1
+kind: HelmRepository
+metadata:
+  name: grafana-loki-charts
+  namespace: flux-system
+spec:
+  interval: 10m
+  url: https://grafana.github.io/loki/charts
+  timeout: 3m

cluster/base/flux-system/charts/influxdata-charts.yaml

@@ -0,0 +1,10 @@
+---
+apiVersion: source.toolkit.fluxcd.io/v1beta1
+kind: HelmRepository
+metadata:
+  name: influxdata-charts
+  namespace: flux-system
+spec:
+  interval: 10m
+  url: https://helm.influxdata.com/
+  timeout: 3m

cluster/base/flux-system/charts/infracloudio-charts.yaml

@@ -0,0 +1,10 @@
+---
+apiVersion: source.toolkit.fluxcd.io/v1beta1
+kind: HelmRepository
+metadata:
+  name: infracloudio-charts
+  namespace: flux-system
+spec:
+  interval: 10m
+  url: https://infracloudio.github.io/charts
+  timeout: 3m

cluster/base/flux-system/charts/ingress-nginx-charts.yaml

@@ -0,0 +1,10 @@
+---
+apiVersion: source.toolkit.fluxcd.io/v1beta1
+kind: HelmRepository
+metadata:
+  name: ingress-nginx-charts
+  namespace: flux-system
+spec:
+  interval: 10m
+  url: https://kubernetes.github.io/ingress-nginx
+  timeout: 3m

cluster/base/flux-system/charts/jetstack-charts.yaml

@@ -0,0 +1,10 @@
+---
+apiVersion: source.toolkit.fluxcd.io/v1beta1
+kind: HelmRepository
+metadata:
+  name: jetstack-charts
+  namespace: flux-system
+spec:
+  interval: 10m
+  url: https://charts.jetstack.io/
+  timeout: 3m

cluster/base/flux-system/charts/k8s-at-home.yaml

@@ -0,0 +1,10 @@
+---
+apiVersion: source.toolkit.fluxcd.io/v1beta1
+kind: HelmRepository
+metadata:
+  name: k8s-at-home-charts
+  namespace: flux-system
+spec:
+  interval: 10m
+  url: https://k8s-at-home.com/charts/
+  timeout: 3m

cluster/base/flux-system/charts/kasten-charts.yaml

@@ -0,0 +1,10 @@
+---
+apiVersion: source.toolkit.fluxcd.io/v1beta1
+kind: HelmRepository
+metadata:
+  name: kasten-charts
+  namespace: flux-system
+spec:
+  interval: 10m
+  url: https://charts.kasten.io/
+  timeout: 3m

cluster/base/flux-system/charts/kubernetes-dashboard-charts.yaml

@@ -0,0 +1,10 @@
+---
+apiVersion: source.toolkit.fluxcd.io/v1beta1
+kind: HelmRepository
+metadata:
+  name: kubernetes-dashboard-charts
+  namespace: flux-system
+spec:
+  interval: 10m
+  url: https://kubernetes.github.io/dashboard/
+  timeout: 3m

cluster/base/flux-system/charts/kubernetes-sigs-descheduler-charts.yaml

@@ -0,0 +1,10 @@
+---
+apiVersion: source.toolkit.fluxcd.io/v1beta1
+kind: HelmRepository
+metadata:
+  name: kubernetes-sigs-descheduler-charts
+  namespace: flux-system
+spec:
+  interval: 10m
+  url: https://kubernetes-sigs.github.io/descheduler
+  timeout: 3m

cluster/base/flux-system/charts/kustomization.yaml

@@ -0,0 +1,27 @@
+apiVersion: kustomize.config.k8s.io/v1beta1
+kind: Kustomization
+resources:
+  - banzaicloud-charts.yaml
+  - bitnami-charts.yaml
+  - coredns-charts.yaml
+  - drone-charts.yaml
+  - fairwinds-charts.yaml
+  - falco-security-charts.yaml
+  - gitea-charts.yaml
+  - grafana-loki-charts.yaml
+  - influxdata-charts.yaml
+  - infracloudio-charts.yaml
+  - ingress-nginx-charts.yaml
+  - jetstack-charts.yaml
+  - k8s-at-home.yaml
+  - kasten-charts.yaml
+  - kubernetes-dashboard-charts.yaml
+  - kubernetes-sigs-descheduler-charts.yaml
+  - longhorn-charts.yaml
+  - nicholaswilde.yaml
+  - node-feature-discovery.yaml
+  - prometheus-community-charts.yaml
+  - runix-charts.yaml
+  - stakater-charts.yaml
+  - twuni-charts.yaml
+  - vernemq-charts.yaml

cluster/base/flux-system/charts/longhorn-charts.yaml

@@ -0,0 +1,10 @@
+---
+apiVersion: source.toolkit.fluxcd.io/v1beta1
+kind: HelmRepository
+metadata:
+  name: longhorn-charts
+  namespace: flux-system
+spec:
+  interval: 10m
+  url: https://charts.longhorn.io
+  timeout: 3m

cluster/base/flux-system/charts/nicholaswilde.yaml

@@ -0,0 +1,10 @@
+---
+apiVersion: source.toolkit.fluxcd.io/v1beta1
+kind: HelmRepository
+metadata:
+  name: nicholaswilde-charts
+  namespace: flux-system
+spec:
+  interval: 10m
+  url: https://nicholaswilde.github.io/helm-charts
+  timeout: 3m

cluster/base/flux-system/charts/node-feature-discovery.yaml

@@ -0,0 +1,10 @@
+---
+apiVersion: source.toolkit.fluxcd.io/v1beta1
+kind: HelmRepository
+metadata:
+  name: node-feature-discovery-charts
+  namespace: flux-system
+spec:
+  interval: 10m
+  url: https://kubernetes-sigs.github.io/node-feature-discovery/charts
+  timeout: 3m

cluster/base/flux-system/charts/prometheus-community-charts.yaml

@@ -0,0 +1,10 @@
+---
+apiVersion: source.toolkit.fluxcd.io/v1beta1
+kind: HelmRepository
+metadata:
+  name: prometheus-community-charts
+  namespace: flux-system
+spec:
+  interval: 10m
+  url: https://prometheus-community.github.io/helm-charts
+  timeout: 3m

cluster/base/flux-system/charts/runix-charts.yaml

@@ -0,0 +1,10 @@
+---
+apiVersion: source.toolkit.fluxcd.io/v1beta1
+kind: HelmRepository
+metadata:
+  name: runix-charts
+  namespace: flux-system
+spec:
+  interval: 10m
+  url: https://helm.runix.net
+  timeout: 3m

cluster/base/flux-system/charts/stakater-charts.yaml

@@ -0,0 +1,10 @@
+---
+apiVersion: source.toolkit.fluxcd.io/v1beta1
+kind: HelmRepository
+metadata:
+  name: stakater-charts
+  namespace: flux-system
+spec:
+  interval: 10m
+  url: https://stakater.github.io/stakater-charts
+  timeout: 3m

cluster/base/flux-system/charts/twuni-charts.yaml

@@ -0,0 +1,10 @@
+---
+apiVersion: source.toolkit.fluxcd.io/v1beta1
+kind: HelmRepository
+metadata:
+  name: twuni-charts
+  namespace: flux-system
+spec:
+  interval: 10m
+  url: https://helm.twun.io
+  timeout: 3m

cluster/base/flux-system/charts/vernemq-charts.yaml

@@ -0,0 +1,10 @@
+---
+apiVersion: source.toolkit.fluxcd.io/v1beta1
+kind: HelmRepository
+metadata:
+  name: vernemq-charts
+  namespace: flux-system
+spec:
+  interval: 10m
+  url: https://vernemq.github.io/docker-vernemq
+  timeout: 3m

cluster/base/flux-system/gotk-sync.yaml

@@ -0,0 +1,31 @@
+---
+apiVersion: source.toolkit.fluxcd.io/v1beta1
+kind: GitRepository
+metadata:
+  name: flux-system
+  namespace: flux-system
+spec:
+  interval: 1m0s
+  ref:
+    branch: main
+  secretRef:
+    name: flux-system
+  url: ssh://git@github.com/auricom/home-cluster
+---
+apiVersion: kustomize.toolkit.fluxcd.io/v1beta1
+kind: Kustomization
+metadata:
+  name: flux-system
+  namespace: flux-system
+spec:
+  interval: 10m0s
+  path: ./cluster/base
+  prune: true
+  sourceRef:
+    kind: GitRepository
+    name: flux-system
+  validation: client
+  decryption:
+    provider: sops
+    secretRef:
+      name: sops-gpg

cluster/base/flux-system/kustomization.yaml

@@ -0,0 +1,6 @@
+apiVersion: kustomize.config.k8s.io/v1beta1
+kind: Kustomization
+resources:
+  - gotk-components.yaml
+  - gotk-sync.yaml
+  - charts

cluster/base/secrets.yaml

@@ -0,0 +1,18 @@
+---
+apiVersion: kustomize.toolkit.fluxcd.io/v1beta1
+kind: Kustomization
+metadata:
+  name: secrets
+  namespace: flux-system
+spec:
+  interval: 10m0s
+  path: ./cluster/secrets
+  prune: true
+  sourceRef:
+    kind: GitRepository
+    name: flux-system
+  validation: client
+  decryption:
+    provider: sops
+    secretRef:
+      name: sops-gpg