feat!: Refector directories and flux apps (#559)

tmpl/kubernetes/cert-manager-secret.sops.yaml

@@ -0,0 +1,8 @@
+---
+apiVersion: v1
+kind: Secret
+metadata:
+  name: cert-manager-secret
+  namespace: cert-manager
+stringData:
+  api-key: "${BOOTSTRAP_CLOUDFLARE_APIKEY}"

tmpl/kubernetes/cloudflare-ddns-secret.sops.yaml

@@ -0,0 +1,11 @@
+---
+apiVersion: v1
+kind: Secret
+metadata:
+  name: cloudflare-ddns-secret
+  namespace: networking
+type: Opaque
+stringData:
+  CLOUDFLARE_EMAIL: "${BOOTSTRAP_CLOUDFLARE_EMAIL}"
+  CLOUDFLARE_APIKEY: "${BOOTSTRAP_CLOUDFLARE_APIKEY}"
+  CLOUDFLARE_RECORD_NAME: "ipv4.${BOOTSTRAP_CLOUDFLARE_DOMAIN}"

tmpl/kubernetes/cluster-secrets.sops.yaml

@@ -0,0 +1,9 @@
+---
+apiVersion: v1
+kind: Secret
+metadata:
+  name: cluster-secrets
+  namespace: flux-system
+stringData:
+  SECRET_DOMAIN: "${BOOTSTRAP_CLOUDFLARE_DOMAIN}"
+  SECRET_CLOUDFLARE_EMAIL: "${BOOTSTRAP_CLOUDFLARE_EMAIL}"

tmpl/kubernetes/external-dns-secret.sops.yaml

@@ -0,0 +1,9 @@
+---
+apiVersion: v1
+kind: Secret
+metadata:
+  name: external-dns-secret
+  namespace: networking
+stringData:
+  email: "${BOOTSTRAP_CLOUDFLARE_EMAIL}"
+  api-key: "${BOOTSTRAP_CLOUDFLARE_APIKEY}"

tmpl/kubernetes/flux/cluster-settings.yaml

@@ -0,0 +1,12 @@
+---
+apiVersion: v1
+kind: ConfigMap
+metadata:
+  name: cluster-settings
+  namespace: flux-system
+data:
+  TIMEZONE: "${BOOTSTRAP_TIMEZONE}"
+  KUBE_VIP_ADDR: "${BOOTSTRAP_KUBE_VIP_ADDR}"
+  METALLB_LB_RANGE: "${BOOTSTRAP_METALLB_LB_RANGE}"
+  METALLB_K8S_GATEWAY_ADDR: "${BOOTSTRAP_METALLB_K8S_GATEWAY_ADDR}"
+  METALLB_INGRESS_ADDR: "${BOOTSTRAP_METALLB_INGRESS_ADDR}"

tmpl/kubernetes/flux/cluster.yaml

@@ -0,0 +1,40 @@
+---
+apiVersion: source.toolkit.fluxcd.io/v1beta2
+kind: GitRepository
+metadata:
+  name: home-kubernetes
+  namespace: flux-system
+spec:
+  interval: 30m
+  ref:
+    branch: main
+  url: "${BOOTSTRAP_GIT_REPOSITORY}"
+  ignore: |
+    # exclude all
+    /*
+    # include kubernetes directory
+    !/kubernetes
+---
+apiVersion: kustomize.toolkit.fluxcd.io/v1beta2
+kind: Kustomization
+metadata:
+  name: cluster
+  namespace: flux-system
+spec:
+  interval: 30m
+  path: ./kubernetes/flux
+  prune: true
+  wait: false
+  sourceRef:
+    kind: GitRepository
+    name: home-kubernetes
+  decryption:
+    provider: sops
+    secretRef:
+      name: sops-age
+  postBuild:
+    substituteFrom:
+      - kind: ConfigMap
+        name: cluster-settings
+      - kind: Secret
+        name: cluster-secrets

tmpl/kubernetes/github-webhook-token-secret.sops.yaml

@@ -0,0 +1,8 @@
+---
+apiVersion: v1
+kind: Secret
+metadata:
+  name: github-webhook-token-secret
+  namespace: flux-system
+stringData:
+  token: ${BOOTSTRAP_FLUX_GITHUB_WEBHOOK_SECRET}

tmpl/kubernetes/weave-gitops-secret.sops.yaml

@@ -0,0 +1,8 @@
+apiVersion: v1
+kind: Secret
+metadata:
+  name: weave-gitops-secret
+  namespace: flux-system
+type: Opaque
+stringData:
+  adminPassword: "${BOOTSTRAP_WEAVE_GITOPS_ADMIN_PASSWORD}"