feat: add ingress-nginx

cluster/apps/networking/ingress-nginx/helm-release.yaml

@@ -0,0 +1,45 @@
+---
+apiVersion: helm.toolkit.fluxcd.io/v2beta1
+kind: HelmRelease
+metadata:
+  name: ingress-nginx
+  namespace: networking
+spec:
+  interval: 5m
+  chart:
+    spec:
+      # renovate: registryUrl=https://kubernetes.github.io/ingress-nginx
+      chart: ingress-nginx
+      version: 3.29.0
+      sourceRef:
+        kind: HelmRepository
+        name: ingress-nginx-charts
+        namespace: flux-system
+      interval: 5m
+  values:
+    controller:
+      ingressClass: nginx
+      replicaCount: 1
+      service:
+        type: LoadBalancer
+        externalIPs:
+        - "${INGRESS_NGINX_LB}"
+        externalTrafficPolicy: Local
+      publishService:
+        enabled: true
+      config:
+        ssl-protocols: "TLSv1.3 TLSv1.2"
+        proxy-body-size: "100m"
+        use-forwarded-headers: "true"
+      metrics:
+        enabled: false
+        serviceMonitor:
+          enabled: false
+      extraArgs:
+        default-ssl-certificate: "networking/${SECRET_DOMAIN_CERT}-tls"
+      resources:
+        requests:
+          memory: 100Mi
+          cpu: 100m
+        limits:
+          memory: 500Mi

cluster/apps/networking/ingress-nginx/kustomization.yaml

@@ -0,0 +1,4 @@
+apiVersion: kustomize.config.k8s.io/v1beta1
+kind: Kustomization
+resources:
+- helm-release.yaml

cluster/apps/networking/kustomization.yaml

@@ -1,4 +1,5 @@
 apiVersion: kustomize.config.k8s.io/v1beta1
 kind: Kustomization
 resources:
+- ingress-nginx
 - wildcard-certificate

cluster/base/cluster-settings.yaml

@@ -6,3 +6,4 @@ metadata:
   namespace: flux-system
 data:
   METALLB_LB_RANGE: $BOOTSTRAP_METALLB_LB_RANGE
+  INGRESS_NGINX_LB: $BOOTSTRAP_INGRESS_NGINX_LB