fix tls indentation for grafana values

Remove amd64 nodSelector from nginx-ingress and metallb setup

.gitignore

@@ -0,0 +1 @@
+helmvendor/**

clusters/k3s-odc2-110/bootstrap.sh

@@ -0,0 +1,6 @@
+#!/bin/bash
+flux bootstrap git \
+  --ssh-hostname=git.labdevops.net:2222 \
+  --path=clusters/k3s-odc2-110 \
+  --branch=master \
+  --url=ssh://git@git.labdevops.net:2222/home.labdigital.co.uk/k3s_cluster1_flux_system.git

clusters/k3s-odc2-110/components/cert-manager.yaml

@@ -0,0 +1,13 @@
+---
+apiVersion: kustomize.toolkit.fluxcd.io/v1beta1
+kind: Kustomization
+metadata:
+  name: cert-manager
+  namespace: flux-system
+spec:
+  interval: 10m0s
+  path: ./components/cert-manager
+  prune: true
+  sourceRef:
+    kind: GitRepository
+    name: flux-system

clusters/k3s-odc2-110/components/external-dns.yaml

@@ -0,0 +1,13 @@
+---
+apiVersion: kustomize.toolkit.fluxcd.io/v1beta1
+kind: Kustomization
+metadata:
+  name: external-dns
+  namespace: flux-system
+spec:
+  interval: 10m0s
+  path: ./components/external-dns
+  prune: true
+  sourceRef:
+    kind: GitRepository
+    name: flux-system

clusters/k3s-odc2-110/components/metallb.yaml

@@ -0,0 +1,13 @@
+---
+apiVersion: kustomize.toolkit.fluxcd.io/v1beta1
+kind: Kustomization
+metadata:
+  name: metallb
+  namespace: flux-system
+spec:
+  interval: 10m0s
+  path: ./components/metallb
+  prune: true
+  sourceRef:
+    kind: GitRepository
+    name: flux-system

clusters/k3s-odc2-110/components/nfs-provisioner.yaml

@@ -0,0 +1,13 @@
+---
+apiVersion: kustomize.toolkit.fluxcd.io/v1beta1
+kind: Kustomization
+metadata:
+  name: nfs-provisioner
+  namespace: flux-system
+spec:
+  interval: 10m0s
+  path: ./components/nfs-provisioner
+  prune: true
+  sourceRef:
+    kind: GitRepository
+    name: flux-system

clusters/k3s-odc2-110/components/nginx-ingress.yaml

@@ -0,0 +1,13 @@
+---
+apiVersion: kustomize.toolkit.fluxcd.io/v1beta1
+kind: Kustomization
+metadata:
+  name: nginx-ingress
+  namespace: flux-system
+spec:
+  interval: 10m0s
+  path: ./components/nginx-ingress
+  prune: true
+  sourceRef:
+    kind: GitRepository
+    name: flux-system

clusters/k3s-odc2-110/components/promtheus-stack.yaml

@@ -0,0 +1,13 @@
+---
+apiVersion: kustomize.toolkit.fluxcd.io/v1beta1
+kind: Kustomization
+metadata:
+  name: promtheus-stack
+  namespace: flux-system
+spec:
+  interval: 10m0s
+  path: ./components/prometheus
+  prune: true
+  sourceRef:
+    kind: GitRepository
+    name: flux-system

clusters/k3s-odc2-110/components/sealed-secrets.yaml

@@ -0,0 +1,13 @@
+---
+apiVersion: kustomize.toolkit.fluxcd.io/v1beta1
+kind: Kustomization
+metadata:
+  name: sealed-secrets
+  namespace: flux-system
+spec:
+  interval: 10m0s
+  path: ./components/sealedsecrets
+  prune: true
+  sourceRef:
+    kind: GitRepository
+    name: flux-system

clusters/k3s-odc2-110/flux-system/gotk-sync.yaml

@@ -0,0 +1,27 @@
+---
+apiVersion: source.toolkit.fluxcd.io/v1beta1
+kind: GitRepository
+metadata:
+  name: flux-system
+  namespace: flux-system
+spec:
+  interval: 1m0s
+  ref:
+    branch: master
+  secretRef:
+    name: flux-system
+  url: ssh://git@git.labdevops.net:2222/home.labdigital.co.uk/k3s_cluster1_flux_system.git
+---
+apiVersion: kustomize.toolkit.fluxcd.io/v1beta1
+kind: Kustomization
+metadata:
+  name: flux-system
+  namespace: flux-system
+spec:
+  interval: 10m0s
+  path: ./clusters/k3s-odc2-110
+  prune: true
+  sourceRef:
+    kind: GitRepository
+    name: flux-system
+  validation: client

clusters/k3s-odc2-110/flux-system/kustomization.yaml

@@ -0,0 +1,5 @@
+apiVersion: kustomize.config.k8s.io/v1beta1
+kind: Kustomization
+resources:
+- gotk-components.yaml
+- gotk-sync.yaml

clusters/k3s-odc2-110/nodeTaints.sh

@@ -0,0 +1,8 @@
+#!/bin/bash
+set -x
+MASTER=odc2-110
+ARM_NODES="pi4-115, pi4-116"
+kubectl taint nodes "$MASTER" node-role.kubernetes.io/master=true:NoSchedule
+kubectl label node "$MASTER" kubernetes.io/role=master node-role.kubernetes.io/master=
+
+#kubectl taint nodes "$ARM_NODES" 

clusters/odc2-110-admin/flux-system/gotk-components.yaml

@@ -4,7 +4,7 @@ metadata:
   labels:
     app.kubernetes.io/instance: flux-system
     app.kubernetes.io/part-of: flux
-    app.kubernetes.io/version: v0.12.3
+    app.kubernetes.io/version: v0.12.0
   name: flux-system
 ---
 apiVersion: apiextensions.k8s.io/v1
@@ -16,7 +16,7 @@ metadata:
   labels:
     app.kubernetes.io/instance: flux-system
     app.kubernetes.io/part-of: flux
-    app.kubernetes.io/version: v0.12.3
+    app.kubernetes.io/version: v0.12.0
   name: alerts.notification.toolkit.fluxcd.io
 spec:
   group: notification.toolkit.fluxcd.io
@@ -191,7 +191,7 @@ metadata:
   labels:
     app.kubernetes.io/instance: flux-system
     app.kubernetes.io/part-of: flux
-    app.kubernetes.io/version: v0.12.3
+    app.kubernetes.io/version: v0.12.0
   name: buckets.source.toolkit.fluxcd.io
 spec:
   group: source.toolkit.fluxcd.io
@@ -379,7 +379,7 @@ metadata:
   labels:
     app.kubernetes.io/instance: flux-system
     app.kubernetes.io/part-of: flux
-    app.kubernetes.io/version: v0.12.3
+    app.kubernetes.io/version: v0.12.0
   name: gitrepositories.source.toolkit.fluxcd.io
 spec:
   group: source.toolkit.fluxcd.io
@@ -598,7 +598,7 @@ metadata:
   labels:
     app.kubernetes.io/instance: flux-system
     app.kubernetes.io/part-of: flux
-    app.kubernetes.io/version: v0.12.3
+    app.kubernetes.io/version: v0.12.0
   name: helmcharts.source.toolkit.fluxcd.io
 spec:
   group: source.toolkit.fluxcd.io
@@ -790,7 +790,7 @@ metadata:
   labels:
     app.kubernetes.io/instance: flux-system
     app.kubernetes.io/part-of: flux
-    app.kubernetes.io/version: v0.12.3
+    app.kubernetes.io/version: v0.12.0
   name: helmreleases.helm.toolkit.fluxcd.io
 spec:
   group: helm.toolkit.fluxcd.io
@@ -1306,7 +1306,7 @@ metadata:
   labels:
     app.kubernetes.io/instance: flux-system
     app.kubernetes.io/part-of: flux
-    app.kubernetes.io/version: v0.12.3
+    app.kubernetes.io/version: v0.12.0
   name: helmrepositories.source.toolkit.fluxcd.io
 spec:
   group: source.toolkit.fluxcd.io
@@ -1474,7 +1474,7 @@ metadata:
   labels:
     app.kubernetes.io/instance: flux-system
     app.kubernetes.io/part-of: flux
-    app.kubernetes.io/version: v0.12.3
+    app.kubernetes.io/version: v0.12.0
   name: kustomizations.kustomize.toolkit.fluxcd.io
 spec:
   group: kustomize.toolkit.fluxcd.io
@@ -1871,7 +1871,7 @@ metadata:
   labels:
     app.kubernetes.io/instance: flux-system
     app.kubernetes.io/part-of: flux
-    app.kubernetes.io/version: v0.12.3
+    app.kubernetes.io/version: v0.12.0
   name: providers.notification.toolkit.fluxcd.io
 spec:
   group: notification.toolkit.fluxcd.io
@@ -2018,7 +2018,7 @@ metadata:
   labels:
     app.kubernetes.io/instance: flux-system
     app.kubernetes.io/part-of: flux
-    app.kubernetes.io/version: v0.12.3
+    app.kubernetes.io/version: v0.12.0
   name: receivers.notification.toolkit.fluxcd.io
 spec:
   group: notification.toolkit.fluxcd.io
@@ -2198,7 +2198,7 @@ metadata:
   labels:
     app.kubernetes.io/instance: flux-system
     app.kubernetes.io/part-of: flux
-    app.kubernetes.io/version: v0.12.3
+    app.kubernetes.io/version: v0.12.0
   name: helm-controller
   namespace: flux-system
 ---
@@ -2208,7 +2208,7 @@ metadata:
   labels:
     app.kubernetes.io/instance: flux-system
     app.kubernetes.io/part-of: flux
-    app.kubernetes.io/version: v0.12.3
+    app.kubernetes.io/version: v0.12.0
   name: kustomize-controller
   namespace: flux-system
 ---
@@ -2218,7 +2218,7 @@ metadata:
   labels:
     app.kubernetes.io/instance: flux-system
     app.kubernetes.io/part-of: flux
-    app.kubernetes.io/version: v0.12.3
+    app.kubernetes.io/version: v0.12.0
   name: notification-controller
   namespace: flux-system
 ---
@@ -2228,7 +2228,7 @@ metadata:
   labels:
     app.kubernetes.io/instance: flux-system
     app.kubernetes.io/part-of: flux
-    app.kubernetes.io/version: v0.12.3
+    app.kubernetes.io/version: v0.12.0
   name: source-controller
   namespace: flux-system
 ---
@@ -2238,7 +2238,7 @@ metadata:
   labels:
     app.kubernetes.io/instance: flux-system
     app.kubernetes.io/part-of: flux
-    app.kubernetes.io/version: v0.12.3
+    app.kubernetes.io/version: v0.12.0
   name: crd-controller-flux-system
 rules:
 - apiGroups:
@@ -2318,7 +2318,7 @@ metadata:
   labels:
     app.kubernetes.io/instance: flux-system
     app.kubernetes.io/part-of: flux
-    app.kubernetes.io/version: v0.12.3
+    app.kubernetes.io/version: v0.12.0
   name: cluster-reconciler-flux-system
 roleRef:
   apiGroup: rbac.authorization.k8s.io
@@ -2338,7 +2338,7 @@ metadata:
   labels:
     app.kubernetes.io/instance: flux-system
     app.kubernetes.io/part-of: flux
-    app.kubernetes.io/version: v0.12.3
+    app.kubernetes.io/version: v0.12.0
   name: crd-controller-flux-system
 roleRef:
   apiGroup: rbac.authorization.k8s.io
@@ -2370,7 +2370,7 @@ metadata:
   labels:
     app.kubernetes.io/instance: flux-system
     app.kubernetes.io/part-of: flux
-    app.kubernetes.io/version: v0.12.3
+    app.kubernetes.io/version: v0.12.0
     control-plane: controller
   name: notification-controller
   namespace: flux-system
@@ -2390,7 +2390,7 @@ metadata:
   labels:
     app.kubernetes.io/instance: flux-system
     app.kubernetes.io/part-of: flux
-    app.kubernetes.io/version: v0.12.3
+    app.kubernetes.io/version: v0.12.0
     control-plane: controller
   name: source-controller
   namespace: flux-system
@@ -2410,7 +2410,7 @@ metadata:
   labels:
     app.kubernetes.io/instance: flux-system
     app.kubernetes.io/part-of: flux
-    app.kubernetes.io/version: v0.12.3
+    app.kubernetes.io/version: v0.12.0
     control-plane: controller
   name: webhook-receiver
   namespace: flux-system
@@ -2430,7 +2430,7 @@ metadata:
   labels:
     app.kubernetes.io/instance: flux-system
     app.kubernetes.io/part-of: flux
-    app.kubernetes.io/version: v0.12.3
+    app.kubernetes.io/version: v0.12.0
     control-plane: controller
   name: helm-controller
   namespace: flux-system
@@ -2503,7 +2503,7 @@ metadata:
   labels:
     app.kubernetes.io/instance: flux-system
     app.kubernetes.io/part-of: flux
-    app.kubernetes.io/version: v0.12.3
+    app.kubernetes.io/version: v0.12.0
     control-plane: controller
   name: kustomize-controller
   namespace: flux-system
@@ -2578,7 +2578,7 @@ metadata:
   labels:
     app.kubernetes.io/instance: flux-system
     app.kubernetes.io/part-of: flux
-    app.kubernetes.io/version: v0.12.3
+    app.kubernetes.io/version: v0.12.0
     control-plane: controller
   name: notification-controller
   namespace: flux-system
@@ -2654,7 +2654,7 @@ metadata:
   labels:
     app.kubernetes.io/instance: flux-system
     app.kubernetes.io/part-of: flux
-    app.kubernetes.io/version: v0.12.3
+    app.kubernetes.io/version: v0.12.0
     control-plane: controller
   name: source-controller
   namespace: flux-system
@@ -2738,7 +2738,7 @@ metadata:
   labels:
     app.kubernetes.io/instance: flux-system
     app.kubernetes.io/part-of: flux
-    app.kubernetes.io/version: v0.12.3
+    app.kubernetes.io/version: v0.12.0
   name: allow-scraping
   namespace: flux-system
 spec:
@@ -2758,7 +2758,7 @@ metadata:
   labels:
     app.kubernetes.io/instance: flux-system
     app.kubernetes.io/part-of: flux
-    app.kubernetes.io/version: v0.12.3
+    app.kubernetes.io/version: v0.12.0
   name: allow-webhooks
   namespace: flux-system
 spec:
@@ -2777,7 +2777,7 @@ metadata:
   labels:
     app.kubernetes.io/instance: flux-system
     app.kubernetes.io/part-of: flux
-    app.kubernetes.io/version: v0.12.3
+    app.kubernetes.io/version: v0.12.0
   name: deny-ingress
   namespace: flux-system
 spec:

clusters/odc2-110-admin/flux-system/gotk-kustomization.yaml

@@ -0,0 +1,14 @@
+---
+apiVersion: kustomize.toolkit.fluxcd.io/v1beta1
+kind: Kustomization
+metadata:
+  name: flux-system
+  namespace: flux-system
+spec:
+  interval: 10m0s
+  path: ./clusters/odc2-110-admin
+  prune: true
+  sourceRef:
+    kind: GitRepository
+    name: flux-system
+  validation: client

clusters/odc2-110-admin/flux-system/gotk-sync.yaml

@@ -7,21 +7,8 @@ metadata:
 spec:
   interval: 1m0s
   ref:
-    branch: main
+    branch: master
   secretRef:
     name: flux-system
-  url: ssh://git@git.labdevops.net/home.labdigital.co.uk/k3s_cluster1_flux_system.git
+  url: ssh://git@git.labdevops.net:2222/home.labdigital.co.uk/k3s_cluster1_flux_system.git
----
+
-apiVersion: kustomize.toolkit.fluxcd.io/v1beta1
-kind: Kustomization
-metadata:
-  name: flux-system
-  namespace: flux-system
-spec:
-  interval: 10m0s
-  path: ./clusters/odc2-110-admin
-  prune: true
-  sourceRef:
-    kind: GitRepository
-    name: flux-system
-  validation: client

clusters/odc2-110-admin/flux-system/kustomization.yaml

@@ -2,4 +2,5 @@ apiVersion: kustomize.config.k8s.io/v1beta1
 kind: Kustomization
 resources:
 - gotk-components.yaml
+- gotk-kustomization.yaml
 - gotk-sync.yaml

clusters/odc2-110-admin/test/kustomization.yaml

@@ -0,0 +1,4 @@
+apiVersion: kustomize.config.k8s.io/v1beta1
+kind: Kustomization
+resources:
+  - namespace_test.yaml

clusters/odc2-110-admin/test/namespace_test.yaml

@@ -0,0 +1,4 @@
+apiVersion: v1
+kind: Namespace
+metadata:
+  name: test

clusters/odc2-110-admin/test1/test1-kustomization.yaml

@@ -0,0 +1,14 @@
+---
+apiVersion: kustomize.toolkit.fluxcd.io/v1beta1
+kind: Kustomization
+metadata:
+  name: test1
+  namespace: flux-system
+spec:
+  interval: 10m0s
+  path: ./tests/test1
+  prune: true
+  validation: client
+  sourceRef:
+    kind: GitRepository
+    name: flux-system

clusters/odc2-110-admin/test2/ns.yaml

@@ -0,0 +1,4 @@
+apiVersion: v1
+kind: Namespace
+metadata:
+  name: test2

clusters/odc2-110-admin/test2/podinfo-hr.yaml

@@ -0,0 +1,15 @@
+---
+apiVersion: helm.toolkit.fluxcd.io/v2beta1
+kind: HelmRelease
+metadata:
+  name: podinfo
+  namespace: test2
+spec:
+  chart:
+    spec:
+      chart: podinfo
+      sourceRef:
+        kind: HelmRepository
+        name: podinfo
+  interval: 1m0s
+

clusters/odc2-110-admin/test3/test3.yaml

@@ -0,0 +1,14 @@
+---
+apiVersion: kustomize.toolkit.fluxcd.io/v1beta1
+kind: Kustomization
+metadata:
+  name: test3
+  namespace: flux-system
+spec:
+  interval: 10m0s
+  path: ./deployments/test3
+  prune: true
+  validation: client
+  sourceRef:
+    kind: GitRepository
+    name: flux-system

components/cert-manager/acme-LE-cluster-issuer.yaml

@@ -0,0 +1,20 @@
+apiVersion: cert-manager.io/v1
+kind: ClusterIssuer
+metadata:
+  name: labdevops-net-letsencrypt-prod
+  namespace: certmanager-system
+spec:
+  acme:
+    email: luke@labdigital.co.uk
+    server: https://acme-v02.api.letsencrypt.org/directory
+    #preferredChain: "ISRG Root X1"
+    privateKeySecretRef:
+      name: clouddns-dns01-solver-svc-acct
+    solvers:
+      - dns01:
+          cloudDNS:
+            project: homelab-264922
+            hostedZoneName: 'labdevops-net'
+            serviceAccountSecretRef:
+              key: credentials.json
+              name: gcp-sa-secret

components/cert-manager/certmanager-helmrelease.yaml

@@ -0,0 +1,16 @@
+---
+apiVersion: helm.toolkit.fluxcd.io/v2beta1
+kind: HelmRelease
+metadata:
+  name: cert-manager
+  namespace: certmanager-system
+spec:
+  chart:
+    spec:
+      chart: cert-manager
+      sourceRef:
+        kind: HelmRepository
+        name: jetstack
+  interval: 20m0s
+  values: 
+    installCRDs: true

components/cert-manager/jetstack-helmrepo.yaml

@@ -0,0 +1,9 @@
+---
+apiVersion: source.toolkit.fluxcd.io/v1beta1
+kind: HelmRepository
+metadata:
+  name: jetstack
+  namespace: certmanager-system
+spec:
+  interval: 20m0s
+  url: https://charts.jetstack.io

components/cert-manager/namespace.yaml

@@ -0,0 +1,4 @@
+apiVersion: v1
+kind: Namespace
+metadata:
+  name: certmanager-system

components/cert-manager/sealedsecret-gcp-sa-secret.yaml

@@ -0,0 +1,16 @@
+apiVersion: bitnami.com/v1alpha1
+kind: SealedSecret
+metadata:
+  creationTimestamp: null
+  name: gcp-sa-secret
+  namespace: certmanager-system
+spec:
+  encryptedData:
+    credentials.json: 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
+  template:
+    data: null
+    metadata:
+      creationTimestamp: null
+      name: gcp-sa-secret
+      namespace: certmanager-system
+

components/external-dns/credentials.json

@@ -0,0 +1,12 @@
+{
+  "type": "service_account",
+  "project_id": "homelab-264922",
+  "private_key_id": "f7ac68fc0ae11097e43d19037c48c4c01ba55fcc",
+  "private_key": "-----BEGIN PRIVATE KEY-----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\nJvRJcc6TdixI/eJIlFzl6cs=\n-----END PRIVATE KEY-----\n",
+  "client_email": "ext-dns-k3sodc2110@homelab-264922.iam.gserviceaccount.com",
+  "client_id": "113935552429314488865",
+  "auth_uri": "https://accounts.google.com/o/oauth2/auth",
+  "token_uri": "https://oauth2.googleapis.com/token",
+  "auth_provider_x509_cert_url": "https://www.googleapis.com/oauth2/v1/certs",
+  "client_x509_cert_url": "https://www.googleapis.com/robot/v1/metadata/x509/ext-dns-k3sodc2110%40homelab-264922.iam.gserviceaccount.com"
+}

components/external-dns/external-dns-helmrelease.yaml

@@ -0,0 +1,41 @@
+---
+apiVersion: helm.toolkit.fluxcd.io/v2beta1
+kind: HelmRelease
+metadata:
+  name: external-dns
+  namespace: externaldns-system
+spec:
+  chart:
+    spec:
+      chart: external-dns
+      version: "5.0.0"
+      sourceRef:
+        kind: HelmRepository
+        name: bitnami
+  interval: 10m0s
+  values:
+    provider: "google"
+    txtOwnerId: "extdns-k3s-odc2-110"
+    domainFilters:
+      - "labdevops.net"
+    google:
+      project: "homelab-264922"
+      ## Google Project to use
+      ##
+      # project: "homelab-264922"
+      ## Google Application Credentials
+      ##
+      serviceAccountSecret: "external-dns"
+      serviceAccountSecretKey: "credentials.json"
+    ## Prometheus Exporter / Metrics
+    ##
+    metrics:
+      enabled: true
+      # podAnnotations:
+      #   prometheus.io/scrape: "true"
+      #   prometheus.io/port: "7979"
+      serviceMonitor:
+        enabled: true
+        namespace: prometheus-system
+    nodeSelector:
+      kubernetes.io/arch: amd64

components/external-dns/helmrepo.yaml

@@ -0,0 +1,10 @@
+---
+apiVersion: source.toolkit.fluxcd.io/v1beta1
+kind: HelmRepository
+metadata:
+  name: bitnami
+  namespace: externaldns-system
+spec:
+  interval: 1m0s
+  url: https://charts.bitnami.com/bitnami
+

components/external-dns/namespace.yaml

@@ -0,0 +1,4 @@
+apiVersion: v1
+kind: Namespace
+metadata:
+  name: externaldns-system

components/external-dns/sealedsecret-external-dns.yaml

@@ -0,0 +1,16 @@
+apiVersion: bitnami.com/v1alpha1
+kind: SealedSecret
+metadata:
+  creationTimestamp: null
+  name: external-dns
+  namespace: externaldns-system
+spec:
+  encryptedData:
+    credentials.json: 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
+  template:
+    data: null
+    metadata:
+      creationTimestamp: null
+      name: external-dns
+      namespace: externaldns-system
+

components/external-dns/setup.sh

@@ -0,0 +1,8 @@
+#!/bin/bash
+#gcloud auth login
+gcloud auth login
+gcloud config set project homelab-264922
+gcloud iam service-accounts create ext-dns-k3sodc2110 --display-name "SvcAcc ext-dns on k3s-odc2-110 labdevops.net"
+gcloud projects add-iam-policy-binding homelab-264922 --role='roles/dns.admin' --member='serviceAccount:ext-dns-k3sodc2110@homelab-264922.iam.gserviceaccount.com'
+gcloud iam service-accounts keys create credentials.json --iam-account ext-dns-k3sodc2110@homelab-264922.iam.gserviceaccount.com
+kubectl create secret -n externaldns-system generic external-dns --from-file=credentials.json=credentials.json --dry-run=client --output=jso

components/metallb/bitnami_helmrepo.yaml

@@ -0,0 +1,10 @@
+---
+apiVersion: source.toolkit.fluxcd.io/v1beta1
+kind: HelmRepository
+metadata:
+  name: bitnami
+  namespace: metallb-system
+spec:
+  interval: 1m0s
+  url: https://charts.bitnami.com/bitnami
+

components/metallb/metallb_helmrelease.yaml

@@ -0,0 +1,31 @@
+---
+apiVersion: helm.toolkit.fluxcd.io/v2beta1
+kind: HelmRelease
+metadata:
+  name: metallb
+  namespace: metallb-system
+spec:
+  chart:
+    spec:
+      chart: metallb
+      version: "2.3.5"
+      sourceRef:
+        kind: HelmRepository
+        name: bitnami
+  interval: 10m0s
+  values:
+    controller:
+      image:
+        repository: metallb/controller
+        tag: v0.9.6
+    speaker:
+      image:
+        repository: metallb/speaker
+        tag: v0.9.6
+
+    configInline:
+      address-pools:
+      - name: default
+        protocol: layer2
+        addresses:
+        - 192.168.7.200-192.168.7.210

components/metallb/namespace.yaml

@@ -0,0 +1,4 @@
+apiVersion: v1
+kind: Namespace
+metadata:
+  name: metallb-system

components/nfs-provisioner/helmrepo.yaml

@@ -0,0 +1,9 @@
+---
+apiVersion: source.toolkit.fluxcd.io/v1beta1
+kind: HelmRepository
+metadata:
+  name: nfs-subdir-external-provisioner
+  namespace: nfs-system
+spec:
+  interval: 20m0s
+  url: https://kubernetes-sigs.github.io/nfs-subdir-external-provisioner/

components/nfs-provisioner/nfs-client-provisioner-helmrelease.yaml

@@ -0,0 +1,32 @@
+---
+apiVersion: helm.toolkit.fluxcd.io/v2beta1
+kind: HelmRelease
+metadata:
+  name: nfs-subdir-external-provisioner
+  namespace: nfs-system
+spec:
+  chart:
+    spec:
+      chart: nfs-subdir-external-provisioner
+      version: "4.0.10"
+      sourceRef:
+        kind: HelmRepository
+        name: nfs-subdir-external-provisioner
+  interval: 20m0s
+  values:
+    nodeSelector:
+      kubernetes.io/arch: arm64
+
+    # strategyType: Recreate
+
+    storageClass:
+      name: nfs-storage
+      defaultClass: true
+      archiveOnDelete: true
+      allowVolumeExpansion: true
+      provisionerName: storage.provisioner/nfs
+
+    nfs:
+      server: 192.168.7.100
+      path: /datapool/nfs/kubernetes
+  

components/nfs-provisioner/ns.yaml

@@ -0,0 +1,4 @@
+apiVersion: v1
+kind: Namespace
+metadata:
+  name: nfs-system

components/nginx-ingress/ingress-nginx_helmrepository.yaml

@@ -0,0 +1,10 @@
+---
+apiVersion: source.toolkit.fluxcd.io/v1beta1
+kind: HelmRepository
+metadata:
+  name: ingress-nginx
+  namespace: ingress-system
+spec:
+  interval: 20m0s
+  url: https://kubernetes.github.io/ingress-nginx
+

components/nginx-ingress/namespace.yaml

@@ -0,0 +1,4 @@
+apiVersion: v1
+kind: Namespace
+metadata:
+  name: ingress-system

components/nginx-ingress/nginx-ingress_helmrelease.yaml

@@ -0,0 +1,21 @@
+---
+apiVersion: helm.toolkit.fluxcd.io/v2beta1
+kind: HelmRelease
+metadata:
+  name: nginx-ingress
+  namespace: ingress-system
+spec:
+  chart:
+    spec:
+      chart: ingress-nginx
+      version: "3.26.x"
+      sourceRef:
+        kind: HelmRepository
+        name: ingress-nginx
+  interval: 20m0s
+  # values:
+  #   controller:
+  #     nodeSelector:
+  #       kubernetes.io/arch: 'amd64'
+
+  

components/prometheus/namespace.yaml

@@ -0,0 +1,4 @@
+apiVersion: v1
+kind: Namespace
+metadata:
+  name: prometheus-system

components/prometheus/prometheus-community_helmrepository.yaml

@@ -0,0 +1,10 @@
+---
+apiVersion: source.toolkit.fluxcd.io/v1beta1
+kind: HelmRepository
+metadata:
+  name: prometheus-community
+  namespace: prometheus-system
+spec:
+  interval: 20m0s
+  url: https://prometheus-community.github.io/helm-charts
+

components/prometheus/prometheus-stack.yaml

@@ -0,0 +1,28 @@
+---
+apiVersion: helm.toolkit.fluxcd.io/v2beta1
+kind: HelmRelease
+metadata:
+  name: kube-prometheus-stack
+  namespace: prometheus-system
+spec:
+  chart:
+    spec:
+      chart: kube-prometheus-stack
+      sourceRef:
+        kind: HelmRepository
+        name: prometheus-community
+  interval: 20m0s
+  values: 
+    grafana:
+      ingress:
+        enabled: true
+        annotations: 
+          kubernetes.io/ingress.class: nginx
+          cert-manager.io/cluster-issuer: labdevops-net-letsencrypt-prod
+        hosts:
+        - grafana.labdevops.net
+        tls:
+        - secretName: grafana-cm-tls
+          hosts:
+          - grafana.labdevops.net
+  

components/sealedsecrets/bitnami-helmrepo.yaml

@@ -0,0 +1,10 @@
+---
+apiVersion: source.toolkit.fluxcd.io/v1beta1
+kind: HelmRepository
+metadata:
+  name: bitnami-labs-sealed-secrets
+  namespace: sealedsecrets-system
+spec:
+  interval: 1h0m0s
+  url: https://bitnami-labs.github.io/sealed-secrets
+

components/sealedsecrets/namespace.yaml

@@ -0,0 +1,4 @@
+apiVersion: v1
+kind: Namespace
+metadata:
+  name: sealedsecrets-system

components/sealedsecrets/pre-seed-key.sh

@@ -0,0 +1,2 @@
+#!/bin/bash
+## TODO: add secret from /keybase/private/lukeab/k3s-odc2-110/sealedsecrets/pub-cert.pem

components/sealedsecrets/sealedsecrets-helmrelease.yaml

@@ -0,0 +1,32 @@
+---
+apiVersion: helm.toolkit.fluxcd.io/v2beta1
+kind: HelmRelease
+metadata:
+  name: sealed-secrets
+  namespace: sealedsecrets-system
+spec:
+  chart:
+    spec:
+      chart: sealed-secrets
+      sourceRef:
+        kind: HelmRepository
+        name: bitnami-labs-sealed-secrets
+      version: ">=1.16.0-0"
+  interval: 1h0m0s
+  releaseName: sealed-secrets
+  targetNamespace: sealedsecrets-system
+  install:
+    crds: Create
+  upgrade:
+    crds: CreateReplace
+  values:
+    namespace: sealedsecrets-system
+    serviceMonitor:
+      create: true
+    # secretName: "sealed-secrets-key"
+    # uncomment this when generated key is offloaded and pre-configured
+    dashboards:
+      create: true
+      namespace: sealedsecrets-system
+      labels:
+        grafana_dashboard: "1"

deployments/test3/namespace_test.yaml

@@ -0,0 +1,4 @@
+apiVersion: v1
+kind: Namespace
+metadata:
+  name: test3

deployments/test3/nginx-deploy.yaml

@@ -0,0 +1,23 @@
+apiVersion:  apps/v1
+kind: Deployment
+metadata:
+  name: nginx-test
+  namespace: test3
+spec:
+  selector:
+    matchLabels:
+      app: nginx-test
+  template:
+    metadata:
+      labels:
+        app: nginx-test
+    spec:
+      containers:
+      - name: nginx-test
+        image: nginx
+        resources:
+          limits:
+            memory: "128Mi"
+            cpu: "500m"
+        ports:
+        - containerPort: 80

deployments/test3/podinfo-hr.yaml

@@ -0,0 +1,15 @@
+---
+apiVersion: helm.toolkit.fluxcd.io/v2beta1
+kind: HelmRelease
+metadata:
+  name: podinfo
+  namespace: test3
+spec:
+  chart:
+    spec:
+      chart: podinfo
+      sourceRef:
+        kind: HelmRepository
+        name: podinfo
+  interval: 1m0s
+

tests/cert-manager/test-certificate-labdevops-net.yaml

@@ -0,0 +1,14 @@
+---
+apiVersion: cert-manager.io/v1
+kind: Certificate
+metadata:
+  name: testcert-labdevops-net
+  namespace: certmanager-system
+spec:
+  dnsNames:
+    - testcert.labdevops.net
+    - blablahtest.labdevops.net
+  secretName: testcert-labdevops-tls
+  issuerRef:
+    name: labdevops-net-letsencrypt-prod
+    kind: ClusterIssuer

tests/cert-manager/test-resource.yaml

@@ -0,0 +1,24 @@
+apiVersion: v1
+kind: Namespace
+metadata:
+  name: cert-manager
+---
+apiVersion: cert-manager.io/v1
+kind: Issuer
+metadata:
+  name: test-selfsigned
+  namespace: cert-manager
+spec:
+  selfSigned: {}
+---
+apiVersion: cert-manager.io/v1
+kind: Certificate
+metadata:
+  name: selfsigned-cert
+  namespace: cert-manager
+spec:
+  dnsNames:
+    - labdevops.net
+  secretName: selfsigned-cert-tls
+  issuerRef:
+    name: test-selfsigned

tests/test1/ns.yaml

@@ -0,0 +1,4 @@
+apiVersion: v1
+kind: Namespace
+metadata:
+  name: test1

tests/test1/podinfo-helmrepo.yaml

@@ -0,0 +1,9 @@
+---
+apiVersion: source.toolkit.fluxcd.io/v1beta1
+kind: HelmRepository
+metadata:
+  name: podinfo
+  namespace: test1
+spec:
+  interval: 1m0s
+  url: https://stefanprodan.github.io/podinfo

tests/test1/podinfo.yaml

@@ -0,0 +1,22 @@
+---
+apiVersion: helm.toolkit.fluxcd.io/v2beta1
+kind: HelmRelease
+metadata:
+  name: podinfo
+  namespace: test1
+spec:
+  chart:
+    spec:
+      chart: podinfo
+      version: 5.2.0
+      sourceRef:
+        kind: HelmRepository
+        name: podinfo
+        
+  interval: 1m0s
+  values:
+    ingress:
+      enabled: true
+      annotations:
+        kubernetes.io/ingress.class: nginx
+      path: "/"