feat(apps): add mosquitto from onedr0p

Author: ChipWolf

kubernetes/apps/default/kustomization.yaml

@@ -6,6 +6,7 @@ resources:
   - ./echo-server/ks.yaml
   - ./emqx/ks.yaml
   - ./hajimari/ks.yaml
-  - ./ispy/ks.yaml
   - ./home-assistant/ks.yaml
+  - ./ispy/ks.yaml
+  - ./mosquitto/ks.yaml
   - ./zigbee2mqtt/ks.yaml

kubernetes/apps/default/mosquitto/ks.yaml

@@ -0,0 +1,98 @@
+---
+apiVersion: source.toolkit.fluxcd.io/v1
+kind: GitRepository
+metadata:
+  name: onedr0p-kubernetes
+  namespace: flux-system
+spec:
+  interval: 30m
+  ref:
+    tag: "2023.4.1"
+  url: "https://github.com/onedr0p/home-ops"
+  ignore: |
+    # exclude all
+    /*
+    # include kubernetes directories
+    !/kubernetes/apps/default/mosquitto/app
+---
+apiVersion: kustomize.toolkit.fluxcd.io/v1
+kind: Kustomization
+metadata:
+  name: onedr0p-apps-mosquitto
+  namespace: flux-system
+spec:
+  path: ./kubernetes/apps/default/mosquitto/app
+  prune: true
+  sourceRef:
+    kind: GitRepository
+    name: onedr0p-kubernetes
+  healthChecks:
+    - apiVersion: helm.toolkit.fluxcd.io/v2beta1
+      kind: HelmRelease
+      name: mosquitto
+      namespace: default
+  interval: 15m
+  retryInterval: 1m
+  timeout: 3m
+  decryption:
+    provider: sops
+    secretRef:
+      name: sops-age
+  postBuild:
+    substituteFrom:
+      - kind: ConfigMap
+        name: cluster-settings
+      - kind: Secret
+        name: cluster-secrets
+  patches:
+    - patch: |-
+        apiVersion: helm.toolkit.fluxcd.io/v2beta1
+        kind: HelmRelease
+        metadata:
+          name: not-used
+        spec:
+          chart:
+            spec:
+              chart: app-template
+              version: 1.4.0
+          values:
+            initContainers:
+              01-init-config:
+                args: ["echo admin:admin > /data/external_config/mosquitto_pwd && mosquitto_passwd -U /data/external_config/mosquitto_pwd"]
+                volumeMounts:
+                  - { name: external-config, mountPath: /data/external_config }
+            image:
+              repository: public.ecr.aws/docker/library/eclipse-mosquitto
+              tag: 2.0.15
+            service:
+              main:
+                annotations:
+                  coredns.io/hostname: "mosquitto.${SECRET_DOMAIN}"
+                externalIPs: ["${SVC_MOSQUITTO_ADDR}"]
+            volumeClaimTemplates:
+              $patch: delete
+            persistence:
+              secret-file:
+                $patch: delete
+      target:
+        kind: HelmRelease
+        name: mosquitto
+        namespace: default
+    - patch: |-
+        $patch: delete
+        apiVersion: external-secrets.io/v1beta1
+        kind: ExternalSecret
+        metadata:
+          name: not-used
+      target:
+        group: external-secrets.io
+        kind: ExternalSecret
+    - patch: |-
+        $patch: delete
+        apiVersion: volsync.backube/v1alpha1
+        kind: ReplicationSource
+        metadata:
+          name: not-used
+      target:
+        group: volsync.backube
+        kind: ReplicationSource

kubernetes/apps/flux-system/addons/ks.yaml

@@ -14,3 +14,9 @@ spec:
   interval: 30m
   retryInterval: 1m
   timeout: 3m
+  postBuild:
+    substituteFrom:
+      - kind: ConfigMap
+        name: cluster-settings
+      - kind: Secret
+        name: cluster-secrets

kubernetes/apps/networking/ingress-nginx/ks.yaml

@@ -16,6 +16,12 @@ spec:
   interval: 30m
   retryInterval: 1m
   timeout: 3m
+  postBuild:
+    substituteFrom:
+      - kind: ConfigMap
+        name: cluster-settings
+      - kind: Secret
+        name: cluster-secrets
 ---
 apiVersion: kustomize.toolkit.fluxcd.io/v1
 kind: Kustomization
@@ -39,3 +45,9 @@ spec:
   interval: 30m
   retryInterval: 1m
   timeout: 3m
+  postBuild:
+    substituteFrom:
+      - kind: ConfigMap
+        name: cluster-settings
+      - kind: Secret
+        name: cluster-secrets

kubernetes/apps/networking/k8s-gateway/ks.yaml

@@ -21,3 +21,9 @@ spec:
   interval: 30m
   retryInterval: 1m
   timeout: 3m
+  postBuild:
+    substituteFrom:
+      - kind: ConfigMap
+        name: cluster-settings
+      - kind: Secret
+        name: cluster-secrets

kubernetes/apps/networking/metallb/ks.yaml

@@ -36,3 +36,9 @@ spec:
   interval: 30m
   retryInterval: 1m
   timeout: 3m
+  postBuild:
+    substituteFrom:
+      - kind: ConfigMap
+        name: cluster-settings
+      - kind: Secret
+        name: cluster-secrets

kubernetes/flux/vars/cluster-settings.yaml

@@ -13,3 +13,4 @@ data:
   SVC_HOME_ASSISTANT_ADDR: "192.168.68.222"
   SVC_EMQX_ADDR: "192.168.68.223"
   SVC_ISPY_ADDR: "192.168.68.224"
+  SVC_MOSQUITTO_ADDR: "192.168.68.225"