update hermes and gotify integration

Author: soerenschneider

apps/gotify/components/networkpolicy-hermes/kustomization.yaml

@@ -0,0 +1,17 @@
+---
+apiVersion: "kustomize.config.k8s.io/v1alpha1"
+kind: "Component"
+patches:
+  - target:
+      kind: "NetworkPolicy"
+      name: "gotify"
+    patch: |-
+      - op: "add"
+        path: "/spec/ingress/0/from/-"
+        value:
+          namespaceSelector:
+            matchLabels:
+              kubernetes.io/metadata.name: "hermes"
+          podSelector:
+            matchLabels:
+              app: "hermes"

clusters/svc.pt.soeren.cloud/gotify/kustomization.yaml

@@ -9,6 +9,7 @@ resources:
 components:
   - "../../../apps/gotify/components/istio"
   - "../../../apps/gotify/components/db-mysql"
+  - "../../../apps/gotify/components/networkpolicy-hermes"
 patches:
   - target:
       kind: "VirtualService"

clusters/svc.pt.soeren.cloud/hermes/external-secret-hermes.yaml

@@ -0,0 +1,18 @@
+---
+apiVersion: external-secrets.io/v1beta1
+kind: ExternalSecret
+metadata:
+  name: hermes-tokens
+spec:
+  refreshInterval: 12h
+  secretStoreRef:
+    name: "vault"
+    kind: "ClusterSecretStore"
+  target:
+    name: "hermes-tokens"
+    creationPolicy: "Owner"
+  data:
+    - secretKey: "gotify"
+      remoteRef:
+        key: "secret/soeren.cloud/env/prod/hermes"
+        property: "gotify"

clusters/svc.pt.soeren.cloud/hermes/hermes-config.yaml

@@ -13,5 +13,5 @@ awtrix:
 dead_letter_queue: "gotify"
 gotify:
   - uri: "gotify"
-    token_file: "/etc/hermes/gotify_token"
+    token_file: "/etc/hermes/gotify"
     addr: "http://gotify.gotify"

clusters/svc.pt.soeren.cloud/hermes/kustomization.yaml

@@ -9,6 +9,7 @@ components:
 resources:
   - "namespace.yaml"
   - "../../../apps/hermes"
+  - "external-secret-hermes.yaml"
 configMapGenerator:
   - name: "hermes-config"
     files: