add hermes

Author: soerenschneider

clusters/svc.ez.soeren.cloud/hermes/external-secret-hermes.yaml

@@ -0,0 +1,18 @@
+---
+apiVersion: external-secrets.io/v1beta1
+kind: ExternalSecret
+metadata:
+  name: hermes-tokens
+spec:
+  refreshInterval: 12h
+  secretStoreRef:
+    name: "vault"
+    kind: "ClusterSecretStore"
+  target:
+    name: "hermes-tokens"
+    creationPolicy: "Owner"
+  data:
+    - secretKey: "gotify"
+      remoteRef:
+        key: "secret/soeren.cloud/env/prod/hermes"
+        property: "gotify"

clusters/svc.ez.soeren.cloud/hermes/hermes-config.yaml

@@ -0,0 +1,21 @@
+---
+http:
+  address: "0.0.0.0:8080"
+metrics_addr: "0.0.0.0:9223"
+events_impl: [http]
+
+db:
+  type: sqlite
+  name: "/data/sqlite.db"
+
+awtrix:
+  - uri: "awtrix-office"
+    addr: "http://awtrix-office.dd.soeren.cloud"
+  - uri: "awtrix-livingroom"
+    addr: "http://awtrix-livingroom.dd.soeren.cloud"
+
+dead_letter_queue: "gotify"
+gotify:
+  - uri: "gotify"
+    token_file: "/etc/hermes/gotify"
+    addr: "http://gotify.gotify"

clusters/svc.ez.soeren.cloud/hermes/kustomization.yaml

@@ -0,0 +1,37 @@
+---
+apiVersion: "kustomize.config.k8s.io/v1beta1"
+kind: "Kustomization"
+namespace: "hermes"
+images:
+  - name: "ghcr.io/soerenschneider/hermes"
+    newName: "cr.svc.ez.soeren.cloud/hermes"
+    newTag: "latest"
+components:
+  - "../../../apps/hermes/components/istio"
+  - "../../../apps/hermes/components/secret"
+  - "../../../apps/hermes/components/pvc"
+resources:
+  - "namespace.yaml"
+  - "../../../apps/hermes"
+  - "external-secret-hermes.yaml"
+  - "pv.yaml"
+configMapGenerator:
+  - name: "hermes-config"
+    files:
+      - "hermes-config.yaml"
+patches:
+  - target:
+      kind: Deployment
+      name: hermes
+    patch: |-
+      - op: replace
+        path: /spec/template/spec/containers/0/imagePullPolicy
+        value: Always
+  - target:
+      kind: "VirtualService"
+      name: "hermes"
+    patch: |-
+      - op: "replace"
+        path: "/spec/hosts"
+        value:
+          - "hermes.svc.ez.soeren.cloud"

clusters/svc.ez.soeren.cloud/hermes/namespace.yaml

@@ -0,0 +1,7 @@
+---
+kind: Namespace
+apiVersion: v1
+metadata:
+  name: hermes
+  labels:
+    name: hermes

clusters/svc.ez.soeren.cloud/hermes/pv.yaml

@@ -0,0 +1,24 @@
+---
+apiVersion: "v1"
+kind: "PersistentVolume"
+metadata:
+  name: "hermes"
+spec:
+  accessModes:
+    - "ReadWriteOnce"
+  capacity:
+    storage: "150Mi"
+  storageClassName: "local-storage"
+  local:
+    path: "/mnt/k8s/hermes"
+  claimRef:
+    namespace: "hermes"
+    name: "hermes"
+  nodeAffinity:
+    required:
+      nodeSelectorTerms:
+        - matchExpressions:
+            - key: "kubernetes.io/hostname"
+              operator: "In"
+              values:
+                - "k8s.ez.soeren.cloud"