add orbital-sync

[chrisbsmith]

No description provided.

[github-actions]

--- kubernetes/apps Kustomization: flux-system/cluster-apps Kustomization: flux-system/orbital-sync

+++ kubernetes/apps Kustomization: flux-system/cluster-apps Kustomization: flux-system/orbital-sync

@@ -0,0 +1,38 @@

+---
+apiVersion: kustomize.toolkit.fluxcd.io/v1
+kind: Kustomization
+metadata:
+  labels:
+    kustomize.toolkit.fluxcd.io/name: cluster-apps
+    kustomize.toolkit.fluxcd.io/namespace: flux-system
+  name: orbital-sync
+  namespace: flux-system
+spec:
+  commonMetadata:
+    labels:
+      app.kubernetes.io/name: orbital-sync
+  decryption:
+    provider: sops
+    secretRef:
+      name: sops-age
+  interval: 30m
+  path: ./kubernetes/apps/networking/orbital-sync/app
+  postBuild:
+    substituteFrom:
+    - kind: ConfigMap
+      name: cluster-settings
+    - kind: Secret
+      name: cluster-secrets
+    - kind: ConfigMap
+      name: cluster-settings-user
+    - kind: Secret
+      name: cluster-secrets-user
+  prune: true
+  retryInterval: 1m
+  sourceRef:
+    kind: GitRepository
+    name: home-kubernetes
+  targetNamespace: networking
+  timeout: 5m
+  wait: false
+
--- kubernetes/apps/networking/orbital-sync/app Kustomization: flux-system/orbital-sync ExternalSecret: networking/orbital-sync

+++ kubernetes/apps/networking/orbital-sync/app Kustomization: flux-system/orbital-sync ExternalSecret: networking/orbital-sync

@@ -0,0 +1,29 @@

+---
+apiVersion: external-secrets.io/v1beta1
+kind: ExternalSecret
+metadata:
+  labels:
+    app.kubernetes.io/name: orbital-sync
+    kustomize.toolkit.fluxcd.io/name: orbital-sync
+    kustomize.toolkit.fluxcd.io/namespace: flux-system
+  name: orbital-sync
+  namespace: networking
+spec:
+  dataFrom:
+  - extract:
+      key: orbital-sync
+  - extract:
+      key: pihole
+  secretStoreRef:
+    kind: ClusterSecretStore
+    name: onepassword-connect
+  target:
+    name: orbital-sync-secret
+    template:
+      data:
+        PRIMARY_HOST_BASE_URL: '{{ .PIHOLE_LOCAL_DNS_IP }}'
+        PRIMARY_HOST_PASSWORD: '{{ .pihole-password }}'
+        SECONDARY_HOSTS_1_BASE_URL: '{{ .ORBITAL_SYNC_PIHOLE_1 }}'
+        SECONDARY_HOSTS_1_PASSWORD: '{{ .ORBITAL_SYNC_PIHOLE_1_PASSWORD }}'
+      engineVersion: v2
+
--- kubernetes/apps/networking/orbital-sync/app Kustomization: flux-system/orbital-sync HelmRelease: networking/orbital-sync

+++ kubernetes/apps/networking/orbital-sync/app Kustomization: flux-system/orbital-sync HelmRelease: networking/orbital-sync

@@ -0,0 +1,56 @@

+---
+apiVersion: helm.toolkit.fluxcd.io/v2beta2
+kind: HelmRelease
+metadata:
+  labels:
+    app.kubernetes.io/name: orbital-sync
+    kustomize.toolkit.fluxcd.io/name: orbital-sync
+    kustomize.toolkit.fluxcd.io/namespace: flux-system
+  name: orbital-sync
+  namespace: networking
+spec:
+  chart:
+    spec:
+      chart: app-template
+      sourceRef:
+        kind: HelmRepository
+        name: bjw-s
+        namespace: flux-system
+      version: 3.1.0
+  install:
+    remediation:
+      retries: 3
+  interval: 30m
+  maxHistory: 2
+  uninstall:
+    keepHistory: false
+  upgrade:
+    cleanupOnFail: true
+    remediation:
+      retries: 3
+  values:
+    controllers:
+      orbital-sync:
+        containers:
+          app:
+            env:
+              INTERVAL_MINUTES: 5
+            envFrom:
+            - secretRef:
+                name: orbital-sync-secret
+            image:
+              repository: FROM ghcr.io/mattwebbio/orbital-sync
+              tag: 1.8.0
+            resources:
+              limits:
+                memory: 64M
+              requests:
+                cpu: 5m
+                memory: 10M
+        pod:
+          securityContext:
+            runAsGroup: 568
+            runAsUser: 568
+        replicas: 1
+        strategy: RollingUpdate
+
--- kubernetes/apps/networking/orbital-sync/app Kustomization: flux-system/orbital-sync ConfigMap: networking/${APP}-gatus-ep

+++ kubernetes/apps/networking/orbital-sync/app Kustomization: flux-system/orbital-sync ConfigMap: networking/${APP}-gatus-ep

@@ -0,0 +1,25 @@

+---
+apiVersion: v1
+data:
+  config.yaml: |
+    endpoints:
+      - name: "${APP}"
+        group: external
+        url: "https://${GATUS_SUBDOMAIN:-${APP}}.${SECRET_DOMAIN}"
+        interval: 1m
+        client:
+          dns-resolver: tcp://1.1.1.1:53
+        conditions:
+          - "[STATUS] == 200"
+        alerts:
+          - type: pushover
+kind: ConfigMap
+metadata:
+  labels:
+    app.kubernetes.io/name: orbital-sync
+    gatus.io/enabled: 'true'
+    kustomize.toolkit.fluxcd.io/name: orbital-sync
+    kustomize.toolkit.fluxcd.io/namespace: flux-system
+  name: ${APP}-gatus-ep
+  namespace: networking
+

[github-actions]

--- HelmRelease: networking/orbital-sync Deployment: networking/orbital-sync

+++ HelmRelease: networking/orbital-sync Deployment: networking/orbital-sync

@@ -0,0 +1,53 @@

+---
+apiVersion: apps/v1
+kind: Deployment
+metadata:
+  name: orbital-sync
+  labels:
+    app.kubernetes.io/component: orbital-sync
+    app.kubernetes.io/instance: orbital-sync
+    app.kubernetes.io/managed-by: Helm
+    app.kubernetes.io/name: orbital-sync
+spec:
+  revisionHistoryLimit: 3
+  replicas: 1
+  strategy:
+    type: RollingUpdate
+  selector:
+    matchLabels:
+      app.kubernetes.io/component: orbital-sync
+      app.kubernetes.io/name: orbital-sync
+      app.kubernetes.io/instance: orbital-sync
+  template:
+    metadata:
+      labels:
+        app.kubernetes.io/component: orbital-sync
+        app.kubernetes.io/instance: orbital-sync
+        app.kubernetes.io/name: orbital-sync
+    spec:
+      enableServiceLinks: false
+      serviceAccountName: default
+      automountServiceAccountToken: true
+      securityContext:
+        runAsGroup: 568
+        runAsUser: 568
+      hostIPC: false
+      hostNetwork: false
+      hostPID: false
+      dnsPolicy: ClusterFirst
+      containers:
+      - env:
+        - name: INTERVAL_MINUTES
+          value: '5'
+        envFrom:
+        - secretRef:
+            name: orbital-sync-secret
+        image: FROM ghcr.io/mattwebbio/orbital-sync:1.8.0
+        name: app
+        resources:
+          limits:
+            memory: 64M
+          requests:
+            cpu: 5m
+            memory: 10M
+