chore(bootstrap): Added uptime-kuma and pocket-id to argocd

manifests/artemis/pocket-id/deployment.yaml

@@ -0,0 +1,37 @@
+apiVersion: apps/v1
+kind: Deployment
+metadata:
+  name: pocket-id
+spec:
+  selector:
+    matchLabels:
+      app: pocket-id
+  template:
+    metadata:
+      labels:
+        app: pocket-id
+    spec:
+      nodeSelector:
+        node-role.kubernetes.io/worker: worker
+      containers:
+        - name: pocket-id
+          image: ghcr.io/pocket-id/pocket-id:v1
+          ports:
+            - containerPort: 1411
+          env:
+            - name: APP_URL
+              value: "https://auth.dgse.cloud"
+            - name: TRUST_PROXY
+              value: "true"
+            - name: MAXMIND_LICENSE_KEY
+              valueFrom:
+                secretKeyRef:
+                  name: pocket-id-secrets
+                  key: maxmind-license-key
+          volumeMounts:
+            - mountPath: /app/data
+              name: pocket-id-data
+      volumes:
+        - name: pocket-id-data
+          persistentVolumeClaim:
+            claimName: pocket-id-data

manifests/artemis/pocket-id/ingress.yaml

@@ -0,0 +1,22 @@
+apiVersion: networking.k8s.io/v1
+kind: Ingress
+metadata:
+  annotations:
+    cert-manager.io/cluster-issuer: letsencrypt
+  name: pocket-id-ingress
+spec:
+  rules:
+  - host: auth.dgse.cloud
+    http:
+      paths:
+      - backend:
+          service:
+            name: pocket-id
+            port:
+              number: 1411
+        path: /
+        pathType: Prefix
+  tls:
+  - hosts:
+    - auth.dgse.cloud
+    secretName: letsencrypt

manifests/artemis/pocket-id/kustomization.yaml

@@ -0,0 +1,7 @@
+---
+resources:
+  - vault-secrets.yaml
+  - deployment.yaml
+  - service.yaml
+  - ingress.yaml
+  - pvc.yaml

manifests/artemis/pocket-id/pvc.yaml

@@ -0,0 +1,13 @@
+---
+apiVersion: v1
+kind: PersistentVolumeClaim
+metadata:
+  name: pocket-id-data
+  labels:
+    app: pocket-id
+spec:
+  accessModes:
+    - ReadWriteOnce
+  resources:
+    requests:
+      storage: 1Gi

manifests/artemis/pocket-id/service.yaml

@@ -0,0 +1,15 @@
+---
+apiVersion: v1
+kind: Service
+metadata:
+  name: pocket-id
+  labels:
+    app: pocket-id
+spec:
+  clusterIP: None
+  selector:
+    app: pocket-id
+  ports:
+    - name: websecure
+      port: 1411
+      targetPort: 1411

manifests/artemis/pocket-id/vault-secrets.yaml

@@ -0,0 +1,16 @@
+apiVersion: external-secrets.io/v1
+kind: ExternalSecret
+metadata:
+  name: pocket-id
+spec:
+  refreshInterval: 1h
+  secretStoreRef:
+    name: platform
+    kind: ClusterSecretStore
+  target:
+    name: pocket-id-secrets
+  data:
+    - secretKey: maxmind-license-key
+      remoteRef:
+        key: pocket-id/env
+        property: maxmind-license-key