feat: add weave-gitops

.mise.toml

@@ -1,5 +1,5 @@
 [env]
-KUBECONFIG = '{{config_root}}/kubernetes/main/kubeconfig:{{config_root}}/kubernetes/utility/kubeconfig:{{config_root}}/kubernetes/pi5/kubeconfig'
+KUBECONFIG = '{{config_root}}/kubernetes/main/kubeconfig:{{config_root}}/kubernetes/utility/kubeconfig'
 MINIJINJA_CONFIG_FILE = '{{config_root}}/.minijinja.toml'
 SOPS_AGE_KEY_FILE = '{{config_root}}/age.key'
 #TALOSCONFIG = '{{config_root}}/kubernetes/main/bootstrap/talos/clusterconfig/talosconfig:{{config_root}}/kubernetes/utility/bootstrap/talos/clusterconfig/talosconfig:{{config_root}}/kubernetes/pi5/bootstrap/talos/clusterconfig/talosconfig'

kubernetes/main/apps/flux-system/kustomization.yaml

@@ -6,7 +6,7 @@ namespace: flux-system
 resources:
   - ./flux-operator.yaml
   - ./kustomize-mutating-webhook/ks.yaml
-  - ./weave-gitops/ks.yaml
+  - ./weave-gitops.yaml
 components:
   - ../../../shared/meta/components/alerts
   - ../../../shared/meta/components/namespace

kubernetes/main/apps/flux-system/weave-gitops.yaml

@@ -0,0 +1,39 @@
+---
+# yaml-language-server: $schema=https://kube-schemas.pages.dev/kustomize.toolkit.fluxcd.io/kustomization_v1.json
+apiVersion: kustomize.toolkit.fluxcd.io/v1
+kind: Kustomization
+metadata:
+  name: &app weave-gitops
+spec:
+  commonMetadata:
+    labels:
+      app.kubernetes.io/name: *app
+  dependsOn:
+    - name: onepassword-store
+      namespace: external-secrets
+  interval: 30m
+  path: ./kubernetes/shared/apps/flux-system/weave-gitops/app
+  prune: true
+  sourceRef:
+    kind: GitRepository
+    name: flux-system
+    namespace: flux-system
+  targetNamespace: flux-system
+  timeout: 5m
+  wait: false
+  patches:
+    - patch: |-
+        apiVersion: helm.toolkit.fluxcd.io/v2
+        kind: HelmRelease
+        metadata:
+          name: weave-gitops
+        spec:
+          ingress:
+            annotations:
+              gethomepage.dev/enabled: "true"
+              gethomepage.dev/group: Infrastructure
+              gethomepage.dev/name: Weave-gitops
+              gethomepage.dev/icon: https://raw.githubusercontent.com/joryirving/home-ops/main/docs/src/assets/icons/weave.png
+              gethomepage.dev/description: Flux Dashboard
+            hosts:
+              - host: gitops.jory.dev

kubernetes/utility/apps/flux-system/weave-gitops/app/helmrelease.yaml → kubernetes/shared/apps/flux-system/weave-gitops/app/helmrelease.yaml

@@ -31,7 +31,7 @@ spec:
       enabled: true
       className: internal
       hosts:
-        - host: gitops-utility.jory.dev
+        - host: gitops.jory.dev
           paths:
             - path: /
               pathType: Prefix
@@ -41,6 +41,5 @@ spec:
       enabled: true
     rbac:
       create: true
-      impersonationResourceNames: ["admin"]
     podAnnotations:
       secret.reloader.stakater.com/reload: cluster-user-auth

kubernetes/main/apps/flux-system/weave-gitops/app/kustomization.yaml → kubernetes/shared/apps/flux-system/weave-gitops/app/kustomization.yaml

@@ -5,4 +5,3 @@ kind: Kustomization
 resources:
   - ./externalsecret.yaml
   - ./helmrelease.yaml
-  - ./rbac.yaml

kubernetes/utility/apps/flux-system/kustomization.yaml

@@ -7,7 +7,7 @@ resources:
   - ./flux-operator.yaml
   - ./kustomize-mutating-webhook/ks.yaml
   - ./tofu-controller/ks.yaml
-  - ./weave-gitops/ks.yaml
+  - ./weave-gitops.yaml
 components:
   - ../../../shared/meta/components/alerts
   - ../../../shared/meta/components/namespace

kubernetes/utility/apps/flux-system/weave-gitops.yaml

@@ -0,0 +1,35 @@
+---
+# yaml-language-server: $schema=https://kube-schemas.pages.dev/kustomize.toolkit.fluxcd.io/kustomization_v1.json
+apiVersion: kustomize.toolkit.fluxcd.io/v1
+kind: Kustomization
+metadata:
+  name: &app weave-gitops
+spec:
+  commonMetadata:
+    labels:
+      app.kubernetes.io/name: *app
+  interval: 30m
+  path: ./kubernetes/shared/apps/flux-system/weave-gitops/app
+  prune: true
+  sourceRef:
+    kind: GitRepository
+    name: flux-system
+    namespace: flux-system
+  targetNamespace: flux-system
+  timeout: 5m
+  wait: false
+  patches:
+    - patch: |-
+        apiVersion: helm.toolkit.fluxcd.io/v2
+        kind: HelmRelease
+        metadata:
+          name: weave-gitops
+        spec:
+          ingress:
+            hosts:
+              - host: gitops-utility.jory.dev
+          rbac:
+            additionalRules:
+              - apiGroups: [ "infra.contrib.fluxcd.io" ]
+                resources: [ "terraforms" ]
+                verbs: [ "get", "list", "patch" ]