Add pinbot to cluster

flux/cluster/apps/kustomization.yaml

@@ -1,7 +1,7 @@
 apiVersion: kustomize.config.k8s.io/v1beta1
 kind: Kustomization
 resources:
-  - test
+  - misc
   - authentik
   - networking
   - drone

flux/cluster/apps/misc/kustomization.yaml

@@ -1,6 +1,4 @@
 apiVersion: kustomize.config.k8s.io/v1beta1
 kind: Kustomization
 resources:
-  - deployment.yaml
+  - pinbot
-  - ingress.yaml
-  - service.yaml

flux/cluster/apps/misc/pinbot/kustomization.yaml

@@ -0,0 +1,5 @@
+apiVersion: kustomize.config.k8s.io/v1beta1
+kind: Kustomization
+resources:
+  - pinbot.yaml
+  - secret.yaml

flux/cluster/apps/misc/pinbot/pinbot.yaml

@@ -0,0 +1,29 @@
+apiVersion: apps/v1
+kind: Deployment
+metadata:
+  name: pinbot-deployment
+  namespace: misc
+  labels:
+    app: pinbot-deployment
+    keel.sh/policy: force
+spec:
+  replicas: 1
+  selector:
+    matchLabels:
+      app: pinbot-deployment
+  template:
+    metadata:
+      labels:
+        app: pinbot-deployment
+    spec:
+      containers:
+      - name: pinbot-deployment
+        image: registry.asraphiel.dev/library/pinbot:main
+        env:
+        - name: DISCORD_TOKEN
+          valueFrom:
+            secretKeyRef:
+              name: pinbot-secrets
+              key: token
+      imagePullSecrets:
+      - name: registry-creds

flux/cluster/apps/misc/pinbot/secret.yaml

@@ -1,17 +1,17 @@
 apiVersion: external-secrets.io/v1beta1
 kind: ExternalSecret
 metadata:
-  name: vault-example
+  name: pinbot-secrets
-  namespace: test
+  namespace: misc
 spec:
   refreshInterval: "15s"
   secretStoreRef:
     name: vault
     kind: ClusterSecretStore
   target:
-    name: example-sync
+    name: pinbot-secrets
   data:
-    - secretKey: foobar
+    - secretKey: pinbot-discord-token
       remoteRef:
-        key: k8s/foo
+        key: k8s/pinbot
-        property: my-value
+        property: token

flux/cluster/apps/misc/registry-creds.yaml

@@ -2,7 +2,7 @@ apiVersion: external-secrets.io/v1beta1
 kind: ExternalSecret
 metadata:
   name: registry-creds
-  namespace: test
+  namespace: misc
 spec:
   refreshInterval: "5m"
   secretStoreRef:

flux/cluster/apps/test/deployment.yaml

@@ -1,27 +0,0 @@
-apiVersion: apps/v1
-kind: Deployment
-metadata:
-  name: whoami-deployment
-  namespace: test
-  labels:
-    app: whoami-deployment
-    keel.sh/policy: force
-    keel.sh/match-tag: "true"
-spec:
-  replicas: 1
-  selector:
-    matchLabels:
-      app: whoami-deployment
-  template:
-    metadata:
-      labels:
-        app: whoami-deployment
-    spec:
-      containers:
-        - name: whoami-deployment
-          imagePullPolicy: Always
-          image: registry.asraphiel.dev/whoami
-          ports:
-            - containerPort: 80
-      imagePullSecrets:
-        - name: registry-creds

flux/cluster/apps/test/ingress.yaml

@@ -1,17 +0,0 @@
-apiVersion: networking.k8s.io/v1
-kind: Ingress
-metadata:
-  name: whoami-deployment-ingress
-  namespace: test
-spec:
-  rules:
-    - host: "whoami.asraphiel.dev"
-      http:
-        paths:
-          - path: /
-            pathType: Prefix
-            backend:
-              service:
-                name: whoami-deployment-service
-                port:
-                  number: 80

flux/cluster/apps/test/kustomization.yaml

@@ -1,8 +0,0 @@
-apiVersion: kustomize.config.k8s.io/v1beta1
-kind: Kustomization
-resources:
-  - deployment.yaml
-  - ingress.yaml
-  - service.yaml
-  - registry-creds.yaml
-  - test-secret.yaml

flux/cluster/apps/test/service.yaml

@@ -1,12 +0,0 @@
-apiVersion: v1
-kind: Service
-metadata:
-  name: whoami-deployment-service
-  namespace: test
-spec:
-  selector:
-    app: whoami-deployment
-  ports:
-    - protocol: TCP
-      port: 80
-      targetPort: 80

flux/cluster/core/namespaces/kustomization.yaml

@@ -8,3 +8,4 @@ resources:
   - drone.yaml
   - keel.yaml
   - family.yaml
+  - misc.yaml

flux/cluster/core/namespaces/misc.yaml

@@ -0,0 +1,6 @@
+kind: Namespace
+apiVersion: v1
+metadata:
+  name: misc
+  labels:
+    name: misc