feat: Added authelia

apps/artifacts.yaml

@@ -19,8 +19,3 @@ spec:
       copy:
         - from: "@foundation/apps/lldap/**"
           to: "@artifact/"
-    - name: authelia
-      originRevision: "@foundation"
-      copy:
-        - from: "@foundation/apps/authelia/**"
-          to: "@artifact/"

apps/authelia/authelia.yaml

@@ -1,20 +0,0 @@
-apiVersion: kustomize.toolkit.fluxcd.io/v1
-kind: Kustomization
-metadata:
-  name: authelia
-  namespace: flux-system
-spec:
-  interval: 1h
-  retryInterval: 2m
-  timeout: 5m
-  dependsOn:
-    - name: cnpg
-    - name: lldap-controller
-    - name: dragonfly-operator
-    - name: authelia-controller
-  sourceRef:
-    kind: ExternalArtifact
-    name: authelia
-  path: ./${cluster_env}
-  prune: true
-  wait: true

apps/authelia/base/values.yaml

@@ -2,16 +2,11 @@ pod:
   kind: Deployment
   replicas: 2
 ingress:
-  enabled: true
-  gatewayAPI:
-    enabled: true
-    parentRefs:
-      - name: gateway
-        namespace: default
+  enabled: false
 
 secret:
   additionalSecrets:
-    db-app:
+    postgres-app:
       key: db-app
     authelia-lldap-credentials:
       key: authelia-lldap-credentials
@@ -37,10 +32,10 @@ configMap:
         secret_name: authelia-lldap-credentials
         path: password
 
-  session:
-    redis:
-      enabled: true
-      host: dragonfly.authelia
+  # session:
+  #   redis:
+  #     enabled: true
+  #     host: dragonflydb.authelia
 
   storage:
     postgres:
@@ -56,6 +51,6 @@ configMap:
     filesystem:
       enabled: true
 
-  access_control:
-    secret:
-      existingSecret: authelia-acl
+  # access_control:
+  #   secret:
+  #     existingSecret: authelia-acl

apps/authelia/production/dragonfly.yaml

@@ -1,7 +0,0 @@
-apiVersion: dragonflydb.io/v1alpha1
-kind: Dragonfly
-metadata:
-  name: dragonfly
-  namespace: authelia
-spec:
-  replicas: 2

apps/authelia/production/kustomization.yaml

@@ -1,16 +0,0 @@
-apiVersion: kustomize.config.k8s.io/v1beta1
-kind: Kustomization
-resources:
-  - ../base
-  - dragonfly.yaml
-
-patches:
-  - path: cluster.yaml
-    target:
-      kind: Cluster
-
-configMapGenerator:
-  - name: values-overlay
-    namespace: authelia
-    files:
-      - values.yaml

apps/authelia/staging/dragonfly.yaml

@@ -1,7 +0,0 @@
-apiVersion: dragonflydb.io/v1alpha1
-kind: Dragonfly
-metadata:
-  name: dragonfly
-  namespace: authelia
-spec:
-  replicas: 1

apps/authelia/staging/kustomization.yaml

@@ -2,7 +2,6 @@ apiVersion: kustomize.config.k8s.io/v1beta1
 kind: Kustomization
 resources:
   - ../base
-  - dragonfly.yaml
 
 patches:
   - path: cluster.yaml
@@ -14,6 +13,6 @@ patches:
 
 configMapGenerator:
   - name: values-overlay
-    namespace: authelia
+    namespace: cnpg-system
     files:
       - values.yaml

clusters/testing/kustomization.yaml

@@ -11,8 +11,6 @@ resources:
   - ../../controllers/cnpg/cnpg.yaml
   - ../../controllers/reflector/reflector.yaml
   - ../../controllers/lldap-controller/lldap-controller.yaml
-  - ../../controllers/authelia-controller/authelia-controller.yaml
-  - ../../controllers/dragonfly-operator/dragonfly-operator.yaml
 
   - ../../configs/artifacts.yaml
   - ../../configs/cilium-config/cilium-config.yaml
@@ -23,4 +21,3 @@ resources:
   - ../../apps/artifacts.yaml
   - ../../apps/spegel/spegel.yaml
   - ../../apps/lldap/lldap.yaml
-  - ../../apps/authelia/authelia.yaml

controllers/artifacts.yaml

@@ -44,8 +44,3 @@ spec:
       copy:
         - from: "@foundation/controllers/reflector/**"
           to: "@artifact/"
-    - name: dragonfly-operator
-      originRevision: "@foundation"
-      copy:
-        - from: "@foundation/controllers/dragonfly-operator/**"
-          to: "@artifact/"

controllers/authelia-controller/authelia-controller.yaml

@@ -1,26 +0,0 @@
-apiVersion: source.toolkit.fluxcd.io/v1beta2
-kind: OCIRepository
-metadata:
-  name: authelia-controller
-  namespace: flux-system
-spec:
-  interval: 1m0s
-  url: oci://git.huizinga.dev/infra/authelia-controller/manifests
-  ref:
-    tag: edge
----
-apiVersion: kustomize.toolkit.fluxcd.io/v1
-kind: Kustomization
-metadata:
-  name: authelia-controller
-  namespace: flux-system
-spec:
-  interval: 1h
-  retryInterval: 2m
-  timeout: 5m
-  sourceRef:
-    kind: OCIRepository
-    name: authelia-controller
-  path: ./
-  prune: true
-  wait: true

controllers/cert-manager/helm-release.yaml

@@ -13,14 +13,9 @@ spec:
     strategy:
       name: RetryOnFailure
       retryInterval: 3m
-  chart:
-    spec:
-      chart: cert-manager
-      version: "1.19.x"
-      sourceRef:
-        kind: HelmRepository
-        name: cert-manager
-      interval: 24h
+  chartRef:
+    kind: OCIRepository
+    name: cert-manager
   values:
     crds:
       enabled: true

controllers/cert-manager/helm-repository.yaml

@@ -1,9 +0,0 @@
-apiVersion: source.toolkit.fluxcd.io/v1
-kind: HelmRepository
-metadata:
-  name: cert-manager
-  namespace: cert-manager
-spec:
-  type: "oci"
-  interval: 24h
-  url: oci://quay.io/jetstack/charts/

controllers/cert-manager/kustomization.yaml

@@ -1,6 +1,6 @@
 apiVersion: kustomize.config.k8s.io/v1beta1
 kind: Kustomization
 resources:
-  - namespace.yaml
-  - helm-repository.yaml
-  - helm-release.yaml
+  - ./namespace.yaml
+  - ./oci-repository.yaml
+  - ./helm-release.yaml

controllers/cert-manager/oci-repository.yaml

@@ -0,0 +1,13 @@
+apiVersion: source.toolkit.fluxcd.io/v1
+kind: OCIRepository
+metadata:
+  name: cert-manager
+  namespace: cert-manager
+spec:
+  interval: 24h
+  url: oci://quay.io/jetstack/charts/cert-manager
+  layerSelector:
+    mediaType: "application/vnd.cncf.helm.chart.content.v1.tar+gzip"
+    operation: copy
+  ref:
+    semver: "1.19.x"

controllers/cilium/base/helm-release.yaml

@@ -17,9 +17,7 @@ spec:
   chart:
     spec:
       chart: cilium
-      # Regression in cilium causes issues, so we stay on .7
-      version: "1.18.7"
-      # version: "1.18.x"
+      version: "1.18.x"
       sourceRef:
         kind: HelmRepository
         name: cilium

controllers/cilium/base/values.yaml

@@ -29,3 +29,5 @@ gatewayAPI:
   enabled: true
   enableAlpn: true
   enableAppProtocol: true
+loadBalancer:
+  mode: dsr

controllers/dragonfly-operator/dragonfly-operator.yaml

@@ -1,15 +0,0 @@
-apiVersion: kustomize.toolkit.fluxcd.io/v1
-kind: Kustomization
-metadata:
-  name: dragonfly-operator
-  namespace: flux-system
-spec:
-  interval: 1h
-  retryInterval: 2m
-  timeout: 5m
-  sourceRef:
-    kind: ExternalArtifact
-    name: dragonfly-operator
-  path: .
-  prune: true
-  wait: true

controllers/dragonfly-operator/kustomization.yaml

@@ -1,4 +0,0 @@
-apiVersion: kustomize.config.k8s.io/v1beta1
-kind: Kustomization
-resources:
-  - https://raw.githubusercontent.com/dragonflydb/dragonfly-operator/v1.3.1/manifests/dragonfly-operator.yaml