feat(it-tools): initial setup

[tyriis]

No description provided.

[tyriis-automation]

🦙 MegaLinter status: ✅ SUCCESS

Descriptor	Linter	Files	Fixed	Errors	Elapsed time
✅ EDITORCONFIG	editorconfig-checker	4		0	0.01s
✅ REPOSITORY	gitleaks	yes		no	4.02s
✅ YAML	prettier	4		0	0.57s
✅ YAML	yamllint	4		0	0.41s

See detailed report in MegaLinter reports
Set VALIDATE_ALL_CODEBASE: true in mega-linter.yml to validate all sources, not only the diff

MegaLinter is graciously provided by OX Security

[sonarqubecloud]

Quality Gate passed

Issues
0 New issues
0 Accepted issues

Measures
0 Security Hotspots
0.0% Coverage on New Code
0.0% Duplication on New Code

See analysis details on SonarQube Cloud

[tyriis-automation]

--- HelmRelease: default/it-tools Service: default/it-tools

+++ HelmRelease: default/it-tools Service: default/it-tools

@@ -0,0 +1,22 @@

+---
+apiVersion: v1
+kind: Service
+metadata:
+  name: it-tools
+  labels:
+    app.kubernetes.io/instance: it-tools
+    app.kubernetes.io/managed-by: Helm
+    app.kubernetes.io/name: it-tools
+    app.kubernetes.io/service: it-tools
+spec:
+  type: ClusterIP
+  ports:
+  - port: 8080
+    targetPort: 8080
+    protocol: TCP
+    name: http
+  selector:
+    app.kubernetes.io/component: it-tools
+    app.kubernetes.io/instance: it-tools
+    app.kubernetes.io/name: it-tools
+
--- HelmRelease: default/it-tools Deployment: default/it-tools

+++ HelmRelease: default/it-tools Deployment: default/it-tools

@@ -0,0 +1,63 @@

+---
+apiVersion: apps/v1
+kind: Deployment
+metadata:
+  name: it-tools
+  labels:
+    app.kubernetes.io/component: it-tools
+    app.kubernetes.io/instance: it-tools
+    app.kubernetes.io/managed-by: Helm
+    app.kubernetes.io/name: it-tools
+  annotations:
+    reloader.stakater.com/auto: 'true'
+spec:
+  revisionHistoryLimit: 3
+  replicas: 1
+  strategy:
+    type: RollingUpdate
+  selector:
+    matchLabels:
+      app.kubernetes.io/component: it-tools
+      app.kubernetes.io/name: it-tools
+      app.kubernetes.io/instance: it-tools
+  template:
+    metadata:
+      labels:
+        app.kubernetes.io/component: it-tools
+        app.kubernetes.io/instance: it-tools
+        app.kubernetes.io/name: it-tools
+    spec:
+      enableServiceLinks: false
+      serviceAccountName: default
+      automountServiceAccountToken: true
+      securityContext:
+        fsGroup: 1000
+        fsGroupChangePolicy: OnRootMismatch
+        runAsGroup: 1000
+        runAsUser: 1000
+      hostIPC: false
+      hostNetwork: false
+      hostPID: false
+      dnsPolicy: ClusterFirst
+      containers:
+      - image: ghcr.io/bjw-s-labs/it-tools:2024.5.13@sha256:96408cf7d103a5a7bdbdc8d1fe23dfb95b721ca7bbdbb2507b3a7ac28416eb77
+        name: app
+        resources:
+          limits:
+            memory: 256Mi
+          requests:
+            cpu: 5m
+            memory: 32Mi
+        securityContext:
+          allowPrivilegeEscalation: false
+          capabilities:
+            drop:
+            - ALL
+          readOnlyRootFilesystem: true
+        volumeMounts:
+        - mountPath: /tmp
+          name: tmp
+      volumes:
+      - emptyDir: {}
+        name: tmp
+
--- HelmRelease: default/it-tools Ingress: default/it-tools

+++ HelmRelease: default/it-tools Ingress: default/it-tools

@@ -0,0 +1,40 @@

+---
+apiVersion: networking.k8s.io/v1
+kind: Ingress
+metadata:
+  name: it-tools
+  labels:
+    app.kubernetes.io/instance: it-tools
+    app.kubernetes.io/managed-by: Helm
+    app.kubernetes.io/name: it-tools
+  annotations:
+    cert-manager.io/cluster-issuer: letsencrypt-production
+    gethomepage.dev/description: Handy developer online tools
+    gethomepage.dev/enabled: 'true'
+    gethomepage.dev/group: Development
+    gethomepage.dev/icon: it-tools-light
+    gethomepage.dev/name: IT-Tools
+    gethomepage.dev/weight: '10'
+    kubernetes.io/tls-acme: 'true'
+    traefik.ingress.kubernetes.io/affinity: 'true'
+    traefik.ingress.kubernetes.io/router.entrypoints: websecure
+    traefik.ingress.kubernetes.io/router.middlewares: traefik-ingress-sso@kubernetescrd
+    traefik.ingress.kubernetes.io/router.tls: 'true'
+spec:
+  ingressClassName: traefik
+  tls:
+  - hosts:
+    - it-tools.techtales.io
+    secretName: it-tools-tls
+  rules:
+  - host: it-tools.techtales.io
+    http:
+      paths:
+      - path: /
+        pathType: Prefix
+        backend:
+          service:
+            name: it-tools
+            port:
+              number: 8080
+

[tyriis-automation]

--- kubernetes/talos-flux/apps Kustomization: flux-system/apps-sync Kustomization: flux-system/it-tools

+++ kubernetes/talos-flux/apps Kustomization: flux-system/apps-sync Kustomization: flux-system/it-tools

@@ -0,0 +1,35 @@

+---
+apiVersion: kustomize.toolkit.fluxcd.io/v1
+kind: Kustomization
+metadata:
+  labels:
+    kustomize.toolkit.fluxcd.io/name: apps-sync
+    kustomize.toolkit.fluxcd.io/namespace: flux-system
+    substitution.flux.home.arpa/enabled: 'true'
+  name: it-tools
+  namespace: flux-system
+spec:
+  commonMetadata:
+    labels:
+      app.kubernetes.io/name: it-tools
+  decryption:
+    provider: sops
+    secretRef:
+      name: sops-age
+  interval: 30m
+  path: ./kubernetes/talos-flux/apps/default/it-tools/app
+  postBuild:
+    substituteFrom:
+    - kind: ConfigMap
+      name: cluster-settings
+    - kind: Secret
+      name: cluster-secrets
+  prune: true
+  retryInterval: 1m
+  sourceRef:
+    kind: GitRepository
+    name: home-ops
+  targetNamespace: default
+  timeout: 5m
+  wait: true
+
--- kubernetes/talos-flux/apps/default/it-tools/app Kustomization: flux-system/it-tools HelmRelease: default/it-tools

+++ kubernetes/talos-flux/apps/default/it-tools/app Kustomization: flux-system/it-tools HelmRelease: default/it-tools

@@ -0,0 +1,95 @@

+---
+apiVersion: helm.toolkit.fluxcd.io/v2
+kind: HelmRelease
+metadata:
+  labels:
+    app.kubernetes.io/name: it-tools
+    kustomize.toolkit.fluxcd.io/name: it-tools
+    kustomize.toolkit.fluxcd.io/namespace: flux-system
+  name: it-tools
+  namespace: default
+spec:
+  chart:
+    spec:
+      chart: app-template
+      sourceRef:
+        kind: HelmRepository
+        name: bjw-s-charts
+        namespace: flux-system
+      version: 3.6.1
+  install:
+    remediation:
+      retries: 3
+  interval: 30m
+  upgrade:
+    cleanupOnFail: true
+    remediation:
+      retries: 3
+      strategy: rollback
+  values:
+    controllers:
+      it-tools:
+        annotations:
+          reloader.stakater.com/auto: 'true'
+        containers:
+          app:
+            image:
+              repository: ghcr.io/bjw-s-labs/it-tools
+              tag: 2024.5.13@sha256:96408cf7d103a5a7bdbdc8d1fe23dfb95b721ca7bbdbb2507b3a7ac28416eb77
+            resources:
+              limits:
+                memory: 256Mi
+              requests:
+                cpu: 5m
+                memory: 32Mi
+            securityContext:
+              allowPrivilegeEscalation: false
+              capabilities:
+                drop:
+                - ALL
+              readOnlyRootFilesystem: true
+        pod:
+          securityContext:
+            fsGroup: 1000
+            fsGroupChangePolicy: OnRootMismatch
+            runAsGroup: 1000
+            runAsUser: 1000
+        replicas: 1
+        strategy: RollingUpdate
+    ingress:
+      app:
+        annotations:
+          cert-manager.io/cluster-issuer: letsencrypt-production
+          gethomepage.dev/description: Handy developer online tools
+          gethomepage.dev/enabled: 'true'
+          gethomepage.dev/group: Development
+          gethomepage.dev/icon: it-tools-light
+          gethomepage.dev/name: IT-Tools
+          gethomepage.dev/weight: '10'
+          kubernetes.io/tls-acme: 'true'
+          traefik.ingress.kubernetes.io/affinity: 'true'
+          traefik.ingress.kubernetes.io/router.entrypoints: websecure
+          traefik.ingress.kubernetes.io/router.middlewares: traefik-ingress-sso@kubernetescrd
+          traefik.ingress.kubernetes.io/router.tls: 'true'
+        className: traefik
+        hosts:
+        - host: it-tools.techtales.io
+          paths:
+          - path: /
+            service:
+              identifier: app
+              port: http
+        tls:
+        - hosts:
+          - it-tools.techtales.io
+          secretName: '{{ .Release.Name }}-tls'
+    persistence:
+      tmp:
+        type: emptyDir
+    service:
+      app:
+        controller: it-tools
+        ports:
+          http:
+            port: 8080
+