Füge neue ArgoCD-Anwendungen und Konfigurationen für Homelab-Apps hinzu

07_bootstrap_argocd/argocd-project-homelab.yaml

@@ -4,7 +4,7 @@ metadata:
   name: homelab
   namespace: argocd
 spec:
-  description: Cluster-weite Infrastructure
+  description: Project for Homelab Applications
   destinations:
   - namespace: '*'
     server: https://kubernetes.default.svc

07_bootstrap_argocd/homelab-apps.yaml

@@ -0,0 +1,28 @@
+apiVersion: argoproj.io/v1alpha1
+kind: ApplicationSet
+metadata:
+  name: homelab-apps
+  namespace: argocd
+spec:
+  generators:
+  - git:
+      repoURL: https://git.hnrx.net/homelab/rke2-single-node.git
+      revision: HEAD
+      directories:
+      - path: 09_homelab_apps/*
+  template:
+    metadata:
+      name: '{{path.basename}}'
+    spec:
+      project: homelab
+      source:
+        repoURL: https://git.hnrx.net/homelab/rke2-single-node.git
+        path: '{{path}}'
+        helm:
+          valueFiles:
+            - values.yaml
+      destination:
+        server: https://kubernetes.default.svc
+        namespace: '{{path.basename}}'
+      syncPolicy:
+        automated: {prune: true, selfHeal: true}

07_bootstrap_argocd/shared-gateway.yaml

@@ -0,0 +1,26 @@
+---
+apiVersion: gateway.networking.k8s.io/v1
+kind: Gateway
+metadata:
+  name: shared-gateway
+  namespace: default
+  labels:
+    bgp.cilium.io/ip-pool: default  # Damit bekommt das Gateway eine IP aus deinem Pool
+  annotations:
+    # Damit external-dns diesen Gateway findet und einen DNS-Eintrag erstellt
+    # (falls external-dns Gateway API unterstützt, was es tut)
+    cert-manager.io/cluster-issuer: cloudflare-cluster-issuer
+spec:
+  gatewayClassName: envoy-gateway-class
+  listeners:
+    - name: https
+      hostname: "*.k8s.hnrx.net"
+      protocol: HTTPS
+      port: 443
+      allowedRoutes:
+        namespaces:
+          from: All
+      tls:
+        mode: Terminate
+        certificateRefs:
+          - name: shared-gateway-tls