cluster

commit 9bdcee297f9e88f65ea1c4899aef302c7231b11d
parent cd0effdf4945f732cb063f6f18371dd9fac2dbb0
Author: MTRNord <mtrnord1@gmail.com>
Date:   Fri, 17 Mar 2023 18:11:45 +0100

setup notifications on matrix

Diffstat:
M
README.md
 | 
3
+++
M
clusters/production/infrastructure.yaml
 | 
21
+++++++++++++++++++++
A
infrastructure/notifications/kustomization.yaml
 | 
5
+++++
A
infrastructure/notifications/matrix-notifications.yaml
 | 
28
++++++++++++++++++++++++++++
A
infrastructure/notifications/matrix-token.yaml
 | 
28
++++++++++++++++++++++++++++

5 files changed, 85 insertions(+), 0 deletions(-)
diff --git a/README.md b/README.md
@@ -144,6 +144,9 @@ infra-controllers       main@sha1:21ebd912      False   True    Applied revision
   - [ ] Traefik
   - [ ] Certmanager
   - [ ] External DNS
+  - [ ] Synapse
+  - [ ] Mjolnir
+  - [ ] Keycloak
   - [ ] ...
 - Port validate script
 - Setup CI for github and woodpecker
diff --git a/clusters/production/infrastructure.yaml b/clusters/production/infrastructure.yaml
@@ -18,3 +18,24 @@ spec:
     provider: sops
     secretRef:
       name: sops-age
+---
+apiVersion: kustomize.toolkit.fluxcd.io/v1beta2
+kind: Kustomization
+metadata:
+  name: infra-notifications
+  namespace: flux-system
+spec:
+  dependsOn:
+    - name: infra-controllers
+  interval: 1h
+  retryInterval: 1m
+  timeout: 5m
+  sourceRef:
+    kind: GitRepository
+    name: flux-system
+  path: ./infrastructure/notifications
+  prune: true
+  decryption:
+    provider: sops
+    secretRef:
+      name: sops-age
diff --git a/infrastructure/notifications/kustomization.yaml b/infrastructure/notifications/kustomization.yaml
@@ -0,0 +1,5 @@
+apiVersion: kustomize.config.k8s.io/v1beta1
+kind: Kustomization
+resources:
+  - matrix-token.yaml
+  - matrix-notifications.yaml
diff --git a/infrastructure/notifications/matrix-notifications.yaml b/infrastructure/notifications/matrix-notifications.yaml
@@ -0,0 +1,28 @@
+---
+apiVersion: notification.toolkit.fluxcd.io/v1beta2
+kind: Provider
+metadata:
+  name: matrix
+  namespace: flux-system
+spec:
+  type: matrix
+  address: https://matrix.midnightthoughts.space
+  channel: "!ZjzjALRuiBeaBxbHhE:nordgedanken.dev"
+  secretRef:
+    name: matrix-token
+---
+apiVersion: notification.toolkit.fluxcd.io/v1beta2
+kind: Alert
+metadata:
+  name: main-infos
+  namespace: flux-system
+spec:
+  summary: "production cluster"
+  providerRef:
+    name: matrix
+  eventSeverity: info
+  eventSources:
+    - kind: GitRepository
+      name: "*"
+    - kind: Kustomization
+      name: "*"
diff --git a/infrastructure/notifications/matrix-token.yaml b/infrastructure/notifications/matrix-token.yaml
@@ -0,0 +1,28 @@
+apiVersion: v1
+kind: Secret
+metadata:
+    name: matrix-token
+    namespace: flux-system
+type: Opaque
+stringData:
+    token: ENC[AES256_GCM,data:+XVwTqYf2B6G9ztAZgoVaT8xYPUtzw2oqhFukvcvquRzyBS9PbD0zYwE,iv:h5XLS/RPEgdZHYZ6FWQNAyQIU8zwQGuRpJxj2miabAg=,tag:RIULAFgSZgALHXs7n3w1Mg==,type:str]
+sops:
+    kms: []
+    gcp_kms: []
+    azure_kv: []
+    hc_vault: []
+    age:
+        - recipient: age1esjyg2qfy49awv0ptkzvpk425adczjr38m37w2mmcahzc4p8n54sll2nzh
+          enc: |
+            -----BEGIN AGE ENCRYPTED FILE-----
+            YWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IFgyNTUxOSBxZTRMUWRnbkdGZHNSSzNY
+            SkJwV0d6M2VSSUtZOXNScURCZWxVY3BTdmlnCnRzZGlBdWx6REROeE1yNndxeW96
+            bHFnbVB2YUNUeUw2aVd2SGlZcUNLUTgKLS0tIEhCL2FxYTVPcXMwSytjOTlLdjZU
+            TGpjMnkzei9CZDlBMzdRVVNkaTBPelEK/T59q2EaCoUcjnrIm754xi5Eb6XkSbEg
+            IhfV2b1PMdRoTdVBJ97qdTtHm/oAYcz35SFooacXvONMIT5YAlM3Aw==
+            -----END AGE ENCRYPTED FILE-----
+    lastmodified: "2023-03-17T17:09:47Z"
+    mac: ENC[AES256_GCM,data:WHajvAJisTXdhbOuJhC/R3AiR5IDLq2nrKpeiZk0a254EUmmMRqGFm9xetUPnMO6xmtdk797gS2srDa6oT12nZrkhBaGDfm89gD6xtEnkzOc2bWL4VdVx6EvbzvzMMmFMi9TgtTLIelFS0gWxVgFh0mbSkYRcKchO0VH1N6cyMw=,iv:fAMtFdRx1sF51lnQGojw6rZYOfnNrr58T+IcEEwfuQw=,tag:0esnSovWBNhWC8Zrq/N2gQ==,type:str]
+    pgp: []
+    encrypted_regex: ^(data|stringData)$
+    version: 3.7.3