update

dmz/traefik/templates/config.yaml

@@ -10,19 +10,8 @@ data:
           service: service0
           rule: Host(`test.durp.info`)
 
----
-
-apiVersion: traefik.io/v1alpha1
-kind: IngressRoute
-metadata:
-  name: test-ingress
-spec:
-  entryPoints:
-    - websecure
-  routes:
-  - match: Host(`test.durp.info`) && PathPrefix(`/`) 
-    kind: Rule
       services:
-    - name: service0
+        service0:
-  tls:
+          loadBalancer:
-    secretName: test
+            servers:
+              - url: https://google.com

dmz/vault/Chart.yaml

@@ -0,0 +1,12 @@
+apiVersion: v2
+name: vault
+description: A Helm chart for Kubernetes
+type: application
+version: 0.0.1
+appVersion: 0.0.1
+
+dependencies:
+- name: vault
+  repository: https://helm.releases.hashicorp.com  
+  version: 0.29.1
+

dmz/vault/values.yaml

@@ -0,0 +1,13 @@
+vault:
+  global:
+    enabled: true
+    tlsDisable: false
+    externalVaultAddr: "https://vault.infra.durp.info"
+    resources:
+      requests:
+        memory: 256Mi
+        cpu: 250m
+      limits:
+        memory: 256Mi
+        cpu: 250m
+  

infra/argocd/templates/vault.yaml

@@ -23,3 +23,31 @@ spec:
     kind: MutatingWebhookConfiguration
     jqPathExpressions:
     - .webhooks[]?.clientConfig.caBundle
+
+---
+
+apiVersion: argoproj.io/v1alpha1
+kind: Application
+metadata:
+  name: vault-dmz
+  namespace: argocd
+spec:
+  project: default
+  source:
+    repoURL: https://gitlab.com/developerdurp/homelab.git
+    targetRevision: main
+    path: dmz/vault
+  destination:
+    namespace: vault
+    name: dmz
+  syncPolicy:
+    automated:
+      prune: true
+      selfHeal: true  
+    syncOptions:
+      - CreateNamespace=true 
+  ignoreDifferences:
+  - group: admissionregistration.k8s.io
+    kind: MutatingWebhookConfiguration
+    jqPathExpressions:
+    - .webhooks[]?.clientConfig.caBundle