feat: deploy charts to oci registry

.forgejo/workflows/ci.yaml

@@ -1,40 +0,0 @@
----
-name: checks
-on:  # yamllint disable-line rule:truthy
-  - 'push'
-
-jobs:
-  pre-commit:
-    runs-on: ubuntu-22.04
-    steps:
-      - uses: https://code.forgejo.org/actions/checkout@v7
-      - uses: https://code.forgejo.org/actions/setup-python@v7
-        with:
-          python-version: '3.10'
-      - uses: opentofu/setup-opentofu@v2
-        with:
-          tofu_version: 1.7.0
-      - uses: pre-commit/action@v3.0.1
-
-  k8s:
-    runs-on: ubuntu-22.04
-    steps:
-      - uses: https://code.forgejo.org/actions/checkout@v7
-      - name: Set up Kubeconform
-        uses: bmuschko/setup-kubeconform@v1
-
-      - name: Validate manifests
-        run: make lint--kubeconform
-
-
-  tflint:
-    runs-on: ubuntu-22.04
-    steps:
-      - uses: https://code.forgejo.org/actions/checkout@v7
-      - uses: terraform-linters/setup-tflint@v6
-        name: Setup TFLint
-        with:
-          tflint_version: v0.50.3
-
-      - name: Run TFLint
-        run: make lint--tflint

.forgejo/workflows/deploy-tofu.yaml

@@ -1,55 +0,0 @@
----
-name: OpenTofu deployments
-
-on:  # yamllint disable-line rule:truthy
-  push:
-    branches:
-      - 'main'
-
-jobs:
-  authentik:
-    runs-on: ubuntu-22.04
-    steps:
-      - uses: https://code.forgejo.org/actions/checkout@v7
-      - uses: opentofu/setup-opentofu@v2
-        with:
-          tofu_version: 1.8.1
-      - name: Deploy
-        env:
-          AUTHENTIK_URL: ${{ secrets.AUTHENTIK_URL }}
-          AUTHENTIK_TOKEN: ${{ secrets.AUTHENTIK_TOKEN }}
-          TF_VAR_firezone_client_id: ${{ secrets.TF_VAR_firezone_client_id }}
-          TF_VAR_firezone_client_secret: ${{ secrets.TF_VAR_firezone_client_secret }}
-          TF_VAR_gitea_client_id: ${{ secrets.TF_VAR_gitea_client_id }}
-          TF_VAR_gitea_client_secret: ${{ secrets.TF_VAR_gitea_client_secret }}
-          TF_VAR_miniflux_client_id: ${{ secrets.TF_VAR_miniflux_client_id }}
-          TF_VAR_miniflux_client_secret: ${{ secrets.TF_VAR_miniflux_client_secret }}
-          TF_VAR_portainer_client_id: ${{ secrets.TF_VAR_portainer_client_id }}
-          TF_VAR_portainer_client_secret: ${{ secrets.TF_VAR_portainer_client_secret }}
-          TF_VAR_paperless_client_id: ${{ secrets.TF_VAR_paperless_client_id }}
-          TF_VAR_paperless_client_secret: ${{ secrets.TF_VAR_paperless_secret }}
-          TF_VAR_netbird_client_id: ${{ secrets.TF_VAR_netbird_client_id }}
-          TF_VAR_netbird_client_secret: ${{ secrets.TF_VAR_netbird_client_secret }}
-          AWS_ACCESS_KEY_ID: ${{ secrets.AWS_ACCESS_KEY_ID }}
-          AWS_SECRET_ACCESS_KEY: ${{ secrets.AWS_SECRET_ACCESS_KEY }}
-        run: |
-          cd tofu/authentik
-          tofu init
-          tofu apply -auto-approve
-
-  adguard:
-    runs-on: ubuntu-22.04
-    steps:
-      - uses: https://code.forgejo.org/actions/checkout@v7
-      - uses: opentofu/setup-opentofu@v2
-        with:
-          tofu_version: 1.7.0
-      - name: Deploy
-        env:
-          ADGUARD_PASSWORD: ${{ secrets.ADGUARD_PASSWORD }}
-          AWS_ACCESS_KEY_ID: ${{ secrets.AWS_ACCESS_KEY_ID }}
-          AWS_SECRET_ACCESS_KEY: ${{ secrets.AWS_SECRET_ACCESS_KEY }}
-        run: |
-          cd tofu/adguard
-          tofu init
-          tofu apply -auto-approve

k8s/argo-apps/miniflux.yaml

@@ -10,9 +10,9 @@ spec:
     namespace: apps-roboces
     server: https://kubernetes.default.svc
   sources:
-    - path: k8s/charts/miniflux
+    - repoURL: git.roboces.dev/catalin/fukuops
-      repoURL: https://git.roboces.dev/catalin/fukuops.git
+      chart: miniflux/miniflux
-      targetRevision: main
+      targetRevision: 0.1.0
       helm:
         valuesObject:
           replicaCount: 3

k8s/argo-apps/oxicloud.yaml

@@ -10,9 +10,9 @@ spec:
     namespace: apps-roboces
     server: https://kubernetes.default.svc
   sources:
-    - path: k8s/charts/oxicloud
+    - repoURL: git.roboces.dev/catalin/fukuops
-      repoURL: https://git.roboces.dev/catalin/fukuops.git
+      chart: oxicloud/oxicloud
-      targetRevision: main
+      targetRevision: 0.1.0
       helm:
         valuesObject:
           persistence:

k8s/argo-apps/vaultwarden.yaml

@@ -10,9 +10,9 @@ spec:
     namespace: apps-roboces
     server: https://kubernetes.default.svc
   sources:
-    - path: k8s/charts/vaultwarden
+    - repoURL: git.roboces.dev/catalin/fukuops
-      repoURL: https://git.roboces.dev/catalin/fukuops.git
+      chart: vaultwarden/vaultwarden
-      targetRevision: main
+      targetRevision: 0.1.0
       helm:
         valuesObject:
           conf:

k8s/services/argo/project-fuku.yaml

@@ -36,3 +36,5 @@ spec:
         - https://helm.elastic.co
         - https://repo.helmforge.dev
         - https://harish2k01.github.io/helm-charts/
+        - git.roboces.dev/catalin/fukuops
+        - git.roboces.dev/catalin

k8s/services/argo/project-roboces.yaml

@@ -13,6 +13,7 @@ spec:
   sourceRepos:
     - https://git.roboces.dev/catalin/fukuops.git
     - code.forgejo.org/forgejo-helm
+    - git.roboces.dev/catalin/fukuops
+    - git.roboces.dev/catalin
     - https://git.roboces.dev/catalin/huesoporro.git
     - https://gitlab.com/api/v4/projects/64552889/packages/helm/release
-    - ghcr.io/woodpecker-ci/helm