add tekton

Signed-off-by: gwg313 <gwg313@pm.me>

apps/kustomization.yaml

@@ -3,4 +3,5 @@ kind: Kustomization
 
 resources:
   - forgejo
+  - woodpecker
   - navidrome

apps/tekton/kustomization.yaml

@@ -0,0 +1,6 @@
+apiVersion: kustomize.config.k8s.io/v1beta1
+kind: Kustomization
+
+resources:
+  - https://storage.googleapis.com/tekton-releases/pipeline/latest/release.yaml
+  - https://storage.googleapis.com/tekton-releases/dashboard/latest/release.yaml

apps/yopass/deployment.yaml

@@ -0,0 +1,43 @@
+apiVersion: apps/v1
+kind: Deployment
+metadata:
+  name: yopass
+spec:
+  replicas: 1
+  selector:
+    matchLabels:
+      app.kubernetes.io/name: yopass
+  template:
+    metadata:
+      labels:
+        app.kubernetes.io/name: yopass
+    spec:
+      containers:
+        - name: yopass
+          image: jhaals/yopass:13.1.0
+          args:
+            - "--memcached=localhost:11211"
+          ports:
+            - name: http
+              containerPort: 1337
+          resources:
+            limits:
+              cpu: 100m
+              memory: 50Mi
+            requests:
+              cpu: 100m
+              memory: 50Mi
+        - name: yopass-memcached
+          image: memcached:trixie
+          resources:
+            limits:
+              cpu: 100m
+              memory: 100Mi
+            requests:
+              cpu: 100m
+              memory: 100Mi
+          args:
+            - "-m 64"
+          ports:
+            - name: memcached
+              containerPort: 11211

apps/yopass/kustomization.yaml

@@ -0,0 +1,8 @@
+apiVersion: kustomize.config.k8s.io/v1beta1
+kind: Kustomization
+
+resources:
+  - deployment.yaml
+  - network-policy.yaml
+  - route.yaml
+  - service.yaml

apps/yopass/network-policy.yaml

@@ -0,0 +1,17 @@
+apiVersion: cilium.io/v2
+kind: CiliumNetworkPolicy
+metadata:
+  name: allow-ingress
+  namespace: yopass
+spec:
+  endpointSelector:
+    matchLabels:
+      app.kubernetes.io/name: yopass
+
+  ingress:
+    - fromEntities:
+        - ingress
+      toPorts:
+        - ports:
+            - port: "1337"
+              protocol: TCP

apps/yopass/route.yaml

@@ -0,0 +1,38 @@
+apiVersion: gateway.networking.k8s.io/v1
+kind: HTTPRoute
+metadata:
+  name: yopass
+  namespace: yopass
+spec:
+  parentRefs:
+    - name: shared-edge-gateway
+      namespace: cilium-ingress
+  hostnames:
+    - pastebin.gwg313.xyz
+    - pastebin.local.gwg313.xyz
+    - pastebin.zerotier.gwg313.xyz
+  rules:
+    - matches:
+        - path:
+            type: PathPrefix
+            value: /
+      backendRefs:
+        - name: yopass
+          port: 1337
+---
+apiVersion: gateway.networking.k8s.io/v1beta1
+kind: ReferenceGrant
+metadata:
+  name: allow-gateway-to-yopass
+  namespace: yopass
+
+spec:
+  from:
+    - group: gateway.networking.k8s.io
+      kind: Gateway
+      namespace: cilium-ingress
+
+  to:
+    - group: ""
+      kind: Service
+      name: yopass

apps/yopass/service.yaml

@@ -0,0 +1,11 @@
+kind: Service
+apiVersion: v1
+metadata:
+  name: yopass
+spec:
+  selector:
+    app.kubernetes.io/name: yopass
+  type: ClusterIP
+  ports:
+    - name: http
+      port: 1337