migrate ruuvi here

apps/camper/ruuvi/bridge/deployment.yaml

@@ -0,0 +1,28 @@
+apiVersion: apps/v1
+kind: Deployment
+metadata:
+  labels:
+    app: ruuvibridge
+  name: ruuvibridge
+spec:
+  replicas: 1
+  selector:
+    matchLabels:
+      app: ruuvibridge
+  strategy: {}
+  template:
+    metadata:
+      labels:
+        app: ruuvibridge
+    spec:
+      containers:
+        - image: ghcr.io/scrin/ruuvibridge:v0.3.1
+          name: ruuvibridge
+          volumeMounts:
+            - name: config
+              mountPath: /config.yml
+              subPath: config.yaml
+      volumes:
+        - name: config
+          secret:
+            secretName: bridge

apps/camper/ruuvi/bridge/secret.sops.yaml

@@ -0,0 +1,27 @@
+apiVersion: v1
+kind: Secret
+type: Opaque
+metadata:
+    name: bridge
+stringData:
+    config.yaml: ENC[AES256_GCM,data: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,iv:LuiuBYjTH8Nf4N5K1U7qrCEdROYdaLLg3/9pf5qHahg=,tag:MwOJZL5T0hHgr+pOMUSLaQ==,type:str]
+sops:
+    kms: []
+    gcp_kms: []
+    azure_kv: []
+    hc_vault: []
+    age:
+        - recipient: age1dfk8euu7afvw7ge5l2qek45z23hdq5anjd56cy4d7kcsf0e0e5pqfjylx8
+          enc: |
+            -----BEGIN AGE ENCRYPTED FILE-----
+            YWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IFgyNTUxOSBtSzUrUHJzUE9EbG9GS3Nm
+            cWhkT1BVeC9LR2l2d1J0UnVWdXRuaUozYUFNCjZmcFBJbnZhdEdvUjE5RlBRTEx5
+            MjVjRnE3SVJZTmNFZ3J4MHMwVm5lNGcKLS0tIGtZcUZmNkJVTjRHWFNkcnByZVZ1
+            dzZEU01KazZJZU5RWWVaKzhtTTlidXMKJVimH4GgagXERPN2kU5cplq5wbkiiKxY
+            M2DJaq2cM0BT7Vm4XW70uYNpIZ+1KQ/lgW1mGXUaGwmBdAs6LbTyOQ==
+            -----END AGE ENCRYPTED FILE-----
+    lastmodified: "2024-02-25T19:34:52Z"
+    mac: ENC[AES256_GCM,data:R02Mhzg7Cy16GGlq81uLo6/eAZ/2M9LZWq84j4etVD60+SBwqOjRN6puC8d51A7Vs6W2hXQhHdoizzE827CBPRuhJ4wBawDUX59IQsmfEyL64B+50oVy9GD2JR+TYxH+vbiUjOV7Ci1huE2VhFBWkPvWTPSPZJL/B90ycKF1tjI=,iv:3xG3qkfPZdPAoK97QFCHFHupX+7bVEwQ+SEELjusVHc=,tag:t03ZVFNTS4PG0NBfjIUiAw==,type:str]
+    pgp: []
+    encrypted_regex: ^(data|stringData)$
+    version: 3.8.1

apps/camper/ruuvi/gateway/deployment.yaml

@@ -0,0 +1,44 @@
+apiVersion: apps/v1
+kind: Deployment
+metadata:
+  labels:
+    app: ruuvigw
+  name: ruuvigw
+spec:
+  replicas: 1
+  selector:
+    matchLabels:
+      app: ruuvigw
+  strategy: {}
+  template:
+    metadata:
+      labels:
+        app: ruuvigw
+    spec:
+      containers:
+        - image: ghcr.io/scrin/ruuvi-go-gateway:v0.2.1
+          name: ruuvigw
+          command:
+            - nsenter
+            - --net=/rootns/net
+            - --
+            - ruuvi-go-gateway
+          volumeMounts:
+            - name: config
+              mountPath: /config.yml
+              subPath: config.yaml
+            - name: rootns
+              mountPath: /rootns
+          securityContext:
+            capabilities:
+              add:
+                - SYS_PTRACE
+                - SYS_ADMIN
+                - NET_ADMIN
+      volumes:
+        - name: config
+          secret:
+            secretName: gateway
+        - name: rootns
+          hostPath:
+            path: /proc/1/ns/

apps/camper/ruuvi/gateway/secret.sops.yaml

@@ -0,0 +1,27 @@
+apiVersion: v1
+kind: Secret
+type: Opaque
+metadata:
+    name: gateway
+stringData:
+    config.yaml: ENC[AES256_GCM,data:63D57dLCGXMpv0dmxxbYLHTs3FRqTAGSvA/xyRtJqCVORD5rGDTmEn7x0g4GvpOfqsdGVScilTuQUCERYPpam/tW5bEuiXBDZtWmUzeH4q24syE8x5CKPkuRG5X5HzRbZYpmQYCW9GkbLqo7QT5843/fiJdCrAarWXKqNbypXhm0E2ESTXz+buGO4aCyn6nx/OR1kWIOe1EbArQDMJoy+mh6wxYJssCw3j2Tb2XA2n1fLm66A6+QQFlFW5+z61fA4gqzi3enLqP6sgM1Zd5H+VIB0KuRHRs6YlcJUtjwwtpQHrfaVgxskEHb9OsZ4KcyampSTgslG/Asty0NWoW0MDSrwCtiL2uzzpqzmBHZqWDzrak3P3ndt31TpdPsMLseRtR12IIMSeCPNGNYYJwYrOZDyiY1HfG77DZ1kqbxFYsRKyqTf/bP3rkeozMyGFp++9a1qyigSwg=,iv:OfMf8hj90Ej3N8Kzojk3ts9+mtH7k6zp51XmQ4OWC4g=,tag:C9hJDccHV1f5rPsFpjkwEg==,type:str]
+sops:
+    kms: []
+    gcp_kms: []
+    azure_kv: []
+    hc_vault: []
+    age:
+        - recipient: age1dfk8euu7afvw7ge5l2qek45z23hdq5anjd56cy4d7kcsf0e0e5pqfjylx8
+          enc: |
+            -----BEGIN AGE ENCRYPTED FILE-----
+            YWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IFgyNTUxOSBJODBna0Q0TXZ0RDJLbGt6
+            LzR4MG1MdFhlRHF0ZTJBaVd1a3huYkY3bXhBClhjczl3QUttU0VVVXdMS2dUVFlS
+            YzJ1V1VxR3NENXpKaS9wTXZlVHdMZlEKLS0tIG9JSjgwVWZxeGdiVGsrajRIRlhV
+            MWIwK2tBU1NTMFA1U2dHQm1TYThsUjQKCs12LfUvRPa1dze7IDEj4J4QpvQ36RxL
+            xlNnR/spM62dykw8q/8rXOE5/EiNBT1f2pcKP9Riql6IthAJSaJ/VQ==
+            -----END AGE ENCRYPTED FILE-----
+    lastmodified: "2024-02-25T19:34:57Z"
+    mac: ENC[AES256_GCM,data:WDCG34qbm73GNSDHy4aCG40WSppd0JqrRVZOVMNxYI+sHmoJVQfm8n1TnJAqF8Pk7whBozrbHBAHfQNFkrnNXSG5dWUFirBsMDJ3w2B6c9lwu65+ZkeXZUjgyzELHIGOsC+sbfrnWCcTWx6deUW09ZpPl9DXZTyvjDSDw2WxbE0=,iv:ZOuBw3H200i/t0Bnlu4qqt9spzFbCBM+D6anxfXGke8=,tag:dHCGe2sBp9dk8NJKfhE6jw==,type:str]
+    pgp: []
+    encrypted_regex: ^(data|stringData)$
+    version: 3.8.1

apps/camper/ruuvi/kustomization.yaml

@@ -0,0 +1,7 @@
+apiVersion: kustomize.config.k8s.io/v1beta1
+kind: Kustomization
+resources:
+  - bridge/deployment.yaml
+  - gateway/deployment.yaml
+generators:
+  - secret-generator.yaml

apps/camper/ruuvi/secret-generator.yaml

@@ -0,0 +1,7 @@
+apiVersion: viaduct.ai/v1
+kind: ksops
+metadata:
+  name: secret-generator
+files:
+  - bridge/secret.sops.yaml
+  - gateway/secret.sops.yaml

argoapps/camper/ruuvi.yaml

@@ -0,0 +1,20 @@
+apiVersion: argoproj.io/v1alpha1
+kind: Application
+metadata:
+  name: camper-ruuvi
+  namespace: argocd
+spec:
+  project: apps-camper
+  source:
+    path: apps/camper/ruuvi
+    repoURL: https://git.tbrnt.ch/tobru/gitops-zurrli.git
+    targetRevision: HEAD
+    directory:
+      recurse: true
+  destination:
+    name: camper
+    namespace: ruuvi
+  syncPolicy:
+    syncOptions:
+      - ServerSideApply=true
+      - CreateNamespace=true