feat: setup greenbone

Author: aumer-amr

kubernetes/apps/networking/external-services/app/greenbone.yaml

@@ -0,0 +1,50 @@
+---
+apiVersion: networking.k8s.io/v1
+kind: Ingress
+metadata:
+  name: external-service-greenbone
+  namespace: networking
+  annotations:
+    hajimari.io/appName: greenbone
+    hajimari.io/icon: game-icons:dinosaur-rex
+    hajimari.io/group: networking
+spec:
+  ingressClassName: internal
+  rules:
+    - host: &host greenbone.${SECRET_DOMAIN}
+      http:
+        paths:
+          - pathType: Prefix
+            path: "/"
+            backend:
+              service:
+                name: external-service-greenbone
+                port:
+                  number: 9392
+  tls:
+    - hosts:
+        - *host
+---
+apiVersion: v1
+kind: Endpoints
+metadata:
+  name: external-service-greenbone
+  namespace: networking
+subsets:
+  - addresses:
+      - ip: ${SECRET_GREENBONE_IP}
+    ports:
+      - name: http
+        port: 9392
+        protocol: TCP
+---
+apiVersion: v1
+kind: Service
+metadata:
+  name: external-service-greenbone
+  namespace: networking
+spec:
+  ports:
+    - name: http
+      port: 9392
+  type: ClusterIP

kubernetes/apps/networking/external-services/app/kustomization.yaml

@@ -5,3 +5,4 @@ namespace: networking
 resources:
   - ./nas.yaml
   - ./maltrail.yaml
+  - ./greenbone.yaml

kubernetes/flux/vars/cluster-secrets-extra.sops.yaml

@@ -11,6 +11,7 @@ stringData:
     SECRET_NAS_IP: ENC[AES256_GCM,data:SFWCNfvJafR7QA==,iv:zLpxDRM44cefnWrxl3zeXxM2A75q6NNE7eengno2/pU=,tag:n9pXwDFZfLFc+qnR3O6VSA==,type:str]
     SECRET_NAS_IP_STREAMING: ENC[AES256_GCM,data:X1UKX4tPjbuCdg==,iv:ijot8OSKW91JOQPWILKzUrFeOByNiHllZVreLOUvtE0=,tag:D1vujqd+eS/G3S4/nSsqtQ==,type:str]
     SECRET_MALTRAIL_IP: ENC[AES256_GCM,data:JtV0CD/W1YdW,iv:3dMvxzM0ThkSc2uoTYtxhaqtDvHsQzlBxLV9P6ix2K0=,tag:mjQmtFKVWJ6bOCslZKcrXQ==,type:str]
+    SECRET_GREENBONE_IP: ENC[AES256_GCM,data:Nid1t6K0ZKpj2K0=,iv:45J6TnrhMSI+jDjyxR5SMV8s3dviNQX+EMWt0y/DNWc=,tag:NZb6VVgRBNDAwLZPEM3mWw==,type:str]
     SECRET_MAIN_PC_IP: ENC[AES256_GCM,data:AUg1qpqubB8=,iv:EqAAe7VQCV6n1C8bFqaGumSN6xSbTWgaMVZTJq+rS2o=,tag:35QUEEpIRnkogq5rdPJp+Q==,type:str]
     SECRET_INFLUX_DB_TOKEN: ENC[AES256_GCM,data:N//NYVSIO/eTawzhv7YrYfxfgdz1Q+AR0VcvTsZuJb4=,iv:pu2/JyXIDdVEuULwkJt8d0PjUm2DBTIvbyhTxBfQYoA=,tag:m4L0bOGt8p4VlscB/3uphw==,type:str]
     SECRET_UNIFI_CONTROLLER_URL: ENC[AES256_GCM,data:kKAQB3tISWO628erajBnwdRcgnHXrTU=,iv:/D2QMBT0VaioBf6RJDPkErCDmxMIu+ZJjfObC7/a0lk=,tag:X5gz6QS/VDv96mmTn5ZYPw==,type:str]
@@ -38,8 +39,8 @@ sops:
             dVU0WEEza0VOT3F3T2lLZVJZeVl3RWcKRwnKcxnKxs7/o843qFW4hqEByUqO4R+O
             RK+P9f00q+S0Ur50GkCvHj0tKQF3RKtZWB+v74iRfn1SI5f8RdCZAw==
             -----END AGE ENCRYPTED FILE-----
-    lastmodified: "2024-01-23T19:58:31Z"
-    mac: ENC[AES256_GCM,data:FGFTfGd5NV3OogzgvX2Ncwqt1OvRbUfui+UezQgS5aI1k2SFyiy23MPwHb1CodVanwf6+5vknmtSvlswM9R4yEAGZt+oXv28PrbobfyGnHKVZgfylmYGQklO6pSpu+TrTq7io/l+UGe7CeokU74KGHnxqoudb9oiCLjOjkdiRgU=,iv:ciycLeYQNWmKBImzgnAVMmyQkL2bdZ/+U2WwC/r9Fx0=,tag:Zm44fW/yzdyni37jWIfUTQ==,type:str]
+    lastmodified: "2024-11-20T08:53:46Z"
+    mac: ENC[AES256_GCM,data:qVrg0390Uo9lmHOm4vPmncS4LOsJ425JKf7hvKprdf6uIFXPD4ZtThVgqX+fTU+gojan5CDfhwU6LqQVGhnxfuhvEJ2L9MhfivywsrytUpPo5sqsow7yL6WVvyJfHnuzMiWh4SIx2P3iqpBShUbSS0oUkf7Tk9fC5OPsQQwhKzE=,iv:vLq+OjWyfgIcON+K+mNdCmNOGdnmsc4MFSxTvTk6Rcc=,tag:vahpyZUfOw2wLLlkXdoqyA==,type:str]
     pgp: []
     encrypted_regex: ^(data|stringData)$
     version: 3.8.1