refactor: split applications and charts into separte folders

charts/dex/resources/allow-dex-external-access.yaml

@@ -0,0 +1,15 @@
+apiVersion: cilium.io/v2
+kind: CiliumNetworkPolicy
+metadata:
+  name: allow-external-idp
+spec:
+  egress:
+  - toFQDNs:
+    - matchName: gitlab.com
+    - matchPattern: '*.gitlab.com'
+    - matchName: login.microsoftonline.com
+    - matchName: graph.microsoft.com
+  endpointSelector:
+    matchLabels:
+      app.kubernetes.io/name: cerbos
+

charts/dex/resources/dex-volumes.yaml

@@ -0,0 +1,31 @@
+apiVersion: v1
+kind: PersistentVolume
+metadata:
+  name: pv-oceanbox-dex
+spec:
+  accessModes:
+  - ReadOnlyMany
+  capacity:
+    storage: 50M
+  mountOptions:
+  - vers=4.2
+  - soft
+  nfs:
+    path: /oceanbox/pv-oceanbox-dex
+    server: 10.255.241.210
+  persistentVolumeReclaimPolicy: Retain
+  volumeMode: Filesystem
+---
+apiVersion: v1
+kind: PersistentVolumeClaim
+metadata:
+  name: oceanbox-dex
+spec:
+  accessModes:
+  - ReadOnlyMany
+  resources:
+    requests:
+      storage: 50M
+  storageClassName: ""
+  volumeMode: Filesystem
+  volumeName: pv-oceanbox-dex

charts/dex/resources/dexdb-cluster.yaml

@@ -0,0 +1,64 @@
+apiVersion: postgresql.cnpg.io/v1
+kind: Cluster
+metadata:
+  annotations:
+    linkerd.io/inject: disabled
+  name: dexdb
+spec:
+  enableSuperuserAccess: true
+  instances: 2
+  logLevel: info
+  # bootstrap:
+  #   initdb:
+  #     database: archivistdb
+  #     owner: archivist
+  #     secret:
+  #       name: archivistdb-secret
+  storage:
+    pvcTemplate:
+      accessModes:
+      - ReadWriteOnce
+      resources:
+        requests:
+          storage: 1Gi
+      storageClassName: managed-nfs-storage
+      volumeMode: Filesystem
+    resizeInUseVolumes: true
+    size: 1Gi
+  # superuserSecret:
+  #   name: dexdb-secret
+# ---
+# apiVersion: v1
+# data:
+#   # phei2beiRei0
+#   password: cGhlaTJiZWlSZWkwCg==
+#   username: YXJjaGl2aXN0Cg==
+# kind: Secret
+# metadata:
+#   name: archivistdb-secret
+# type: kubernetes.io/basic-auth
+# ---
+# apiVersion: v1
+# data:
+#   password: ZW4gdG8gdHJlIGZpcmUK
+# kind: Secret
+# metadata:
+#   name: dexdb-secret
+# type: kubernetes.io/basic-auth
+---
+apiVersion: v1
+kind: Service
+metadata:
+  name: dexdb-nodeport
+spec:
+  ports:
+  - name: psql
+    nodePort: 30432
+    port: 5432
+    protocol: TCP
+    targetPort: 5432
+  selector:
+    cnpg.io/cluster: dexdb
+    cnpg.io/instanceName: dexdb-1
+  sessionAffinity: None
+  type: NodePort