Add nginx-ingress-controller

.github/renovate.json

@@ -62,6 +62,18 @@
       "packageNameTemplate": "windsorcli/blueprint",
       "lookupNameTemplate": "windsorcli/blueprint",
       "versioningTemplate": "semver"
+    },
+    {
+      "customType": "regex",
+      "fileMatch": ["^.*\\.ya?ml$", "^.*\\.tf$", "^.*\\.tfvars$"],
+      "matchStrings": [
+        "\\s*#\\s*renovate:\\s*datasource=(?<datasource>[^\\s]+)\\s*depName=(?<depName>[^\\s]+)\\s*package=(?<package>[^\\s]+)(\\s*helmRepo=(?<helmRepo>[^\\s]+))?.*\n.*(?<currentValue>\\d+\\.\\d+\\.\\d+(-[a-zA-Z0-9]+)?)"
+      ],
+      "versioningTemplate": "semver",
+      "datasourceTemplate": "{{datasource}}",
+      "registryUrlTemplate": "{{#if helmRepo}}{{helmRepo}}{{/if}}",
+      "packageNameTemplate": "{{package}}",
+      "depNameTemplate": "{{depName}}"
     }
   ],
   "platformAutomerge": true,

contexts/local/blueprint.yaml

@@ -12,10 +12,17 @@ sources:
 - name: core
   url: github.com/windsorcli/core
   ref:
-    tag: v0.1.1
+    tag: v0.1.2
 terraform:
-- path: cluster/talos
-- path: gitops/flux
+- source: core
+  path: cluster/talos
+- source: core
+  path: gitops/flux
 kustomize:
 - name: local
   path: ""
+- name: ingress-base
+  path: ingress/base
+  components:
+  - nginx
+  - nginx/nodeport

contexts/local/terraform/cluster/talos.tfvars

@@ -1,7 +1,8 @@
 // Managed by Windsor CLI: This file is partially managed by the windsor CLI. Your changes will not be overwritten.
+// Module source: github.com/windsorcli/core//terraform/cluster/talos?ref=v0.1.2
 
 // The external controlplane API endpoint of the kubernetes API
-cluster_endpoint = "https://10.5.0.2:6443"
+cluster_endpoint = "https://127.0.0.1:6443"
 
 // The name of the cluster
 cluster_name = "talos"
@@ -12,47 +13,55 @@ cluster:
   apiServer:
     certSANs:
     - localhost
-    - 10.5.0.2
+    - 127.0.0.1
+  extraManifests:
+  - https://raw.githubusercontent.com/alex1989hu/kubelet-serving-cert-approver/v0.8.7/deploy/standalone-install.yaml
 machine:
   certSANs:
   - localhost
-  - 10.5.0.2
+  - 127.0.0.1
   features:
     hostDNS:
       forwardKubeDNSToHost: true
+  kubelet:
+    extraArgs:
+      rotate-server-certificates: "true"
   network:
     interfaces:
     - ignore: true
       interface: eth0
   registries:
     mirrors:
-      gcr.test:
+      gcr.io:
         endpoints:
-        - https://gcr.io
-      ghcr.test:
+        - http://gcr.test:5000
+      ghcr.io:
         endpoints:
-        - https://ghcr.io
-      quay.test:
+        - http://ghcr.test:5000
+      quay.io:
         endpoints:
-        - https://quay.io
-      registry-1.docker.test:
+        - http://quay.test:5000
+      registry-1.docker.io:
         endpoints:
-        - https://docker.io
-      registry.k8s.test:
+        - http://registry-1.docker.test:5000
+      registry.k8s.io:
         endpoints:
-        - https://registry.k8s.io
+        - http://registry.k8s.test:5000
+      registry.test:
+        endpoints:
+        - http://registry.test:5000
 EOF
 
 // Machine config details for control planes
 controlplanes = [{
-  endpoint = "10.5.0.2:50000"
+  endpoint = "127.0.0.1:50000"
   hostname = "controlplane-1.test"
-  node     = "10.5.0.2"
+  node     = "127.0.0.1"
 }]
 
 // Machine config details for workers
 workers = [{
-  endpoint = "10.5.0.11:50000"
+  endpoint = "127.0.0.1:50001"
   hostname = "worker-1.test"
-  node     = "10.5.0.11"
+  node     = "127.0.0.1"
 }]

contexts/local/terraform/gitops/flux.tfvars

@@ -1,3 +1,8 @@
 // Managed by Windsor CLI: This file is partially managed by the windsor CLI. Your changes will not be overwritten.
-git_username = "local"
+// Module source: github.com/windsorcli/core//terraform/gitops/flux?ref=v0.1.2
+
+// The git password or PAT used to authenticate with the git provider
 git_password = "local"
+
+// The git user to use to authenticate with the git provider
+git_username = "local"

kustomize/ingress/base/kustomization.yaml

@@ -0,0 +1,2 @@
+resources:
+  - namespace.yaml