feat(pihole-ingress): add ingress for external pihole

registry/clusters/prod/components/pihole-ingress.yaml

@@ -0,0 +1,29 @@
+apiVersion: argoproj.io/v1alpha1
+kind: Application
+metadata:
+  name: pihole-ingress-components
+  namespace: argocd
+  annotations:
+    argocd.argoproj.io/sync-wave: "10"
+  finalizers:
+    - resources-finalizer.argocd.argoproj.io
+spec:
+  project: default
+  source:
+    repoURL: https://github.com/mrsimonemms/infrastructure
+    path: registry/components/pihole-ingress
+    targetRevision: HEAD
+  destination:
+    server: https://kubernetes.default.svc
+    namespace: pihole-ingress
+  syncPolicy:
+    automated:
+      prune: true
+      selfHeal: true
+    syncOptions:
+      - CreateNamespace=true
+  ignoreDifferences:
+    - kind: Service
+      namespace: pihole
+      jsonPointers:
+        - /spec/externalName

registry/components/pihole-ingress/ingress.yaml

@@ -0,0 +1,34 @@
+apiVersion: networking.k8s.io/v1
+kind: Ingress
+metadata:
+  name: pihole-ingress
+  namespace: pihole
+  annotations:
+    kubernetes.io/tls-acme: "true"
+    cert-manager.io/cluster-issuer: letsencrypt
+    nginx.ingress.kubernetes.io/app-root: /admin
+    gethomepage.dev/description: Network-wide ad blocking
+    gethomepage.dev/enabled: "true"
+    gethomepage.dev/group: Cluster Management
+    gethomepage.dev/icon: pi-hole
+    gethomepage.dev/name: Pi-hole
+    gethomepage.dev/external: "true"
+    # Pod selector required because names don't match
+    # gethomepage.dev/pod-selector: app.kubernetes.io/name=grafana
+spec:
+  ingressClassName: nginx
+  rules:
+    - host: pihole.simonemms.com
+      http:
+        paths:
+          - path: /
+            pathType: Prefix
+            backend:
+              service:
+                name: pihole
+                port:
+                  number: 80
+  tls:
+    - hosts:
+        - pihole.simonemms.com
+      secretName: pihole-tls

registry/components/pihole-ingress/kustomization.yaml

@@ -0,0 +1,6 @@
+apiVersion: kustomize.config.k8s.io/v1beta1
+kind: Kustomization
+resources:
+  - ingress.yaml
+  - namespace.yaml
+  - service.yaml

registry/components/pihole-ingress/namespace.yaml

@@ -0,0 +1,6 @@
+apiVersion: v1
+kind: Namespace
+metadata:
+  name: pihole
+  annotations:
+    argocd.argoproj.io/sync-wave: "-1"

registry/components/pihole-ingress/service.yaml

@@ -0,0 +1,10 @@
+apiVersion: v1
+kind: Service
+metadata:
+  name: pihole
+  namespace: pihole
+  annotations:
+    tailscale.com/tailnet-fqdn: k3s-001.tail30e9d2.ts.net
+spec:
+  externalName: pihole
+  type: ExternalName