Adding portainer

argocd/portainer/Chart.yaml

@@ -0,0 +1,7 @@
+apiVersion: v2
+name: portainer-umbrella
+version: 0.0.0
+dependencies:
+  - name: portainer
+    repository: https://portainer.github.io/k8s/
+    version: 1.0.44

argocd/portainer/values.common.yaml

@@ -0,0 +1,50 @@
+portainer:
+
+  replicaCount: 1
+
+  image:
+    repository: portainer/portainer-ce
+    tag: 2.18.4
+    pullPolicy: Always
+
+  imagePullSecrets: []
+
+  nodeSelector: {}
+
+  serviceAccount:
+    annotations: {}
+    name: portainer-sa-clusteradmin
+
+  service:
+    # Set the httpNodePort and edgeNodePort only if the type is NodePort
+    # For Ingress, set the type to be ClusterIP and set ingress.enabled to true
+    # For Cloud Providers, set the type to be LoadBalancer
+    type: ClusterIP
+    httpPort: 9000
+    httpsPort: 9443
+    httpNodePort: 30777
+    httpsNodePort: 30779
+    edgePort: 8000
+    edgeNodePort: 30776
+    annotations: {}
+
+  tls:
+    # If set, Portainer will be configured to use TLS only
+    force: false
+    # If set, will mount the existing secret into the pod
+    existingSecret: ""
+
+  mtls:
+    # If set, Portainer will be configured to use mTLS only
+    enable: false
+    # If set, will mount the existing secret into the pod
+    existingSecret: ""
+
+  feature:
+    flags: ""
+
+  resources: {}
+
+  persistence:
+    enabled: true
+    existingClaim: portainer-config

terraform/applications.yaml

@@ -326,6 +326,23 @@ bazarr:
     timezone: ${timezone}
     duckdns_domain: ${duckdns_domain}
 
+
+portainer:
+  name: portainer
+  namespace: kube-system
+  deploy: true
+  priority: critical
+  volumes:
+    config:
+      enabled: true
+      name: portainer-config
+      size: 1Gi
+      access_modes:
+        - ReadWriteOnce
+  override:
+    timezone: ${timezone}
+    duckdns_domain: ${duckdns_domain}
+
 flood:
   name: flood
   namespace: services

terraform/modules/argocd_application/applications/portainer/values.yaml

@@ -0,0 +1,25 @@
+portainer:
+
+  feature:
+    flags: ""
+
+  ingress:
+    main:
+      ingressClassName: traefik
+      annotations:
+        cert-manager.io/cluster-issuer: letsencrypt
+        traefik.ingress.kubernetes.io/router.entrypoints: websecure-ext
+        gethomepage.dev/enabled: "true"
+        gethomepage.dev/name: "Portainer"
+        gethomepage.dev/description: ""
+        gethomepage.dev/group: "Internal"
+        gethomepage.dev/icon: "portainer.png"
+      enabled: true
+      hosts:
+        - host: "portainer.${duckdns_domain}.duckdns.org"
+          paths:
+          - path: /
+      tls:
+        - hosts:
+            - "portainer.${duckdns_domain}.duckdns.org"
+          secretName: tls-portainer-ingress