feat(gravity): add secrets

Author: chkpwd

kubernetes/core/gravity/external-secret.yml

@@ -0,0 +1,22 @@
+---
+# yaml-language-server: $schema=https://lds-schemas.pages.dev/external-secrets.io/externalsecret_v1beta1.json
+apiVersion: external-secrets.io/v1
+kind: ExternalSecret
+metadata:
+  name: gravity-dns
+spec:
+  refreshInterval: 15m
+  secretStoreRef:
+    name: bitwarden-secrets-manager
+    kind: ClusterSecretStore
+  target:
+    name: gravity-dns
+    template:
+      engineVersion: v2
+      data:
+        ADMIN_PASSWORD: "{{ .admin_password }}"
+        ADMIN_TOKEN: "{{ .admin_token }}"
+        ETCD_JOIN_CLUSTER: "{{ .etcd_join_token }},http://mgmt-srv-01.chkpwd.com:8008"
+  dataFrom:
+    - extract:
+        key: "infra-gravity-secrets"

kubernetes/core/gravity/kustomization.yml

@@ -6,3 +6,4 @@ resources:
   - sts.yml
   - svc.yml
   - http-route.yml
+  - external-secret.yml

kubernetes/core/gravity/sts.yml

@@ -4,6 +4,8 @@ kind: StatefulSet
 metadata:
   labels:
     app.kubernetes.io/name: gravity
+  annotations:
+    reloader.stakater.com/auto: "true"
   name: gravity
 spec:
   selector:
@@ -28,6 +30,9 @@ spec:
               value: 172.16.16.17
             - name: BOOTSTRAP_ROLES
               value: "dns;api;etcd;monitoring;tsdb"
+          envFrom:
+            - secretRef:
+                name: gravity
           livenessProbe:
             httpGet:
               path: /healthz/live
@@ -42,12 +47,6 @@ spec:
             - containerPort: 53
               protocol: UDP
               name: dns-udp
-            - containerPort: 67
-              protocol: UDP
-              name: dhcp
-            - containerPort: 68
-              protocol: UDP
-              name: dhcp-alt
             - containerPort: 8008
               name: http
             - containerPort: 8009