feat(github): Add habor o11y (#272)

kubernetes/apps/base/grafana/app/notificationpolicy.yaml

@@ -34,3 +34,6 @@ spec:
       - receiver: discord
         object_matchers:
           - ["grafana_folder", "=", "fmeet"]
+      - receiver: discord
+        object_matchers:
+          - ["grafana_folder", "=", "harbor"]

kubernetes/apps/base/harbor-o11y/harbor-o11y.yaml

@@ -0,0 +1,46 @@
+---
+# Public half of the key harbor-o11y signs with; from that repo's cosign.pub.
+apiVersion: v1
+kind: Secret
+metadata:
+  name: harbor-o11y-cosign
+  namespace: flux-system
+stringData:
+  cosign.pub: |
+    -----BEGIN PUBLIC KEY-----
+    MFkwEwYHKoZIzj0CAQYIKoZIzj0DAQcDQgAEVBC6kOWJTR2oEeDWF1VeoH1nlXhb
+    ipMDc2F6HXR5U0dpA8IdRsoXy9EibuDzf/yQd8Q2ThgLgi5WFsQZV5GYtQ==
+    -----END PUBLIC KEY-----
+---
+# yaml-language-server: $schema=https://k8s-schemas.home-operations.com/source.toolkit.fluxcd.io/ocirepository_v1.json
+apiVersion: source.toolkit.fluxcd.io/v1
+kind: OCIRepository
+metadata:
+  name: harbor-o11y
+  namespace: flux-system
+spec:
+  interval: 1m
+  url: oci://gitlab.futo.org:5050/harbor/harbor-o11y/o11y-manifests
+  ref:
+    tag: master
+  verify:
+    provider: cosign
+    secretRef:
+      name: harbor-o11y-cosign
+---
+# yaml-language-server: $schema=https://k8s-schemas.home-operations.com/kustomize.toolkit.fluxcd.io/kustomization_v1.json
+apiVersion: kustomize.toolkit.fluxcd.io/v1
+kind: Kustomization
+metadata:
+  name: harbor-o11y
+  namespace: flux-system
+spec:
+  interval: 10m
+  sourceRef:
+    kind: OCIRepository
+    name: harbor-o11y
+  path: ./
+  patches: []
+  prune: true
+  dependsOn:
+    - name: grafana-operator

kubernetes/apps/base/harbor-o11y/kustomization.yaml

@@ -0,0 +1,5 @@
+---
+apiVersion: kustomize.config.k8s.io/v1beta1
+kind: Kustomization
+resources:
+  - ./harbor-o11y.yaml

kubernetes/apps/production/o11y/kustomization.yaml

@@ -5,6 +5,7 @@ kind: Kustomization
 resources:
   - ../../base/yucca-o11y
   - ../../base/fmeet-o11y
+  - ../../base/harbor-o11y
   - ../../base/prometheus-operator-crds
   - ../../base/grafana-operator
   - ../../base/grafana-postgres

kubernetes/apps/staging/o11y/kustomization.yaml

@@ -5,6 +5,7 @@ kind: Kustomization
 resources:
   - ../../base/yucca-o11y
   - ../../base/fmeet-o11y
+  - ../../base/harbor-o11y
   - ../../base/prometheus-operator-crds
   - ../../base/grafana-operator
   - ../../base/grafana-postgres