feat: migrate purelb to ArgoCD (#84)

Migrate PureLB load balancer from Terragrunt to ArgoCD/Kustomize.
Deploys purelb v0.13.0 with two LBNodeAgent and two ServiceGroup CRs
(common: 198.18.200.0/24, dmz: 198.18.199.0/24).
Adds LBNodeAgent and ServiceGroup to kubeconform skip list (no CRD catalog schema).

💘 Generated with Crush

Assisted-by: Claude Sonnet 4.6 via Crush <crush@charm.land>

Reviewed-on: #84

apps/base/purelb/kustomization.yaml

@@ -0,0 +1,8 @@
+---
+apiVersion: kustomize.config.k8s.io/v1beta1
+kind: Kustomization
+
+resources:
+  - namespace.yaml
+  - lbnodeagents.yaml
+  - servicegroups.yaml

apps/base/purelb/lbnodeagents.yaml

@@ -0,0 +1,28 @@
+---
+apiVersion: purelb.io/v1
+kind: LBNodeAgent
+metadata:
+  labels:
+    app.kubernetes.io/component: lbnodeagent
+    app.kubernetes.io/name: purelb
+  name: common
+  namespace: purelb
+spec:
+  local:
+    extlbint: kube-lb0
+    localint: default
+    sendgarp: false
+---
+apiVersion: purelb.io/v1
+kind: LBNodeAgent
+metadata:
+  labels:
+    app.kubernetes.io/component: lbnodeagent
+    app.kubernetes.io/name: purelb
+  name: dmz
+  namespace: purelb
+spec:
+  local:
+    extlbint: kube-lb0
+    localint: default
+    sendgarp: false

apps/base/purelb/namespace.yaml

@@ -0,0 +1,7 @@
+---
+apiVersion: v1
+kind: Namespace
+metadata:
+  labels:
+    app.kubernetes.io/name: purelb
+  name: purelb

apps/base/purelb/servicegroups.yaml

@@ -0,0 +1,30 @@
+---
+apiVersion: purelb.io/v1
+kind: ServiceGroup
+metadata:
+  labels:
+    app.kubernetes.io/component: servicegroup
+    app.kubernetes.io/name: purelb
+  name: common
+  namespace: purelb
+spec:
+  local:
+    v4pools:
+      - aggregation: /32
+        pool: 198.18.200.0/24
+        subnet: 198.18.200.0/24
+---
+apiVersion: purelb.io/v1
+kind: ServiceGroup
+metadata:
+  labels:
+    app.kubernetes.io/component: servicegroup
+    app.kubernetes.io/name: purelb
+  name: dmz
+  namespace: purelb
+spec:
+  local:
+    v4pools:
+      - aggregation: /32
+        pool: 198.18.199.0/24
+        subnet: 198.18.199.0/24

apps/overlays/au-syd1/purelb/kustomization.yaml

@@ -0,0 +1,16 @@
+---
+apiVersion: kustomize.config.k8s.io/v1beta1
+kind: Kustomization
+
+namespace: purelb
+
+resources:
+  - ../../../base/purelb
+
+helmCharts:
+  - name: purelb
+    repo: https://gitlab.com/api/v4/projects/20400619/packages/helm/stable
+    version: "v0.13.0"
+    releaseName: purelb
+    namespace: purelb
+    valuesFile: values.yaml

apps/overlays/au-syd1/purelb/values.yaml

@@ -0,0 +1,56 @@
+image:
+  repository: registry.gitlab.com/purelb/purelb
+  tag: v0.13.0
+  pullPolicy: Always
+
+allocator:
+  securityContext:
+    runAsNonRoot: true
+    runAsUser: 65534
+  containerSecurityContext:
+    allowPrivilegeEscalation: false
+    capabilities:
+      drop:
+        - all
+    readOnlyRootFilesystem: true
+  tolerations: []
+
+lbnodeagent:
+  extlbint: kube-lb0
+  localint: default
+  sendgarp: false
+  tolerations: []
+  containerSecurityContext:
+    capabilities:
+      add:
+        - NET_ADMIN
+        - NET_RAW
+      drop:
+        - ALL
+    readOnlyRootFilesystem: false
+    runAsGroup: 0
+    runAsUser: 0
+
+defaultAnnouncer: PureLB
+
+serviceGroup:
+  create: false
+  name: default
+
+Prometheus:
+  allocator:
+    Metrics:
+      enabled: false
+    serviceMonitor:
+      enabled: false
+    prometheusRules:
+      enabled: false
+  lbnodeagent:
+    Metrics:
+      enabled: false
+    serviceMonitor:
+      enabled: false
+    prometheusRules:
+      enabled: false
+
+memberlistSecretKey: 8sb7ikA5qHwQQqxc