feat: migrate woodpecker to argocd (#13)

- move woodpecker helm chart deployment to argocd
- move cnpg resources
- move vault resources

Reviewed-on: #13

apps/overlays/au-syd1/woodpecker/kustomization.yaml

@@ -0,0 +1,14 @@
+---
+apiVersion: kustomize.config.k8s.io/v1beta1
+kind: Kustomization
+
+resources:
+  - ../../../base/woodpecker
+
+helmCharts:
+  - name: woodpecker
+    repo: oci://ghcr.io/woodpecker-ci/helm
+    version: "3.5.1"
+    releaseName: woodpecker
+    namespace: woodpecker
+    valuesFile: values.yaml

apps/overlays/au-syd1/woodpecker/values.yaml

@@ -0,0 +1,56 @@
+agent:
+  replicaCount: 1
+  env:
+    WOODPECKER_MAX_WORKFLOWS: 8
+    WOODPECKER_BACKEND_K8S_STORAGE_CLASS: cephrbd-fast-delete
+    WOODPECKER_BACKEND_K8S_VOLUME_SIZE: 10G
+    WOODPECKER_BACKEND_K8S_STORAGE_RWX: false
+    WOODPECKER_LOG_LEVEL: debug
+  #extraSecretNamesForEnvFrom:
+  #  - woodpecker-default-agent-secret
+  persistence:
+    storageClass: cephrbd-fast-delete
+  resources:
+    requests:
+      cpu: 100m
+    limits:
+      memory: 128Mi
+
+server:
+  statefulSet:
+    replicaCount: 1
+  env:
+    WOODPECKER_HOST: 'https://ci.k8s.syd1.au.unkin.net'
+    WOODPECKER_OPEN: "true"
+    WOODPECKER_DISABLE_USER_AGENT_REGISTRATION: "true"
+    WOODPECKER_PLUGINS_PRIVILEGED: "woodpeckerci/plugin-docker-buildx:latest-insecure"
+  extraSecretNamesForEnvFrom:
+    - woodpecker-gitea
+    - woodpecker-postgres-credentials
+    - woodpecker-database-config
+  persistentVolume:
+    storageClass: cephrbd-fast-delete
+  ingress:
+    enabled: true
+    annotations:
+      cert-manager.io/cluster-issuer: vault-issuer
+      cert-manager.io/common-name: ci.k8s.syd1.au.unkin.net
+      cert-manager.io/private-key-size: "4096"
+      external-dns.alpha.kubernetes.io/hostname: ci.k8s.syd1.au.unkin.net
+      external-dns.alpha.kubernetes.io/target: 198.18.200.0
+    ingressClassName: nginx
+    hosts:
+      - host: ci.k8s.syd1.au.unkin.net
+        paths:
+          - path: /
+            backend:
+              servicePort: 80
+    tls:
+      - hosts:
+          - ci.k8s.syd1.au.unkin.net
+        secretName: ci-tls
+  resources:
+    requests:
+      cpu: 100m
+    limits:
+      memory: 128Mi