feat(tekton): Initial deploy

infrastructure/kustomization.yaml

@@ -16,3 +16,4 @@ resources:
   - postgres
   - kubenav
   - starboard
+  - tekton

infrastructure/tekton/kustomization.yaml

+apiVersion: kustomize.config.k8s.io/v1beta1
+kind: Kustomization
+namespace: tekton-system
+resources:
+  - namespace.yaml
+  - repository.yaml
+  - release.yaml
+  - ../../shared/networkpolicies/allow-from-same-namespace.yaml
+  - ../../shared/networkpolicies/allow-from-monitoring.yaml
+patchesStrategicMerge:
+  - networkpolicy.yaml

infrastructure/tekton/namespace.yaml

+apiVersion: v1
+kind: Namespace
+metadata:
+  name: tekton-system
+  labels:
+    name: tekton-system
+    kyverno.shivering-isles.com/class: "system" 

infrastructure/tekton/networkpolicy.yaml

+---
+apiVersion: networking.k8s.io/v1
+kind: NetworkPolicy
+metadata:
+  name: allow-from-monitoring
+spec:
+  podSelector:
+    matchLabels:
+      app.kubernetes.io/component: operator

infrastructure/tekton/release.yaml

+apiVersion: helm.toolkit.fluxcd.io/v2beta1
+kind: HelmRelease
+metadata:
+  name: tekton-operator
+  namespace: tekton-system
+spec:
+  releaseName: tekton-operator
+  chart:
+    spec:
+      chart: tekton-operator
+      sourceRef:
+        kind: GitRepository
+        name: tekton
+        namespace: tekton-system
+  interval: 5m
+  install:
+    crds: CreateReplace
+  upgrade:
+    crds: CreateReplace
+  values:
+    installCRDs: true
+    operator:
+      defaultTargetNamespace: tekton-system
+    service:
+      createServiceMonitor: true
+    securityContext:
+        capabilities:
+          drop:
+          - ALL
+        readOnlyRootFilesystem: true
+        runAsNonRoot: true
+        runAsUser: 1000

infrastructure/tekton/repository.yaml

+apiVersion: source.toolkit.fluxcd.io/v1beta1
+kind: GitRepository
+metadata:
+  name: tekton
+  namespace: tekton-system
+spec:
+spec:
+  interval: 30m
+  ref:
+    commit: 8dad037328193d6694f4d8365765d8a31e32c712
+  url: https://github.com/tektoncd/operator.git
+  ignore: |
+    # exclude all
+    /*
+    # include deploy dir
+    !/chart