feat(syncthing): Deploy most simple version of syncthing

This patch implements a trivial syncthing setup, which should provide a a good place to sync data to.

apps/k8s01/syncthing/kustomization.yaml

+apiVersion: kustomize.config.k8s.io/v1beta1
+kind: Kustomization
+namespace: syncthing
+resources:
+  - namespace.yaml
+  - syncthing.yaml
+  - ../../../shared/networkpolicies/allow-from-same-namespace.yaml
+  - ../../../shared/resourcequotas/default.yaml

apps/k8s01/syncthing/namespace.yaml

+apiVersion: v1
+kind: Namespace
+metadata:
+  name: syncthing
+  labels:
+    pod-security.kubernetes.io/audit: restricted
+    pod-security.kubernetes.io/enforce: baseline
+    pod-security.kubernetes.io/warn: restricted
+    pod-security.kubernetes.io/audit-version: v1.23
+    pod-security.kubernetes.io/enforce-version: v1.23
+    pod-security.kubernetes.io/warn-version: v1.23

apps/k8s01/syncthing/syncthing.yaml

+---
+apiVersion: apps/v1
+kind: StatefulSet
+metadata:
+  name: syncthing
+  namespace: syncthing
+  labels:
+    app.kubernetes.io/name: syncthing
+spec:
+  selector:
+    matchLabels:
+      app.kubernetes.io/name: syncthing
+  serviceName: "syncthing"
+  replicas: 1
+  minReadySeconds: 10
+  template:
+    metadata:
+      labels:
+        app.kubernetes.io/name: syncthing
+    spec:
+      terminationGracePeriodSeconds: 10
+      containers:
+      - name: syncthing
+        image: docker.io/syncthing/syncthing:1.22.1
+        ports:
+        - containerPort: 8384
+          name: web
+          protocol: TCP
+        - containerPort: 22000
+          name: transfer-tcp
+          protocol: TCP
+        - containerPort: 22000
+          name: transfer-quick
+          protocol: UDP
+        - containerPort: 21027
+          name: discovery
+          protocol: UDP
+        volumeMounts:
+        - name: storage
+          mountPath: /var/syncthing
+        resources:
+          requests:
+            cpu: 100m
+            memory: 512Mi
+          limits:
+            cpu: 1000m
+            memory: 1Gi
+  volumeClaimTemplates:
+  - metadata:
+      name: storage
+    spec:
+      accessModes: [ "ReadWriteOnce" ]
+      resources:
+        requests:
+          storage: 70Gi
\ No newline at end of file

renovate.json

@@ -14,6 +14,7 @@
   "kubernetes": {
     "fileMatch": [
       "apps/k8s01/dns/.+\.yaml$",
+      "apps/k8s01/syncthing/.+\.yaml$",
       "apps/base/iot/.+\.yaml$"
     ]
   },