feat(rook): Add initial rook operator deployment

This patch creates a deployment for the rook operator, since longhorn has
caused various issues once again, taking down the entire mail, nextcloud
and monitoring setup with it, by just simply updating and rebooting a
node.

This is inacceptable. Therefore this switch towards rook which will
hopefully solve this and other problems.

infrastructure/kustomization.yaml

@@ -9,6 +9,7 @@ resources:
   - metallb
   - cert-manager
   - nginx-system
+  - rook
   - longhorn
   - monitoring
   - loki

infrastructure/rook/kustomization.yaml

+apiVersion: kustomize.config.k8s.io/v1beta1
+kind: Kustomization
+namespace: rook-ceph
+resources:
+  - namespace.yaml
+  - repository.yaml
+  - operator.yaml

infrastructure/rook/namespace.yaml

+apiVersion: v1
+kind: Namespace
+metadata:
+  name: rook-ceph
+  labels:
+    pod-security.kubernetes.io/audit: privileged
+    pod-security.kubernetes.io/enforce: privileged
+    pod-security.kubernetes.io/warn: privileged
+    pod-security.kubernetes.io/audit-version: v1.23
+    pod-security.kubernetes.io/enforce-version: v1.23
+    pod-security.kubernetes.io/warn-version: v1.23

infrastructure/rook/operator.yaml

+apiVersion: helm.toolkit.fluxcd.io/v2beta1
+kind: HelmRelease
+metadata:
+  name: rook-ceph
+  namespace: rook-ceph
+spec:
+  releaseName: rook-ceph
+  chart:
+    spec:
+      chart: postgres-operator
+      sourceRef:
+        kind: HelmRepository
+        name: rook-ceph
+        namespace: rook-ceph
+      version: v1.10.6
+  interval: 5m
+  install:
+    crds: CreateReplace
+  upgrade:
+    crds: CreateReplace
+  valuesFrom:
+    - kind: ConfigMap
+      name: rook-ceph-base-values
+      valuesKey: values.yaml
+    - kind: Secret
+      name: rook-ceph-overwrite
+      valuesKey: values-overwrite.yaml
+---
+apiVersion: v1
+kind: ConfigMap
+metadata:
+  name: rook-ceph-base-values
+  namespace: rook-ceph
+data:
+  values.yaml: |
+    csi:
+      topology:
+        enabled: true
+        domainLabels:
+          - kubernetes.io/hostname
+    monitoring:
+      enabled: true
\ No newline at end of file

infrastructure/rook/repository.yaml

+apiVersion: source.toolkit.fluxcd.io/v1beta1
+kind: HelmRepository
+metadata:
+  name: rook-release 
+  namespace: rook-ceph
+spec:
+  interval: 30m
+  url: https://charts.rook.io/release