Initial commit

apps/home-assistant/esphome/envoy-route.yaml

@@ -0,0 +1,20 @@
+apiVersion: gateway.networking.k8s.io/v1
+kind: HTTPRoute
+metadata:
+  name: esphome
+  namespace: home-assistant
+spec:
+  parentRefs:
+    - name: edge
+      namespace: gateway
+      sectionName: https
+  hostnames:
+    - esphome.kube.huskypup.net
+  rules:
+    - matches:
+        - path:
+            type: PathPrefix
+            value: /
+      backendRefs:
+        - name: esphome
+          port: 6052

apps/home-assistant/esphome/istio-virtualservice.yaml

@@ -0,0 +1,16 @@
+apiVersion: networking.istio.io/v1beta1
+kind: VirtualService
+metadata:
+  name: esphome
+  namespace: home-assistant
+spec:
+  hosts:
+    - esphome.kube.huskypup.net
+  gateways:
+    - istio-system/edge
+  http:
+    - route:
+        - destination:
+            host: esphome.home-assistant.svc.cluster.local
+            port:
+              number: 6052

apps/home-assistant/esphome/values.yaml

@@ -0,0 +1,57 @@
+# ESPHome Helm Chart Values
+# Deployed in home-assistant namespace as a companion to Home Assistant
+#
+# FEATURES:
+#   ✓ ESPHome Dashboard for managing ESP devices
+#   ✓ Persistent storage via Rook-Ceph
+#   ✓ TLS certificates via cert-manager
+#   ✓ Ingress via Istio VirtualService
+
+image:
+  repository: ghcr.io/esphome/esphome
+  tag: "2024.11.3"
+  pullPolicy: IfNotPresent
+
+service:
+  main:
+    ports:
+      http:
+        port: 6052
+
+# Ingress disabled - Istio VirtualService handles routing
+ingress:
+  main:
+    enabled: false
+
+persistence:
+  config:
+    enabled: true
+    storageClass: rook-ceph-block
+    accessMode: ReadWriteOnce
+    size: 5Gi
+    retain: true
+
+env:
+  TZ: America/New_York
+  ESPHOME_DASHBOARD_USE_PING: "true"
+
+securityContext:
+  privileged: false
+
+resources:
+  requests:
+    cpu: 50m
+    memory: 256Mi
+  limits:
+    memory: 512Mi
+
+probes:
+  liveness:
+    enabled: true
+  readiness:
+    enabled: true
+  startup:
+    enabled: true
+
+nodeSelector:
+  kubernetes.io/arch: amd64