Migrate Body Wars to Helm chart

ansible/roles/linux-baseline/defaults/main.yml

@@ -65,11 +65,6 @@ baseline_packages_extra: []
 # provisions on every host. Service users (e.g. 'cast' for podman
 # workloads) are created by their respective application roles, not here.
 baseline_users:
-  - name: wed
-    comment: "Default admin user"
-    shell: /bin/bash
-    groups: "{{ baseline_sudo_group }}"
-    sudo_nopasswd: true
   - name: jarvis
     comment: "JARVIS automation account"
     shell: /bin/bash
@@ -77,11 +72,6 @@ baseline_users:
     sudo_nopasswd: true
     ssh_authorized_keys:
       - "{{ jarvis_ssh_public_key }}"
-  - name: rblundon
-    comment: "Ryan Blundon"
-    shell: /bin/bash
-    groups: "{{ baseline_sudo_group }}"
-    sudo_nopasswd: true
 
 # ---------------------------------------------------------------------------
 # SSH hardening

cluster/applications/body-wars-helm/application.yaml

@@ -0,0 +1,39 @@
+apiVersion: argoproj.io/v1alpha1
+kind: Application
+metadata:
+  name: body-wars
+  namespace: argocd
+  annotations:
+    argocd.argoproj.io/sync-wave: "9"
+spec:
+  project: default
+  source:
+    repoURL: https://helm-charts.open-webui.com
+    chart: open-webui
+    targetRevision: 16.3.0
+    helm:
+      values: |
+        ingress:
+          enabled: true
+          className: nginx
+          hosts:
+            - host: body-wars.local.mk-labs.cloud
+              paths:
+                - path: /
+                  pathType: Prefix
+          tls:
+            - secretName: body-wars-tls
+              hosts:
+                - body-wars.local.mk-labs.cloud
+        openwebui:
+          backend:
+            url: http://astro-orbiter:8000/v1
+  destination:
+    server: https://kubernetes.default.svc
+    namespace: open-webui
+  syncPolicy:
+    automated:
+      prune: true
+      selfHeal: true
+    syncOptions:
+      - CreateNamespace=true