feat(kubernetes): bring new changes from template

qlonik · Jan 13, 2024 · 813756b · 813756b
1 parent a0c8243
commit 813756b
Show file tree

Hide file tree

Showing 154 changed files with 1,023 additions and 732 deletions.
diff --git a/bootstrap/templates/kubernetes/apps/network/external-dns/app/dnsendpoint-crd.yaml.j2 b/bootstrap/templates/kubernetes/apps/network/external-dns/app/dnsendpoint-crd.yaml.j2
@@ -1,3 +1,4 @@
+# yamllint disable
 ---
 apiVersion: apiextensions.k8s.io/v1
 kind: CustomResourceDefinition

diff --git a/kubernetes/apps/actions-runner-system/actions-runner-controller/ks.yaml b/kubernetes/apps/actions-runner-system/actions-runner-controller/ks.yaml
@@ -6,7 +6,7 @@ metadata:
   namespace: flux-system
 spec:
   dependsOn:
-    - name: cluster-apps-cert-manager
+    - name: cert-manager
   path: ./kubernetes/apps/actions-runner-system/actions-runner-controller/app
   prune: true
   sourceRef:

diff --git a/kubernetes/apps/cert-manager/cert-manager/app/helmrelease.yaml b/kubernetes/apps/cert-manager/cert-manager/app/helmrelease.yaml
@@ -3,7 +3,6 @@ apiVersion: helm.toolkit.fluxcd.io/v2beta2
 kind: HelmRelease
 metadata:
   name: cert-manager
-  namespace: cert-manager
 spec:
   interval: 30m
   chart:
@@ -37,4 +36,4 @@ spec:
       enabled: true
       servicemonitor:
         enabled: true
-        prometheusInstance: monitoring
+        prometheusInstance: observability
diff --git a/kubernetes/apps/cert-manager/cert-manager/app/kustomization.yaml b/kubernetes/apps/cert-manager/cert-manager/app/kustomization.yaml
@@ -1,7 +1,6 @@
 ---
 apiVersion: kustomize.config.k8s.io/v1beta1
 kind: Kustomization
-namespace: cert-manager
 resources:
   - ./helmrelease.yaml
   - ./prometheusrule.yaml
diff --git a/kubernetes/apps/cert-manager/cert-manager/app/prometheusrule.yaml b/kubernetes/apps/cert-manager/cert-manager/app/prometheusrule.yaml
@@ -3,7 +3,6 @@ apiVersion: monitoring.coreos.com/v1
 kind: PrometheusRule
 metadata:
   name: cert-manager.rules
-  namespace: cert-manager
 spec:
   groups:
     - name: cert-manager

diff --git a/kubernetes/apps/cert-manager/cert-manager/issuers/secret.sops.yaml b/kubernetes/apps/cert-manager/cert-manager/issuers/secret.sops.yaml
@@ -1,11 +1,9 @@
-# yamllint disable
 apiVersion: v1
 kind: Secret
 metadata:
     name: cert-manager-secret
-    namespace: cert-manager
 stringData:
-    api-token: ENC[AES256_GCM,data:pqRmwDvLQpcA7UsgAnxYtNuMqRTetHMK73Gc/xv9IgQhDqx1ed5XBw==,iv:0/wuWvlx5cddt9Tm9+LvHdJ4xdy9eiVbZSI1eXONL3Q=,tag:yriijOvqraWkvg4DC64JXw==,type:str]
+    api-token: ENC[AES256_GCM,data:dNONpB4vhd9b6swaS24p2lWOu8qEMQbo878TVVYr8T8AMLNGCWvsAg==,iv:jQ+6csYeQy1UIJUR6IZOBMftdsgpgoD6uexQs8hMQNc=,tag:Zlv8+pSjLDC5N/huAIQaOA==,type:str]
 sops:
     kms: []
     gcp_kms: []
@@ -15,14 +13,14 @@ sops:
         - recipient: age1w68rvrv30t2xfm42ctr02vurav5222065pl03ys6ps5aklraq42s4jeyjl
           enc: |
             -----BEGIN AGE ENCRYPTED FILE-----
-            YWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IFgyNTUxOSBjVzUrN1FJazNqMHFIRDBp
-            cGNsTFdteTJSQWtGRDdxdkttSGhRcFpZZVRjCjhFZ1NzNmtndVVGVWlXNjlCMmRP
-            MjljTkpWbkNVcllCQXU2VEZNVVVVTU0KLS0tIFhoaUNrUUt1SFF6ck16cEZ3ekZV
-            MWxDUDloRTc4QUFYbzYxSjBteTFTd3cKBh6mosfV6NjhnNSDrj2m5/tC0qRmg/gG
-            zXeKcdhp/vq3worHNqJSuYvidw5jly0RxvEHcFkbbh5RWvnXoZ6YoQ==
+            YWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IFgyNTUxOSA0N1VQZU1zRzQ4N1JZSEJB
+            b2VZVi9RWUhQUWdRUVhNZEtianBtM3lOWm1VCmtIOUtMd0VPejUzVUxaZ3ZOZzBK
+            Y3puWTNNQ0paWnpRVjJpMGdObVBnWGsKLS0tIEk5M3RrRFpUZ1FNeUF6SjNLRnM5
+            MXhoTXQ2Wk5rMGtmWWtKNW1LdUk4WHMKc1MmUQ+eDFlFizVN8uewfeEbetjLF7fr
+            UYyGuHXzNgAeDB5JMCahuvZeBlOKOWeHxPX3lkB75h08Slm0AoQY2w==
             -----END AGE ENCRYPTED FILE-----
-    lastmodified: "2023-09-28T04:13:58Z"
-    mac: ENC[AES256_GCM,data:t2WlpUIFj1/b07NN9hza9QtehLcvhPEtCRLhGQ3scSDebsmhQ5c0mJ2uQR8hCoC4B+QG9JwpJgDaI+kEPU+4uPucmvmEFCfR8g9G0XTsxNAOkSBSIBxRZbC8QG/S3mboKT9D1qi6CvcAMbhHzqn39Nv/+K1tePjjdJZTlH5DYhU=,iv:lGSleB3nUYA9/HojAKYBhCOqZQc0J9KBV/M7oYAXjiw=,tag:ccWH22xS9AStzA0aqMTxBw==,type:str]
+    lastmodified: "2024-01-11T21:47:52Z"
+    mac: ENC[AES256_GCM,data:o4hRviorZtcT/1zNWxPtLXOI5z5Y5+IAYEtV2lhNb0JIRoUvgp4zMPHPaZ7VSV0Y9XvR/l0lmxbs4XNt6wGrmydiulvDMcal94HFs5MC82KF2oNlOotowJak8rZ/+FbYLEbU1CDfUV2fQD+VIjVY9TxtxHrHogCY89XyagHlxdo=,iv:WaeGLNqX/qjrfHJmuL1Mnp/+aTWzCO8gNVg2tRHXtn8=,tag:7Nbf/MwUenQiINTaXDDvZw==,type:str]
     pgp: []
     encrypted_regex: ^(data|stringData)$
-    version: 3.7.3
+    version: 3.8.1
diff --git a/kubernetes/apps/cert-manager/cert-manager/ks.yaml b/kubernetes/apps/cert-manager/cert-manager/ks.yaml
@@ -2,10 +2,14 @@
 apiVersion: kustomize.toolkit.fluxcd.io/v1
 kind: Kustomization
 metadata:
-  name: cluster-apps-cert-manager
+  name: &app cert-manager
   namespace: flux-system
 spec:
   path: ./kubernetes/apps/cert-manager/cert-manager/app
+  targetNamespace: cert-manager
+  commonMetadata:
+    labels:
+      app.kubernetes.io/name: *app
   prune: true
   sourceRef:
     kind: GitRepository
@@ -18,12 +22,16 @@ spec:
 apiVersion: kustomize.toolkit.fluxcd.io/v1
 kind: Kustomization
 metadata:
-  name: cluster-apps-cert-manager-issuers
+  name: &app cert-manager-issuers
   namespace: flux-system
 spec:
   dependsOn:
-    - name: cluster-apps-cert-manager
+    - name: cert-manager
   path: ./kubernetes/apps/cert-manager/cert-manager/issuers
+  targetNamespace: cert-manager
+  commonMetadata:
+    labels:
+      app.kubernetes.io/name: *app
   prune: true
   sourceRef:
     kind: GitRepository

diff --git a/kubernetes/apps/default/audiobookshelf/ks.yaml b/kubernetes/apps/default/audiobookshelf/ks.yaml
@@ -7,7 +7,7 @@ metadata:
 spec:
   dependsOn:
     - name: cluster-apps-minio
-    - name: cluster-apps-volsync
+    - name: volsync
   path: ./kubernetes/apps/default/audiobookshelf/app
   prune: true
   sourceRef:

diff --git a/kubernetes/apps/default/bazarr/ks.yaml b/kubernetes/apps/default/bazarr/ks.yaml
@@ -7,7 +7,7 @@ metadata:
 spec:
   dependsOn:
     - name: cluster-apps-minio
-    - name: cluster-apps-volsync
+    - name: volsync
   path: ./kubernetes/apps/default/bazarr/app
   prune: true
   sourceRef:

diff --git a/kubernetes/apps/default/calibre-web/ks.yaml b/kubernetes/apps/default/calibre-web/ks.yaml
@@ -7,7 +7,7 @@ metadata:
 spec:
   dependsOn:
     - name: cluster-apps-minio
-    - name: cluster-apps-volsync
+    - name: volsync
   path: ./kubernetes/apps/default/calibre-web/app
   prune: true
   sourceRef:

diff --git a/kubernetes/apps/default/calibre/ks.yaml b/kubernetes/apps/default/calibre/ks.yaml
@@ -7,7 +7,7 @@ metadata:
 spec:
   dependsOn:
     - name: cluster-apps-minio
-    - name: cluster-apps-volsync
+    - name: volsync
   path: ./kubernetes/apps/default/calibre/app
   prune: true
   sourceRef:

diff --git a/kubernetes/apps/default/cloudnative-pg/ks.yaml b/kubernetes/apps/default/cloudnative-pg/ks.yaml
@@ -23,7 +23,7 @@ metadata:
 spec:
   dependsOn:
     - name: cluster-apps-cloudnative-pg
-    - name: cluster-apps-local-path-provisioner
+    - name: rancher-local-path-provisioner
     - name: cluster-apps-minio
   path: ./kubernetes/apps/default/cloudnative-pg/cluster
   prune: true

diff --git a/kubernetes/apps/default/grocy/ks.yaml b/kubernetes/apps/default/grocy/ks.yaml
@@ -7,7 +7,7 @@ metadata:
 spec:
   dependsOn:
     - name: cluster-apps-minio
-    - name: cluster-apps-volsync
+    - name: volsync
   path: ./kubernetes/apps/default/grocy/app
   prune: true
   sourceRef:

diff --git a/kubernetes/apps/default/hajimari/app/helmrelease.yaml b/kubernetes/apps/default/hajimari/app/helmrelease.yaml
@@ -3,7 +3,6 @@ apiVersion: helm.toolkit.fluxcd.io/v2beta2
 kind: HelmRelease
 metadata:
   name: hajimari
-  namespace: default
 spec:
   interval: 30m
   chart:
@@ -38,7 +37,7 @@ spec:
       namespaceSelector:
         matchNames:
           - default
-          - monitoring
+          - observability
     ingress:
       main:
         enabled: true

diff --git a/kubernetes/apps/default/hajimari/app/kustomization.yaml b/kubernetes/apps/default/hajimari/app/kustomization.yaml
@@ -1,6 +1,5 @@
 ---
 apiVersion: kustomize.config.k8s.io/v1beta1
 kind: Kustomization
-namespace: default
 resources:
   - ./helmrelease.yaml
diff --git a/kubernetes/apps/default/hajimari/ks.yaml b/kubernetes/apps/default/hajimari/ks.yaml
@@ -2,10 +2,14 @@
 apiVersion: kustomize.toolkit.fluxcd.io/v1
 kind: Kustomization
 metadata:
-  name: cluster-apps-hajimari
+  name: &app hajimari
   namespace: flux-system
 spec:
   path: ./kubernetes/apps/default/hajimari/app
+  targetNamespace: default
+  commonMetadata:
+    labels:
+      app.kubernetes.io/name: *app
   prune: true
   sourceRef:
     kind: GitRepository

diff --git a/kubernetes/apps/default/heimdall/ks.yaml b/kubernetes/apps/default/heimdall/ks.yaml
@@ -7,7 +7,7 @@ metadata:
 spec:
   dependsOn:
     - name: cluster-apps-minio
-    - name: cluster-apps-volsync
+    - name: volsync
   path: ./kubernetes/apps/default/heimdall/app
   prune: true
   sourceRef:

diff --git a/kubernetes/apps/default/jellyfin/ks.yaml b/kubernetes/apps/default/jellyfin/ks.yaml
@@ -7,8 +7,8 @@ metadata:
 spec:
   dependsOn:
     - name: cluster-apps-minio
-    - name: cluster-apps-volsync
-    - name: cluster-apps-device-plugin-amd-gpu
+    - name: volsync
+    - name: device-plugin-amd-gpu
   path: ./kubernetes/apps/default/jellyfin/app
   prune: true
   sourceRef:

diff --git a/kubernetes/apps/default/jellyseerr/ks.yaml b/kubernetes/apps/default/jellyseerr/ks.yaml
@@ -7,7 +7,7 @@ metadata:
 spec:
   dependsOn:
     - name: cluster-apps-minio
-    - name: cluster-apps-volsync
+    - name: volsync
   path: ./kubernetes/apps/default/jellyseerr/app
   prune: true
   sourceRef:

diff --git a/kubernetes/apps/default/lidarr/ks.yaml b/kubernetes/apps/default/lidarr/ks.yaml
@@ -7,7 +7,7 @@ metadata:
 spec:
   dependsOn:
     - name: cluster-apps-minio
-    - name: cluster-apps-volsync
+    - name: volsync
   path: ./kubernetes/apps/default/lidarr/app
   prune: true
   sourceRef:

diff --git a/kubernetes/apps/default/mealie/ks.yaml b/kubernetes/apps/default/mealie/ks.yaml
@@ -10,7 +10,7 @@ spec:
     - name: cluster-apps-maddy
     - name: cluster-apps-minio
     - name: cluster-apps-openldap
-    - name: cluster-apps-volsync
+    - name: volsync
   path: ./kubernetes/apps/default/mealie/app
   prune: true
   sourceRef:

diff --git a/kubernetes/apps/default/minio/app/helmrelease.yaml b/kubernetes/apps/default/minio/app/helmrelease.yaml
@@ -34,7 +34,7 @@ spec:
     env:
       TZ: ${TIMEZONE}
       MINIO_UPDATE: "off"
-      # MINIO_PROMETHEUS_URL: http://kube-prometheus-stack-prometheus.monitoring.svc.cluster.local:9090
+      # MINIO_PROMETHEUS_URL: http://kube-prometheus-stack-prometheus.observability.svc.cluster.local:9090
       # MINIO_PROMETHEUS_JOB_ID: minio
       MINIO_BROWSER_REDIRECT_URL: https://minio.${SECRET_DOMAIN}
       MINIO_SERVER_URL: https://s3.${SECRET_DOMAIN}

diff --git a/kubernetes/apps/default/minio/ks.yaml b/kubernetes/apps/default/minio/ks.yaml
@@ -6,7 +6,7 @@ metadata:
   namespace: flux-system
 spec:
   dependsOn:
-    - name: cluster-apps-csi-driver-nfs
+    - name: csi-driver-nfs
   path: ./kubernetes/apps/default/minio/app
   prune: true
   sourceRef:

diff --git a/kubernetes/apps/default/nextcloud/ks.yaml b/kubernetes/apps/default/nextcloud/ks.yaml
@@ -8,11 +8,11 @@ spec:
   dependsOn:
     - name: cluster-apps-authelia
     - name: cluster-apps-cloudnative-pg-cluster
-    - name: cluster-apps-csi-driver-nfs
-    - name: cluster-apps-local-path-provisioner
+    - name: csi-driver-nfs
+    - name: rancher-local-path-provisioner
     - name: cluster-apps-minio
     - name: cluster-apps-redis-lb
-    - name: cluster-apps-volsync
+    - name: volsync
   path: ./kubernetes/apps/default/nextcloud/app
   prune: true
   sourceRef:

diff --git a/kubernetes/apps/default/nzbget/ks.yaml b/kubernetes/apps/default/nzbget/ks.yaml
@@ -7,7 +7,7 @@ metadata:
 spec:
   dependsOn:
     - name: cluster-apps-minio
-    - name: cluster-apps-volsync
+    - name: volsync
   path: ./kubernetes/apps/default/nzbget/app
   prune: true
   sourceRef:

diff --git a/kubernetes/apps/default/paperless-ngx/ks.yaml b/kubernetes/apps/default/paperless-ngx/ks.yaml
@@ -9,7 +9,7 @@ spec:
     - name: cluster-apps-cloudnative-pg-cluster
     - name: cluster-apps-minio
     - name: cluster-apps-redis-lb
-    - name: cluster-apps-volsync
+    - name: volsync
   path: ./kubernetes/apps/default/paperless-ngx/app
   prune: true
   sourceRef:

diff --git a/kubernetes/apps/default/prowlarr/ks.yaml b/kubernetes/apps/default/prowlarr/ks.yaml
@@ -7,7 +7,7 @@ metadata:
 spec:
   dependsOn:
     - name: cluster-apps-minio
-    - name: cluster-apps-volsync
+    - name: volsync
   path: ./kubernetes/apps/default/prowlarr/app
   prune: true
   sourceRef:

diff --git a/kubernetes/apps/default/qbittorrent/ks.yaml b/kubernetes/apps/default/qbittorrent/ks.yaml
@@ -7,7 +7,7 @@ metadata:
 spec:
   dependsOn:
     - name: cluster-apps-minio
-    - name: cluster-apps-volsync
+    - name: volsync
   path: ./kubernetes/apps/default/qbittorrent/app
   prune: true
   sourceRef:

diff --git a/kubernetes/apps/default/radarr/ks.yaml b/kubernetes/apps/default/radarr/ks.yaml
@@ -7,7 +7,7 @@ metadata:
 spec:
   dependsOn:
     - name: cluster-apps-minio
-    - name: cluster-apps-volsync
+    - name: volsync
   path: ./kubernetes/apps/default/radarr/app
   prune: true
   sourceRef:

diff --git a/kubernetes/apps/default/readarr/ks.yaml b/kubernetes/apps/default/readarr/ks.yaml
@@ -8,7 +8,7 @@ spec:
   dependsOn:
     - name: cluster-apps-cloudnative-pg-cluster
     - name: cluster-apps-minio
-    - name: cluster-apps-volsync
+    - name: volsync
   path: ./kubernetes/apps/default/readarr/ebook
   prune: true
   sourceRef:
@@ -27,7 +27,7 @@ metadata:
 spec:
   dependsOn:
     - name: cluster-apps-minio
-    - name: cluster-apps-volsync
+    - name: volsync
   path: ./kubernetes/apps/default/readarr/audio
   prune: true
   sourceRef:

diff --git a/kubernetes/apps/default/redis/ks.yaml b/kubernetes/apps/default/redis/ks.yaml
@@ -6,7 +6,7 @@ metadata:
   namespace: flux-system
 spec:
   dependsOn:
-    - name: cluster-apps-local-path-provisioner
+    - name: rancher-local-path-provisioner
   path: ./kubernetes/apps/default/redis/app
   prune: true
   sourceRef:

diff --git a/kubernetes/apps/default/romm/ks.yaml b/kubernetes/apps/default/romm/ks.yaml
@@ -7,7 +7,7 @@ metadata:
 spec:
   dependsOn:
     - name: cluster-apps-minio
-    - name: cluster-apps-volsync
+    - name: volsync
   path: ./kubernetes/apps/default/romm/app
   prune: true
   sourceRef:

diff --git a/kubernetes/apps/default/sabnzbd/ks.yaml b/kubernetes/apps/default/sabnzbd/ks.yaml
@@ -7,7 +7,7 @@ metadata:
 spec:
   dependsOn:
     - name: cluster-apps-minio
-    - name: cluster-apps-volsync
+    - name: volsync
   path: ./kubernetes/apps/default/sabnzbd/app
   prune: true
   sourceRef:

diff --git a/kubernetes/apps/default/sonarr/ks.yaml b/kubernetes/apps/default/sonarr/ks.yaml
@@ -7,7 +7,7 @@ metadata:
 spec:
   dependsOn:
     - name: cluster-apps-minio
-    - name: cluster-apps-volsync
+    - name: volsync
   path: ./kubernetes/apps/default/sonarr/app
   prune: true
   sourceRef:

diff --git a/kubernetes/apps/default/transmission/ks.yaml b/kubernetes/apps/default/transmission/ks.yaml
@@ -7,7 +7,7 @@ metadata:
 spec:
   dependsOn:
     - name: cluster-apps-minio
-    - name: cluster-apps-volsync
+    - name: volsync
   path: ./kubernetes/apps/default/transmission/app
   prune: true
   sourceRef: