Merge branch 'refs/heads/main' into infra/ingress-nginx

kubernetes/apps/adguard-home/adguard-home.yaml

@@ -2,7 +2,7 @@ apiVersion: kustomize.toolkit.fluxcd.io/v1
 kind: Kustomization
 metadata:
   name: adguard-home
-  namespace: flux-system
+  namespace: adguard-home
 spec:
   interval: 10m
   timeout: 1m30s

kubernetes/apps/adguard-home/app/ingress.yaml

@@ -2,7 +2,7 @@ apiVersion: networking.k8s.io/v1
 kind: Ingress
 metadata:
   name: adguard-home-ingress
-  namespace: flux-system
+  namespace: adguard-home
   annotations:
     nginx.ingress.kubernetes.io/ssl-redirect: "false"
     nginx.ingress.kubernetes.io/use-regex: "true"

kubernetes/apps/capacitor/app/ingress.yaml

@@ -2,7 +2,7 @@ apiVersion: networking.k8s.io/v1
 kind: Ingress
 metadata:
   name: capacitor-ingress
-  namespace: flux-system
+  namespace: capacitor
   annotations:
     nginx.ingress.kubernetes.io/ssl-redirect: "false"
     nginx.ingress.kubernetes.io/use-regex: "true"

kubernetes/apps/capacitor/app/manifest.yaml

@@ -4,7 +4,7 @@ apiVersion: v1
 kind: Service
 metadata:
   name: capacitor
-  namespace: flux-system
+  namespace: capacitor
   labels:
     helm.sh/chart: onechart-0.63.0
     app.kubernetes.io/name: onechart
@@ -26,7 +26,7 @@ apiVersion: apps/v1
 kind: Deployment
 metadata:
   name: capacitor
-  namespace: flux-system
+  namespace: capacitor
   labels:
     helm.sh/chart: onechart-0.63.0
     app.kubernetes.io/name: onechart

kubernetes/apps/capacitor/app/rbac.yaml

@@ -2,7 +2,7 @@ apiVersion: v1
 kind: ServiceAccount
 metadata:
   name: capacitor
-  namespace: flux-system
+  namespace: capacitor
 ---
 apiVersion: rbac.authorization.k8s.io/v1
 kind: ClusterRole

kubernetes/apps/capacitor/capacitor.yaml

@@ -2,7 +2,7 @@ apiVersion: kustomize.toolkit.fluxcd.io/v1
 kind: Kustomization
 metadata:
   name: capacitor
-  namespace: flux-system
+  namespace: capacitor
 spec:
   interval: 10m
   timeout: 1m30s

kubernetes/apps/cert-manager/cert-manager.yaml

@@ -2,7 +2,7 @@ apiVersion: kustomize.toolkit.fluxcd.io/v1
 kind: Kustomization
 metadata:
   name: cert-manager
-  namespace: flux-system
+  namespace: cert-manager
 spec:
   interval: 10m
   timeout: 1m30s
@@ -19,7 +19,7 @@ apiVersion: kustomize.toolkit.fluxcd.io/v1
 kind: Kustomization
 metadata:
   name: clusterissuer-secrets
-  namespace: flux-system
+  namespace: cert-manager
 spec:
   interval: 10m
   timeout: 1m30s
@@ -42,7 +42,7 @@ apiVersion: kustomize.toolkit.fluxcd.io/v1
 kind: Kustomization
 metadata:
   name: clusterissuer
-  namespace: flux-system
+  namespace: cert-manager
 spec:
   interval: 10m
   timeout: 1m30s

kubernetes/apps/podinfo/podinfo.yaml

@@ -2,7 +2,7 @@ apiVersion: kustomize.toolkit.fluxcd.io/v1
 kind: Kustomization
 metadata:
   name: podinfo
-  namespace: flux-system
+  namespace: podinfo
 spec:
   interval: 10m
   timeout: 1m30s

kubernetes/apps/prometheus-operator/app/namespace.yaml

@@ -0,0 +1,4 @@
+apiVersion: v1
+kind: Namespace
+metadata:
+  name: prometheus-operator

kubernetes/apps/prometheus-operator/prometheus-operator.yaml

@@ -2,7 +2,7 @@ apiVersion: kustomize.toolkit.fluxcd.io/v1
 kind: Kustomization
 metadata:
   name: prometheus-operator
-  namespace: flux-system
+  namespace: prometheus-operator
 spec:
   suspend: true
   interval: 1h

kubernetes/infrastructure/cilium/app/release.yaml

@@ -2,7 +2,7 @@ apiVersion: helm.toolkit.fluxcd.io/v2
 kind: HelmRelease
 metadata:
   name: cilium
-  namespace: kube-system
+  namespace: cilium
 spec:
   chart:
     spec:

kubernetes/infrastructure/cilium/app/repository.yaml

@@ -2,7 +2,7 @@ apiVersion: source.toolkit.fluxcd.io/v1
 kind: HelmRepository
 metadata:
   name: cilium
-  namespace: kube-system
+  namespace: cilium
 spec:
   interval: 1h
   url: https://helm.cilium.io

kubernetes/infrastructure/cilium/cilium.yaml

@@ -2,7 +2,7 @@ apiVersion: kustomize.toolkit.fluxcd.io/v1
 kind: Kustomization
 metadata:
   name: cilium
-  namespace: kube-system
+  namespace: cilium
 spec:
   interval: 10m
   timeout: 1m30s
@@ -18,7 +18,7 @@ apiVersion: kustomize.toolkit.fluxcd.io/v1
 kind: Kustomization
 metadata:
   name: cilium-networkpolicies
-  namespace: kube-system
+  namespace: cilium
 spec:
   interval: 10m
   timeout: 1m30s

kubernetes/infrastructure/cilium/networkpolicies/coredns.yaml

@@ -2,7 +2,7 @@ apiVersion: cilium.io/v2
 kind: CiliumNetworkPolicy
 metadata:
   name: coredns
-  namespace: kube-system
+  namespace: cilium
 spec:
   endpointSelector:
     matchLabels:

kubernetes/infrastructure/cilium/networkpolicies/egress-kube-dns.yaml

@@ -2,7 +2,7 @@ apiVersion: cilium.io/v2
 kind: CiliumClusterwideNetworkPolicy
 metadata:
   name: egress-kube-dns
-  namespace: kube-system
+  namespace: cilium
 spec:
   endpointSelector:
     matchExpressions:

kubernetes/infrastructure/cilium/networkpolicies/egress-kubeapi.yaml

@@ -2,7 +2,7 @@ apiVersion: cilium.io/v2
 kind: CiliumClusterwideNetworkPolicy
 metadata:
   name: egress-kubeapi
-  namespace: kube-system
+  namespace: cilium
 spec:
   endpointSelector:
     matchLabels:

kubernetes/infrastructure/cilium/networkpolicies/egress-namespace.yaml

@@ -2,7 +2,7 @@ apiVersion: cilium.io/v2
 kind: CiliumClusterwideNetworkPolicy
 metadata:
   name: egress-namespace
-  namespace: kube-system
+  namespace: cilium
 spec:
   endpointSelector:
     matchLabels:

kubernetes/infrastructure/cilium/networkpolicies/egress-nodes.yaml

@@ -2,7 +2,7 @@ apiVersion: cilium.io/v2
 kind: CiliumClusterwideNetworkPolicy
 metadata:
   name: egress-nodes
-  namespace: kube-system
+  namespace: cilium
 spec:
   endpointSelector:
     matchLabels:

kubernetes/infrastructure/cilium/networkpolicies/egress-world-with-lan.yaml

@@ -2,7 +2,7 @@ apiVersion: cilium.io/v2
 kind: CiliumClusterwideNetworkPolicy
 metadata:
   name: egress-world-with-lan
-  namespace: kube-system
+  namespace: cilium
 spec:
   endpointSelector:
     matchLabels:

kubernetes/infrastructure/cilium/networkpolicies/egress-world.yaml

@@ -2,7 +2,7 @@ apiVersion: cilium.io/v2
 kind: CiliumClusterwideNetworkPolicy
 metadata:
   name: egress-world
-  namespace: kube-system
+  namespace: cilium
 spec:
   endpointSelector:
     matchLabels:

kubernetes/infrastructure/cilium/networkpolicies/ingress-namespace.yaml

@@ -2,7 +2,7 @@ apiVersion: cilium.io/v2
 kind: CiliumClusterwideNetworkPolicy
 metadata:
   name: ingress-namespace
-  namespace: kube-system
+  namespace: cilium
 spec:
   endpointSelector:
     matchLabels:

kubernetes/infrastructure/cilium/networkpolicies/ingress-nginx.yaml

@@ -2,7 +2,7 @@ apiVersion: cilium.io/v2
 kind: CiliumClusterwideNetworkPolicy
 metadata:
   name: ingress-ingress
-  namespace: ingress-nginx
+  namespace: cilium
 spec:
   endpointSelector:
     matchLabels:
@@ -18,7 +18,7 @@ apiVersion: cilium.io/v2
 kind: CiliumNetworkPolicy
 metadata:
   name: ingress-nginx
-  namespace: ingress-nginx
+  namespace: cilium
 spec:
   endpointSelector:
     matchLabels:
@@ -36,7 +36,7 @@ apiVersion: cilium.io/v2
 kind: CiliumClusterwideNetworkPolicy
 metadata:
   name: egress-ingress
-  namespace: ingress-nginx
+  namespace: cilium
 spec:
   endpointSelector:
     matchLabels:
@@ -52,7 +52,7 @@ apiVersion: cilium.io/v2
 kind: CiliumNetworkPolicy
 metadata:
   name: egress-nginx
-  namespace: ingress-nginx
+  namespace: cilium
 spec:
   endpointSelector:
     matchLabels:

kubernetes/infrastructure/cilium/networkpolicies/ingress-nodes.yaml

@@ -2,7 +2,7 @@ apiVersion: cilium.io/v2
 kind: CiliumClusterwideNetworkPolicy
 metadata:
   name: ingress-nodes
-  namespace: kube-system
+  namespace: cilium
 spec:
   endpointSelector:
     matchLabels:

kubernetes/infrastructure/cilium/networkpolicies/ingress-world.yaml

@@ -2,7 +2,7 @@ apiVersion: cilium.io/v2
 kind: CiliumClusterwideNetworkPolicy
 metadata:
   name: ingress-world
-  namespace: kube-system
+  namespace: cilium
 spec:
   endpointSelector:
     matchLabels:

kubernetes/infrastructure/cilium/networkpolicies/local-path-provisioner.yaml

@@ -2,7 +2,7 @@ apiVersion: cilium.io/v2
 kind: CiliumNetworkPolicy
 metadata:
   name: local-path-provisioner
-  namespace: kube-system
+  namespace: cilium
 spec:
   endpointSelector:
     matchLabels:

kubernetes/infrastructure/ingress-nginx/config/values.yaml

@@ -2,7 +2,7 @@ apiVersion: v1
 kind: ConfigMap
 metadata:
   name: ingress-nginx-values
-  namespace: flux-system
+  namespace: ingress-nginx
 data:
   use_geoip2: "false"
   disable_ipv6: "true"

kubernetes/infrastructure/ingress-nginx/ingress-nginx-config.yaml

@@ -2,7 +2,7 @@ apiVersion: kustomize.toolkit.fluxcd.io/v1
 kind: Kustomization
 metadata:
   name: ingress-nginx-config
-  namespace: flux-system
+  namespace: ingress-nginx
 spec:
   interval: 10m
   timeout: 1m30s

kubernetes/infrastructure/ingress-nginx/ingress-nginx.yaml

@@ -2,7 +2,7 @@ apiVersion: kustomize.toolkit.fluxcd.io/v1
 kind: Kustomization
 metadata:
   name: ingress-nginx
-  namespace: flux-system
+  namespace: ingress-nginx
 spec:
   interval: 10m
   timeout: 1m30s

kubernetes/rpi5-cluster/apps.yaml

@@ -4,7 +4,7 @@ metadata:
   name: apps
   namespace: flux-system
 spec:
-  suspend: false
+  suspend: true
   interval: 10m0s
   dependsOn:
     - name: infrastructure