Add Flux sync manifests

.gitignore

@@ -1 +0,0 @@
-helmvendor/**

clusters/k3s-odc2-110/bootstrap.sh

@@ -1,6 +0,0 @@
-#!/bin/bash
-flux bootstrap git \
-  --ssh-hostname=git.labdevops.net:2222 \
-  --path=clusters/k3s-odc2-110 \
-  --branch=master \
-  --url=ssh://git@git.labdevops.net:2222/home.labdigital.co.uk/k3s_cluster1_flux_system.git

clusters/k3s-odc2-110/components/cert-manager.yaml

@@ -1,13 +0,0 @@
----
-apiVersion: kustomize.toolkit.fluxcd.io/v1beta1
-kind: Kustomization
-metadata:
-  name: cert-manager
-  namespace: flux-system
-spec:
-  interval: 10m0s
-  path: ./components/cert-manager
-  prune: true
-  sourceRef:
-    kind: GitRepository
-    name: flux-system

clusters/k3s-odc2-110/components/external-dns.yaml

@@ -1,13 +0,0 @@
----
-apiVersion: kustomize.toolkit.fluxcd.io/v1beta1
-kind: Kustomization
-metadata:
-  name: external-dns
-  namespace: flux-system
-spec:
-  interval: 10m0s
-  path: ./components/external-dns
-  prune: true
-  sourceRef:
-    kind: GitRepository
-    name: flux-system

clusters/k3s-odc2-110/components/metallb.yaml

@@ -1,13 +0,0 @@
----
-apiVersion: kustomize.toolkit.fluxcd.io/v1beta1
-kind: Kustomization
-metadata:
-  name: metallb
-  namespace: flux-system
-spec:
-  interval: 10m0s
-  path: ./components/metallb
-  prune: true
-  sourceRef:
-    kind: GitRepository
-    name: flux-system

clusters/k3s-odc2-110/components/nfs-provisioner.yaml

@@ -1,13 +0,0 @@
----
-apiVersion: kustomize.toolkit.fluxcd.io/v1beta1
-kind: Kustomization
-metadata:
-  name: nfs-provisioner
-  namespace: flux-system
-spec:
-  interval: 10m0s
-  path: ./components/nfs-provisioner
-  prune: true
-  sourceRef:
-    kind: GitRepository
-    name: flux-system

clusters/k3s-odc2-110/components/nginx-ingress.yaml

@@ -1,13 +0,0 @@
----
-apiVersion: kustomize.toolkit.fluxcd.io/v1beta1
-kind: Kustomization
-metadata:
-  name: nginx-ingress
-  namespace: flux-system
-spec:
-  interval: 10m0s
-  path: ./components/nginx-ingress
-  prune: true
-  sourceRef:
-    kind: GitRepository
-    name: flux-system

clusters/k3s-odc2-110/components/promtheus-stack.yaml

@@ -1,13 +0,0 @@
----
-apiVersion: kustomize.toolkit.fluxcd.io/v1beta1
-kind: Kustomization
-metadata:
-  name: promtheus-stack
-  namespace: flux-system
-spec:
-  interval: 10m0s
-  path: ./components/prometheus
-  prune: true
-  sourceRef:
-    kind: GitRepository
-    name: flux-system

clusters/k3s-odc2-110/components/sealed-secrets.yaml

@@ -1,13 +0,0 @@
----
-apiVersion: kustomize.toolkit.fluxcd.io/v1beta1
-kind: Kustomization
-metadata:
-  name: sealed-secrets
-  namespace: flux-system
-spec:
-  interval: 10m0s
-  path: ./components/sealedsecrets
-  prune: true
-  sourceRef:
-    kind: GitRepository
-    name: flux-system

clusters/k3s-odc2-110/flux-system/gotk-sync.yaml

@@ -1,27 +0,0 @@
----
-apiVersion: source.toolkit.fluxcd.io/v1beta1
-kind: GitRepository
-metadata:
-  name: flux-system
-  namespace: flux-system
-spec:
-  interval: 1m0s
-  ref:
-    branch: master
-  secretRef:
-    name: flux-system
-  url: ssh://git@git.labdevops.net:2222/home.labdigital.co.uk/k3s_cluster1_flux_system.git
----
-apiVersion: kustomize.toolkit.fluxcd.io/v1beta1
-kind: Kustomization
-metadata:
-  name: flux-system
-  namespace: flux-system
-spec:
-  interval: 10m0s
-  path: ./clusters/k3s-odc2-110
-  prune: true
-  sourceRef:
-    kind: GitRepository
-    name: flux-system
-  validation: client

clusters/k3s-odc2-110/flux-system/kustomization.yaml

@@ -1,5 +0,0 @@
-apiVersion: kustomize.config.k8s.io/v1beta1
-kind: Kustomization
-resources:
-- gotk-components.yaml
-- gotk-sync.yaml

clusters/k3s-odc2-110/nodeTaints.sh

@@ -1,8 +0,0 @@
-#!/bin/bash
-set -x
-MASTER=odc2-110
-ARM_NODES="pi4-115, pi4-116"
-kubectl taint nodes "$MASTER" node-role.kubernetes.io/master=true:NoSchedule
-kubectl label node "$MASTER" kubernetes.io/role=master node-role.kubernetes.io/master=
-
-#kubectl taint nodes "$ARM_NODES" 

clusters/odc2-110-admin/flux-system/gotk-components.yaml

@@ -4,7 +4,7 @@ metadata:
   labels:
     app.kubernetes.io/instance: flux-system
     app.kubernetes.io/part-of: flux
-    app.kubernetes.io/version: v0.12.0
+    app.kubernetes.io/version: v0.12.3
   name: flux-system
 ---
 apiVersion: apiextensions.k8s.io/v1
@@ -16,7 +16,7 @@ metadata:
   labels:
     app.kubernetes.io/instance: flux-system
     app.kubernetes.io/part-of: flux
-    app.kubernetes.io/version: v0.12.0
+    app.kubernetes.io/version: v0.12.3
   name: alerts.notification.toolkit.fluxcd.io
 spec:
   group: notification.toolkit.fluxcd.io
@@ -191,7 +191,7 @@ metadata:
   labels:
     app.kubernetes.io/instance: flux-system
     app.kubernetes.io/part-of: flux
-    app.kubernetes.io/version: v0.12.0
+    app.kubernetes.io/version: v0.12.3
   name: buckets.source.toolkit.fluxcd.io
 spec:
   group: source.toolkit.fluxcd.io
@@ -379,7 +379,7 @@ metadata:
   labels:
     app.kubernetes.io/instance: flux-system
     app.kubernetes.io/part-of: flux
-    app.kubernetes.io/version: v0.12.0
+    app.kubernetes.io/version: v0.12.3
   name: gitrepositories.source.toolkit.fluxcd.io
 spec:
   group: source.toolkit.fluxcd.io
@@ -598,7 +598,7 @@ metadata:
   labels:
     app.kubernetes.io/instance: flux-system
     app.kubernetes.io/part-of: flux
-    app.kubernetes.io/version: v0.12.0
+    app.kubernetes.io/version: v0.12.3
   name: helmcharts.source.toolkit.fluxcd.io
 spec:
   group: source.toolkit.fluxcd.io
@@ -790,7 +790,7 @@ metadata:
   labels:
     app.kubernetes.io/instance: flux-system
     app.kubernetes.io/part-of: flux
-    app.kubernetes.io/version: v0.12.0
+    app.kubernetes.io/version: v0.12.3
   name: helmreleases.helm.toolkit.fluxcd.io
 spec:
   group: helm.toolkit.fluxcd.io
@@ -1306,7 +1306,7 @@ metadata:
   labels:
     app.kubernetes.io/instance: flux-system
     app.kubernetes.io/part-of: flux
-    app.kubernetes.io/version: v0.12.0
+    app.kubernetes.io/version: v0.12.3
   name: helmrepositories.source.toolkit.fluxcd.io
 spec:
   group: source.toolkit.fluxcd.io
@@ -1474,7 +1474,7 @@ metadata:
   labels:
     app.kubernetes.io/instance: flux-system
     app.kubernetes.io/part-of: flux
-    app.kubernetes.io/version: v0.12.0
+    app.kubernetes.io/version: v0.12.3
   name: kustomizations.kustomize.toolkit.fluxcd.io
 spec:
   group: kustomize.toolkit.fluxcd.io
@@ -1871,7 +1871,7 @@ metadata:
   labels:
     app.kubernetes.io/instance: flux-system
     app.kubernetes.io/part-of: flux
-    app.kubernetes.io/version: v0.12.0
+    app.kubernetes.io/version: v0.12.3
   name: providers.notification.toolkit.fluxcd.io
 spec:
   group: notification.toolkit.fluxcd.io
@@ -2018,7 +2018,7 @@ metadata:
   labels:
     app.kubernetes.io/instance: flux-system
     app.kubernetes.io/part-of: flux
-    app.kubernetes.io/version: v0.12.0
+    app.kubernetes.io/version: v0.12.3
   name: receivers.notification.toolkit.fluxcd.io
 spec:
   group: notification.toolkit.fluxcd.io
@@ -2198,7 +2198,7 @@ metadata:
   labels:
     app.kubernetes.io/instance: flux-system
     app.kubernetes.io/part-of: flux
-    app.kubernetes.io/version: v0.12.0
+    app.kubernetes.io/version: v0.12.3
   name: helm-controller
   namespace: flux-system
 ---
@@ -2208,7 +2208,7 @@ metadata:
   labels:
     app.kubernetes.io/instance: flux-system
     app.kubernetes.io/part-of: flux
-    app.kubernetes.io/version: v0.12.0
+    app.kubernetes.io/version: v0.12.3
   name: kustomize-controller
   namespace: flux-system
 ---
@@ -2218,7 +2218,7 @@ metadata:
   labels:
     app.kubernetes.io/instance: flux-system
     app.kubernetes.io/part-of: flux
-    app.kubernetes.io/version: v0.12.0
+    app.kubernetes.io/version: v0.12.3
   name: notification-controller
   namespace: flux-system
 ---
@@ -2228,7 +2228,7 @@ metadata:
   labels:
     app.kubernetes.io/instance: flux-system
     app.kubernetes.io/part-of: flux
-    app.kubernetes.io/version: v0.12.0
+    app.kubernetes.io/version: v0.12.3
   name: source-controller
   namespace: flux-system
 ---
@@ -2238,7 +2238,7 @@ metadata:
   labels:
     app.kubernetes.io/instance: flux-system
     app.kubernetes.io/part-of: flux
-    app.kubernetes.io/version: v0.12.0
+    app.kubernetes.io/version: v0.12.3
   name: crd-controller-flux-system
 rules:
 - apiGroups:
@@ -2318,7 +2318,7 @@ metadata:
   labels:
     app.kubernetes.io/instance: flux-system
     app.kubernetes.io/part-of: flux
-    app.kubernetes.io/version: v0.12.0
+    app.kubernetes.io/version: v0.12.3
   name: cluster-reconciler-flux-system
 roleRef:
   apiGroup: rbac.authorization.k8s.io
@@ -2338,7 +2338,7 @@ metadata:
   labels:
     app.kubernetes.io/instance: flux-system
     app.kubernetes.io/part-of: flux
-    app.kubernetes.io/version: v0.12.0
+    app.kubernetes.io/version: v0.12.3
   name: crd-controller-flux-system
 roleRef:
   apiGroup: rbac.authorization.k8s.io
@@ -2370,7 +2370,7 @@ metadata:
   labels:
     app.kubernetes.io/instance: flux-system
     app.kubernetes.io/part-of: flux
-    app.kubernetes.io/version: v0.12.0
+    app.kubernetes.io/version: v0.12.3
     control-plane: controller
   name: notification-controller
   namespace: flux-system
@@ -2390,7 +2390,7 @@ metadata:
   labels:
     app.kubernetes.io/instance: flux-system
     app.kubernetes.io/part-of: flux
-    app.kubernetes.io/version: v0.12.0
+    app.kubernetes.io/version: v0.12.3
     control-plane: controller
   name: source-controller
   namespace: flux-system
@@ -2410,7 +2410,7 @@ metadata:
   labels:
     app.kubernetes.io/instance: flux-system
     app.kubernetes.io/part-of: flux
-    app.kubernetes.io/version: v0.12.0
+    app.kubernetes.io/version: v0.12.3
     control-plane: controller
   name: webhook-receiver
   namespace: flux-system
@@ -2430,7 +2430,7 @@ metadata:
   labels:
     app.kubernetes.io/instance: flux-system
     app.kubernetes.io/part-of: flux
-    app.kubernetes.io/version: v0.12.0
+    app.kubernetes.io/version: v0.12.3
     control-plane: controller
   name: helm-controller
   namespace: flux-system
@@ -2503,7 +2503,7 @@ metadata:
   labels:
     app.kubernetes.io/instance: flux-system
     app.kubernetes.io/part-of: flux
-    app.kubernetes.io/version: v0.12.0
+    app.kubernetes.io/version: v0.12.3
     control-plane: controller
   name: kustomize-controller
   namespace: flux-system
@@ -2578,7 +2578,7 @@ metadata:
   labels:
     app.kubernetes.io/instance: flux-system
     app.kubernetes.io/part-of: flux
-    app.kubernetes.io/version: v0.12.0
+    app.kubernetes.io/version: v0.12.3
     control-plane: controller
   name: notification-controller
   namespace: flux-system
@@ -2654,7 +2654,7 @@ metadata:
   labels:
     app.kubernetes.io/instance: flux-system
     app.kubernetes.io/part-of: flux
-    app.kubernetes.io/version: v0.12.0
+    app.kubernetes.io/version: v0.12.3
     control-plane: controller
   name: source-controller
   namespace: flux-system
@@ -2738,7 +2738,7 @@ metadata:
   labels:
     app.kubernetes.io/instance: flux-system
     app.kubernetes.io/part-of: flux
-    app.kubernetes.io/version: v0.12.0
+    app.kubernetes.io/version: v0.12.3
   name: allow-scraping
   namespace: flux-system
 spec:
@@ -2758,7 +2758,7 @@ metadata:
   labels:
     app.kubernetes.io/instance: flux-system
     app.kubernetes.io/part-of: flux
-    app.kubernetes.io/version: v0.12.0
+    app.kubernetes.io/version: v0.12.3
   name: allow-webhooks
   namespace: flux-system
 spec:
@@ -2777,7 +2777,7 @@ metadata:
   labels:
     app.kubernetes.io/instance: flux-system
     app.kubernetes.io/part-of: flux
-    app.kubernetes.io/version: v0.12.0
+    app.kubernetes.io/version: v0.12.3
   name: deny-ingress
   namespace: flux-system
 spec:

clusters/odc2-110-admin/flux-system/gotk-kustomization.yaml

@@ -1,14 +0,0 @@
----
-apiVersion: kustomize.toolkit.fluxcd.io/v1beta1
-kind: Kustomization
-metadata:
-  name: flux-system
-  namespace: flux-system
-spec:
-  interval: 10m0s
-  path: ./clusters/odc2-110-admin
-  prune: true
-  sourceRef:
-    kind: GitRepository
-    name: flux-system
-  validation: client

clusters/odc2-110-admin/flux-system/gotk-sync.yaml

@@ -7,8 +7,21 @@ metadata:
 spec:
   interval: 1m0s
   ref:
-    branch: master
+    branch: main
   secretRef:
     name: flux-system
-  url: ssh://git@git.labdevops.net:2222/home.labdigital.co.uk/k3s_cluster1_flux_system.git
+  url: ssh://git@git.labdevops.net/home.labdigital.co.uk/k3s_cluster1_flux_system.git
-
+---
+apiVersion: kustomize.toolkit.fluxcd.io/v1beta1
+kind: Kustomization
+metadata:
+  name: flux-system
+  namespace: flux-system
+spec:
+  interval: 10m0s
+  path: ./clusters/odc2-110-admin
+  prune: true
+  sourceRef:
+    kind: GitRepository
+    name: flux-system
+  validation: client

clusters/odc2-110-admin/flux-system/kustomization.yaml

@@ -2,5 +2,4 @@ apiVersion: kustomize.config.k8s.io/v1beta1
 kind: Kustomization
 resources:
 - gotk-components.yaml
-- gotk-kustomization.yaml
 - gotk-sync.yaml

clusters/odc2-110-admin/test/kustomization.yaml

@@ -1,4 +0,0 @@
-apiVersion: kustomize.config.k8s.io/v1beta1
-kind: Kustomization
-resources:
-  - namespace_test.yaml

clusters/odc2-110-admin/test/namespace_test.yaml

@@ -1,4 +0,0 @@
-apiVersion: v1
-kind: Namespace
-metadata:
-  name: test

clusters/odc2-110-admin/test1/test1-kustomization.yaml

@@ -1,14 +0,0 @@
----
-apiVersion: kustomize.toolkit.fluxcd.io/v1beta1
-kind: Kustomization
-metadata:
-  name: test1
-  namespace: flux-system
-spec:
-  interval: 10m0s
-  path: ./tests/test1
-  prune: true
-  validation: client
-  sourceRef:
-    kind: GitRepository
-    name: flux-system

clusters/odc2-110-admin/test2/ns.yaml

@@ -1,4 +0,0 @@
-apiVersion: v1
-kind: Namespace
-metadata:
-  name: test2

clusters/odc2-110-admin/test2/podinfo-hr.yaml

@@ -1,15 +0,0 @@
----
-apiVersion: helm.toolkit.fluxcd.io/v2beta1
-kind: HelmRelease
-metadata:
-  name: podinfo
-  namespace: test2
-spec:
-  chart:
-    spec:
-      chart: podinfo
-      sourceRef:
-        kind: HelmRepository
-        name: podinfo
-  interval: 1m0s
-

clusters/odc2-110-admin/test3/test3.yaml

@@ -1,14 +0,0 @@
----
-apiVersion: kustomize.toolkit.fluxcd.io/v1beta1
-kind: Kustomization
-metadata:
-  name: test3
-  namespace: flux-system
-spec:
-  interval: 10m0s
-  path: ./deployments/test3
-  prune: true
-  validation: client
-  sourceRef:
-    kind: GitRepository
-    name: flux-system

components/cert-manager/acme-LE-cluster-issuer.yaml

@@ -1,20 +0,0 @@
-apiVersion: cert-manager.io/v1
-kind: ClusterIssuer
-metadata:
-  name: labdevops-net-letsencrypt-prod
-  namespace: certmanager-system
-spec:
-  acme:
-    email: luke@labdigital.co.uk
-    server: https://acme-v02.api.letsencrypt.org/directory
-    #preferredChain: "ISRG Root X1"
-    privateKeySecretRef:
-      name: clouddns-dns01-solver-svc-acct
-    solvers:
-      - dns01:
-          cloudDNS:
-            project: homelab-264922
-            hostedZoneName: 'labdevops-net'
-            serviceAccountSecretRef:
-              key: credentials.json
-              name: gcp-sa-secret

components/cert-manager/certmanager-helmrelease.yaml

@@ -1,16 +0,0 @@
----
-apiVersion: helm.toolkit.fluxcd.io/v2beta1
-kind: HelmRelease
-metadata:
-  name: cert-manager
-  namespace: certmanager-system
-spec:
-  chart:
-    spec:
-      chart: cert-manager
-      sourceRef:
-        kind: HelmRepository
-        name: jetstack
-  interval: 20m0s
-  values: 
-    installCRDs: true

components/cert-manager/jetstack-helmrepo.yaml

@@ -1,9 +0,0 @@
----
-apiVersion: source.toolkit.fluxcd.io/v1beta1
-kind: HelmRepository
-metadata:
-  name: jetstack
-  namespace: certmanager-system
-spec:
-  interval: 20m0s
-  url: https://charts.jetstack.io

components/cert-manager/namespace.yaml

@@ -1,4 +0,0 @@
-apiVersion: v1
-kind: Namespace
-metadata:
-  name: certmanager-system

components/cert-manager/sealedsecret-gcp-sa-secret.yaml

@@ -1,16 +0,0 @@
-apiVersion: bitnami.com/v1alpha1
-kind: SealedSecret
-metadata:
-  creationTimestamp: null
-  name: gcp-sa-secret
-  namespace: certmanager-system
-spec:
-  encryptedData:
-    credentials.json: AgCgTecGSVDvEvB6tNvdJT2UXEm1YjbiiosZhDgsTTpZ2msfb8rRUNeea44Kr5JBY590SpjNTWWx4x5IlgzuHvP3PQ9rL2L8uVDHH38tv/rGbQ4GMtvh3r8jVSPHgMLSelENLl8K7MgSGzHCoLypt031rPaQak8UtOSDEjcP3kwX/xAt/x8YSbTXq/95VCTfJLgxxQ+WOLTHXzzAHhH7m665xYV45uXIZhbNg4dFLbINnDb0GLcL9l9oUUdBPAzJQ7YHSpKPI59U1LcdoTkVgKDkZJLItugafU5lYFTvjpMm83y2nJ50GL+ZENvZ3rNysSKLhzrlS87PR0mElAoYKOswp2g/XlTvQwsOeUcc6LQRLZg+u0FAlIujn9bQc7gOfOQbz4YwWw3ZGAYyk9hBtx5vwp19XUPtZqO6F4Pkp+3LdNynKNaRJ5RKM31NBeuNiwd6ziV6ybDFIE0j5dZzmV2B3s8Rss6aFi3jF1o1rS6h/bsCO/FS6TPqKXV0qfnxGtfziH+KD3239LrZIpQAFfwvy1I80QrWP8+kTRGk4Zy4kDgp03uKCtdOlEIHUtfxznTkfcTnTQiXclYdHX/IshgpDP2tsygiOthLUJiOVw35yiNvsEvoQdtA7XxCqzxgzDrVkIvfWJ6y1uRnHjnWVDReL+vObdV/TqakCbSlSidjLc7QPCjyjSTD1leVE/1GUxhcpw5W7g3biuHWqgkivZWq8fJryh8sBnwXd+h/4PPIKa0e/HfH3/v8UJt2nSb2xQoIfbjmmG9d9mAhZki+BUz+U3HH5M0pkdxQEGoNxYF6a5oju3/fJsgKQ1bcSwJUwYiEl26O2RIlX0XrIqhi2vqkym2ZmOejPWRmR+g87xD4pvH2AMa1RJt1ve7Fh4fod9xf4E9p5mjdCBLe9Q1KCHH9z1VOLg8QVK7AEkq8SnHTw+QpPB2wamLNhRBevIqo5icSg0Re3sDXaNDcSssj1LZbYy5jnLhyvBSDbN1Gf8qNDt9TZ1pR/kHINw28D5YFYkF0L5e/kWkn/k9usSXqmz/c0xepzIlx15wDvxVREcQoWz2fo8X13EdRwn6YhiL885eI7FdSUZ7V94b4Jvyg+7/557NqQqo1y971E2XYTyLZ3wt2JVvSLPi+FM4jij/YVIy4H3kaWrsoR5xWu6mQxr5NRxb42ZGrKnISiq7SZ00jQMXIxbbtTI3CjwIMP99niEfQLY1EDnDsNWnJ1d/DCbGExoFbe46clnc7PgJ4jyI3EthGemWZCWUSxXz1Cu1/k+ey0TM3/+mGV2jku3nhH5+aedKvjdpEBCCLVmdgjFUekwXkggfL8Z0yqmgCxdgT6VoMfPokUg0PIVDyqn9KKnxLnGBAoTzYCWbeXvevSOIv7IbKaQUdvYuUBOM87mHcoN/SlesTtKRgdRIOCB7tMIYFA7w9BzR9P1wiLBqFoRcIzkRDH+cX7YLil++/Miq6URoQsfTjdzJastYKfC598JCWKNPlV6bjkwmwuxfS6pXWfcyhZrPL10vEfUXPT9GH8nxNiJwPRMrrPhPx6eH1FjiqyMQ40SBKoX/SqjF1GBTu0NhzGBX8qQoLs91fgnBO3cF0Uss+kKAHr/qFZDJ+PRh3mraezQi4d7Q19wlPvzOIMXdM+U9hS/WPqDZLQcgYnSF6jja0KlO/FTSkSmrpWQrHmG8UxI1fmqLzE48E+ZTJ5jTiiD2usuEiQMvKWDr3ikEoKi5LPY783VLIGV9kdqlOaouInfXj8d/c5F4/RQchtHXbkrjNyaslQ+y7PQBXhR0uE5ffDoJ0kXmc4XP7hhbX3R50Zat5Ayx5YDxaMq6sr91Zfla2w/nj0Y1P4uqmdI/Fu74sM76PPbsJShArmUYhqCF10p2Xd8nKCgN0svuvwTQWA7hLcb1r5Z0zsJ8wIWHWq71qPTMa9t+K+YgIZtgvo6LNJEGvkgtpP9BJyDxEMqLh0RYKnpdmobmQrMAVe0S6NDSSWZYkFQom2eXmrQV52kSGtU9Ke59aEtA5NSTV4FHwZEJLK4EJc9uoOOJkv0FwnGLuhED1ODHi/2Cq2fSlMhVMNSlvnfZTXK3Q3pdEM+Q7YgUYZNaS2FVMOn859jS2JoMx65ncHgsm+hetvXBkcbyVO9abS5I4B/pMBMeiBNEqyt5gMB2m8TG01e4uNS6EP7WyE2aRy3YhhqqvHZd8BaX7FMiItSgQOavhMURgY7JtF7eHJ3AD7WcysVmhppsalH4pjqJGcejdLiTE4KubOn7Me4F6k/d1ekrDjNz+XosOjLUtg+o/oX+MOb+OS+c1NNIDDH1yR6w+wUhtXrGzSqJJMI39KekN+P8zMKKj2KrLvHZS8JhdcR/GMWcwdUoH+QCifEsqIP38UHWMUTwJa5GF72K6Nxh4LytvFcV59QLT0eQytTz5Msils0UbfgovP5qSlZfVjAX1vkwW0x18praYl7BrJ16jK0i4CDEGb4TUqSuB0Enl/ez/Qf9J/fO7i+CCBmqmOZARmx63fn/ZbL7zL8+gPfastJGMlRVVkHmoJjiFZoSjrF5CCD4afqgflrvxPTG+g9MwTAP1JJEikiFDmrYL6BSbb+AaCddzRN+b9YgCGA+WO71dInmaLl/FOHpOtVmXbgSNr6Q420MQX8oY0Uw/SfKB9BZxThsfDdDig+g4ctp6tpi/bi3IYRk+UOC5n7Mrll2kSGHaE+b/pN5iJ+PnCuKZLuiRLBZTQxS4YzlqKawCCyQXiXkA1DKi8N76mDMANC7w0LS8BiNRBxe2PEpX1NhHmbDwDH700y87ZY4PMsM16BFoL9H+xmMZJ5QJrhqKSktXPIwrvaAszVgEn2162CkglG9S+7GyyB06LSYHKWp6Wm8uwJqqLRiTAE8lh868Y/PNZzEwKR/X0ppJgYLjcJw/SVnkzOJpTITAnkFgxfmKhcEMs7q2v8QIrGqoU0lwBFY3y2jRW65TIiU7sjkG5DOCnaxHyZGB9FPlwcuLAfkFxf1Zt6Mw49kXqNm0pOXxxYcWmDrZkUWZMgjHcmksxLHmNEgKA6svssLGbGPKalz3SRygKJ8M38JP1cIJrBk8aN3lmBHTE7B20CWmaS6mfYmZ5xaV+Q2PRK82Fs2HuqvoCAhYihyJreNpCfmizXB8tYgnaebaKaoCgu/uAs+S6aM246lsXIFyA9ZnLxfBjiih8AJBAjWnyvJUTFRfnskSXNoLgB0L7+PC7X3xHNUlfsd1XR2vedRQKfbFo4mglVLDKsleuW4u4qK14lgOKIoCiZHBnpNQ397kVKCdphbZjImMrTpOfKjQx3zUesMDgUgC9Juo+WdIdPyCBaUy5fSqul+tmTUgoP6TnpR/MYqtzJSUYssSTij3RulKfOCxjeWOabBN4wV+C85B0ELqsy9+EhiPTs3EQurvrn/qMqYGiyqCK7KxVLhg4oy0RKzSm6DTR+/LedtydgHvt0eLA68CT1WbsNzCQavaJGcElinvSzJhky68HB5MsGDn7g5d/9WKqolbCyFWencsCgaBCspXQVFAANkbvUWve0yI4ou/nD0UtgYw9A0bkB6kneJhsVygeAPWKIF16yvG5pXvTRlRWpY1q5wSjG3Q+4jcizZlEnyb3X7DvCT5RB2gWQ0rifUQAFnHNGHfnZW0PzhE3pxj8k9o+jJcRNs2O0+TBtBWCdySRj5ZG3sNJABH91lUnjYqbvBDrSsD2efyuhNQQcx6lxtpTnN2uVn9vOjSg+Fsmu1OThkmNlzkWRNfibBxahtqz1kb9jqOdfB1Bol4znKDxLL/6QhqSwL8vBUBAcsfJfn6dFZOBg==
-  template:
-    data: null
-    metadata:
-      creationTimestamp: null
-      name: gcp-sa-secret
-      namespace: certmanager-system
-

components/external-dns/credentials.json

@@ -1,12 +0,0 @@
-{
-  "type": "service_account",
-  "project_id": "homelab-264922",
-  "private_key_id": "f7ac68fc0ae11097e43d19037c48c4c01ba55fcc",
-  "private_key": "-----BEGIN PRIVATE KEY-----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\nJvRJcc6TdixI/eJIlFzl6cs=\n-----END PRIVATE KEY-----\n",
-  "client_email": "ext-dns-k3sodc2110@homelab-264922.iam.gserviceaccount.com",
-  "client_id": "113935552429314488865",
-  "auth_uri": "https://accounts.google.com/o/oauth2/auth",
-  "token_uri": "https://oauth2.googleapis.com/token",
-  "auth_provider_x509_cert_url": "https://www.googleapis.com/oauth2/v1/certs",
-  "client_x509_cert_url": "https://www.googleapis.com/robot/v1/metadata/x509/ext-dns-k3sodc2110%40homelab-264922.iam.gserviceaccount.com"
-}

components/external-dns/external-dns-helmrelease.yaml

@@ -1,41 +0,0 @@
----
-apiVersion: helm.toolkit.fluxcd.io/v2beta1
-kind: HelmRelease
-metadata:
-  name: external-dns
-  namespace: externaldns-system
-spec:
-  chart:
-    spec:
-      chart: external-dns
-      version: "5.0.0"
-      sourceRef:
-        kind: HelmRepository
-        name: bitnami
-  interval: 10m0s
-  values:
-    provider: "google"
-    txtOwnerId: "extdns-k3s-odc2-110"
-    domainFilters:
-      - "labdevops.net"
-    google:
-      project: "homelab-264922"
-      ## Google Project to use
-      ##
-      # project: "homelab-264922"
-      ## Google Application Credentials
-      ##
-      serviceAccountSecret: "external-dns"
-      serviceAccountSecretKey: "credentials.json"
-    ## Prometheus Exporter / Metrics
-    ##
-    metrics:
-      enabled: true
-      # podAnnotations:
-      #   prometheus.io/scrape: "true"
-      #   prometheus.io/port: "7979"
-      serviceMonitor:
-        enabled: true
-        namespace: prometheus-system
-    nodeSelector:
-      kubernetes.io/arch: amd64

components/external-dns/helmrepo.yaml

@@ -1,10 +0,0 @@
----
-apiVersion: source.toolkit.fluxcd.io/v1beta1
-kind: HelmRepository
-metadata:
-  name: bitnami
-  namespace: externaldns-system
-spec:
-  interval: 1m0s
-  url: https://charts.bitnami.com/bitnami
-

components/external-dns/namespace.yaml

@@ -1,4 +0,0 @@
-apiVersion: v1
-kind: Namespace
-metadata:
-  name: externaldns-system

components/external-dns/sealedsecret-external-dns.yaml

@@ -1,16 +0,0 @@
-apiVersion: bitnami.com/v1alpha1
-kind: SealedSecret
-metadata:
-  creationTimestamp: null
-  name: external-dns
-  namespace: externaldns-system
-spec:
-  encryptedData:
-    credentials.json: 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
-  template:
-    data: null
-    metadata:
-      creationTimestamp: null
-      name: external-dns
-      namespace: externaldns-system
-

components/external-dns/setup.sh

@@ -1,8 +0,0 @@
-#!/bin/bash
-#gcloud auth login
-gcloud auth login
-gcloud config set project homelab-264922
-gcloud iam service-accounts create ext-dns-k3sodc2110 --display-name "SvcAcc ext-dns on k3s-odc2-110 labdevops.net"
-gcloud projects add-iam-policy-binding homelab-264922 --role='roles/dns.admin' --member='serviceAccount:ext-dns-k3sodc2110@homelab-264922.iam.gserviceaccount.com'
-gcloud iam service-accounts keys create credentials.json --iam-account ext-dns-k3sodc2110@homelab-264922.iam.gserviceaccount.com
-kubectl create secret -n externaldns-system generic external-dns --from-file=credentials.json=credentials.json --dry-run=client --output=jso

components/metallb/bitnami_helmrepo.yaml

@@ -1,10 +0,0 @@
----
-apiVersion: source.toolkit.fluxcd.io/v1beta1
-kind: HelmRepository
-metadata:
-  name: bitnami
-  namespace: metallb-system
-spec:
-  interval: 1m0s
-  url: https://charts.bitnami.com/bitnami
-

components/metallb/metallb_helmrelease.yaml

@@ -1,31 +0,0 @@
----
-apiVersion: helm.toolkit.fluxcd.io/v2beta1
-kind: HelmRelease
-metadata:
-  name: metallb
-  namespace: metallb-system
-spec:
-  chart:
-    spec:
-      chart: metallb
-      version: "2.3.5"
-      sourceRef:
-        kind: HelmRepository
-        name: bitnami
-  interval: 10m0s
-  values:
-    controller:
-      image:
-        repository: metallb/controller
-        tag: v0.9.6
-    speaker:
-      image:
-        repository: metallb/speaker
-        tag: v0.9.6
-
-    configInline:
-      address-pools:
-      - name: default
-        protocol: layer2
-        addresses:
-        - 192.168.7.200-192.168.7.210

components/metallb/namespace.yaml

@@ -1,4 +0,0 @@
-apiVersion: v1
-kind: Namespace
-metadata:
-  name: metallb-system

components/nfs-provisioner/helmrepo.yaml

@@ -1,9 +0,0 @@
----
-apiVersion: source.toolkit.fluxcd.io/v1beta1
-kind: HelmRepository
-metadata:
-  name: nfs-subdir-external-provisioner
-  namespace: nfs-system
-spec:
-  interval: 20m0s
-  url: https://kubernetes-sigs.github.io/nfs-subdir-external-provisioner/

components/nfs-provisioner/nfs-client-provisioner-helmrelease.yaml

@@ -1,32 +0,0 @@
----
-apiVersion: helm.toolkit.fluxcd.io/v2beta1
-kind: HelmRelease
-metadata:
-  name: nfs-subdir-external-provisioner
-  namespace: nfs-system
-spec:
-  chart:
-    spec:
-      chart: nfs-subdir-external-provisioner
-      version: "4.0.10"
-      sourceRef:
-        kind: HelmRepository
-        name: nfs-subdir-external-provisioner
-  interval: 20m0s
-  values:
-    nodeSelector:
-      kubernetes.io/arch: arm64
-
-    # strategyType: Recreate
-
-    storageClass:
-      name: nfs-storage
-      defaultClass: true
-      archiveOnDelete: true
-      allowVolumeExpansion: true
-      provisionerName: storage.provisioner/nfs
-
-    nfs:
-      server: 192.168.7.100
-      path: /datapool/nfs/kubernetes
-  

components/nfs-provisioner/ns.yaml

@@ -1,4 +0,0 @@
-apiVersion: v1
-kind: Namespace
-metadata:
-  name: nfs-system

components/nginx-ingress/ingress-nginx_helmrepository.yaml

@@ -1,10 +0,0 @@
----
-apiVersion: source.toolkit.fluxcd.io/v1beta1
-kind: HelmRepository
-metadata:
-  name: ingress-nginx
-  namespace: ingress-system
-spec:
-  interval: 20m0s
-  url: https://kubernetes.github.io/ingress-nginx
-

components/nginx-ingress/namespace.yaml

@@ -1,4 +0,0 @@
-apiVersion: v1
-kind: Namespace
-metadata:
-  name: ingress-system

components/nginx-ingress/nginx-ingress_helmrelease.yaml

@@ -1,21 +0,0 @@
----
-apiVersion: helm.toolkit.fluxcd.io/v2beta1
-kind: HelmRelease
-metadata:
-  name: nginx-ingress
-  namespace: ingress-system
-spec:
-  chart:
-    spec:
-      chart: ingress-nginx
-      version: "3.26.x"
-      sourceRef:
-        kind: HelmRepository
-        name: ingress-nginx
-  interval: 20m0s
-  # values:
-  #   controller:
-  #     nodeSelector:
-  #       kubernetes.io/arch: 'amd64'
-
-  

components/prometheus/namespace.yaml

@@ -1,4 +0,0 @@
-apiVersion: v1
-kind: Namespace
-metadata:
-  name: prometheus-system

components/prometheus/prometheus-community_helmrepository.yaml

@@ -1,10 +0,0 @@
----
-apiVersion: source.toolkit.fluxcd.io/v1beta1
-kind: HelmRepository
-metadata:
-  name: prometheus-community
-  namespace: prometheus-system
-spec:
-  interval: 20m0s
-  url: https://prometheus-community.github.io/helm-charts
-

components/prometheus/prometheus-stack.yaml

@@ -1,28 +0,0 @@
----
-apiVersion: helm.toolkit.fluxcd.io/v2beta1
-kind: HelmRelease
-metadata:
-  name: kube-prometheus-stack
-  namespace: prometheus-system
-spec:
-  chart:
-    spec:
-      chart: kube-prometheus-stack
-      sourceRef:
-        kind: HelmRepository
-        name: prometheus-community
-  interval: 20m0s
-  values: 
-    grafana:
-      ingress:
-        enabled: true
-        annotations: 
-          kubernetes.io/ingress.class: nginx
-          cert-manager.io/cluster-issuer: labdevops-net-letsencrypt-prod
-        hosts:
-        - grafana.labdevops.net
-        tls:
-        - secretName: grafana-cm-tls
-          hosts:
-          - grafana.labdevops.net
-  

components/sealedsecrets/bitnami-helmrepo.yaml

@@ -1,10 +0,0 @@
----
-apiVersion: source.toolkit.fluxcd.io/v1beta1
-kind: HelmRepository
-metadata:
-  name: bitnami-labs-sealed-secrets
-  namespace: sealedsecrets-system
-spec:
-  interval: 1h0m0s
-  url: https://bitnami-labs.github.io/sealed-secrets
-

components/sealedsecrets/namespace.yaml

@@ -1,4 +0,0 @@
-apiVersion: v1
-kind: Namespace
-metadata:
-  name: sealedsecrets-system

components/sealedsecrets/pre-seed-key.sh

@@ -1,2 +0,0 @@
-#!/bin/bash
-## TODO: add secret from /keybase/private/lukeab/k3s-odc2-110/sealedsecrets/pub-cert.pem

components/sealedsecrets/sealedsecrets-helmrelease.yaml

@@ -1,32 +0,0 @@
----
-apiVersion: helm.toolkit.fluxcd.io/v2beta1
-kind: HelmRelease
-metadata:
-  name: sealed-secrets
-  namespace: sealedsecrets-system
-spec:
-  chart:
-    spec:
-      chart: sealed-secrets
-      sourceRef:
-        kind: HelmRepository
-        name: bitnami-labs-sealed-secrets
-      version: ">=1.16.0-0"
-  interval: 1h0m0s
-  releaseName: sealed-secrets
-  targetNamespace: sealedsecrets-system
-  install:
-    crds: Create
-  upgrade:
-    crds: CreateReplace
-  values:
-    namespace: sealedsecrets-system
-    serviceMonitor:
-      create: true
-    # secretName: "sealed-secrets-key"
-    # uncomment this when generated key is offloaded and pre-configured
-    dashboards:
-      create: true
-      namespace: sealedsecrets-system
-      labels:
-        grafana_dashboard: "1"

deployments/test3/namespace_test.yaml

@@ -1,4 +0,0 @@
-apiVersion: v1
-kind: Namespace
-metadata:
-  name: test3

deployments/test3/nginx-deploy.yaml

@@ -1,23 +0,0 @@
-apiVersion:  apps/v1
-kind: Deployment
-metadata:
-  name: nginx-test
-  namespace: test3
-spec:
-  selector:
-    matchLabels:
-      app: nginx-test
-  template:
-    metadata:
-      labels:
-        app: nginx-test
-    spec:
-      containers:
-      - name: nginx-test
-        image: nginx
-        resources:
-          limits:
-            memory: "128Mi"
-            cpu: "500m"
-        ports:
-        - containerPort: 80

deployments/test3/podinfo-hr.yaml

@@ -1,15 +0,0 @@
----
-apiVersion: helm.toolkit.fluxcd.io/v2beta1
-kind: HelmRelease
-metadata:
-  name: podinfo
-  namespace: test3
-spec:
-  chart:
-    spec:
-      chart: podinfo
-      sourceRef:
-        kind: HelmRepository
-        name: podinfo
-  interval: 1m0s
-

tests/cert-manager/test-certificate-labdevops-net.yaml

@@ -1,14 +0,0 @@
----
-apiVersion: cert-manager.io/v1
-kind: Certificate
-metadata:
-  name: testcert-labdevops-net
-  namespace: certmanager-system
-spec:
-  dnsNames:
-    - testcert.labdevops.net
-    - blablahtest.labdevops.net
-  secretName: testcert-labdevops-tls
-  issuerRef:
-    name: labdevops-net-letsencrypt-prod
-    kind: ClusterIssuer

tests/cert-manager/test-resource.yaml

@@ -1,24 +0,0 @@
-apiVersion: v1
-kind: Namespace
-metadata:
-  name: cert-manager
----
-apiVersion: cert-manager.io/v1
-kind: Issuer
-metadata:
-  name: test-selfsigned
-  namespace: cert-manager
-spec:
-  selfSigned: {}
----
-apiVersion: cert-manager.io/v1
-kind: Certificate
-metadata:
-  name: selfsigned-cert
-  namespace: cert-manager
-spec:
-  dnsNames:
-    - labdevops.net
-  secretName: selfsigned-cert-tls
-  issuerRef:
-    name: test-selfsigned

tests/test1/ns.yaml

@@ -1,4 +0,0 @@
-apiVersion: v1
-kind: Namespace
-metadata:
-  name: test1

tests/test1/podinfo-helmrepo.yaml

@@ -1,9 +0,0 @@
----
-apiVersion: source.toolkit.fluxcd.io/v1beta1
-kind: HelmRepository
-metadata:
-  name: podinfo
-  namespace: test1
-spec:
-  interval: 1m0s
-  url: https://stefanprodan.github.io/podinfo

tests/test1/podinfo.yaml

@@ -1,22 +0,0 @@
----
-apiVersion: helm.toolkit.fluxcd.io/v2beta1
-kind: HelmRelease
-metadata:
-  name: podinfo
-  namespace: test1
-spec:
-  chart:
-    spec:
-      chart: podinfo
-      version: 5.2.0
-      sourceRef:
-        kind: HelmRepository
-        name: podinfo
-        
-  interval: 1m0s
-  values:
-    ingress:
-      enabled: true
-      annotations:
-        kubernetes.io/ingress.class: nginx
-      path: "/"