feat: overhaul

kubernetes/apps/flux-system/addons/ks.yaml

@@ -1,5 +1,5 @@
 ---
-# yaml-language-server: $schema=https://raw.githubusercontent.com/fluxcd-community/flux2-schemas/main/kustomization-kustomize-v1.json
+# yaml-language-server: $schema=https://kubernetes-schemas.pages.dev/kustomize.toolkit.fluxcd.io/kustomization_v1.json
 apiVersion: kustomize.toolkit.fluxcd.io/v1
 kind: Kustomization
 metadata:
@@ -23,7 +23,7 @@ spec:
     substitute:
       APP: *app
 ---
-# yaml-language-server: $schema=https://raw.githubusercontent.com/fluxcd-community/flux2-schemas/main/kustomization-kustomize-v1.json
+# yaml-language-server: $schema=https://kubernetes-schemas.pages.dev/kustomize.toolkit.fluxcd.io/kustomization_v1.json
 apiVersion: kustomize.toolkit.fluxcd.io/v1
 kind: Kustomization
 metadata:
@@ -47,7 +47,7 @@ spec:
     substitute:
       APP: *app
 ---
-# yaml-language-server: $schema=https://raw.githubusercontent.com/fluxcd-community/flux2-schemas/main/kustomization-kustomize-v1.json
+# yaml-language-server: $schema=https://kubernetes-schemas.pages.dev/kustomize.toolkit.fluxcd.io/kustomization_v1.json
 apiVersion: kustomize.toolkit.fluxcd.io/v1
 kind: Kustomization
 metadata:

kubernetes/apps/flux-system/addons/webhooks/github/externalsecret.yaml

@@ -4,7 +4,6 @@ apiVersion: external-secrets.io/v1beta1
 kind: ExternalSecret
 metadata:
   name: github-webhook-token
-  namespace: flux-system
 spec:
   secretStoreRef:
     kind: ClusterSecretStore

kubernetes/apps/flux-system/addons/webhooks/github/ingress.yaml

@@ -3,13 +3,10 @@ apiVersion: networking.k8s.io/v1
 kind: Ingress
 metadata:
   name: webhook-receiver
-  namespace: flux-system
   annotations:
-    external-dns.alpha.kubernetes.io/enabled: "true"
-    external-dns.alpha.kubernetes.io/target: services.${SECRET_DOMAIN}.
     hajimari.io/enable: "false"
 spec:
-  ingressClassName: "nginx"
+  ingressClassName: external
   rules:
     - host: "flux-webhook.${SECRET_EXTERNAL_DOMAIN}"
       http:

kubernetes/apps/flux-system/addons/webhooks/github/receiver.yaml

@@ -4,7 +4,6 @@ apiVersion: notification.toolkit.fluxcd.io/v1
 kind: Receiver
 metadata:
   name: home-ops-kubernetes
-  namespace: flux-system
 spec:
   type: github
   events:

kubernetes/apps/flux-system/capacitor/app/helmrelease.yaml

@@ -58,7 +58,7 @@ spec:
     ingress:
       app:
         enabled: true
-        className: nginx
+        className: internal
         annotations:
           hajimari.io/icon: mdi:sync
           gethomepage.dev/enabled: "true"

kubernetes/apps/flux-system/capacitor/app/kustomization.yaml

@@ -2,7 +2,6 @@
 # yaml-language-server: $schema=https://json.schemastore.org/kustomization
 apiVersion: kustomize.config.k8s.io/v1beta1
 kind: Kustomization
-namespace: default
 resources:
   - ./helmrelease.yaml
   - ./rbac.yaml

kubernetes/apps/flux-system/capacitor/app/rbac.yaml

@@ -25,12 +25,16 @@ rules:
     - source.toolkit.fluxcd.io
     - kustomize.toolkit.fluxcd.io
     - helm.toolkit.fluxcd.io
+    - infra.contrib.fluxcd.io
   resources:
     - gitrepositories
     - ocirepositories
     - buckets
+    - helmrepositories
+    - helmcharts
     - kustomizations
     - helmreleases
+    - terraforms
   verbs:
     - get
     - watch

kubernetes/apps/flux-system/namespace.yaml

@@ -14,7 +14,7 @@ metadata:
   namespace: flux-system
 spec:
   type: alertmanager
-  address: http://kube-prometheus-stack-alertmanager.monitoring:9093/api/v2/alerts/
+  address: http://kube-prometheus-stack-alertmanager.observability:9093/api/v2/alerts/
 ---
 # yaml-language-server: $schema=https://kubernetes-schemas.pages.dev/notification.toolkit.fluxcd.io/alert_v1beta3.json
 apiVersion: notification.toolkit.fluxcd.io/v1beta3