diff --git a/clusters/titan.lan.huizinga.dev/infra/cert-manager.yaml b/clusters/titan.lan.huizinga.dev/infra/cert-manager.yaml
index 0da2d6e..3da1402 100644
--- a/clusters/titan.lan.huizinga.dev/infra/cert-manager.yaml
+++ b/clusters/titan.lan.huizinga.dev/infra/cert-manager.yaml
@@ -6,7 +6,6 @@ metadata:
 spec:
   interval: 15m
   path: ./infra/cert-manager
-  targetNamespace: cert-manager
   prune: true
   timeout: 2m
   sourceRef:
diff --git a/clusters/titan.lan.huizinga.dev/infra/kube-vip.yaml b/clusters/titan.lan.huizinga.dev/infra/kube-vip.yaml
index ac0a831..9f6d74f 100644
--- a/clusters/titan.lan.huizinga.dev/infra/kube-vip.yaml
+++ b/clusters/titan.lan.huizinga.dev/infra/kube-vip.yaml
@@ -6,7 +6,6 @@ metadata:
 spec:
   interval: 15m
   path: ./infra/kube-vip
-  targetNamespace: kube-system
   prune: true
   timeout: 2m
   sourceRef:
diff --git a/clusters/titan.lan.huizinga.dev/infra/velero.yaml b/clusters/titan.lan.huizinga.dev/infra/velero.yaml
index cdd218f..70935af 100644
--- a/clusters/titan.lan.huizinga.dev/infra/velero.yaml
+++ b/clusters/titan.lan.huizinga.dev/infra/velero.yaml
@@ -6,7 +6,6 @@ metadata:
 spec:
   interval: 15m
   path: ./infra/velero
-  targetNamespace: velero
   prune: true
   timeout: 2m
   sourceRef:
diff --git a/infra/cert-manager/kustomization.yaml b/infra/cert-manager/kustomization.yaml
new file mode 100644
index 0000000..6cc93a2
--- /dev/null
+++ b/infra/cert-manager/kustomization.yaml
@@ -0,0 +1,7 @@
+apiVersion: kustomize.config.k8s.io/v1beta1
+kind: Kustomization
+namespace: cert-manager
+resources:
+  - ./namespace.yaml
+  - ./helm-repository.yaml
+  - ./helm-release.yaml
diff --git a/infra/kube-vip/kustomization.yaml b/infra/kube-vip/kustomization.yaml
index 976a5d3..9f63cf3 100644
--- a/infra/kube-vip/kustomization.yaml
+++ b/infra/kube-vip/kustomization.yaml
@@ -1,10 +1,12 @@
 apiVersion: kustomize.config.k8s.io/v1beta1
 kind: Kustomization
+namespace: kube-system
 resources:
   - ./service-account.yaml
   - ./cluster-role.yaml
   - ./cluster-role-binding.yaml
   - ./daemon-set-enp2s0.yaml
   - ./daemon-set-enp3s0.yaml
+
   - https://raw.githubusercontent.com/kube-vip/kube-vip-cloud-provider/refs/tags/v0.0.11/manifest/kube-vip-cloud-controller.yaml
   - ./config-map-kubevip.yaml
diff --git a/infra/letsencrypt/kustomization.yaml b/infra/letsencrypt/kustomization.yaml
new file mode 100644
index 0000000..86e819d
--- /dev/null
+++ b/infra/letsencrypt/kustomization.yaml
@@ -0,0 +1,8 @@
+apiVersion: kustomize.config.k8s.io/v1beta1
+kind: Kustomization
+resources:
+  - ./namespace.yaml
+  - ./secret-cloudflare-token.yaml
+  - ./cluster-issuer.yaml
+  - ./certificate-staging-huizinga-dev.yaml
+  - ./certificate-huizinga-dev.yaml
diff --git a/infra/letsencrypt/secret-cloudflare-token.yaml b/infra/letsencrypt/secret-cloudflare-token.yaml
index 979eee4..37be521 100644
--- a/infra/letsencrypt/secret-cloudflare-token.yaml
+++ b/infra/letsencrypt/secret-cloudflare-token.yaml
@@ -12,8 +12,8 @@ sops:
     azure_kv: []
     hc_vault: []
     age: []
-    lastmodified: "2025-02-15T21:31:46Z"
-    mac: ENC[AES256_GCM,data:AVwoH3f8DtVgu4AC0/0GIqiQWFhTWTVsSpO3qRoYdgqjo9XMvpv+Tw4oIzCmMnerO5SZO4ts06pdHeH/9zLtPKHiYHOZXQprTuyFlSKWL8hXAr6QHb8FVNUFb2HnhW7tq+x8MAMERxxM8SYtbuY9f4sv4DC+aGGg5l+wmEplo5Q=,iv:lwAVKTwIyiVRF7xGoOyGekm1VkqFSQEJjlybymq+EGQ=,tag:XMAWcUVu8ColqlmJCkPJFw==,type:str]
+    lastmodified: "2025-02-15T21:32:18Z"
+    mac: ENC[AES256_GCM,data:hYqyrhnrwpvEcJGMIfjSpbIvQ3NHukCDhRB2Zf7vifKYqQyd0hSmh6aeDPdARwdoiybQIuW6pa3SXOY4V1LgOYx6U36HOsDBe5ENQyXV0z5RID+H/nfZmcqj2pfRE8zpfAUhpcilCT8TMJpJSlaAh5kFl/6Z1feekVJLkxPYg30=,iv:FpZ8rDrvNACc+mgR6JNXmTNFXJt6es896n4xkLKzN/s=,tag:JW/OZHNBD+MEiRnhih1/fg==,type:str]
     pgp:
         - created_at: "2024-09-26T22:20:01Z"
           enc: |-
diff --git a/infra/velero/kustomization.yaml b/infra/velero/kustomization.yaml
new file mode 100644
index 0000000..c5101f3
--- /dev/null
+++ b/infra/velero/kustomization.yaml
@@ -0,0 +1,9 @@
+apiVersion: kustomize.config.k8s.io/v1beta1
+kind: Kustomization
+namespace: velero
+resources:
+  - ./namespace.yaml
+  - ./helm-repository.yaml
+  - ./secret-s3-credentials.yaml
+  - ./secret-velero-repo-credentials.yaml
+  - ./helm-release.yaml