Reorganized repository

apps/kustomization.yaml

@@ -1,5 +1,5 @@
 apiVersion: kustomize.config.k8s.io/v1beta1
 kind: Kustomization
 resources:
-  - huizinga-dev-staging.yaml
+  - ./traefik-dashboard
-  - huizinga-dev.yaml
+  - ./whoami.yaml

apps/whoami.yaml

@@ -41,7 +41,7 @@ spec:
 apiVersion: traefik.io/v1alpha1
 kind: IngressRoute
 metadata:
-  name: whoami-dashboard
+  name: whoami
   namespace: default
   annotations:
     kubernetes.io/ingress.class: traefik-external

clusters/titan.lan.huizinga.dev/akri/helmrepo.yaml

@@ -1,8 +0,0 @@
-apiVersion: source.toolkit.fluxcd.io/v1
-kind: HelmRepository
-metadata:
-  name: akri
-  namespace: akri
-spec:
-  interval: 1m0s
-  url: https://project-akri.github.io/akri/

clusters/titan.lan.huizinga.dev/akri/namespace.yaml

@@ -1,4 +0,0 @@
-apiVersion: v1
-kind: Namespace
-metadata:
-  name: akri

clusters/titan.lan.huizinga.dev/apps.yaml

@@ -0,0 +1,20 @@
+apiVersion: kustomize.toolkit.fluxcd.io/v1
+kind: Kustomization
+metadata:
+  name: apps
+  namespace: flux-system
+spec:
+  dependsOn:
+    - name: infra-configs
+  decryption:
+    provider: sops
+    secretRef:
+      name: sops-gpg
+  interval: 10m
+  timeout: 5m
+  sourceRef:
+    kind: GitRepository
+    name: flux-system
+  path: ./apps
+  prune: true
+  wait: true

clusters/titan.lan.huizinga.dev/cert-manager/certificates/huizinga-dev-staging.yaml

@@ -1,14 +0,0 @@
-apiVersion: cert-manager.io/v1
-kind: Certificate
-metadata:
-  name: huizinga-dev-staging
-  namespace: default
-spec:
-  secretName: huizinga-dev-staging-tls
-  issuerRef:
-    name: letsencrypt-staging
-    kind: ClusterIssuer
-  commonName: "*.huizinga.dev"
-  dnsNames:
-    - "huizinga.dev"
-    - "*.huizinga.dev"

clusters/titan.lan.huizinga.dev/cert-manager/helmrepo.yaml

@@ -1,8 +0,0 @@
-apiVersion: source.toolkit.fluxcd.io/v1
-kind: HelmRepository
-metadata:
-  name: jetstack
-  namespace: cert-manager
-spec:
-  interval: 1m0s
-  url: https://charts.jetstack.io

clusters/titan.lan.huizinga.dev/cert-manager/issuers/kustomization.yaml

@@ -1,6 +0,0 @@
-apiVersion: kustomize.config.k8s.io/v1beta1
-kind: Kustomization
-resources:
-  - secret.yaml
-  - letsencrypt-staging.yaml
-  - letsencrypt-production.yaml

clusters/titan.lan.huizinga.dev/cert-manager/issuers/letsencrypt-staging.yaml

@@ -1,17 +0,0 @@
-apiVersion: cert-manager.io/v1
-kind: ClusterIssuer
-metadata:
-  name: letsencrypt-staging
-spec:
-  acme:
-    server: https://acme-staging-v02.api.letsencrypt.org/directory
-    email: tim.huizinga@gmail.com
-    privateKeySecretRef:
-      name: letsencrypt-staging
-    solvers:
-      - dns01:
-          cloudflare:
-            email: tim.huizinga@gmail.com
-            apiTokenSecretRef:
-              name: cloudflare-token-secret
-              key: cloudflare-token

clusters/titan.lan.huizinga.dev/cert-manager/kustomization.yaml

@@ -1,8 +0,0 @@
-apiVersion: kustomize.config.k8s.io/v1beta1
-kind: Kustomization
-resources:
-  - namespace.yaml
-  - helmrepo.yaml
-  - cert-manager.yaml
-  - issuers
-  - certificates

clusters/titan.lan.huizinga.dev/cert-manager/namespace.yaml

@@ -1,4 +0,0 @@
-apiVersion: v1
-kind: Namespace
-metadata:
-  name: cert-manager

clusters/titan.lan.huizinga.dev/infrastructure.yaml

@@ -0,0 +1,48 @@
+apiVersion: kustomize.toolkit.fluxcd.io/v1
+kind: Kustomization
+metadata:
+  name: infra-controllers
+  namespace: flux-system
+spec:
+  interval: 1h
+  retryInterval: 1m
+  timeout: 5m
+  sourceRef:
+    kind: GitRepository
+    name: flux-system
+  path: ./infrastructure/controllers
+  prune: true
+  wait: true
+  patches:
+    - patch: |
+        - op: add
+          path: /spec/values
+          value:
+            service:
+              spec:
+                loadBalancerIP: 10.0.0.210
+      target:
+        kind: HelmRelease
+        name: traefik
+        namespace: traefik
+---
+apiVersion: kustomize.toolkit.fluxcd.io/v1
+kind: Kustomization
+metadata:
+  name: infra-configs
+  namespace: flux-system
+spec:
+  dependsOn:
+    - name: infra-controllers
+  decryption:
+    provider: sops
+    secretRef:
+      name: sops-gpg
+  interval: 1h
+  retryInterval: 1m
+  timeout: 5m
+  sourceRef:
+    kind: GitRepository
+    name: flux-system
+  path: ./infrastructure/configs
+  prune: true

clusters/titan.lan.huizinga.dev/traefik/helmrepo.yaml

@@ -1,8 +0,0 @@
-apiVersion: source.toolkit.fluxcd.io/v1
-kind: HelmRepository
-metadata:
-  name: traefik
-  namespace: traefik
-spec:
-  interval: 1m0s
-  url: https://traefik.github.io/charts

clusters/titan.lan.huizinga.dev/traefik/kustomization.yaml

@@ -1,8 +0,0 @@
-apiVersion: kustomize.config.k8s.io/v1beta1
-kind: Kustomization
-resources:
-  - namespace.yaml
-  - helmrepo.yaml
-  - traefik.yaml
-  - default-headers.yaml
-  - dashboard

clusters/titan.lan.huizinga.dev/traefik/namespace.yaml

@@ -1,4 +0,0 @@
-apiVersion: v1
-kind: Namespace
-metadata:
-  name: traefik

infrastructure/configs/certificates.yaml

@@ -6,7 +6,7 @@ metadata:
 spec:
   secretName: huizinga-dev-tls
   issuerRef:
-    name: letsencrypt-production
+    name: letsencrypt
     kind: ClusterIssuer
   commonName: "*.huizinga.dev"
   dnsNames:

infrastructure/configs/cluster-issuers.yaml

@@ -1,13 +1,13 @@
 apiVersion: cert-manager.io/v1
 kind: ClusterIssuer
 metadata:
-  name: letsencrypt-production
+  name: letsencrypt
 spec:
   acme:
     server: https://acme-v02.api.letsencrypt.org/directory
     email: tim.huizinga@gmail.com
     privateKeySecretRef:
-      name: letsencrypt-production
+      name: letsencrypt
     solvers:
       - dns01:
           cloudflare:

infrastructure/configs/kustomization.yaml

@@ -0,0 +1,9 @@
+apiVersion: kustomize.config.k8s.io/v1beta1
+kind: Kustomization
+resources:
+  - ./secrets/
+  - ./cluster-issuers.yaml
+  - ./certificates.yaml
+  - ./middleware.yaml
+
+  - ./akri-devices.yaml

infrastructure/configs/secrets/cloudflare-token.yaml

@@ -12,8 +12,8 @@ sops:
     azure_kv: []
     hc_vault: []
     age: []
-    lastmodified: "2024-09-26T22:20:01Z"
+    lastmodified: "2024-10-02T22:31:45Z"
-    mac: ENC[AES256_GCM,data:Xi30AdWVf8lNwJIMTir+ejR9qO8F1lFB8u99vd6NLWAq4twvoTRQi/Vfh61CsDuYLRBd9gC9hrCLiLz2AOTFlyTRUQpUxidFuD1tFmBUFNK1QXfpq+5HbLznBx4UHh5fIFnXq4+ZlHqKjHfMRrzcDT+L4DQb+gB+k8y8mcFru3E=,iv:19aCn3H0eWwJpMGC6+MbzELkpknGGzHAtaYOBySr/fE=,tag:VI2iqwfKOeSdI5U2L2uYWw==,type:str]
+    mac: ENC[AES256_GCM,data:ZCA+9P4ZPYKw2lN8fELxxPUqa+Q/8Jpsk4meU5hSi2i2mEZwOKRy/OPaNzp3cBxRoAqRoDA7ciLRWL4u19ENmM1C6raNqocfjx/4rEBmVQqfJukoRh8dJbnBbG8ljCuNNClSILQli4bMOul0jvMX8IGoaz6+tluuiMfx4hZ7+2s=,iv:iiHW7igx8vhWeVGgv1CP42nqOKu8hO4BrKgw6ybJsmI=,tag:DyTt6c8fGP/1Nd6DkhL2hA==,type:str]
     pgp:
         - created_at: "2024-09-26T22:20:01Z"
           enc: |-

infrastructure/configs/secrets/kustomization.yaml

@@ -0,0 +1,4 @@
+apiVersion: kustomize.config.k8s.io/v1beta1
+kind: Kustomization
+resources:
+  - cloudflare-token.yaml

infrastructure/controllers/akri.yaml

@@ -1,3 +1,17 @@
+apiVersion: v1
+kind: Namespace
+metadata:
+  name: akri
+---
+apiVersion: source.toolkit.fluxcd.io/v1
+kind: HelmRepository
+metadata:
+  name: akri
+  namespace: akri
+spec:
+  interval: 1m0s
+  url: https://project-akri.github.io/akri/
+---
 apiVersion: helm.toolkit.fluxcd.io/v2
 kind: HelmRelease
 metadata:

infrastructure/controllers/cert-manager.yaml

@@ -1,3 +1,17 @@
+apiVersion: v1
+kind: Namespace
+metadata:
+  name: cert-manager
+---
+apiVersion: source.toolkit.fluxcd.io/v1
+kind: HelmRepository
+metadata:
+  name: jetstack
+  namespace: cert-manager
+spec:
+  interval: 1m0s
+  url: https://charts.jetstack.io
+---
 apiVersion: helm.toolkit.fluxcd.io/v2
 kind: HelmRelease
 metadata:

infrastructure/controllers/kustomization.yaml

@@ -1,6 +1,6 @@
 apiVersion: kustomize.config.k8s.io/v1beta1
 kind: Kustomization
 resources:
-  - namespace.yaml
-  - helmrepo.yaml
   - akri.yaml
+  - cert-manager.yaml
+  - traefik.yaml

infrastructure/controllers/traefik.yaml

@@ -1,3 +1,17 @@
+apiVersion: v1
+kind: Namespace
+metadata:
+  name: traefik
+---
+apiVersion: source.toolkit.fluxcd.io/v1
+kind: HelmRepository
+metadata:
+  name: traefik
+  namespace: traefik
+spec:
+  interval: 1m0s
+  url: https://traefik.github.io/charts
+---
 apiVersion: helm.toolkit.fluxcd.io/v2
 kind: HelmRelease
 metadata:
@@ -34,7 +48,3 @@ spec:
     providers:
       kubernetesCRD:
         ingressClass: "traefik-external"
-
-    service:
-      spec:
-        loadBalancerIP: 10.0.0.210