From e2872c4dbc953dcd82c067097decd87d237151b8 Mon Sep 17 00:00:00 2001
From: Dreaded_X <tim@huizinga.dev>
Date: Sat, 15 Feb 2025 04:45:16 +0100
Subject: [PATCH] Changed some namespace things

---
 clusters/titan.lan.huizinga.dev/infra/kube-vip.yaml     | 1 +
 clusters/titan.lan.huizinga.dev/infra/letsencrypt.yaml  | 1 +
 infra/kube-vip/kustomization.yaml                       | 1 -
 infra/letsencrypt/certificate-huizinga-dev.yaml         | 1 -
 infra/letsencrypt/certificate-staging-huizinga-dev.yaml | 1 -
 infra/letsencrypt/namespace.yaml                        | 4 ++++
 infra/letsencrypt/secret-cloudflare-token.yaml          | 9 +++++----
 7 files changed, 11 insertions(+), 7 deletions(-)
 create mode 100644 infra/letsencrypt/namespace.yaml

diff --git a/clusters/titan.lan.huizinga.dev/infra/kube-vip.yaml b/clusters/titan.lan.huizinga.dev/infra/kube-vip.yaml
index 993eefc..b135747 100644
--- a/clusters/titan.lan.huizinga.dev/infra/kube-vip.yaml
+++ b/clusters/titan.lan.huizinga.dev/infra/kube-vip.yaml
@@ -6,6 +6,7 @@ metadata:
 spec:
   interval: 15m
   path: ./infra/kube-vip
+  targetNamespace: kube-system
   prune: true
   timeout: 2m
   sourceRef:
diff --git a/clusters/titan.lan.huizinga.dev/infra/letsencrypt.yaml b/clusters/titan.lan.huizinga.dev/infra/letsencrypt.yaml
index 2475760..844f2bc 100644
--- a/clusters/titan.lan.huizinga.dev/infra/letsencrypt.yaml
+++ b/clusters/titan.lan.huizinga.dev/infra/letsencrypt.yaml
@@ -6,6 +6,7 @@ metadata:
 spec:
   interval: 15m
   path: ./infra/letsencrypt
+  targetNamespace: letsencrypt
   dependsOn:
     - name: cert-manager
   prune: true
diff --git a/infra/kube-vip/kustomization.yaml b/infra/kube-vip/kustomization.yaml
index a202b91..976a5d3 100644
--- a/infra/kube-vip/kustomization.yaml
+++ b/infra/kube-vip/kustomization.yaml
@@ -1,6 +1,5 @@
 apiVersion: kustomize.config.k8s.io/v1beta1
 kind: Kustomization
-namespace: kube-system
 resources:
   - ./service-account.yaml
   - ./cluster-role.yaml
diff --git a/infra/letsencrypt/certificate-huizinga-dev.yaml b/infra/letsencrypt/certificate-huizinga-dev.yaml
index 3d1df48..699a6c3 100644
--- a/infra/letsencrypt/certificate-huizinga-dev.yaml
+++ b/infra/letsencrypt/certificate-huizinga-dev.yaml
@@ -2,7 +2,6 @@ apiVersion: cert-manager.io/v1
 kind: Certificate
 metadata:
   name: huizinga-dev
-  namespace: default
 spec:
   secretName: huizinga-dev-tls
   issuerRef:
diff --git a/infra/letsencrypt/certificate-staging-huizinga-dev.yaml b/infra/letsencrypt/certificate-staging-huizinga-dev.yaml
index a1bdac8..68e05e0 100644
--- a/infra/letsencrypt/certificate-staging-huizinga-dev.yaml
+++ b/infra/letsencrypt/certificate-staging-huizinga-dev.yaml
@@ -2,7 +2,6 @@ apiVersion: cert-manager.io/v1
 kind: Certificate
 metadata:
   name: staging-huizinga-dev
-  namespace: default
 spec:
   secretName: staging-huizinga-dev-tls
   issuerRef:
diff --git a/infra/letsencrypt/namespace.yaml b/infra/letsencrypt/namespace.yaml
new file mode 100644
index 0000000..32dd5dc
--- /dev/null
+++ b/infra/letsencrypt/namespace.yaml
@@ -0,0 +1,4 @@
+apiVersion: v1
+kind: Namespace
+metadata:
+  name: letsencrypt
diff --git a/infra/letsencrypt/secret-cloudflare-token.yaml b/infra/letsencrypt/secret-cloudflare-token.yaml
index aff9b97..2ccf40f 100644
--- a/infra/letsencrypt/secret-cloudflare-token.yaml
+++ b/infra/letsencrypt/secret-cloudflare-token.yaml
@@ -1,8 +1,9 @@
 apiVersion: v1
 kind: Secret
 metadata:
-    name: cloudflare-token
-    namespace: cert-manager
+    name: cloudflare-token-secret
+    # TODO: Does it need to be in the cert-manager namespace?
+    # namespace: cert-manager
 type: Opaque
 stringData:
     token: ENC[AES256_GCM,data:1QSjQJrky3AOQv9Bf8ifvfgeYCh3DvPtCWNLKEY/eEpzPsJKD7MYwQ==,iv:MbWKNj13K25TiP1MPfJMaM1P3Qpy3TE+dWnbF5Gpr3Y=,tag:IMRRhh2nwT40rjVDAgBhrw==,type:str]
@@ -12,8 +13,8 @@ sops:
     azure_kv: []
     hc_vault: []
     age: []
-    lastmodified: "2025-02-15T21:24:33Z"
-    mac: ENC[AES256_GCM,data:Dfy6zbFciru6hAt48FtpnAlVTkEqkQR2BnpaVJ8DEd3SEk9uYx1tPKG3hSI8xi2JkltVY0tmETf79mYqnmhRUy/cUo25wsUp3anaXYM2vp+Jiqu3EjVjsJrvVPUhHCnWrZ0UGZ/xicCuC15JKw8grsTuQxFaTxswJBCRtc7C0jI=,iv:E3NSnxhMxasAcmYerZCyAN8N1spSN+OfwzKvB8g7MFs=,tag:cQ/0/Lp408pQUVSeLm2hQQ==,type:str]
+    lastmodified: "2025-02-15T21:29:46Z"
+    mac: ENC[AES256_GCM,data:qryfSgBlseYaSLq1FuKYwgdbGTrSNKmAP8KwQfiE17YxzRcnCbYye8XwxDCYU5S9RYT85TuQh5mKzGDqz0AT7ljipMoYY3mo514uH/wYxF0Is19kU5QQcxc4u+p25h1M7rnVE3kLjgu56vIWZlp8+ooAaoL5cJ/OakyKObCwzyk=,iv:yo0C0wZNPFBvV/aF88BAE4Z5ri/nI2s0UdUphFkbWbQ=,tag:dnW+Z3pZJ0p6A15bVpAeVQ==,type:str]
     pgp:
         - created_at: "2024-09-26T22:20:01Z"
           enc: |-