add new site

.gitignore

@@ -1,2 +1,2 @@
-*.decrypted~secrets*
+*.decrypted~secrets*
 .decrypted~secrets.yaml

.sops.yaml

@@ -1,3 +1,3 @@
-creation_rules:
-- encrypted_regex: "^(stringData|token)$"
-  age: age1t4epxq5lzcnyj4xjav9jgnvnyaucyk243y4np9h78fx3k8lc55lqv6uu4z
+creation_rules:
+- encrypted_regex: "^(stringData|token)$"
+  age: age1t4epxq5lzcnyj4xjav9jgnvnyaucyk243y4np9h78fx3k8lc55lqv6uu4z

apps/kx3dex-radio/deployment.yaml

@@ -1,60 +1,60 @@
-apiVersion: v1
-kind: Namespace
-metadata:
-  name: kx3dex-radio
----
-apiVersion: v1
-kind: Service
-metadata:
-  name: kx3dex-radio-svc
-spec:
-  selector:
-    app: KX3DEX_Radio
-  ports:
-  - protocol: TCP
-    port: 3000
-    targetPort: 3000
----
-apiVersion: apps/v1
-kind: Deployment
-metadata:
-  name: kx3dex-radio
-spec:
-  selector:
-    matchLabels:
-      app: KX3DEX_Radio
-  replicas: 2
-  template:
-    metadata:
-      labels:
-        app: KX3DEX_Radio
-    spec:
-      containers:
-      - name: kx3dex-radio-site
-        image: gitea.simplysyncedllc.com/dex/kx3dex_radio:1.3.5
-        ports:
-        - containerPort: 3000
-    ingress:
-      enabled: true
-      className: nginx
----
-apiVersion: networking.k8s.io/v1
-kind: Ingress
-metadata:
-  name: kx3dex-radio-ingress
-  namespace: kx3dex-radio
-  annotations:
-    nginx.ingress.kubernetes.io/rewrite-target: /
-spec:
-  ingressClassName: nginx
-  rules:
-  - host: kx3dex.radio
-    http:
-      paths:
-      - backend:
-          service:
-            name: kx3dex-radio-svc
-            port:
-              number: 3000
-        path: /
-        pathType: ImplementationSpecific
+apiVersion: v1
+kind: Namespace
+metadata:
+  name: kx3dex-radio
+---
+apiVersion: v1
+kind: Service
+metadata:
+  name: kx3dex-radio-svc
+spec:
+  selector:
+    app: KX3DEX_Radio
+  ports:
+  - protocol: TCP
+    port: 3000
+    targetPort: 3000
+---
+apiVersion: apps/v1
+kind: Deployment
+metadata:
+  name: kx3dex-radio
+spec:
+  selector:
+    matchLabels:
+      app: KX3DEX_Radio
+  replicas: 2
+  template:
+    metadata:
+      labels:
+        app: KX3DEX_Radio
+    spec:
+      containers:
+      - name: kx3dex-radio-site
+        image: gitea.simplysyncedllc.com/dex/kx3dex_radio:1.3.5
+        ports:
+        - containerPort: 3000
+    ingress:
+      enabled: true
+      className: nginx
+---
+apiVersion: networking.k8s.io/v1
+kind: Ingress
+metadata:
+  name: kx3dex-radio-ingress
+  namespace: kx3dex-radio
+  annotations:
+    nginx.ingress.kubernetes.io/rewrite-target: /
+spec:
+  ingressClassName: nginx
+  rules:
+  - host: kx3dex.radio
+    http:
+      paths:
+      - backend:
+          service:
+            name: kx3dex-radio-svc
+            port:
+              number: 3000
+        path: /
+        pathType: ImplementationSpecific

apps/kx3dex-radio/kustomization.yaml

@@ -1,5 +1,5 @@
-apiVersion: kustomize.config.k8s.io/v1beta1
-kind: Kustomization
-namespace: kx3dex-radio
-resources:
-- deployment.yaml
+apiVersion: kustomize.config.k8s.io/v1beta1
+kind: Kustomization
+namespace: kx3dex-radio
+resources:
+- deployment.yaml

apps/simplysyncedllc-com/deployment.yaml

@@ -1,67 +1,67 @@
-apiVersion: v1
-kind: Namespace
-metadata:
-  name: simplysyncedllc-com
----
-apiVersion: v1
-kind: Service
-metadata:
-  name: simplysyncedllc-com-svc
-spec:
-  selector:
-    app: SimplySyncedLLC_com
-  ports:
-  - protocol: TCP
-    port: 3000
-    targetPort: 3000
----
-apiVersion: apps/v1
-kind: Deployment
-metadata:
-  name: simplysyncedllc-com
-spec:
-  selector:
-    matchLabels:
-      app: SimplySyncedLLC_com
-  replicas: 2
-  template:
-    metadata:
-      labels:
-        app: SimplySyncedLLC_com
-    spec:
-      containers:
-      - name: simplysyncedllc-com-site
-        image: ghcr.io/simplysynced/simplysyncedllc_website:latest
-        ports:
-        - name: http
-          containerPort: 3000
-          protocol: TCP
-        envFrom:
-        - secretRef:
-            name: simplysyncedllc-com-secrets
-      imagePullSecrets:
-      - name: regcred
-    ingress:
-      enabled: true
-      className: nginx
----
-apiVersion: networking.k8s.io/v1
-kind: Ingress
-metadata:
-  name: simplysyncedllc-com-ingress
-  namespace: simplysyncedllc-com
-  annotations:
-    nginx.ingress.kubernetes.io/rewrite-target: /
-spec:
-  ingressClassName: nginx
-  rules:
-  - host: simplysyncedllc.com
-    http:
-      paths:
-      - backend:
-          service:
-            name: simplysyncedllc-com-svc
-            port:
-              number: 3000
-        path: /
-        pathType: ImplementationSpecific
+apiVersion: v1
+kind: Namespace
+metadata:
+  name: simplysyncedllc-com
+---
+apiVersion: v1
+kind: Service
+metadata:
+  name: simplysyncedllc-com-svc
+spec:
+  selector:
+    app: SimplySyncedLLC_com
+  ports:
+  - protocol: TCP
+    port: 3000
+    targetPort: 3000
+---
+apiVersion: apps/v1
+kind: Deployment
+metadata:
+  name: simplysyncedllc-com
+spec:
+  selector:
+    matchLabels:
+      app: SimplySyncedLLC_com
+  replicas: 2
+  template:
+    metadata:
+      labels:
+        app: SimplySyncedLLC_com
+    spec:
+      containers:
+      - name: simplysyncedllc-com-site
+        image: ghcr.io/simplysynced/simplysyncedllc_website:latest
+        ports:
+        - name: http
+          containerPort: 3000
+          protocol: TCP
+        envFrom:
+        - secretRef:
+            name: simplysyncedllc-com-secrets
+      imagePullSecrets:
+      - name: github-registry-key
+    ingress:
+      enabled: true
+      className: nginx
+---
+apiVersion: networking.k8s.io/v1
+kind: Ingress
+metadata:
+  name: simplysyncedllc-com-ingress
+  namespace: simplysyncedllc-com
+  annotations:
+    nginx.ingress.kubernetes.io/rewrite-target: /
+spec:
+  ingressClassName: nginx
+  rules:
+  - host: simplysyncedllc.com
+    http:
+      paths:
+      - backend:
+          service:
+            name: simplysyncedllc-com-svc
+            port:
+              number: 3000
+        path: /
+        pathType: ImplementationSpecific

apps/simplysyncedllc-com/kustomization.yaml

@@ -1,6 +1,6 @@
-apiVersion: kustomize.config.k8s.io/v1beta1
-kind: Kustomization
-namespace: simplysyncedllc-com
-resources:
-- secrets.yaml
-- deployment.yaml
+apiVersion: kustomize.config.k8s.io/v1beta1
+kind: Kustomization
+namespace: simplysyncedllc-com
+resources:
+- secrets.yaml
+- deployment.yaml

apps/theburgess-family/deployment.yaml

@@ -0,0 +1,64 @@
+apiVersion: v1
+kind: Namespace
+metadata:
+  name: theburgess-family
+---
+apiVersion: v1
+kind: Service
+metadata:
+  name: theburgess-family-svc
+spec:
+  selector:
+    app: TheBurgess_Family
+  ports:
+  - protocol: TCP
+    port: 3000
+    targetPort: 3000
+---
+apiVersion: apps/v1
+kind: Deployment
+metadata:
+  name: theburgess-family
+spec:
+  selector:
+    matchLabels:
+      app: TheBurgess_Family
+  replicas: 2
+  template:
+    metadata:
+      labels:
+        app: TheBurgess_Family
+    spec:
+      containers:
+      - name: theburgess-family-site
+        image: ghcr.io/simplysynced/theburgess_family:latest
+        ports:
+        - name: http
+          containerPort: 3000
+          protocol: TCP
+      imagePullSecrets:
+      - name: github-registry-key
+    ingress:
+      enabled: true
+      className: nginx
+---
+apiVersion: networking.k8s.io/v1
+kind: Ingress
+metadata:
+  name: theburgess-family-ingress
+  namespace: theburgess-family
+  annotations:
+    nginx.ingress.kubernetes.io/rewrite-target: /
+spec:
+  ingressClassName: nginx
+  rules:
+  - host: theburgess.family
+    http:
+      paths:
+      - backend:
+          service:
+            name: theburgess-family-svc
+            port:
+              number: 3000
+        path: /
+        pathType: ImplementationSpecific

apps/theburgess-family/kustomization.yaml

@@ -0,0 +1,6 @@
+apiVersion: kustomize.config.k8s.io/v1beta1
+kind: Kustomization
+namespace: theburgess-family
+resources:
+- secrets.yaml
+- deployment.yaml

clusters/pi_cluster/cloudflare.yaml

@@ -1,17 +1,17 @@
-apiVersion: kustomize.toolkit.fluxcd.io/v1
-kind: Kustomization
-metadata:
-  name: cloudflare
-  namespace: flux-system
-spec:
-  decryption:
-    provider: sops
-    secretRef:
-      name: sops-age
-  interval: 60s
-  sourceRef:
-    kind: GitRepository
-    name: flux-system
-  path: ./infrastructure/cloudflare
-  prune: true
-  wait: true
+apiVersion: kustomize.toolkit.fluxcd.io/v1
+kind: Kustomization
+metadata:
+  name: cloudflare
+  namespace: flux-system
+spec:
+  decryption:
+    provider: sops
+    secretRef:
+      name: sops-age
+  interval: 60s
+  sourceRef:
+    kind: GitRepository
+    name: flux-system
+  path: ./infrastructure/cloudflare
+  prune: true
+  wait: true

clusters/pi_cluster/flux-system/gotk-sync.yaml

@@ -1,26 +1,26 @@
-# This manifest was generated by flux. DO NOT EDIT.
-apiVersion: source.toolkit.fluxcd.io/v1
-kind: GitRepository
-metadata:
-  name: flux-system
-  namespace: flux-system
-spec:
-  interval: 1m0s
-  ref:
-    branch: master
-  secretRef:
-    name: flux-system
-  url: https://gitea.simplysyncedllc.com/Dex/flux.git
----
-apiVersion: kustomize.toolkit.fluxcd.io/v1
-kind: Kustomization
-metadata:
-  name: flux-system
-  namespace: flux-system
-spec:
-  interval: 1m0s
-  path: ./clusters/pi_cluster
-  prune: true
-  sourceRef:
-    kind: GitRepository
-    name: flux-system
+# This manifest was generated by flux. DO NOT EDIT.
+apiVersion: source.toolkit.fluxcd.io/v1
+kind: GitRepository
+metadata:
+  name: flux-system
+  namespace: flux-system
+spec:
+  interval: 1m0s
+  ref:
+    branch: master
+  secretRef:
+    name: flux-system
+  url: https://gitea.simplysyncedllc.com/Dex/flux.git
+---
+apiVersion: kustomize.toolkit.fluxcd.io/v1
+kind: Kustomization
+metadata:
+  name: flux-system
+  namespace: flux-system
+spec:
+  interval: 1m0s
+  path: ./clusters/pi_cluster
+  prune: true
+  sourceRef:
+    kind: GitRepository
+    name: flux-system

clusters/pi_cluster/flux-system/kustomization.yaml

@@ -1,5 +1,5 @@
-apiVersion: kustomize.config.k8s.io/v1beta1
-kind: Kustomization
-resources:
-- gotk-components.yaml
-- gotk-sync.yaml
+apiVersion: kustomize.config.k8s.io/v1beta1
+kind: Kustomization
+resources:
+- gotk-components.yaml
+- gotk-sync.yaml

clusters/pi_cluster/github.yaml

@@ -1,17 +1,17 @@
-apiVersion: kustomize.toolkit.fluxcd.io/v1
-kind: Kustomization
-metadata:
-  name: github
-  namespace: flux-system
-spec:
-  decryption:
-    provider: sops
-    secretRef:
-      name: sops-age
-  interval: 60s
-  sourceRef:
-    kind: GitRepository
-    name: flux-system
-  path: ./infrastructure/github
-  prune: true
-  wait: true
+apiVersion: kustomize.toolkit.fluxcd.io/v1
+kind: Kustomization
+metadata:
+  name: github
+  namespace: flux-system
+spec:
+  decryption:
+    provider: sops
+    secretRef:
+      name: sops-age
+  interval: 60s
+  sourceRef:
+    kind: GitRepository
+    name: flux-system
+  path: ./infrastructure/github
+  prune: true
+  wait: true

clusters/pi_cluster/ingress.yaml

@@ -1,13 +1,13 @@
-apiVersion: kustomize.toolkit.fluxcd.io/v1
-kind: Kustomization
-metadata:
-  name: ingress
-  namespace: flux-system
-spec:
-  interval: 60s
-  sourceRef:
-    kind: GitRepository
-    name: flux-system
-  path: ./infrastructure/ingress
-  prune: true
-  wait: true
+apiVersion: kustomize.toolkit.fluxcd.io/v1
+kind: Kustomization
+metadata:
+  name: ingress
+  namespace: flux-system
+spec:
+  interval: 60s
+  sourceRef:
+    kind: GitRepository
+    name: flux-system
+  path: ./infrastructure/ingress
+  prune: true
+  wait: true

clusters/pi_cluster/kx3dex-radio.yaml

@@ -1,13 +1,13 @@
-apiVersion: kustomize.toolkit.fluxcd.io/v1
-kind: Kustomization
-metadata:
-  name: kx3dex-radio
-  namespace: flux-system
-spec:
-  interval: 60s
-  sourceRef:
-    kind: GitRepository
-    name: flux-system
-  path: ./apps/kx3dex-radio
-  prune: true
-  wait: true
+apiVersion: kustomize.toolkit.fluxcd.io/v1
+kind: Kustomization
+metadata:
+  name: kx3dex-radio
+  namespace: flux-system
+spec:
+  interval: 60s
+  sourceRef:
+    kind: GitRepository
+    name: flux-system
+  path: ./apps/kx3dex-radio
+  prune: true
+  wait: true

clusters/pi_cluster/simplysyncedllc-com.yaml

@@ -1,17 +1,17 @@
-apiVersion: kustomize.toolkit.fluxcd.io/v1
-kind: Kustomization
-metadata:
-  name: simplysyncedllc-com
-  namespace: flux-system
-spec:
-  decryption:
-    provider: sops
-    secretRef:
-      name: sops-age
-  interval: 60s
-  sourceRef:
-    kind: GitRepository
-    name: flux-system
-  path: ./apps/simplysyncedllc-com
-  prune: true
-  wait: true
+apiVersion: kustomize.toolkit.fluxcd.io/v1
+kind: Kustomization
+metadata:
+  name: simplysyncedllc-com
+  namespace: flux-system
+spec:
+  decryption:
+    provider: sops
+    secretRef:
+      name: sops-age
+  interval: 60s
+  sourceRef:
+    kind: GitRepository
+    name: flux-system
+  path: ./apps/simplysyncedllc-com
+  prune: true
+  wait: true

clusters/pi_cluster/theburgess-family.yaml

@@ -0,0 +1,17 @@
+apiVersion: kustomize.toolkit.fluxcd.io/v1
+kind: Kustomization
+metadata:
+  name: theburgess-family
+  namespace: flux-system
+spec:
+  decryption:
+    provider: sops
+    secretRef:
+      name: sops-age
+  interval: 60s
+  sourceRef:
+    kind: GitRepository
+    name: flux-system
+  path: ./apps/theburgess-family
+  prune: true
+  wait: true

infrastructure/cloudflare/deployment.yaml

@@ -1,54 +1,54 @@
-apiVersion: apps/v1
-kind: Deployment
-metadata:
-  name: cloudflared-deployment
-  namespace: cloudflare
-  labels:
-    app: cloudflared
-spec:
-  selector:
-    matchLabels:
-      pod: cloudflared
-  replicas: 1
-  template:
-    metadata:
-      creationTimestamp: null
-      labels:
-        pod: cloudflared
-    spec:
-      containers:
-      - name: cloudflared
-        image: cloudflare/cloudflared:latest
-        args:
-        - --token
-        - $(TUNNEL_TOKEN)
-        command:
-        - cloudflared
-        - tunnel
-        - --metrics
-        - 0.0.0.0:2000
-        - run
-        env:
-        - name: TUNNEL_TOKEN
-          valueFrom:
-            secretKeyRef:
-              key: token
-              name: cloudflare-token
-        livenessProbe:
-          httpGet:
-            path: /ready
-            port: 2000
-          failureThreshold: 1
-          initialDelaySeconds: 10
-          periodSeconds: 10
-      terminationGracePeriodSeconds: 30
-      dnsPolicy: ClusterFirst
-      automountServiceAccountToken: false
----
-apiVersion: v1
-kind: ConfigMap
-metadata:
-  name: cloudflared
-  namespace: cloudflare
-data:
-  config.yaml: "originRequest:\n  noTLSVerify: true \ningress:\n  - hostname: kx3dex.radio\n    service: https://ingress-nginx-controller.ingress-nginx.svc.cluster.local:443\n"
+apiVersion: apps/v1
+kind: Deployment
+metadata:
+  name: cloudflared-deployment
+  namespace: cloudflare
+  labels:
+    app: cloudflared
+spec:
+  selector:
+    matchLabels:
+      pod: cloudflared
+  replicas: 1
+  template:
+    metadata:
+      creationTimestamp: null
+      labels:
+        pod: cloudflared
+    spec:
+      containers:
+      - name: cloudflared
+        image: cloudflare/cloudflared:latest
+        args:
+        - --token
+        - $(TUNNEL_TOKEN)
+        command:
+        - cloudflared
+        - tunnel
+        - --metrics
+        - 0.0.0.0:2000
+        - run
+        env:
+        - name: TUNNEL_TOKEN
+          valueFrom:
+            secretKeyRef:
+              key: token
+              name: cloudflare-token
+        livenessProbe:
+          httpGet:
+            path: /ready
+            port: 2000
+          failureThreshold: 1
+          initialDelaySeconds: 10
+          periodSeconds: 10
+      terminationGracePeriodSeconds: 30
+      dnsPolicy: ClusterFirst
+      automountServiceAccountToken: false
+---
+apiVersion: v1
+kind: ConfigMap
+metadata:
+  name: cloudflared
+  namespace: cloudflare
+data:
+  config.yaml: "originRequest:\n  noTLSVerify: true \ningress:\n  - hostname: kx3dex.radio\n    service: https://ingress-nginx-controller.ingress-nginx.svc.cluster.local:443\n"

infrastructure/cloudflare/kustomization.yaml

@@ -1,9 +1,9 @@
-apiVersion: kustomize.config.k8s.io/v1beta1
-kind: Kustomization
-metadata:
-  labelsname: cloudflare
-  namespace: cloudflare
-resources:
-- namespace.yaml
-- secrets.yaml
-- deployment.yaml
+apiVersion: kustomize.config.k8s.io/v1beta1
+kind: Kustomization
+metadata:
+  labelsname: cloudflare
+  namespace: cloudflare
+resources:
+- namespace.yaml
+- secrets.yaml
+- deployment.yaml

infrastructure/cloudflare/namespace.yaml

@@ -1,4 +1,4 @@
-apiVersion: v1
-kind: Namespace
-metadata:
-  name: cloudflare
+apiVersion: v1
+kind: Namespace
+metadata:
+  name: cloudflare

infrastructure/github/kustomization.yaml

@@ -1,7 +1,7 @@
-apiVersion: kustomize.config.k8s.io/v1beta1
-kind: Kustomization
-metadata:
-  labelsname: github
-  namespace: github
-resources:
-- secrets.yaml
+apiVersion: kustomize.config.k8s.io/v1beta1
+kind: Kustomization
+metadata:
+  labelsname: github
+  namespace: github
+resources:
+- secrets.yaml

infrastructure/github/secrets.yaml

@@ -2,27 +2,27 @@ apiVersion: v1
 kind: Secret
 type: kubernetes.io/dockerconfigjson
 metadata:
-    name: github-registry-key
-    namespace: flux-system
+  name: github-registry-key
+  namespace: flux-system
 data:
-    .dockerconfigjson: eyAiYXV0aHMiOiB7ICJnaGNyLmlvIjogeyAiYXV0aCI6ICJWVk5GVWs1QlRVVTZaMmh3WDJFMGRVTnJWRkZSTjJFMFVGQjBaRWRIUkUxQmVXcDRVazE2YkRaTVpEUkRhRmd6VGc9PSIgfSB9IH0=
+  .dockerconfigjson: ewoJImF1dGhzIjogewoJCSJnaGNyLmlvIjogewoJCQkiYXV0aCI6ICJaR1Y0WkdWaFpHeDVPbWRvY0Y5Sk1YVmpOa3BLWjFkek9YWmxUR3BaWjBWelRERjJXVzR3WTFkbVNuY3lkV2s0T0RBPSIKCQl9Cgl9LAoJImNyZWRzU3RvcmUiOiAiZGVza3RvcCIsCgkiY3VycmVudENvbnRleHQiOiAiZGVza3RvcC1saW51eCIsCgkicGx1Z2lucyI6IHsKCQkiZGVidWciOiB7CgkJCSJob29rcyI6ICJleGVjIgoJCX0sCgkJInNjb3V0IjogewoJCQkiaG9va3MiOiAicHVsbCxidWlsZHggYnVpbGQiCgkJfQoJfSwKCSJmZWF0dXJlcyI6IHsKCQkiaG9va3MiOiAidHJ1ZSIKCX0KfQ==
 sops:
-    kms: []
-    gcp_kms: []
-    azure_kv: []
-    hc_vault: []
-    age:
-        - recipient: age1t4epxq5lzcnyj4xjav9jgnvnyaucyk243y4np9h78fx3k8lc55lqv6uu4z
-          enc: |
-            -----BEGIN AGE ENCRYPTED FILE-----
-            YWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IFgyNTUxOSBtNzJvRWlmWWk0TWdIdEtz
-            UXNtZ21pc2V1QS9mVnFhbElnNGVqUjJNNUhrCnl3aDBlWUYrYnhUTDRMd0ljV1Vm
-            YmxINTFTb0E1bUlsNXk3SUQ5MmpIRHcKLS0tIHBHVUFEU3R5dkpDUForcnNOQnkz
-            Vkg5UzN4N1FoWDV0LzlJZXA1bkRlOXMK0h2PBhVu6C5ALvkVVp8WaCykdWH9yH0B
-            KzpAEI0PjlDtQbKKInnet30WZLWRhYDjUXd54BohXP4mqL5n9Srrlg==
-            -----END AGE ENCRYPTED FILE-----
-    lastmodified: "2024-08-21T15:21:07Z"
-    mac: ENC[AES256_GCM,data:n03DtkosCm3dYLUWgbMwJ6QIRpEuQi3qu3cQ8HnJreidpOZ1dfEoyA3H1YCNmaGbLcKSfi0mYPk6cpDXkYJ69z+aCYdrEimyTkuo3XxDzDxR62tK49k0g6yHXPjz72A2DO1iOQaV32ordGsRMkuYLxcf/lk25MVoDaGkMKSlIXs=,iv:ejmAeFg4BzA0MS5jYyA73KQHK3TNWWljgvl+YQja9qQ=,tag:uWk5qJa+GETqQCju9PfftQ==,type:str]
-    pgp: []
-    encrypted_regex: ^(stringData|token)$
-    version: 3.9.0
+  kms: []
+  gcp_kms: []
+  azure_kv: []
+  hc_vault: []
+  age:
+  - recipient: age1t4epxq5lzcnyj4xjav9jgnvnyaucyk243y4np9h78fx3k8lc55lqv6uu4z
+    enc: |
+      -----BEGIN AGE ENCRYPTED FILE-----
+      YWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IFgyNTUxOSBtNzJvRWlmWWk0TWdIdEtz
+      UXNtZ21pc2V1QS9mVnFhbElnNGVqUjJNNUhrCnl3aDBlWUYrYnhUTDRMd0ljV1Vm
+      YmxINTFTb0E1bUlsNXk3SUQ5MmpIRHcKLS0tIHBHVUFEU3R5dkpDUForcnNOQnkz
+      Vkg5UzN4N1FoWDV0LzlJZXA1bkRlOXMK0h2PBhVu6C5ALvkVVp8WaCykdWH9yH0B
+      KzpAEI0PjlDtQbKKInnet30WZLWRhYDjUXd54BohXP4mqL5n9Srrlg==
+      -----END AGE ENCRYPTED FILE-----
+  lastmodified: "2024-08-21T20:50:17Z"
+  mac: ENC[AES256_GCM,data:qrep5871UOfXKZdEF59VhXmDYcEetvP7bFryDwjnOkaK2v5q8jlP0GdvfN3W/P7p4d/S6QcwVfRKAlzYLsjTwmRFg+3mmRO7xn4SUaCJikMmvTyqilWi97diMKcaKTMU7dS3Fb/F7mAcYyOkZq01CdQnEl22GHvrh/K4c+7Cxss=,iv:vNnJcVWW3TOK2q7CRzQnfNnYUj7vx9XCNFdGT+Qx0iA=,tag:MhJQxoyAH1plbf+66PQcRQ==,type:str]
+  pgp: []
+  encrypted_regex: ^(stringData|token)$
+  version: 3.9.0

infrastructure/ingress/cert-manager.yaml

@@ -1,34 +1,34 @@
-apiVersion: v1
-kind: Namespace
-metadata:
-  name: cert-manager
-  labels:
-    toolkit.fluxcd.io/tenant: sre-team
----
-apiVersion: source.toolkit.fluxcd.io/v1
-kind: HelmRepository
-metadata:
-  name: cert-manager
-  namespace: cert-manager
-spec:
-  interval: 24h
-  url: https://charts.jetstack.io
----
-apiVersion: helm.toolkit.fluxcd.io/v2
-kind: HelmRelease
-metadata:
-  name: cert-manager
-  namespace: cert-manager
-spec:
-  interval: 30m
-  chart:
-    spec:
-      chart: cert-manager
-      version: "1.x"
-      sourceRef:
-        kind: HelmRepository
-        name: cert-manager
-        namespace: cert-manager
-      interval: 12h
-  values:
-    installCRDs: true
+apiVersion: v1
+kind: Namespace
+metadata:
+  name: cert-manager
+  labels:
+    toolkit.fluxcd.io/tenant: sre-team
+---
+apiVersion: source.toolkit.fluxcd.io/v1
+kind: HelmRepository
+metadata:
+  name: cert-manager
+  namespace: cert-manager
+spec:
+  interval: 24h
+  url: https://charts.jetstack.io
+---
+apiVersion: helm.toolkit.fluxcd.io/v2
+kind: HelmRelease
+metadata:
+  name: cert-manager
+  namespace: cert-manager
+spec:
+  interval: 30m
+  chart:
+    spec:
+      chart: cert-manager
+      version: "1.x"
+      sourceRef:
+        kind: HelmRepository
+        name: cert-manager
+        namespace: cert-manager
+      interval: 12h
+  values:
+    installCRDs: true

infrastructure/ingress/ingress-controller.yaml

@@ -1,36 +1,36 @@
-apiVersion: v1
-kind: Namespace
-metadata:
-  name: ingress-nginx
----
-apiVersion: source.toolkit.fluxcd.io/v1
-kind: HelmRepository
-metadata:
-  name: ingress-nginx
-  namespace: ingress-nginx
-spec:
-  interval: 24h
-  url: https://kubernetes.github.io/ingress-nginx
----
-apiVersion: helm.toolkit.fluxcd.io/v2
-kind: HelmRelease
-metadata:
-  name: ingress-nginx
-  namespace: ingress-nginx
-spec:
-  interval: 30m
-  chart:
-    spec:
-      chart: ingress-nginx
-      version: "*"
-      sourceRef:
-        kind: HelmRepository
-        name: ingress-nginx
-        namespace: ingress-nginx
-      interval: 12h
-  values:
-    controller:
-      service:
-        type: "ClusterIP"
-    admissionWebhooks:
-      enabled: false
+apiVersion: v1
+kind: Namespace
+metadata:
+  name: ingress-nginx
+---
+apiVersion: source.toolkit.fluxcd.io/v1
+kind: HelmRepository
+metadata:
+  name: ingress-nginx
+  namespace: ingress-nginx
+spec:
+  interval: 24h
+  url: https://kubernetes.github.io/ingress-nginx
+---
+apiVersion: helm.toolkit.fluxcd.io/v2
+kind: HelmRelease
+metadata:
+  name: ingress-nginx
+  namespace: ingress-nginx
+spec:
+  interval: 30m
+  chart:
+    spec:
+      chart: ingress-nginx
+      version: "*"
+      sourceRef:
+        kind: HelmRepository
+        name: ingress-nginx
+        namespace: ingress-nginx
+      interval: 12h
+  values:
+    controller:
+      service:
+        type: "ClusterIP"
+    admissionWebhooks:
+      enabled: false

infrastructure/ingress/kustomization.yaml

@@ -1,7 +1,7 @@
-apiVersion: kustomize.config.k8s.io/v1beta1
-kind: Kustomization
-metadata:
-  name: ingress-nginx
-  namespace: ingress-nginx
-resources:
-- ingress-controller.yaml
+apiVersion: kustomize.config.k8s.io/v1beta1
+kind: Kustomization
+metadata:
+  name: ingress-nginx
+  namespace: ingress-nginx
+resources:
+- ingress-controller.yaml