fix: remove default ns

Signed-off-by: Tyler Witlin <[email protected]>
coolguy1771 · Oct 10, 2024 · a83eeb9 · a83eeb9
1 parent 1ca1f61
commit a83eeb9
Show file tree

Hide file tree

Showing 18 changed files with 51 additions and 461 deletions.
diff --git a/.archive/cobra/apps/system-upgrade/namespace.yaml b/.archive/cobra/apps/system-upgrade/namespace.yaml
@@ -6,4 +6,4 @@ metadata:
   labels:
     kustomize.toolkit.fluxcd.io/prune: disabled
   annotations:
-    istio-injection: enabled
+
diff --git a/.archive/tetragon-system/namespace.yaml b/.archive/tetragon-system/namespace.yaml
@@ -6,4 +6,4 @@ metadata:
   labels:
     kustomize.toolkit.fluxcd.io/prune: disabled
   annotations:
-    istio-injection: enabled
+
diff --git a/.taskfiles/Rook/templates/WipeDataJob.tmpl.yaml b/.taskfiles/Rook/templates/WipeDataJob.tmpl.yaml
@@ -13,7 +13,7 @@ spec:
       nodeName: ${node}
       containers:
         - name: main
-          image: docker.io/library/alpine:latest
+          image: docker.io/library/alpine:3.20.3
           command: ["/bin/sh", "-c"]
           args: ["rm -rf /mnt/host_var/lib/rook"]
           volumeMounts:

diff --git a/.taskfiles/Rook/templates/WipeDiskJob.tmpl.yaml b/.taskfiles/Rook/templates/WipeDiskJob.tmpl.yaml
@@ -13,7 +13,7 @@ spec:
       nodeName: ${node}
       containers:
         - name: main
-          image: docker.io/library/alpine:latest
+          image: docker.io/library/alpine:3.20.3
           command: ["/bin/sh", "-c"]
           args:
             - apk add --no-cache sgdisk util-linux util-linux-misc parted device-mapper;

diff --git a/kubernetes/kyak/apps/auth/keycloak/cluster/keycloak.yaml b/kubernetes/kyak/apps/auth/keycloak/cluster/keycloak.yaml
@@ -1,3 +1,5 @@
+---
+# yaml-language-server: $schema=
 apiVersion: k8s.keycloak.org/v2alpha1
 kind: Keycloak
 metadata:
@@ -79,3 +81,5 @@ spec:
     annotations:
       external-dns.alpha.kubernetes.io/target: external.${SECRET_PUBLIC_DOMAIN}
       cert-manager.io/cluster-issuer: letsencrypt-production
+
+# https://github.com/wadahiro/keycloak-discord/releases/download/v0.5.0/keycloak-discord-0.5.0.jar
diff --git a/kubernetes/sol/apps/cert-manager/cert-manager/app/helmrelease.yaml b/kubernetes/sol/apps/cert-manager/cert-manager/app/helmrelease.yaml
@@ -24,16 +24,24 @@ spec:
   uninstall:
     keepHistory: false
   values:
-    installCRDs: true
-    dns01RecursiveNameservers: 1.1.1.1:53,8.8.8.8:53
+    replicaCount: 1
+    crds:
+      enabled: true
+    dns01RecursiveNameservers: https://1.1.1.1:443/dns-query,https://1.0.0.1:443/dns-query
     dns01RecursiveNameserversOnly: true
-    podDnsPolicy: None
-    podDnsConfig:
-      nameservers:
-        - "1.1.1.1"
-        - "8.8.8.8"
     prometheus:
       enabled: true
       servicemonitor:
         enabled: true
         prometheusInstance: monitoring
+    webhook:
+      replicaCount: 1
+    cainjector:
+      replicaCount: 1
+      podLabels:
+        egress.home.arpa/apiserver: allow
+        egress.home.arpa/kubedns: allow # TODO: Remove when clusterNetworkPolicy is in place
+    # config:
+    #   apiVersion: controller.config.cert-manager.io/v1alpha1
+    #   kind: ControllerConfiguration
+    #   enableGatewayAPI: true
diff --git a/kubernetes/sol/apps/cert-manager/namespace.yaml b/kubernetes/sol/apps/cert-manager/namespace.yaml
@@ -6,4 +6,4 @@ metadata:
   labels:
     kustomize.toolkit.fluxcd.io/prune: disabled
   annotations:
-    istio-injection: enabled
+
diff --git a/kubernetes/sol/apps/default/kopia/app/externalsecret.yaml b/kubernetes/sol/apps/default/kopia/app/externalsecret.yaml
diff --git a/kubernetes/sol/apps/default/kopia/app/helmrelease.yaml b/kubernetes/sol/apps/default/kopia/app/helmrelease.yaml
diff --git a/kubernetes/sol/apps/default/kopia/app/kustomization.yaml b/kubernetes/sol/apps/default/kopia/app/kustomization.yaml
diff --git a/kubernetes/sol/apps/default/kopia/ks.yaml b/kubernetes/sol/apps/default/kopia/ks.yaml
diff --git a/kubernetes/sol/apps/default/kustomization.yaml b/kubernetes/sol/apps/default/kustomization.yaml
diff --git a/kubernetes/sol/apps/default/minio/app/externalsecret.yaml b/kubernetes/sol/apps/default/minio/app/externalsecret.yaml