fix: remove email from cert-manager, update ks namespace (#93)

* fix: remove email from cert-manager - ref: onedr0p/cluster-template#1738 * update flux local diff workflow ref: onedr0p/cluster-template#1742 * update ns * patch actions-runner-system kustomization
slipperypenguin · Feb 4, 2025 · 0846459 · 0846459
1 parent af7ea20
commit 0846459
Show file tree

Hide file tree

Showing 6 changed files with 25 additions and 5 deletions.
diff --git a/.github/workflows/flux-local.yaml b/.github/workflows/flux-local.yaml
@@ -31,6 +31,7 @@ jobs:
     runs-on: ubuntu-latest
     permissions:
       pull-requests: write
+      contents: read
     strategy:
       matrix:
         resources: ["helmrelease", "kustomization"]

diff --git a/kubernetes/apps/actions-runner-system/kustomization.yaml b/kubernetes/apps/actions-runner-system/kustomization.yaml
@@ -6,3 +6,11 @@ resources:
   - ./actions-runner-controller/ks.yaml
 components:
   - ../../flux/components/namespace
+patches:
+  - # Add the name to the namespace
+    patch: |
+      - op: add
+        path: /metadata/name
+        value: actions-runner-system
+    target:
+      kind: Namespace
diff --git a/kubernetes/apps/cert-manager/cert-manager/issuers/clusterissuers.yaml b/kubernetes/apps/cert-manager/cert-manager/issuers/clusterissuers.yaml
@@ -7,7 +7,6 @@ metadata:
 spec:
   acme:
     server: https://acme-v02.api.letsencrypt.org/directory
-    email: "${SECRET_ACME_EMAIL}"
     privateKeySecretRef:
       name: letsencrypt-production
     solvers:
@@ -28,7 +27,6 @@ metadata:
 spec:
   acme:
     server: https://acme-staging-v02.api.letsencrypt.org/directory
-    email: "${SECRET_ACME_EMAIL}"
     privateKeySecretRef:
       name: letsencrypt-staging
     solvers:

diff --git a/kubernetes/apps/rook-ceph/kustomization.yaml b/kubernetes/apps/rook-ceph/kustomization.yaml
@@ -2,8 +2,15 @@
 # yaml-language-server: $schema=https://json.schemastore.org/kustomization
 apiVersion: kustomize.config.k8s.io/v1beta1
 kind: Kustomization
-namespace: rook-ceph
 resources:
   - ./rook-ceph/ks.yaml
 components:
   - ../../flux/components/namespace
+patches:
+  - # Add the name to the namespace
+    patch: |
+      - op: add
+        path: /metadata/name
+        value: rook-ceph
+    target:
+      kind: Namespace
diff --git a/kubernetes/apps/volsync-system/kustomization.yaml b/kubernetes/apps/volsync-system/kustomization.yaml
@@ -2,8 +2,15 @@
 # yaml-language-server: $schema=https://json.schemastore.org/kustomization
 apiVersion: kustomize.config.k8s.io/v1beta1
 kind: Kustomization
-namespace: volsync-system
 resources:
   - ./snapshot-controller/ks.yaml
 components:
   - ../../flux/components/namespace
+patches:
+  - # Add the name to the namespace
+    patch: |
+      - op: add
+        path: /metadata/name
+        value: volsync-system
+    target:
+      kind: Namespace
diff --git a/kubernetes/flux/meta/settings/cluster-secrets.sops.yaml b/kubernetes/flux/meta/settings/cluster-secrets.sops.yaml
@@ -6,7 +6,6 @@ metadata:
   namespace: flux-system
 stringData:
   SECRET_DOMAIN: ENC[AES256_GCM,data:FaP82Zuy3Mw=,iv:EJWjLj68M6BqOTSWrwwT2+CLufGV3t8jBhTUwvE2Tpg=,tag:CjV/RXVFDqMGqDS/HKf+QA==,type:str]
-  SECRET_ACME_EMAIL: ENC[AES256_GCM,data:CEMUruyUygJc3AUlXEQ=,iv:BTwmvetmxiRW3DhZ6NbDGbHIqH9LYCRruXBZ8PX/Tm4=,tag:pfdCwxsP0vfU5+VTPwwqUw==,type:str]
   SECRET_CLOUDFLARE_TUNNEL_ID: ENC[AES256_GCM,data:oEEJdFQ3l6s/LoG17jTr5KgSBcD4PKWVuEA50SDTpddllG4Q,iv:T5vg4+II9qbBxExDccKcARjXJLhd36bUKC+4f+cBSO8=,tag:S6tdw9a64WD2kKu+C0DvjA==,type:str]
 sops:
   kms: []