flux: re-order longhorn jobs for right dependencies

kubernetes/kustomization.yaml

@@ -1,5 +1,7 @@
 # Root Kustomization for Flux
 # Components managed by separate Flux Kustomizations (CRD dependency ordering):
+# - longhorn: managed by Flux Kustomization (CRDs must be installed first)
+# - longhorn-jobs: managed by Flux Kustomization (RecurringJob CRDs need longhorn)
 # - cert-manager: managed by Flux Kustomization (CRDs must be installed first)
 # - cert-manager-webhook-ovh: managed by Flux Kustomization (depends on cert-manager)
 # - cert-manager-issuer: managed by Flux Kustomization (depends on cert-manager + webhook)
@@ -12,7 +14,6 @@ resources:
   - system/cilium # cilium IP pool is managed here
   - system/coredns
   - system/csi-driver-nfs
-  - system/longhorn
   - system/external-dns
   - system/flux
   # Infrastructure (backbone services apps depend on)

kubernetes/system/flux/kustomization.yaml

@@ -9,3 +9,5 @@ resources:
   - cert-manager-issuer.yaml
   - caddy-certificates.yaml
   - stalwart-certificates.yaml
+  - longhorn.yaml
+  - longhorn-jobs.yaml

kubernetes/system/flux/longhorn-jobs.yaml

@@ -0,0 +1,20 @@
+# Flux Kustomization for Longhorn recurring jobs
+# Depends on Longhorn being fully operational (CRDs installed)
+apiVersion: kustomize.toolkit.fluxcd.io/v1
+kind: Kustomization
+metadata:
+  name: longhorn-jobs
+  namespace: flux-system
+spec:
+  interval: 10m
+  prune: true
+  sourceRef:
+    kind: GitRepository
+    name: homeprod
+  path: ./kubernetes/system/longhorn-jobs
+  dependsOn:
+    - name: longhorn
+  decryption:
+    provider: sops
+    secretRef:
+      name: flux-sops

kubernetes/system/flux/longhorn.yaml

@@ -0,0 +1,24 @@
+# Flux Kustomization for Longhorn
+# Separate from main homeprod because Longhorn CRDs must be installed
+# before RecurringJob resources can be applied
+apiVersion: kustomize.toolkit.fluxcd.io/v1
+kind: Kustomization
+metadata:
+  name: longhorn
+  namespace: flux-system
+spec:
+  interval: 10m
+  prune: true
+  sourceRef:
+    kind: GitRepository
+    name: homeprod
+  path: ./kubernetes/system/longhorn
+  decryption:
+    provider: sops
+    secretRef:
+      name: flux-sops
+  healthChecks:
+    - apiVersion: apps/v1
+      kind: Deployment
+      name: longhorn-manager
+      namespace: longhorn-system

kubernetes/system/longhorn-jobs/kustomization.yaml

@@ -0,0 +1,4 @@
+apiVersion: kustomize.config.k8s.io/v1beta1
+kind: Kustomization
+resources:
+  - recurring-jobs.yaml

kubernetes/system/longhorn-jobs/recurring-jobs.yaml

@@ -31,4 +31,4 @@ spec:
   labels:
     type: backup
   groups:
-    - default
+    - default

kubernetes/system/longhorn/kustomization.yaml

@@ -5,7 +5,6 @@ resources:
   - namespace.yaml
   - repository.yaml
   - release.yaml
-  - recurring-jobs.yaml
 secretGenerator:
   - name: longhorn-values
     files: