mirror of
https://github.com/vhaudiquet/homeprod.git
synced 2026-09-21 16:36:05 +00:00
kosmos-ai-botandvhaudiquet
45f8f84cbc
Per review feedback: remove the self-hosted Renovate deployment (kubernetes/code/renovate/* + root kustomization wiring) from this PR and defer it to a follow-up. Keep the renovate.json config to merge now. Also drop the postUpgradeTasks SOPS re-encrypt block: it depended on the runner's boot.sh decrypt flow, and the hosted Mend app cannot run 'sops' (allowedPostUpgradeCommands). SOPS handling returns with the deployment.
49 lines
1.9 KiB
YAML
49 lines
1.9 KiB
YAML
# Root Kustomization for Flux
|
|
# Components managed by separate Flux Kustomizations (CRD dependency ordering):
|
|
# - longhorn: managed by Flux Kustomization (CRDs must be installed first)
|
|
# - longhorn-jobs: managed by Flux Kustomization (RecurringJob CRDs need longhorn)
|
|
# - cert-manager: managed by Flux Kustomization (CRDs must be installed first)
|
|
# - cert-manager-webhook-ovh: managed by Flux Kustomization (depends on cert-manager)
|
|
# - cert-manager-issuer: managed by Flux Kustomization (depends on cert-manager + webhook)
|
|
# - caddy-certificates: managed by Flux Kustomization (Certificate CRDs need cert-manager)
|
|
# - stalwart-certificates: managed by Flux Kustomization (Certificate CRDs need cert-manager)
|
|
# - openclaw-operator: managed by Flux Kustomization (operator CRDs must be installed first)
|
|
# - openclaw: managed by Flux Kustomization (OpenClawInstance CRD needs openclaw-operator)
|
|
apiVersion: kustomize.config.k8s.io/v1beta1
|
|
kind: Kustomization
|
|
resources:
|
|
# System components (kubernetes platform machinery)
|
|
- system/cilium # cilium IP pool is managed here
|
|
- system/coredns
|
|
- system/csi-driver-nfs
|
|
- system/external-dns
|
|
- system/flux
|
|
# Infrastructure (backbone services apps depend on)
|
|
- infrastructure/authentik
|
|
- infrastructure/mail/stalwart
|
|
- infrastructure/observability
|
|
- infrastructure/traefik
|
|
- infrastructure/caddy
|
|
- infrastructure/network/blocky
|
|
# Dev (developer platform)
|
|
- dev/gitea
|
|
- dev/harbor
|
|
# Home (home automation)
|
|
- home/home-assistant
|
|
- home/zigbee2mqtt
|
|
# Personal (apps storing my own content, grouped by content type)
|
|
- personal/paperless
|
|
- personal/radicale
|
|
- personal/media/photoprism
|
|
- personal/notes/notesnook
|
|
- personal/notes/obsidian-livesync
|
|
# Utilities (generic content-agnostic tools)
|
|
- utilities/dashy
|
|
- utilities/glance
|
|
- utilities/open-webui
|
|
# Production (public-facing websites/apps)
|
|
- production/buildpath
|
|
- production/semery-fr
|
|
- production/umami
|
|
- production/vhaudiquet-fr
|