share apps between all clusters

clusters/my-cluster/apps.yaml

@@ -0,0 +1,15 @@
+---
+apiVersion: kustomize.toolkit.fluxcd.io/v1
+kind: Kustomization
+metadata:
+  name: apps
+  namespace: flux-system
+spec:
+  interval: 10m0s
+  sourceRef:
+    kind: GitRepository
+    name: flux-system
+  path: ./apps
+  prune: true
+  wait: true
+  timeout: 5m0s

clusters/my-cluster/flagger/kustomization.yaml

@@ -1,8 +0,0 @@
----
-apiVersion: kustomize.config.k8s.io/v1beta1
-kind: Kustomization
-namespace: flagger-system
-resources:
-  - namespace.yaml
-  - repository.yaml
-  - release.yaml

clusters/my-cluster/flagger/namespace.yaml

@@ -1,7 +0,0 @@
----
-apiVersion: v1
-kind: Namespace
-metadata:
-  name: flagger-system
-  labels:
-    toolkit.fluxcd.io/tenant: sre-team

clusters/my-cluster/flagger/release.yaml

@@ -1,26 +0,0 @@
----
-apiVersion: helm.toolkit.fluxcd.io/v2
-kind: HelmRelease
-metadata:
-  name: flagger
-  namespace: flagger-system
-spec:
-  interval: 1h
-  releaseName: flagger
-  install: # override existing Flagger CRDs
-    crds: CreateReplace
-  upgrade: # update Flagger CRDs
-    crds: CreateReplace
-  chart:
-    spec:
-      chart: flagger
-      version: 1.x # update Flagger to the latest minor version
-      interval: 6h # scan for new versions every six hours
-      sourceRef:
-        kind: HelmRepository
-        name: flagger
-      verify: # verify the chart signature with Cosign keyless
-        provider: cosign 
-  values:
-    nodeSelector:
-      kubernetes.io/os: linux

clusters/my-cluster/flagger/repository.yaml

@@ -1,10 +0,0 @@
----
-apiVersion: source.toolkit.fluxcd.io/v1
-kind: HelmRepository
-metadata:
-  name: flagger
-  namespace: flagger-system
-spec:
-  interval: 1h
-  url: oci://ghcr.io/fluxcd/charts
-  type: oci

clusters/my-cluster/ingress-nginx/kustomization.yaml

@@ -1,8 +0,0 @@
----
-apiVersion: kustomize.config.k8s.io/v1beta1
-kind: Kustomization
-namespace: ingress-nginx
-resources:
-  - namespace.yaml
-  - repository.yaml
-  - release.yaml

clusters/my-cluster/ingress-nginx/namespace.yaml

@@ -1,5 +0,0 @@
----
-apiVersion: v1
-kind: Namespace
-metadata:
-  name: ingress-nginx

clusters/my-cluster/ingress-nginx/release.yaml

@@ -1,15 +0,0 @@
----
-apiVersion: helm.toolkit.fluxcd.io/v2
-kind: HelmRelease
-metadata:
-  name: ingress-nginx
-  namespace: ingress-nginx
-spec:
-  interval: 30m
-  chart:
-    spec:
-      chart: ingress-nginx
-      sourceRef:
-        kind: HelmRepository
-        name: ingress-nginx
-      version: 4.12.0

clusters/my-cluster/ingress-nginx/repository.yaml

@@ -1,9 +0,0 @@
----
-apiVersion: source.toolkit.fluxcd.io/v1
-kind: HelmRepository
-metadata:
-  name: ingress-nginx
-  namespace: ingress-nginx
-spec:
-  interval: 5m
-  url: https://kubernetes.github.io/ingress-nginx

clusters/my-cluster/reloader/kustomization.yaml

@@ -1,8 +0,0 @@
----
-apiVersion: kustomize.config.k8s.io/v1beta1
-kind: Kustomization
-namespace: reloader
-resources:
-  - namespace.yaml
-  - repository.yaml
-  - release.yaml

clusters/my-cluster/reloader/namespace.yaml

@@ -1,5 +0,0 @@
----
-apiVersion: v1
-kind: Namespace
-metadata:
-  name: reloader

clusters/my-cluster/reloader/release.yaml

@@ -1,21 +0,0 @@
----
-apiVersion: helm.toolkit.fluxcd.io/v2
-kind: HelmRelease
-metadata:
-  name: reloader
-  namespace: reloader
-spec:
-  chart:
-    spec:
-      chart: reloader
-      sourceRef:
-        kind: HelmRepository
-        name: stakater
-  interval: 50m
-  install:
-    remediation:
-      retries: 3
-  values:
-    reloader:
-      isArgoRollouts: true
-      reloadStrategy: annotations

clusters/my-cluster/reloader/repository.yaml

@@ -1,9 +0,0 @@
----
-apiVersion: source.toolkit.fluxcd.io/v1
-kind: HelmRepository
-metadata:
-  name: stakater
-  namespace: reloader
-spec:
-  interval: 5m
-  url: https://stakater.github.io/stakater-charts

clusters/my-cluster/sealedsecrets/kustomization.yaml

@@ -1,5 +0,0 @@
----
-apiVersion: kustomize.config.k8s.io/v1beta1
-kind: Kustomization
-resources:
-  - https://github.com/bitnami-labs/sealed-secrets/releases/download/v0.28.0/controller.yaml

clusters/my-cluster/traefik/kustomization.yaml

@@ -1,8 +0,0 @@
----
-apiVersion: kustomize.config.k8s.io/v1beta1
-kind: Kustomization
-namespace: traefik
-resources:
-  - namespace.yaml
-  - repository.yaml
-  - release.yaml

clusters/my-cluster/traefik/namespace.yaml

@@ -1,5 +0,0 @@
----
-apiVersion: v1
-kind: Namespace
-metadata:
-  name: traefik

clusters/my-cluster/traefik/release.yaml

@@ -1,25 +0,0 @@
----
-apiVersion: helm.toolkit.fluxcd.io/v2
-kind: HelmRelease
-metadata:
-  name: traefik
-  namespace: traefik
-spec:
-  releaseName: traefik
-  chart:
-    spec:
-      chart: traefik
-      sourceRef:
-        kind: HelmRepository
-        name: traefik
-  interval: 50m
-  install:
-    remediation:
-      retries: 3
-  values:
-    providers.kubernetesIngress.publishedService.enabled: true
-    additionalArguments:
-      - --providers.kubernetesingress.ingressendpoint.publishedservice=traefik/traefik
-    service:
-      spec:
-        externalTrafficPolicy: Local

clusters/my-cluster/traefik/repository.yaml

@@ -1,9 +0,0 @@
----
-apiVersion: source.toolkit.fluxcd.io/v1
-kind: HelmRepository
-metadata:
-  name: traefik
-  namespace: traefik
-spec:
-  interval: 5m
-  url: https://traefik.github.io/charts