disable CaaS for now

It's using a shitload of bandwidth

apps/kubernaut/kustomization.yaml

@@ -5,5 +5,4 @@ namespace: kubernaut
 resources:
   - secrets.yaml
   - https://git.kill0.net/ryanc/kubernaut/kustomize?ref=v0.2.2
-  - https://git.kill0.net/ryanc/caas/kustomize?timeout=300
   - ingress.yaml

clusters/k3s-cluster/flux-system/gotk-components.yaml

@@ -13,6 +13,65 @@ metadata:
     pod-security.kubernetes.io/warn-version: latest
   name: flux-system
 ---
+apiVersion: networking.k8s.io/v1
+kind: NetworkPolicy
+metadata:
+  labels:
+    app.kubernetes.io/instance: flux-system
+    app.kubernetes.io/part-of: flux
+    app.kubernetes.io/version: v2.4.0
+  name: allow-egress
+  namespace: flux-system
+spec:
+  egress:
+  - {}
+  ingress:
+  - from:
+    - podSelector: {}
+  podSelector: {}
+  policyTypes:
+  - Ingress
+  - Egress
+---
+apiVersion: networking.k8s.io/v1
+kind: NetworkPolicy
+metadata:
+  labels:
+    app.kubernetes.io/instance: flux-system
+    app.kubernetes.io/part-of: flux
+    app.kubernetes.io/version: v2.4.0
+  name: allow-scraping
+  namespace: flux-system
+spec:
+  ingress:
+  - from:
+    - namespaceSelector: {}
+    ports:
+    - port: 8080
+      protocol: TCP
+  podSelector: {}
+  policyTypes:
+  - Ingress
+---
+apiVersion: networking.k8s.io/v1
+kind: NetworkPolicy
+metadata:
+  labels:
+    app.kubernetes.io/instance: flux-system
+    app.kubernetes.io/part-of: flux
+    app.kubernetes.io/version: v2.4.0
+  name: allow-webhooks
+  namespace: flux-system
+spec:
+  ingress:
+  - from:
+    - namespaceSelector: {}
+  podSelector:
+    matchLabels:
+      app: notification-controller
+  policyTypes:
+  - Ingress
+---
 apiVersion: v1
 kind: ResourceQuota
 metadata:

clusters/k3s-cluster/flux-system/gotk-sync.yaml

@@ -20,7 +20,7 @@ metadata:
   namespace: flux-system
 spec:
   interval: 10m0s
-  path: ./clusters/my-cluster
+  path: ./clusters/k3s-cluster
   prune: true
   sourceRef:
     kind: GitRepository

clusters/my-cluster/goldpinger/kustomization.yaml

@@ -1,8 +0,0 @@
----
-apiVersion: kustomize.config.k8s.io/v1beta1
-kind: Kustomization
-namespace: goldpinger
-resources:
-  - namespace.yaml
-  - repository.yaml
-  - release.yaml

clusters/my-cluster/goldpinger/namespace.yaml

@@ -1,5 +0,0 @@
----
-apiVersion: v1
-kind: Namespace
-metadata:
-  name: goldpinger

clusters/my-cluster/goldpinger/release.yaml

@@ -1,21 +0,0 @@
----
-apiVersion: helm.toolkit.fluxcd.io/v2
-kind: HelmRelease
-metadata:
-  name: goldpinger
-  namespace: goldpinger
-spec:
-  chart:
-    spec:
-      chart: goldpinger
-      sourceRef:
-        kind: HelmRepository
-        name: goldpinger
-  interval: 50m
-  install:
-    remediation:
-      retries: 3
-  values:
-    goldpinger:
-      isArgoRollouts: true
-      reloadStrategy: annotations

clusters/my-cluster/goldpinger/repository.yaml

@@ -1,9 +0,0 @@
----
-apiVersion: source.toolkit.fluxcd.io/v1
-kind: HelmRepository
-metadata:
-  name: goldpinger
-  namespace: goldpinger
-spec:
-  interval: 5m
-  url: https://bloomberg.github.io/goldpinger