remove Argo

It's using a shitload of bandwidth

apps/kipunji/ingress.yaml

@@ -1,19 +0,0 @@
----
-apiVersion: networking.k8s.io/v1
-kind: Ingress
-metadata:
-  annotations:
-    kubernetes.io/ingress.class: istio
-  name: kipunji-ingress
-  namespace: kipunji
-spec:
-  rules:
-    - http:
-        paths:
-          - path: /
-            pathType: Prefix
-            backend:
-              service:
-                name: kipunji
-                port:
-                  name: web

apps/kipunji/kustomization.yaml

@@ -1,6 +0,0 @@
----
-apiVersion: kustomize.config.k8s.io/v1beta1
-kind: Kustomization
-resources:
-  - https://git.kill0.net/ryanc/kipunji/kustomize
-  - ingress.yaml

clusters/k3s-cluster/flux-system/gotk-components.yaml

@@ -13,6 +13,65 @@ metadata:
     pod-security.kubernetes.io/warn-version: latest
   name: flux-system
 ---
+apiVersion: networking.k8s.io/v1
+kind: NetworkPolicy
+metadata:
+  labels:
+    app.kubernetes.io/instance: flux-system
+    app.kubernetes.io/part-of: flux
+    app.kubernetes.io/version: v2.4.0
+  name: allow-egress
+  namespace: flux-system
+spec:
+  egress:
+  - {}
+  ingress:
+  - from:
+    - podSelector: {}
+  podSelector: {}
+  policyTypes:
+  - Ingress
+  - Egress
+---
+apiVersion: networking.k8s.io/v1
+kind: NetworkPolicy
+metadata:
+  labels:
+    app.kubernetes.io/instance: flux-system
+    app.kubernetes.io/part-of: flux
+    app.kubernetes.io/version: v2.4.0
+  name: allow-scraping
+  namespace: flux-system
+spec:
+  ingress:
+  - from:
+    - namespaceSelector: {}
+    ports:
+    - port: 8080
+      protocol: TCP
+  podSelector: {}
+  policyTypes:
+  - Ingress
+---
+apiVersion: networking.k8s.io/v1
+kind: NetworkPolicy
+metadata:
+  labels:
+    app.kubernetes.io/instance: flux-system
+    app.kubernetes.io/part-of: flux
+    app.kubernetes.io/version: v2.4.0
+  name: allow-webhooks
+  namespace: flux-system
+spec:
+  ingress:
+  - from:
+    - namespaceSelector: {}
+  podSelector:
+    matchLabels:
+      app: notification-controller
+  policyTypes:
+  - Ingress
+---
 apiVersion: v1
 kind: ResourceQuota
 metadata:

clusters/k3s-cluster/flux-system/gotk-sync.yaml

@@ -20,7 +20,7 @@ metadata:
   namespace: flux-system
 spec:
   interval: 10m0s
-  path: ./clusters/my-cluster
+  path: ./clusters/k3s-cluster
   prune: true
   sourceRef:
     kind: GitRepository

clusters/k3s-cluster/flux-system/kustomization.yaml

@@ -17,7 +17,7 @@ patches:
               - name: manager
                 env:
                   - name: "HTTPS_PROXY"
-                    value: "http://proxy-lb.lab.kill0.net:3128"
+                    value: "http://proxy-lb.lab.kill0.net.:3128"
                   - name: "NO_PROXY"
                     value: ".cluster.local.,.cluster.local,.svc,10.0.0.0/8,172.16.0.0/12,192.168.0.0/16"
     target:

clusters/k8s-cluster/flux-system/kustomization.yaml

@@ -17,9 +17,9 @@ patches:
               - name: manager
                 env:
                   - name: "https_proxy"
-                    value: "http://proxy-lb.lab.kill0.net:3128"
+                    value: "http://proxy-lb.lab.kill0.net.:3128"
                   - name: "no_proxy"
-                    value: ".svc, 10.0.0.0/8, 127.0.0.0/8, 172.16.0.0/12, 192.168.0.0/16, k8s-ctrl-lb.lab.kill0.net, localhost, registry.lab.kill0.net"
+                    value: ".cluster.local., .cluster.local, .svc, 10.0.0.0/8, 127.0.0.0/8, 172.16.0.0/12, 192.168.0.0/16, k8s-ctrl-lb.lab.kill0.net, localhost, registry.lab.kill0.net"
     target:
       kind: Deployment
       labelSelector: app.kubernetes.io/part-of=flux

clusters/k8s-cluster/spegel/kustomization.yaml

@@ -1,7 +1,7 @@
 ---
 apiVersion: kustomize.config.k8s.io/v1beta1
 kind: Kustomization
-namespace: goldpinger
+namespace: spegel
 resources:
   - namespace.yaml
   - repository.yaml

clusters/k8s-cluster/spegel/namespace.yaml

@@ -2,4 +2,4 @@
 apiVersion: v1
 kind: Namespace
 metadata:
-  name: argocd
+  name: spegel

clusters/k8s-cluster/spegel/release.yaml

@@ -0,0 +1,16 @@
+---
+apiVersion: helm.toolkit.fluxcd.io/v2beta1
+kind: HelmRelease
+metadata:
+  name: spegel
+  namespace: spegel
+spec:
+  interval: 1m
+  chart:
+    spec:
+      chart: spegel
+      version: v0.0.30
+      interval: 5m
+      sourceRef:
+        kind: HelmRepository
+        name: spegel

clusters/k8s-cluster/spegel/repository.yaml

@@ -0,0 +1,10 @@
+---
+apiVersion: source.toolkit.fluxcd.io/v1beta2
+kind: HelmRepository
+metadata:
+  name: spegel
+  namespace: spegel
+spec:
+  type: "oci"
+  interval: 5m0s
+  url: oci://ghcr.io/spegel-org/helm-charts

clusters/my-cluster/argo-rollouts/kustomization.yaml

@@ -1,7 +0,0 @@
----
-apiVersion: kustomize.config.k8s.io/v1beta1
-kind: Kustomization
-namespace: argo-rollouts
-resources:
-  - namespace.yaml
-  - https://github.com/argoproj/argo-rollouts/releases/download/v1.7.2/install.yaml

clusters/my-cluster/argo-rollouts/namespace.yaml

@@ -1,5 +0,0 @@
----
-apiVersion: v1
-kind: Namespace
-metadata:
-  name: argo-rollouts

clusters/my-cluster/argocd/kustomization.yaml

@@ -1,18 +0,0 @@
----
-apiVersion: kustomize.config.k8s.io/v1beta1
-kind: Kustomization
-namespace: argocd
-resources:
-  - namespace.yaml
-  - https://raw.githubusercontent.com/argoproj/argo-cd/v2.13.3/manifests/install.yaml
-patches:
-  - patch: |
-      apiVersion: v1
-      kind: Service
-      metadata:
-        name: argocd-server
-      spec:
-        type: LoadBalancer
-    target:
-      kind: Service
-      labelSelector: app.kubernetes.io/name=argocd-server

clusters/my-cluster/goldpinger/release.yaml

@@ -1,21 +0,0 @@
----
-apiVersion: helm.toolkit.fluxcd.io/v2
-kind: HelmRelease
-metadata:
-  name: goldpinger
-  namespace: goldpinger
-spec:
-  chart:
-    spec:
-      chart: goldpinger
-      sourceRef:
-        kind: HelmRepository
-        name: goldpinger
-  interval: 50m
-  install:
-    remediation:
-      retries: 3
-  values:
-    goldpinger:
-      isArgoRollouts: true
-      reloadStrategy: annotations

clusters/my-cluster/goldpinger/repository.yaml

@@ -1,9 +0,0 @@
----
-apiVersion: source.toolkit.fluxcd.io/v1
-kind: HelmRepository
-metadata:
-  name: goldpinger
-  namespace: goldpinger
-spec:
-  interval: 5m
-  url: https://bloomberg.github.io/goldpinger

infrastructure/controllers/envoy-gateway/namespace.yaml

@@ -2,4 +2,4 @@
 apiVersion: v1
 kind: Namespace
 metadata:
-  name: goldpinger
+  name: envoy-gateway-system

infrastructure/controllers/envoy-gateway/release.yaml

@@ -0,0 +1,12 @@
+---
+apiVersion: helm.toolkit.fluxcd.io/v2
+kind: HelmRelease
+metadata:
+  name: eg
+  namespace: envoy-gateway-system
+spec:
+  interval: 10m
+  releaseName: eg
+  chartRef:
+    kind: OCIRepository
+    name: envoy-gateway

infrastructure/controllers/envoy-gateway/repository.yaml

@@ -0,0 +1,11 @@
+---
+apiVersion: source.toolkit.fluxcd.io/v1beta2
+kind: OCIRepository
+metadata:
+  name: envoy-gateway
+  namespace: envoy-gateway-system
+spec:
+  interval: 10m
+  url: oci://docker.io/envoyproxy/gateway-helm
+  ref:
+    semver: ">=1.3.2"

infrastructure/controllers/flagger/repository.yaml

@@ -5,6 +5,5 @@ metadata:
   namespace: flagger-system
 spec:
   interval: 1h
-  url: oci://registry.lab.kill0.net:5004/fluxcd/charts
+  url: oci://ghcr.io/fluxcd/charts
   type: oci
-  insecure: true

infrastructure/controllers/gateway-api/kustomization.yaml

@@ -0,0 +1,5 @@
+---
+apiVersion: kustomize.config.k8s.io/v1beta1
+kind: Kustomization
+resources:
+  - https://github.com/kubernetes-sigs/gateway-api/releases/download/v1.2.0/standard-install.yaml

infrastructure/controllers/k6-operator/kustomization.yaml

@@ -1,6 +0,0 @@
----
-apiVersion: kustomize.config.k8s.io/v1beta1
-kind: Kustomization
-resources:
-  - repository.yaml
-  - release.yaml

infrastructure/controllers/k6-operator/release.yaml

@@ -1,16 +0,0 @@
----
-apiVersion: helm.toolkit.fluxcd.io/v2
-kind: HelmRelease
-metadata:
-  name: k6-operator
-  namespace: default
-spec:
-  interval: 10m
-  chart:
-    spec:
-      chart: k6-operator
-      version: 3.11.0
-      sourceRef:
-        kind: HelmRepository
-        name: grafana
-      interval: 10m

infrastructure/controllers/k6-operator/repository.yaml

@@ -1,9 +0,0 @@
----
-apiVersion: source.toolkit.fluxcd.io/v1
-kind: HelmRepository
-metadata:
-  name: grafana
-  namespace: default
-spec:
-  interval: 1m
-  url: https://grafana.github.io/helm-charts 

infrastructure/controllers/kubelet-csr-approver/kustomization.yaml

@@ -1,7 +0,0 @@
----
-apiVersion: kustomize.config.k8s.io/v1beta1
-kind: Kustomization
-namespace: kube-system
-resources:
-  - repository.yaml
-  - release.yaml

infrastructure/controllers/kubelet-csr-approver/release.yaml

@@ -1,20 +0,0 @@
----
-apiVersion: helm.toolkit.fluxcd.io/v2
-kind: HelmRelease
-metadata:
-  name: kubelet-csr-approver
-  namespace: kube-system
-spec:
-  releaseName: kubelet-csr-approver
-  chart:
-    spec:
-      chart: kubelet-csr-approver
-      sourceRef:
-        kind: HelmRepository
-        name: kubelet-csr-approver
-  values:
-    providerRegex: ^(?:(?:kube|k[038]s))\d+$
-    providerIpPrefixes: 10.100.100.0/24
-    maxExpirationSeconds: 86400
-    bypassDnsResolution: false
-  interval: 1m

infrastructure/controllers/kubelet-csr-approver/repository.yaml

@@ -1,9 +0,0 @@
----
-apiVersion: source.toolkit.fluxcd.io/v1
-kind: HelmRepository
-metadata:
-  name: kubelet-csr-approver
-  namespace: kube-system
-spec:
-  interval: 5m
-  url: https://postfinance.github.io/kubelet-csr-approver

infrastructure/controllers/sealedsecrets/kustomization.yaml

@@ -2,4 +2,4 @@
 apiVersion: kustomize.config.k8s.io/v1beta1
 kind: Kustomization
 resources:
-  - https://github.com/bitnami-labs/sealed-secrets/releases/download/v0.28.0/controller.yaml
+  - https://github.com/bitnami-labs/sealed-secrets/releases/download/v0.29.0/controller.yaml