Oleksandr Berezovskyi
db16af0d27
ClusterIssuer dry-run fails because cert-manager CRDs are not yet installed when the single infrastructure Kustomization is applied. Split into infrastructure-controllers (Helm charts that install CRDs) and infrastructure-configs (CRD-dependent resources like ClusterIssuer) with a dependency between them.
47 lines
928 B
YAML
47 lines
928 B
YAML
---
|
|
apiVersion: kustomize.toolkit.fluxcd.io/v1
|
|
kind: Kustomization
|
|
metadata:
|
|
name: infrastructure-controllers
|
|
namespace: flux-system
|
|
spec:
|
|
interval: 10m
|
|
path: ./kubernetes/infrastructure/controllers
|
|
prune: true
|
|
sourceRef:
|
|
kind: GitRepository
|
|
name: flux-system
|
|
dependsOn:
|
|
- name: config
|
|
decryption:
|
|
provider: sops
|
|
secretRef:
|
|
name: sops-age
|
|
postBuild:
|
|
substituteFrom:
|
|
- kind: Secret
|
|
name: cluster-vars
|
|
---
|
|
apiVersion: kustomize.toolkit.fluxcd.io/v1
|
|
kind: Kustomization
|
|
metadata:
|
|
name: infrastructure-configs
|
|
namespace: flux-system
|
|
spec:
|
|
interval: 10m
|
|
path: ./kubernetes/infrastructure/configs
|
|
prune: true
|
|
sourceRef:
|
|
kind: GitRepository
|
|
name: flux-system
|
|
dependsOn:
|
|
- name: infrastructure-controllers
|
|
decryption:
|
|
provider: sops
|
|
secretRef:
|
|
name: sops-age
|
|
postBuild:
|
|
substituteFrom:
|
|
- kind: Secret
|
|
name: cluster-vars
|