move namespaces

Author: angelnu

base/namespaces/authentik.yaml

@@ -0,0 +1,6 @@
+apiVersion: v1
+kind: Namespace
+metadata:
+  name: authentik
+  labels:
+    cert-manager: CLUSTER_DOMAIN_CERT

base/namespaces/kustomization.yaml

@@ -1,9 +1,11 @@
 apiVersion: kustomize.config.k8s.io/v1beta1
 kind: Kustomization
 resources:
+- authentik.yaml
 - ceph.yaml
 - ceph-rbd.yaml
 - cert-manager.yaml
+- maddy.yaml
 - monitoring.yaml
 - nginx.yaml
 - podinfo.yaml

base/namespaces/maddy.yaml

@@ -0,0 +1,6 @@
+apiVersion: v1
+kind: Namespace
+metadata:
+  name: maddy
+  labels:
+    cert-manager: CLUSTER_DOMAIN_CERT

core/kube-system/authentication/authentik-db.yaml core/authentik/authentik-db.yaml

@@ -1,6 +1,6 @@
 apiVersion: kustomize.config.k8s.io/v1beta1
 kind: Kustomization
-namespace: kube-system
+namespace: authentik
 resources:
   - authentik-secret.yaml
   - authentik-db.yaml

core/kube-system/authentication/authentik-secret.yaml core/authentik/authentik-secret.yaml

@@ -66,4 +66,7 @@ spec:
   - '*.pub.${CLUSTER_DOMAIN}'
   # This dummy can be changed to circumvent Letsencrypt check for duplicated certs
   # The right fix is to backup certificates correctly
-  - '*.${CLUSTER_DOMAIN_DUMMY}.${CLUSTER_DOMAIN}'
+  - '*.${CLUSTER_DOMAIN_DUMMY}.${CLUSTER_DOMAIN}'
+  secretTemplate:
+    annotations:
+      kubed.appscode.com/sync: "cert-manager=CLUSTER_DOMAIN_CERT" # Sync certificate to matching namespaces

core/kube-system/authentication/authentik.yaml core/authentik/authentik.yaml

@@ -7,5 +7,4 @@ resources:
   - cert-manager-dnsmadeeasy.yaml
   - secret-dnsmadeeasy.yaml
   - certificate.yaml
-  - maddy #ToDo: move after certificate is copied to other namespaces
 

core/kube-system/authentication/kustomization.yaml core/authentik/kustomization.yaml

@@ -2,7 +2,6 @@ apiVersion: kustomize.config.k8s.io/v1beta1
 kind: Kustomization
 namespace: kube-system
 resources:
-  - authentication
   - config-syncer.yaml
   - intel-gpu-plugin
   - kubernetes-dashboard

core/kube-system/authentication/ldap-service.yaml core/authentik/ldap-service.yaml

@@ -1,11 +1,13 @@
 apiVersion: kustomize.config.k8s.io/v1beta1
 kind: Kustomization
 resources:
+  - authentik
   - cert-manager
   - ceph
   - ceph-rbd
   - flux-system
   - kube-system
+  - maddy
   - monitoring
   - nginx
   - postgres

core/cert-manager/certificate.yaml

@@ -1,5 +1,6 @@
 apiVersion: kustomize.config.k8s.io/v1beta1
 kind: Kustomization
+namespace: maddy
 resources:
   - secret.yaml
   - release-fs.yaml