refactored project structure

base/apps/kustomization.yaml

@@ -0,0 +1,4 @@
+---
+resources:
+  - cert-manager
+  - keycloak

base/charts/ingress-nginx/kustomization.yaml

@@ -1,10 +1,11 @@
 ---
-helmCharts:
-  - name: ingress-nginx
-    repo: https://kubernetes.github.io/ingress-nginx
-    namespace: ingress-nginx
-    version: 4.2.0
-    releaseName: fcos-ingress-nginx
+namespace: ingress-nginx
 resources:
   - namespace.yaml
-  # - configmap.yaml
+helmCharts:
+  - name: ingress-nginx
+    version: 4.2.0
+    releaseName: fcos-ingress-nginx
+    repo: https://kubernetes.github.io/ingress-nginx
+    namespace: ingress-nginx
+    valuesFile: values.yaml

base/charts/ingress-nginx/values.yaml

@@ -0,0 +1,22 @@
+---
+controller:
+  ingressClassResource:
+    default: true
+  watchIngressWithoutClass: true
+  service:
+    ipFamilyPolicy: PreferDualStack
+    ipFamilies:
+      - IPv4
+      - IPv6
+  metrics:
+    enabled: true
+    service:
+      annotations:
+        prometheus.io/port: 10254
+        prometheus.io/scrape: true
+  config:
+    enable-ocsp: true
+    enable-brotli: true
+    enable-real-ip: true
+    enable-modsecurity: true
+    enable-owasp-modsecurity-crs: true

base/charts/kustomization.yaml

@@ -0,0 +1,4 @@
+---
+resources:
+  - ingress-nginx
+  - gitea

base/ingress-nginx/configmap.yaml

@@ -1,9 +0,0 @@
----
-apiVersion: v1
-kind: ConfigMap
-metadata:
-  name: ingress-nginx-controller
-  namespace: ingress-nginx
-data:
-  hsts-preload: "true"
-  enable-brotli: "true"

base/kustomization.yaml

@@ -1,6 +1,5 @@
 ---
 resources:
-  - ./ingress-nginx
-  - ./cert-manager
-  - ../apps/keycloak
-  - ../apps/gitea
+  - operators
+  - charts
+  - apps

base/operators/kustomization.yaml

@@ -0,0 +1,5 @@
+---
+resources:
+  - cert-manager
+  - postgresql
+  - keycloak

overlays/dev/kustomization.yaml

@@ -1,16 +1,5 @@
 ---
 resources:
   - ../../base
-patches:
-  - target:
-      kind: Ingress
-      group: networking.k8s.io
-      version: v1
-    patch: |-
-      - op: replace
-        path: /metadata/annotations
-        value:
-          kubernetes.io/ingress.class: nginx
-          nginx.ingress.kubernetes.io/rewrite-target: /
-          nginx.ingress.kubernetes.io/ssl-redirect: "false"
-          nginx.ingress.kubernetes.io/force-ssl-redirect: "false"
+  - cert-manager
+  - keycloak

overlays/prod/kustomization.yaml

@@ -1,9 +1,8 @@
 ---
 resources:
   - ../../base
-  - ./apps/cert-manager
-  - ./apps/keycloak
-  - ./apps/gitea
+  - keycloak
+  - gitea
 patches:
   - target:
       kind: Ingress
@@ -13,7 +12,6 @@ patches:
       - op: replace
         path: /metadata/annotations
         value:
-          kubernetes.io/ingress.class: nginx
-          kubernetes.io/tls-acme: 'true'
-          cert-manager.io/cluster-issuer: letsencrypt-acme-staging-v02
-          cert-manager.io/cluster-issuer: letsencrypt-acme-v02
+          kubernetes.io/ingress.class: "nginx"
+          kubernetes.io/tls-acme: "true"
+          cert-manager.io/cluster-issuer: "letsencrypt-acme