recovery(flux): make suspend holds explicit

clusters/atlas/flux-system/applications/ai-llm/kustomization.yaml

@@ -8,6 +8,7 @@ metadata:
     kustomize.toolkit.fluxcd.io/ssa: IfNotPresent
 spec:
   interval: 10m
+  suspend: true
   path: ./services/ai-llm
   targetNamespace: ai
   prune: true

clusters/atlas/flux-system/applications/finance/kustomization.yaml

@@ -8,6 +8,7 @@ metadata:
     kustomize.toolkit.fluxcd.io/ssa: IfNotPresent
 spec:
   interval: 10m
+  suspend: true
   path: ./services/finance
   prune: true
   sourceRef:

clusters/atlas/flux-system/applications/game-stream/kustomization.yaml

@@ -8,6 +8,7 @@ metadata:
     kustomize.toolkit.fluxcd.io/ssa: IfNotPresent
 spec:
   interval: 10m
+  suspend: true
   path: ./services/game-stream
   targetNamespace: game-stream
   prune: true

clusters/atlas/flux-system/applications/health/kustomization.yaml

@@ -8,6 +8,7 @@ metadata:
     kustomize.toolkit.fluxcd.io/ssa: IfNotPresent
 spec:
   interval: 10m
+  suspend: true
   path: ./services/health
   prune: true
   sourceRef:

clusters/atlas/flux-system/applications/jellyfin/kustomization.yaml

@@ -8,6 +8,7 @@ metadata:
     kustomize.toolkit.fluxcd.io/ssa: IfNotPresent
 spec:
   interval: 10m
+  suspend: true
   path: ./services/jellyfin
   targetNamespace: jellyfin
   prune: true

clusters/atlas/flux-system/applications/jenkins/kustomization.yaml

@@ -8,6 +8,7 @@ metadata:
     kustomize.toolkit.fluxcd.io/ssa: IfNotPresent
 spec:
   interval: 10m
+  suspend: true
   path: ./services/jenkins
   prune: true
   sourceRef:

clusters/atlas/flux-system/applications/mailu/kustomization.yaml

@@ -8,6 +8,7 @@ metadata:
     kustomize.toolkit.fluxcd.io/ssa: IfNotPresent
 spec:
   interval: 10m
+  suspend: true
   sourceRef:
     kind: GitRepository
     name: flux-system

clusters/atlas/flux-system/applications/nextcloud-mail-sync/kustomization.yaml

@@ -8,6 +8,7 @@ metadata:
     kustomize.toolkit.fluxcd.io/ssa: IfNotPresent
 spec:
   interval: 10m
+  suspend: true
   prune: true
   sourceRef:
     kind: GitRepository

clusters/atlas/flux-system/applications/nextcloud/kustomization.yaml

@@ -8,6 +8,7 @@ metadata:
     kustomize.toolkit.fluxcd.io/ssa: IfNotPresent
 spec:
   interval: 10m
+  suspend: true
   path: ./services/nextcloud
   targetNamespace: nextcloud
   prune: true

clusters/atlas/flux-system/applications/outline/kustomization.yaml

@@ -8,6 +8,7 @@ metadata:
     kustomize.toolkit.fluxcd.io/ssa: IfNotPresent
 spec:
   interval: 10m
+  suspend: true
   path: ./services/outline
   prune: true
   sourceRef:

clusters/atlas/flux-system/applications/planka/kustomization.yaml

@@ -8,6 +8,7 @@ metadata:
     kustomize.toolkit.fluxcd.io/ssa: IfNotPresent
 spec:
   interval: 10m
+  suspend: true
   path: ./services/planka
   prune: true
   sourceRef:

clusters/atlas/flux-system/applications/quality/kustomization.yaml

@@ -8,6 +8,7 @@ metadata:
     kustomize.toolkit.fluxcd.io/ssa: IfNotPresent
 spec:
   interval: 10m
+  suspend: true
   path: ./services/quality
   prune: true
   sourceRef:

clusters/atlas/flux-system/applications/typhon/kustomization.yaml

@@ -8,6 +8,7 @@ metadata:
     kustomize.toolkit.fluxcd.io/ssa: IfNotPresent
 spec:
   interval: 10m
+  suspend: true
   path: ./services/typhon
   prune: true
   sourceRef:

clusters/atlas/flux-system/applications/vaultwarden/kustomization.yaml

@@ -8,7 +8,7 @@ metadata:
     kustomize.toolkit.fluxcd.io/ssa: IfNotPresent
 spec:
   interval: 10m
-  suspend: false
+  suspend: true
   sourceRef:
     kind: GitRepository
     name: flux-system

clusters/atlas/flux-system/applications/veles/kustomization.yaml

@@ -8,6 +8,7 @@ metadata:
     kustomize.toolkit.fluxcd.io/ssa: IfNotPresent
 spec:
   interval: 10m
+  suspend: true
   path: ./services/veles
   targetNamespace: veles
   prune: true

clusters/atlas/flux-system/applications/wallet-monero-temp/kustomization.yaml

@@ -8,6 +8,7 @@ metadata:
     kustomize.toolkit.fluxcd.io/ssa: IfNotPresent
 spec:
   interval: 10m
+  suspend: true
   path: ./services/crypto/wallet-monero-temp
   targetNamespace: crypto
   prune: true

clusters/atlas/flux-system/applications/xmr-miner/kustomization.yaml

@@ -8,6 +8,7 @@ metadata:
     kustomize.toolkit.fluxcd.io/ssa: IfNotPresent
 spec:
   interval: 10m
+  suspend: true
   path: ./services/crypto/xmr-miner
   targetNamespace: crypto
   prune: true

clusters/atlas/flux-system/gotk-sync.yaml

@@ -21,6 +21,7 @@ metadata:
   namespace: flux-system
 spec:
   interval: 1h0m0s
+  suspend: true
   path: ./clusters/atlas/flux-system
   prune: true
   sourceRef:

clusters/atlas/flux-system/kustomization.yaml

@@ -6,5 +6,3 @@ resources:
   - gotk-sync.yaml
   - platform
   - applications
-patches:
-  - path: recovery-suspend-kustomizations.yaml

clusters/atlas/flux-system/platform/descheduler/kustomization.yaml

@@ -8,6 +8,7 @@ metadata:
     kustomize.toolkit.fluxcd.io/ssa: IfNotPresent
 spec:
   interval: 30m
+  suspend: true
   path: ./infrastructure/descheduler
   prune: true
   sourceRef:

clusters/atlas/flux-system/platform/gitops-ui/kustomization.yaml

@@ -8,6 +8,7 @@ metadata:
     kustomize.toolkit.fluxcd.io/ssa: IfNotPresent
 spec:
   interval: 10m
+  suspend: true
   timeout: 10m
   path: ./services/gitops-ui
   prune: true

clusters/atlas/flux-system/platform/longhorn-ui/kustomization.yaml

@@ -8,6 +8,7 @@ metadata:
     kustomize.toolkit.fluxcd.io/ssa: IfNotPresent
 spec:
   interval: 10m
+  suspend: true
   path: ./infrastructure/longhorn/ui-ingress
   targetNamespace: longhorn-system
   prune: true

clusters/atlas/flux-system/platform/resource-guardrails/kustomization.yaml

@@ -8,6 +8,7 @@ metadata:
     kustomize.toolkit.fluxcd.io/ssa: IfNotPresent
 spec:
   interval: 10m
+  suspend: true
   path: ./infrastructure/resource-guardrails
   prune: true
   sourceRef:

clusters/atlas/flux-system/recovery-suspend-kustomizations.yaml

@@ -1,176 +0,0 @@
-# clusters/atlas/flux-system/recovery-suspend-kustomizations.yaml
-apiVersion: kustomize.toolkit.fluxcd.io/v1
-kind: Kustomization
-metadata:
-  name: flux-system
-  namespace: flux-system
-spec:
-  suspend: true
----
-apiVersion: kustomize.toolkit.fluxcd.io/v1
-kind: Kustomization
-metadata:
-  name: ai-llm
-  namespace: flux-system
-spec:
-  suspend: true
----
-apiVersion: kustomize.toolkit.fluxcd.io/v1
-kind: Kustomization
-metadata:
-  name: descheduler
-  namespace: flux-system
-spec:
-  suspend: true
----
-apiVersion: kustomize.toolkit.fluxcd.io/v1
-kind: Kustomization
-metadata:
-  name: finance
-  namespace: flux-system
-spec:
-  suspend: true
----
-apiVersion: kustomize.toolkit.fluxcd.io/v1
-kind: Kustomization
-metadata:
-  name: game-stream
-  namespace: flux-system
-spec:
-  suspend: true
----
-apiVersion: kustomize.toolkit.fluxcd.io/v1
-kind: Kustomization
-metadata:
-  name: gitops-ui
-  namespace: flux-system
-spec:
-  suspend: true
----
-apiVersion: kustomize.toolkit.fluxcd.io/v1
-kind: Kustomization
-metadata:
-  name: health
-  namespace: flux-system
-spec:
-  suspend: true
----
-apiVersion: kustomize.toolkit.fluxcd.io/v1
-kind: Kustomization
-metadata:
-  name: jellyfin
-  namespace: flux-system
-spec:
-  suspend: true
----
-apiVersion: kustomize.toolkit.fluxcd.io/v1
-kind: Kustomization
-metadata:
-  name: jenkins
-  namespace: flux-system
-spec:
-  suspend: true
----
-apiVersion: kustomize.toolkit.fluxcd.io/v1
-kind: Kustomization
-metadata:
-  name: longhorn-ui
-  namespace: flux-system
-spec:
-  suspend: true
----
-apiVersion: kustomize.toolkit.fluxcd.io/v1
-kind: Kustomization
-metadata:
-  name: mailu
-  namespace: flux-system
-spec:
-  suspend: true
----
-apiVersion: kustomize.toolkit.fluxcd.io/v1beta2
-kind: Kustomization
-metadata:
-  name: nextcloud
-  namespace: flux-system
-spec:
-  suspend: true
----
-apiVersion: kustomize.toolkit.fluxcd.io/v1
-kind: Kustomization
-metadata:
-  name: nextcloud-mail-sync
-  namespace: flux-system
-spec:
-  suspend: true
----
-apiVersion: kustomize.toolkit.fluxcd.io/v1
-kind: Kustomization
-metadata:
-  name: outline
-  namespace: flux-system
-spec:
-  suspend: true
----
-apiVersion: kustomize.toolkit.fluxcd.io/v1
-kind: Kustomization
-metadata:
-  name: planka
-  namespace: flux-system
-spec:
-  suspend: true
----
-apiVersion: kustomize.toolkit.fluxcd.io/v1
-kind: Kustomization
-metadata:
-  name: quality
-  namespace: flux-system
-spec:
-  suspend: true
----
-apiVersion: kustomize.toolkit.fluxcd.io/v1
-kind: Kustomization
-metadata:
-  name: resource-guardrails
-  namespace: flux-system
-spec:
-  suspend: true
----
-apiVersion: kustomize.toolkit.fluxcd.io/v1
-kind: Kustomization
-metadata:
-  name: typhon
-  namespace: flux-system
-spec:
-  suspend: true
----
-apiVersion: kustomize.toolkit.fluxcd.io/v1
-kind: Kustomization
-metadata:
-  name: vaultwarden
-  namespace: flux-system
-spec:
-  suspend: true
----
-apiVersion: kustomize.toolkit.fluxcd.io/v1
-kind: Kustomization
-metadata:
-  name: veles
-  namespace: flux-system
-spec:
-  suspend: true
----
-apiVersion: kustomize.toolkit.fluxcd.io/v1
-kind: Kustomization
-metadata:
-  name: wallet-monero-temp
-  namespace: flux-system
-spec:
-  suspend: true
----
-apiVersion: kustomize.toolkit.fluxcd.io/v1
-kind: Kustomization
-metadata:
-  name: xmr-miner
-  namespace: flux-system
-spec:
-  suspend: true