From 3a8afd50aff4ae5eedbd869ee64dfab8fc68afd8 Mon Sep 17 00:00:00 2001 From: jenkins Date: Sat, 3 Oct 2026 00:37:41 -0500 Subject: [PATCH] flux: reconcile definitions from Git and adopt active service state --- .../kustomization.yaml | 1 - .../bstein-dev-home/kustomization.yaml | 2 -- .../cassandra-auth/kustomization.yaml | 2 -- .../applications/cassandra/kustomization.yaml | 2 -- .../applications/comms/kustomization.yaml | 2 -- .../applications/crypto/kustomization.yaml | 2 -- .../applications/finance/kustomization.yaml | 5 +---- .../game-stream/kustomization.yaml | 5 +---- .../applications/harbor/kustomization.yaml | 22 +++++++++---------- .../applications/health/kustomization.yaml | 5 +---- .../applications/jellyfin/kustomization.yaml | 5 +---- .../applications/keycloak/kustomization.yaml | 2 -- .../applications/mailu/kustomization.yaml | 5 +---- .../applications/monerod/kustomization.yaml | 2 -- .../nextcloud-mail-sync/kustomization.yaml | 5 +---- .../oauth2-proxy/kustomization.yaml | 2 -- .../applications/openldap/kustomization.yaml | 2 -- .../applications/outline/kustomization.yaml | 5 +---- .../applications/pegasus/kustomization.yaml | 2 -- .../applications/planka/kustomization.yaml | 5 +---- .../applications/quality/kustomization.yaml | 5 +---- .../sui-metrics/kustomization.yaml | 2 -- .../applications/typhon/kustomization.yaml | 5 +---- .../kustomization.yaml | 2 -- .../applications/vault/kustomization.yaml | 14 +++++++----- .../vaultwarden/kustomization.yaml | 5 +---- .../applications/veles/kustomization.yaml | 2 -- .../wallet-monero-temp/kustomization.yaml | 5 +---- .../applications/xmr-miner/kustomization.yaml | 5 +---- .../cert-manager-cleanup/kustomization.yaml | 2 -- .../platform/cert-manager/kustomization.yaml | 2 -- .../platform/core/kustomization.yaml | 2 -- .../platform/descheduler/kustomization.yaml | 5 +---- .../platform/gitops-ui/kustomization.yaml | 5 +---- .../platform/helm/kustomization.yaml | 2 -- .../platform/logging/kustomization.yaml | 2 -- .../longhorn-adopt/kustomization.yaml | 2 -- .../platform/longhorn-ui/kustomization.yaml | 5 +---- .../platform/longhorn/kustomization.yaml | 2 -- .../platform/maintenance/kustomization.yaml | 2 -- .../platform/metallb/kustomization.yaml | 2 -- .../platform/monitoring/kustomization.yaml | 2 -- .../platform/postgres/kustomization.yaml | 2 -- .../resource-guardrails/kustomization.yaml | 5 +---- .../platform/traefik/kustomization.yaml | 2 -- .../vault-injector/kustomization.yaml | 2 -- 46 files changed, 35 insertions(+), 139 deletions(-) diff --git a/clusters/atlas/flux-system/applications/bstein-dev-home-migrations/kustomization.yaml b/clusters/atlas/flux-system/applications/bstein-dev-home-migrations/kustomization.yaml index e062626f..63d7d525 100644 --- a/clusters/atlas/flux-system/applications/bstein-dev-home-migrations/kustomization.yaml +++ b/clusters/atlas/flux-system/applications/bstein-dev-home-migrations/kustomization.yaml @@ -5,7 +5,6 @@ metadata: name: bstein-dev-home-migrations namespace: flux-system annotations: - kustomize.toolkit.fluxcd.io/ssa: IfNotPresent atlas.bstein.dev/suspend-reason: "Migration jobs run only during portal schema changes." spec: interval: 10m diff --git a/clusters/atlas/flux-system/applications/bstein-dev-home/kustomization.yaml b/clusters/atlas/flux-system/applications/bstein-dev-home/kustomization.yaml index b2f5a5b6..000eea33 100644 --- a/clusters/atlas/flux-system/applications/bstein-dev-home/kustomization.yaml +++ b/clusters/atlas/flux-system/applications/bstein-dev-home/kustomization.yaml @@ -4,8 +4,6 @@ kind: Kustomization metadata: name: bstein-dev-home namespace: flux-system - annotations: - kustomize.toolkit.fluxcd.io/ssa: IfNotPresent spec: interval: 10m path: ./services/bstein-dev-home diff --git a/clusters/atlas/flux-system/applications/cassandra-auth/kustomization.yaml b/clusters/atlas/flux-system/applications/cassandra-auth/kustomization.yaml index aaf8ceee..61e073d6 100644 --- a/clusters/atlas/flux-system/applications/cassandra-auth/kustomization.yaml +++ b/clusters/atlas/flux-system/applications/cassandra-auth/kustomization.yaml @@ -4,8 +4,6 @@ kind: Kustomization metadata: name: cassandra-auth namespace: flux-system - annotations: - kustomize.toolkit.fluxcd.io/ssa: IfNotPresent spec: interval: 10m path: ./services/cassandra-auth diff --git a/clusters/atlas/flux-system/applications/cassandra/kustomization.yaml b/clusters/atlas/flux-system/applications/cassandra/kustomization.yaml index 242fc32f..d9fd34ba 100644 --- a/clusters/atlas/flux-system/applications/cassandra/kustomization.yaml +++ b/clusters/atlas/flux-system/applications/cassandra/kustomization.yaml @@ -4,8 +4,6 @@ kind: Kustomization metadata: name: cassandra namespace: flux-system - annotations: - kustomize.toolkit.fluxcd.io/ssa: IfNotPresent spec: interval: 10m path: ./services/cassandra diff --git a/clusters/atlas/flux-system/applications/comms/kustomization.yaml b/clusters/atlas/flux-system/applications/comms/kustomization.yaml index d80ce831..42dc736d 100644 --- a/clusters/atlas/flux-system/applications/comms/kustomization.yaml +++ b/clusters/atlas/flux-system/applications/comms/kustomization.yaml @@ -4,8 +4,6 @@ kind: Kustomization metadata: name: comms namespace: flux-system - annotations: - kustomize.toolkit.fluxcd.io/ssa: IfNotPresent spec: interval: 10m prune: true diff --git a/clusters/atlas/flux-system/applications/crypto/kustomization.yaml b/clusters/atlas/flux-system/applications/crypto/kustomization.yaml index eb3cfa36..e9309577 100644 --- a/clusters/atlas/flux-system/applications/crypto/kustomization.yaml +++ b/clusters/atlas/flux-system/applications/crypto/kustomization.yaml @@ -4,8 +4,6 @@ kind: Kustomization metadata: name: crypto namespace: flux-system - annotations: - kustomize.toolkit.fluxcd.io/ssa: IfNotPresent spec: interval: 10m path: ./services/crypto diff --git a/clusters/atlas/flux-system/applications/finance/kustomization.yaml b/clusters/atlas/flux-system/applications/finance/kustomization.yaml index 5ad59dfc..83747242 100644 --- a/clusters/atlas/flux-system/applications/finance/kustomization.yaml +++ b/clusters/atlas/flux-system/applications/finance/kustomization.yaml @@ -4,12 +4,9 @@ kind: Kustomization metadata: name: finance namespace: flux-system - annotations: - kustomize.toolkit.fluxcd.io/ssa: IfNotPresent - atlas.bstein.dev/suspend-reason: "Finance apps are parked until the next storage and SSO pass." spec: interval: 10m - suspend: true + suspend: false path: ./services/finance prune: true sourceRef: diff --git a/clusters/atlas/flux-system/applications/game-stream/kustomization.yaml b/clusters/atlas/flux-system/applications/game-stream/kustomization.yaml index 7057a43b..872b9ae1 100644 --- a/clusters/atlas/flux-system/applications/game-stream/kustomization.yaml +++ b/clusters/atlas/flux-system/applications/game-stream/kustomization.yaml @@ -4,12 +4,9 @@ kind: Kustomization metadata: name: game-stream namespace: flux-system - annotations: - kustomize.toolkit.fluxcd.io/ssa: IfNotPresent - atlas.bstein.dev/suspend-reason: "Game streaming is optional and resumes only for planned use." spec: interval: 10m - suspend: true + suspend: false path: ./services/game-stream targetNamespace: game-stream prune: true diff --git a/clusters/atlas/flux-system/applications/harbor/kustomization.yaml b/clusters/atlas/flux-system/applications/harbor/kustomization.yaml index d8a283e4..33b7687a 100644 --- a/clusters/atlas/flux-system/applications/harbor/kustomization.yaml +++ b/clusters/atlas/flux-system/applications/harbor/kustomization.yaml @@ -4,8 +4,6 @@ kind: Kustomization metadata: name: harbor namespace: flux-system - annotations: - kustomize.toolkit.fluxcd.io/ssa: IfNotPresent spec: interval: 10m path: ./services/harbor @@ -15,20 +13,20 @@ spec: kind: GitRepository name: flux-system namespace: flux-system - wait: true + wait: false timeout: 10m healthChecks: - - apiVersion: batch/v1 - kind: Job - name: harbor-hermes-agent-immutability-ensure-1 + - apiVersion: apps/v1 + kind: Deployment + name: harbor-core namespace: harbor - - apiVersion: batch/v1 - kind: Job - name: harbor-hermes-webui-immutability-ensure-1 + - apiVersion: apps/v1 + kind: Deployment + name: harbor-registry namespace: harbor - - apiVersion: batch/v1 - kind: Job - name: harbor-hermes-chat-router-immutability-ensure-1 + - apiVersion: apps/v1 + kind: Deployment + name: harbor-jobservice namespace: harbor dependsOn: - name: core diff --git a/clusters/atlas/flux-system/applications/health/kustomization.yaml b/clusters/atlas/flux-system/applications/health/kustomization.yaml index 9722bdb3..4e330f48 100644 --- a/clusters/atlas/flux-system/applications/health/kustomization.yaml +++ b/clusters/atlas/flux-system/applications/health/kustomization.yaml @@ -4,12 +4,9 @@ kind: Kustomization metadata: name: health namespace: flux-system - annotations: - kustomize.toolkit.fluxcd.io/ssa: IfNotPresent - atlas.bstein.dev/suspend-reason: "Health stack is staged pending account and mail flows." spec: interval: 10m - suspend: true + suspend: false path: ./services/health prune: true sourceRef: diff --git a/clusters/atlas/flux-system/applications/jellyfin/kustomization.yaml b/clusters/atlas/flux-system/applications/jellyfin/kustomization.yaml index 94963ef5..49ae53fb 100644 --- a/clusters/atlas/flux-system/applications/jellyfin/kustomization.yaml +++ b/clusters/atlas/flux-system/applications/jellyfin/kustomization.yaml @@ -4,12 +4,9 @@ kind: Kustomization metadata: name: jellyfin namespace: flux-system - annotations: - kustomize.toolkit.fluxcd.io/ssa: IfNotPresent - atlas.bstein.dev/suspend-reason: "Media stack stays paused while auth and storage changes are staged." spec: interval: 10m - suspend: true + suspend: false path: ./services/jellyfin targetNamespace: jellyfin prune: true diff --git a/clusters/atlas/flux-system/applications/keycloak/kustomization.yaml b/clusters/atlas/flux-system/applications/keycloak/kustomization.yaml index 7c7fc6cd..0311f2e9 100644 --- a/clusters/atlas/flux-system/applications/keycloak/kustomization.yaml +++ b/clusters/atlas/flux-system/applications/keycloak/kustomization.yaml @@ -4,8 +4,6 @@ kind: Kustomization metadata: name: keycloak namespace: flux-system - annotations: - kustomize.toolkit.fluxcd.io/ssa: IfNotPresent spec: interval: 10m prune: true diff --git a/clusters/atlas/flux-system/applications/mailu/kustomization.yaml b/clusters/atlas/flux-system/applications/mailu/kustomization.yaml index 53b8bdfe..7c94d49c 100644 --- a/clusters/atlas/flux-system/applications/mailu/kustomization.yaml +++ b/clusters/atlas/flux-system/applications/mailu/kustomization.yaml @@ -4,12 +4,9 @@ kind: Kustomization metadata: name: mailu namespace: flux-system - annotations: - kustomize.toolkit.fluxcd.io/ssa: IfNotPresent - atlas.bstein.dev/suspend-reason: "Mail stack is staged and resumes only during mail rollout work." spec: interval: 10m - suspend: true + suspend: false sourceRef: kind: GitRepository name: flux-system diff --git a/clusters/atlas/flux-system/applications/monerod/kustomization.yaml b/clusters/atlas/flux-system/applications/monerod/kustomization.yaml index d5481c94..e1cac24c 100644 --- a/clusters/atlas/flux-system/applications/monerod/kustomization.yaml +++ b/clusters/atlas/flux-system/applications/monerod/kustomization.yaml @@ -4,8 +4,6 @@ kind: Kustomization metadata: name: monerod namespace: flux-system - annotations: - kustomize.toolkit.fluxcd.io/ssa: IfNotPresent spec: interval: 10m path: ./services/crypto/monerod diff --git a/clusters/atlas/flux-system/applications/nextcloud-mail-sync/kustomization.yaml b/clusters/atlas/flux-system/applications/nextcloud-mail-sync/kustomization.yaml index c9be5e80..7f599d51 100644 --- a/clusters/atlas/flux-system/applications/nextcloud-mail-sync/kustomization.yaml +++ b/clusters/atlas/flux-system/applications/nextcloud-mail-sync/kustomization.yaml @@ -4,12 +4,9 @@ kind: Kustomization metadata: name: nextcloud-mail-sync namespace: flux-system - annotations: - kustomize.toolkit.fluxcd.io/ssa: IfNotPresent - atlas.bstein.dev/suspend-reason: "Mail sync resumes after Nextcloud and Mailu are active." spec: interval: 10m - suspend: true + suspend: false prune: true sourceRef: kind: GitRepository diff --git a/clusters/atlas/flux-system/applications/oauth2-proxy/kustomization.yaml b/clusters/atlas/flux-system/applications/oauth2-proxy/kustomization.yaml index 5f640643..187572de 100644 --- a/clusters/atlas/flux-system/applications/oauth2-proxy/kustomization.yaml +++ b/clusters/atlas/flux-system/applications/oauth2-proxy/kustomization.yaml @@ -4,8 +4,6 @@ kind: Kustomization metadata: name: oauth2-proxy namespace: flux-system - annotations: - kustomize.toolkit.fluxcd.io/ssa: IfNotPresent spec: interval: 10m prune: true diff --git a/clusters/atlas/flux-system/applications/openldap/kustomization.yaml b/clusters/atlas/flux-system/applications/openldap/kustomization.yaml index 3144983e..d4657c05 100644 --- a/clusters/atlas/flux-system/applications/openldap/kustomization.yaml +++ b/clusters/atlas/flux-system/applications/openldap/kustomization.yaml @@ -4,8 +4,6 @@ kind: Kustomization metadata: name: openldap namespace: flux-system - annotations: - kustomize.toolkit.fluxcd.io/ssa: IfNotPresent spec: interval: 10m prune: true diff --git a/clusters/atlas/flux-system/applications/outline/kustomization.yaml b/clusters/atlas/flux-system/applications/outline/kustomization.yaml index a5a92de2..e0b8dce5 100644 --- a/clusters/atlas/flux-system/applications/outline/kustomization.yaml +++ b/clusters/atlas/flux-system/applications/outline/kustomization.yaml @@ -4,12 +4,9 @@ kind: Kustomization metadata: name: outline namespace: flux-system - annotations: - kustomize.toolkit.fluxcd.io/ssa: IfNotPresent - atlas.bstein.dev/suspend-reason: "Outline is staged until shared auth and mail are ready." spec: interval: 10m - suspend: true + suspend: false path: ./services/outline prune: true sourceRef: diff --git a/clusters/atlas/flux-system/applications/pegasus/kustomization.yaml b/clusters/atlas/flux-system/applications/pegasus/kustomization.yaml index bae15461..21010e78 100644 --- a/clusters/atlas/flux-system/applications/pegasus/kustomization.yaml +++ b/clusters/atlas/flux-system/applications/pegasus/kustomization.yaml @@ -4,8 +4,6 @@ kind: Kustomization metadata: name: pegasus namespace: flux-system - annotations: - kustomize.toolkit.fluxcd.io/ssa: IfNotPresent spec: interval: 10m path: ./services/pegasus diff --git a/clusters/atlas/flux-system/applications/planka/kustomization.yaml b/clusters/atlas/flux-system/applications/planka/kustomization.yaml index 703af7bf..bca0aff4 100644 --- a/clusters/atlas/flux-system/applications/planka/kustomization.yaml +++ b/clusters/atlas/flux-system/applications/planka/kustomization.yaml @@ -4,12 +4,9 @@ kind: Kustomization metadata: name: planka namespace: flux-system - annotations: - kustomize.toolkit.fluxcd.io/ssa: IfNotPresent - atlas.bstein.dev/suspend-reason: "Planka is staged until shared auth and mail are ready." spec: interval: 10m - suspend: true + suspend: false path: ./services/planka prune: true sourceRef: diff --git a/clusters/atlas/flux-system/applications/quality/kustomization.yaml b/clusters/atlas/flux-system/applications/quality/kustomization.yaml index 4fc550a4..64113274 100644 --- a/clusters/atlas/flux-system/applications/quality/kustomization.yaml +++ b/clusters/atlas/flux-system/applications/quality/kustomization.yaml @@ -4,12 +4,9 @@ kind: Kustomization metadata: name: quality namespace: flux-system - annotations: - kustomize.toolkit.fluxcd.io/ssa: IfNotPresent - atlas.bstein.dev/suspend-reason: "Quality stack changes resume only during quality-gate rollout work." spec: interval: 10m - suspend: true + suspend: false path: ./services/quality prune: true sourceRef: diff --git a/clusters/atlas/flux-system/applications/sui-metrics/kustomization.yaml b/clusters/atlas/flux-system/applications/sui-metrics/kustomization.yaml index d0f642e9..4e294bba 100644 --- a/clusters/atlas/flux-system/applications/sui-metrics/kustomization.yaml +++ b/clusters/atlas/flux-system/applications/sui-metrics/kustomization.yaml @@ -4,8 +4,6 @@ kind: Kustomization metadata: name: sui-metrics namespace: flux-system - annotations: - kustomize.toolkit.fluxcd.io/ssa: IfNotPresent spec: interval: 10m path: ./services/sui-metrics/overlays/atlas diff --git a/clusters/atlas/flux-system/applications/typhon/kustomization.yaml b/clusters/atlas/flux-system/applications/typhon/kustomization.yaml index 4afdfeec..a03a7f54 100644 --- a/clusters/atlas/flux-system/applications/typhon/kustomization.yaml +++ b/clusters/atlas/flux-system/applications/typhon/kustomization.yaml @@ -4,12 +4,9 @@ kind: Kustomization metadata: name: typhon namespace: flux-system - annotations: - kustomize.toolkit.fluxcd.io/ssa: IfNotPresent - atlas.bstein.dev/suspend-reason: "Climate automation is staged until sensor and control loops are verified." spec: interval: 10m - suspend: true + suspend: false path: ./services/typhon prune: true sourceRef: diff --git a/clusters/atlas/flux-system/applications/vault-hermes-jenkins-token-seed/kustomization.yaml b/clusters/atlas/flux-system/applications/vault-hermes-jenkins-token-seed/kustomization.yaml index 561179c8..70bdb174 100644 --- a/clusters/atlas/flux-system/applications/vault-hermes-jenkins-token-seed/kustomization.yaml +++ b/clusters/atlas/flux-system/applications/vault-hermes-jenkins-token-seed/kustomization.yaml @@ -4,8 +4,6 @@ kind: Kustomization metadata: name: vault-hermes-jenkins-token-seed namespace: flux-system - annotations: - kustomize.toolkit.fluxcd.io/ssa: IfNotPresent spec: interval: 10m sourceRef: diff --git a/clusters/atlas/flux-system/applications/vault/kustomization.yaml b/clusters/atlas/flux-system/applications/vault/kustomization.yaml index ccb7ae0c..55a4cbcd 100644 --- a/clusters/atlas/flux-system/applications/vault/kustomization.yaml +++ b/clusters/atlas/flux-system/applications/vault/kustomization.yaml @@ -4,8 +4,6 @@ kind: Kustomization metadata: name: vault namespace: flux-system - annotations: - kustomize.toolkit.fluxcd.io/ssa: IfNotPresent spec: interval: 10m sourceRef: @@ -15,11 +13,15 @@ spec: path: ./services/vault targetNamespace: vault prune: true - wait: true + wait: false healthChecks: - - apiVersion: batch/v1 - kind: Job - name: vault-k8s-auth-hermes-11 + - apiVersion: apps/v1 + kind: StatefulSet + name: vault + namespace: vault + - apiVersion: apps/v1 + kind: Deployment + name: vault-injector-agent-injector namespace: vault dependsOn: - name: longhorn diff --git a/clusters/atlas/flux-system/applications/vaultwarden/kustomization.yaml b/clusters/atlas/flux-system/applications/vaultwarden/kustomization.yaml index fad8bbe7..698dca58 100644 --- a/clusters/atlas/flux-system/applications/vaultwarden/kustomization.yaml +++ b/clusters/atlas/flux-system/applications/vaultwarden/kustomization.yaml @@ -4,12 +4,9 @@ kind: Kustomization metadata: name: vaultwarden namespace: flux-system - annotations: - kustomize.toolkit.fluxcd.io/ssa: IfNotPresent - atlas.bstein.dev/suspend-reason: "Vaultwarden stays separate from SSO rollout and resumes by hand." spec: interval: 10m - suspend: true + suspend: false sourceRef: kind: GitRepository name: flux-system diff --git a/clusters/atlas/flux-system/applications/veles/kustomization.yaml b/clusters/atlas/flux-system/applications/veles/kustomization.yaml index fdb09cc1..a208060f 100644 --- a/clusters/atlas/flux-system/applications/veles/kustomization.yaml +++ b/clusters/atlas/flux-system/applications/veles/kustomization.yaml @@ -4,8 +4,6 @@ kind: Kustomization metadata: name: veles namespace: flux-system - annotations: - kustomize.toolkit.fluxcd.io/ssa: IfNotPresent spec: interval: 10m path: ./services/veles diff --git a/clusters/atlas/flux-system/applications/wallet-monero-temp/kustomization.yaml b/clusters/atlas/flux-system/applications/wallet-monero-temp/kustomization.yaml index 87450a74..95868f06 100644 --- a/clusters/atlas/flux-system/applications/wallet-monero-temp/kustomization.yaml +++ b/clusters/atlas/flux-system/applications/wallet-monero-temp/kustomization.yaml @@ -4,12 +4,9 @@ kind: Kustomization metadata: name: wallet-monero-temp namespace: flux-system - annotations: - kustomize.toolkit.fluxcd.io/ssa: IfNotPresent - atlas.bstein.dev/suspend-reason: "Temporary wallet RPC stack is opt-in for maintenance windows." spec: interval: 10m - suspend: true + suspend: false path: ./services/crypto/wallet-monero-temp targetNamespace: crypto prune: true diff --git a/clusters/atlas/flux-system/applications/xmr-miner/kustomization.yaml b/clusters/atlas/flux-system/applications/xmr-miner/kustomization.yaml index 87ebd5c3..110e94e9 100644 --- a/clusters/atlas/flux-system/applications/xmr-miner/kustomization.yaml +++ b/clusters/atlas/flux-system/applications/xmr-miner/kustomization.yaml @@ -4,12 +4,9 @@ kind: Kustomization metadata: name: xmr-miner namespace: flux-system - annotations: - kustomize.toolkit.fluxcd.io/ssa: IfNotPresent - atlas.bstein.dev/suspend-reason: "Mining workloads are disabled unless explicitly enabled for a short run." spec: interval: 10m - suspend: true + suspend: false path: ./services/crypto/xmr-miner targetNamespace: crypto prune: true diff --git a/clusters/atlas/flux-system/platform/cert-manager-cleanup/kustomization.yaml b/clusters/atlas/flux-system/platform/cert-manager-cleanup/kustomization.yaml index 018af2cf..230e22a0 100644 --- a/clusters/atlas/flux-system/platform/cert-manager-cleanup/kustomization.yaml +++ b/clusters/atlas/flux-system/platform/cert-manager-cleanup/kustomization.yaml @@ -4,8 +4,6 @@ kind: Kustomization metadata: name: cert-manager-cleanup namespace: flux-system - annotations: - kustomize.toolkit.fluxcd.io/ssa: IfNotPresent spec: interval: 30m path: ./infrastructure/cert-manager/cleanup diff --git a/clusters/atlas/flux-system/platform/cert-manager/kustomization.yaml b/clusters/atlas/flux-system/platform/cert-manager/kustomization.yaml index 6da50af7..63469afc 100644 --- a/clusters/atlas/flux-system/platform/cert-manager/kustomization.yaml +++ b/clusters/atlas/flux-system/platform/cert-manager/kustomization.yaml @@ -4,8 +4,6 @@ kind: Kustomization metadata: name: cert-manager namespace: flux-system - annotations: - kustomize.toolkit.fluxcd.io/ssa: IfNotPresent spec: interval: 30m path: ./infrastructure/cert-manager diff --git a/clusters/atlas/flux-system/platform/core/kustomization.yaml b/clusters/atlas/flux-system/platform/core/kustomization.yaml index b01192c8..054ac987 100644 --- a/clusters/atlas/flux-system/platform/core/kustomization.yaml +++ b/clusters/atlas/flux-system/platform/core/kustomization.yaml @@ -4,8 +4,6 @@ kind: Kustomization metadata: name: core namespace: flux-system - annotations: - kustomize.toolkit.fluxcd.io/ssa: IfNotPresent spec: interval: 10m path: ./infrastructure/core diff --git a/clusters/atlas/flux-system/platform/descheduler/kustomization.yaml b/clusters/atlas/flux-system/platform/descheduler/kustomization.yaml index 29b5cdb0..d5ade40c 100644 --- a/clusters/atlas/flux-system/platform/descheduler/kustomization.yaml +++ b/clusters/atlas/flux-system/platform/descheduler/kustomization.yaml @@ -4,12 +4,9 @@ kind: Kustomization metadata: name: descheduler namespace: flux-system - annotations: - kustomize.toolkit.fluxcd.io/ssa: IfNotPresent - atlas.bstein.dev/suspend-reason: "Descheduler is paused during node recovery and placement stabilization." spec: interval: 30m - suspend: true + suspend: false path: ./infrastructure/descheduler prune: true sourceRef: diff --git a/clusters/atlas/flux-system/platform/gitops-ui/kustomization.yaml b/clusters/atlas/flux-system/platform/gitops-ui/kustomization.yaml index fc23ed79..b2863ed0 100644 --- a/clusters/atlas/flux-system/platform/gitops-ui/kustomization.yaml +++ b/clusters/atlas/flux-system/platform/gitops-ui/kustomization.yaml @@ -4,12 +4,9 @@ kind: Kustomization metadata: name: gitops-ui namespace: flux-system - annotations: - kustomize.toolkit.fluxcd.io/ssa: IfNotPresent - atlas.bstein.dev/suspend-reason: "GitOps UI is optional and resumes only for operator access work." spec: interval: 10m - suspend: true + suspend: false timeout: 10m path: ./services/gitops-ui prune: true diff --git a/clusters/atlas/flux-system/platform/helm/kustomization.yaml b/clusters/atlas/flux-system/platform/helm/kustomization.yaml index 7200f4ec..45a3c7d3 100644 --- a/clusters/atlas/flux-system/platform/helm/kustomization.yaml +++ b/clusters/atlas/flux-system/platform/helm/kustomization.yaml @@ -4,8 +4,6 @@ kind: Kustomization metadata: name: helm namespace: flux-system - annotations: - kustomize.toolkit.fluxcd.io/ssa: IfNotPresent spec: interval: 30m sourceRef: diff --git a/clusters/atlas/flux-system/platform/logging/kustomization.yaml b/clusters/atlas/flux-system/platform/logging/kustomization.yaml index 8622f2a0..c51eb5e2 100644 --- a/clusters/atlas/flux-system/platform/logging/kustomization.yaml +++ b/clusters/atlas/flux-system/platform/logging/kustomization.yaml @@ -4,8 +4,6 @@ kind: Kustomization metadata: name: logging namespace: flux-system - annotations: - kustomize.toolkit.fluxcd.io/ssa: IfNotPresent spec: interval: 10m path: ./services/logging diff --git a/clusters/atlas/flux-system/platform/longhorn-adopt/kustomization.yaml b/clusters/atlas/flux-system/platform/longhorn-adopt/kustomization.yaml index ba96a805..f568a5ef 100644 --- a/clusters/atlas/flux-system/platform/longhorn-adopt/kustomization.yaml +++ b/clusters/atlas/flux-system/platform/longhorn-adopt/kustomization.yaml @@ -4,8 +4,6 @@ kind: Kustomization metadata: name: longhorn-adopt namespace: flux-system - annotations: - kustomize.toolkit.fluxcd.io/ssa: IfNotPresent spec: interval: 30m path: ./infrastructure/longhorn/adopt diff --git a/clusters/atlas/flux-system/platform/longhorn-ui/kustomization.yaml b/clusters/atlas/flux-system/platform/longhorn-ui/kustomization.yaml index 387251ae..5c99922d 100644 --- a/clusters/atlas/flux-system/platform/longhorn-ui/kustomization.yaml +++ b/clusters/atlas/flux-system/platform/longhorn-ui/kustomization.yaml @@ -4,12 +4,9 @@ kind: Kustomization metadata: name: longhorn-ui namespace: flux-system - annotations: - kustomize.toolkit.fluxcd.io/ssa: IfNotPresent - atlas.bstein.dev/suspend-reason: "Longhorn UI ingress is optional and opened only for storage work." spec: interval: 10m - suspend: true + suspend: false path: ./infrastructure/longhorn/ui-ingress targetNamespace: longhorn-system prune: true diff --git a/clusters/atlas/flux-system/platform/longhorn/kustomization.yaml b/clusters/atlas/flux-system/platform/longhorn/kustomization.yaml index b7ff57e7..1a51254f 100644 --- a/clusters/atlas/flux-system/platform/longhorn/kustomization.yaml +++ b/clusters/atlas/flux-system/platform/longhorn/kustomization.yaml @@ -4,8 +4,6 @@ kind: Kustomization metadata: name: longhorn namespace: flux-system - annotations: - kustomize.toolkit.fluxcd.io/ssa: IfNotPresent spec: interval: 30m path: ./infrastructure/longhorn/core diff --git a/clusters/atlas/flux-system/platform/maintenance/kustomization.yaml b/clusters/atlas/flux-system/platform/maintenance/kustomization.yaml index 33581954..8477ec98 100644 --- a/clusters/atlas/flux-system/platform/maintenance/kustomization.yaml +++ b/clusters/atlas/flux-system/platform/maintenance/kustomization.yaml @@ -4,8 +4,6 @@ kind: Kustomization metadata: name: maintenance namespace: flux-system - annotations: - kustomize.toolkit.fluxcd.io/ssa: IfNotPresent spec: interval: 10m path: ./services/maintenance diff --git a/clusters/atlas/flux-system/platform/metallb/kustomization.yaml b/clusters/atlas/flux-system/platform/metallb/kustomization.yaml index 18741fe3..98baaff8 100644 --- a/clusters/atlas/flux-system/platform/metallb/kustomization.yaml +++ b/clusters/atlas/flux-system/platform/metallb/kustomization.yaml @@ -4,8 +4,6 @@ kind: Kustomization metadata: name: metallb namespace: flux-system - annotations: - kustomize.toolkit.fluxcd.io/ssa: IfNotPresent spec: interval: 30m sourceRef: diff --git a/clusters/atlas/flux-system/platform/monitoring/kustomization.yaml b/clusters/atlas/flux-system/platform/monitoring/kustomization.yaml index 22f4565d..82ad6728 100644 --- a/clusters/atlas/flux-system/platform/monitoring/kustomization.yaml +++ b/clusters/atlas/flux-system/platform/monitoring/kustomization.yaml @@ -4,8 +4,6 @@ kind: Kustomization metadata: name: monitoring namespace: flux-system - annotations: - kustomize.toolkit.fluxcd.io/ssa: IfNotPresent spec: interval: 10m path: ./services/monitoring diff --git a/clusters/atlas/flux-system/platform/postgres/kustomization.yaml b/clusters/atlas/flux-system/platform/postgres/kustomization.yaml index 03e1de10..60046e5d 100644 --- a/clusters/atlas/flux-system/platform/postgres/kustomization.yaml +++ b/clusters/atlas/flux-system/platform/postgres/kustomization.yaml @@ -4,8 +4,6 @@ kind: Kustomization metadata: name: postgres namespace: flux-system - annotations: - kustomize.toolkit.fluxcd.io/ssa: IfNotPresent spec: interval: 10m path: ./infrastructure/postgres diff --git a/clusters/atlas/flux-system/platform/resource-guardrails/kustomization.yaml b/clusters/atlas/flux-system/platform/resource-guardrails/kustomization.yaml index 4d08e7bc..c7e4cb98 100644 --- a/clusters/atlas/flux-system/platform/resource-guardrails/kustomization.yaml +++ b/clusters/atlas/flux-system/platform/resource-guardrails/kustomization.yaml @@ -4,12 +4,9 @@ kind: Kustomization metadata: name: resource-guardrails namespace: flux-system - annotations: - kustomize.toolkit.fluxcd.io/ssa: IfNotPresent - atlas.bstein.dev/suspend-reason: "Guardrail rollout is paused until service resource requests are normalized." spec: interval: 10m - suspend: true + suspend: false path: ./infrastructure/resource-guardrails prune: true sourceRef: diff --git a/clusters/atlas/flux-system/platform/traefik/kustomization.yaml b/clusters/atlas/flux-system/platform/traefik/kustomization.yaml index f3226f60..336eb892 100644 --- a/clusters/atlas/flux-system/platform/traefik/kustomization.yaml +++ b/clusters/atlas/flux-system/platform/traefik/kustomization.yaml @@ -4,8 +4,6 @@ kind: Kustomization metadata: name: traefik namespace: flux-system - annotations: - kustomize.toolkit.fluxcd.io/ssa: IfNotPresent spec: interval: 10m path: ./infrastructure/traefik diff --git a/clusters/atlas/flux-system/platform/vault-injector/kustomization.yaml b/clusters/atlas/flux-system/platform/vault-injector/kustomization.yaml index c3e21423..d7d740d3 100644 --- a/clusters/atlas/flux-system/platform/vault-injector/kustomization.yaml +++ b/clusters/atlas/flux-system/platform/vault-injector/kustomization.yaml @@ -4,8 +4,6 @@ kind: Kustomization metadata: name: vault-injector namespace: flux-system - annotations: - kustomize.toolkit.fluxcd.io/ssa: IfNotPresent spec: interval: 30m path: ./infrastructure/vault-injector