Split manifests into infra/ and applications/

2026-06-21 12:14:38 +02:00
parent 64e8bf7d78
commit c40577589d
360 changed files with 69 additions and 67 deletions
--- a/infra/envoy-gateway/kustomization.yaml
+++ b/infra/envoy-gateway/kustomization.yaml
@@ -0,0 +1,356 @@
+apiVersion: kustomize.config.k8s.io/v1beta1
+kind: Kustomization
+
+resources:
+  - gateway.yaml
+  - gateway-public.yaml
+
+  # Policies
+  - pelican/pelican-wings-clienttrafficpolicy.yaml
+  - minio-aistor/minio-aistor-clienttrafficpolicy.yaml
+  - minio-aistor/minio-aistor-console-clienttrafficpolicy.yaml
+
+  # Certificates
+  - authentik/authentik-certificate.yaml
+  - argocd/argocd-certificate.yaml
+  - bentopdf/bentopdf-certificate.yaml
+  - gitea/gitea-certificate.yaml
+  - immich/immich-certificate.yaml
+  - infisical/infisical-certificate.yaml
+  - it-tools/it-tools-certificate.yaml
+  - jellyfin/jellyfin-certificate.yaml
+  - jenkins/jenkins-certificate.yaml
+  - longhorn/longhorn-certificate.yaml
+  - monitoring/monitoring-certificate.yaml
+  - n8n/n8n-certificate.yaml
+  - netbootxyz/netbootxyz-certificate.yaml
+  - passbolt/passbolt-certificate.yaml
+  - proxmox/proxmox-certificate.yaml
+  - resume/resume-certificate.yaml
+  - resume/resume-minio-certificate.yaml
+  - resume/resume-minio-webui-certificate.yaml
+  - minio-aistor/minio-aistor-api-certificate.yaml
+  - minio-aistor/minio-aistor-console-certificate.yaml
+  - technitium/technitium-certificate.yaml
+  - technitium/technitium-backup-certificate.yaml
+  - truenas/truenas-certificate.yaml
+  - unifi/unifi-certificate.yaml
+  - wikijs/wikijs-certificate.yaml
+  - zipline/zipline-certificate.yaml
+  - vaultwarden/vaultwarden-certificate.yaml
+  - databasus/databasus-certificate.yaml
+  - excalidraw/excalidraw-certificate.yaml
+  - gotify/gotify-certificate.yaml
+  - uptime-kuma/uptime-kuma-certificate.yaml
+  - ollama/ollama-certificate.yaml
+  - openwebui/openwebui-certificate.yaml
+  - searxng/searxng-certificate.yaml
+  - affine/affine-certificate.yaml
+  - pelican/pelican-certificate.yaml
+  - pelican/pelican-wings-certificate.yaml
+
+patches:
+  # Internal gateway patches
+  - target:
+      group: gateway.networking.k8s.io
+      version: v1
+      kind: Gateway
+      name: gateway-internal
+    path: authentik/authentik-gateway-patch.yaml
+  - target:
+      group: gateway.networking.k8s.io
+      version: v1
+      kind: Gateway
+      name: gateway-internal
+    path: argocd/argocd-gateway-patch.yaml
+  - target:
+      group: gateway.networking.k8s.io
+      version: v1
+      kind: Gateway
+      name: gateway-internal
+    path: gitea/gitea-gateway-patch.yaml
+  - target:
+      group: gateway.networking.k8s.io
+      version: v1
+      kind: Gateway
+      name: gateway-internal
+    path: immich/immich-gateway-patch.yaml
+  - target:
+      group: gateway.networking.k8s.io
+      version: v1
+      kind: Gateway
+      name: gateway-internal
+    path: infisical/infisical-gateway-patch.yaml
+  - target:
+      group: gateway.networking.k8s.io
+      version: v1
+      kind: Gateway
+      name: gateway-internal
+    path: jenkins/jenkins-gateway-patch.yaml
+  - target:
+      group: gateway.networking.k8s.io
+      version: v1
+      kind: Gateway
+      name: gateway-internal
+    path: longhorn/longhorn-gateway-patch.yaml
+  - target:
+      group: gateway.networking.k8s.io
+      version: v1
+      kind: Gateway
+      name: gateway-internal
+    path: n8n/n8n-gateway-patch.yaml
+  - target:
+      group: gateway.networking.k8s.io
+      version: v1
+      kind: Gateway
+      name: gateway-internal
+    path: netbootxyz/netbootxyz-gateway-patch.yaml
+  - target:
+      group: gateway.networking.k8s.io
+      version: v1
+      kind: Gateway
+      name: gateway-internal
+    path: resume/resume-minio-gateway-patch.yaml
+  - target:
+      group: gateway.networking.k8s.io
+      version: v1
+      kind: Gateway
+      name: gateway-internal
+    path: resume/resume-minio-webui-gateway-patch.yaml
+  - target:
+      group: gateway.networking.k8s.io
+      version: v1
+      kind: Gateway
+      name: gateway-internal
+    path: technitium/technitium-gateway-patch.yaml
+  - target:
+      group: gateway.networking.k8s.io
+      version: v1
+      kind: Gateway
+      name: gateway-internal
+    path: technitium/technitium-backup-gateway-patch.yaml
+  - target:
+      group: gateway.networking.k8s.io
+      version: v1
+      kind: Gateway
+      name: gateway-internal
+    path: unifi/unifi-gateway-patch.yaml
+  - target:
+      group: gateway.networking.k8s.io
+      version: v1
+      kind: Gateway
+      name: gateway-internal
+    path: proxmox/proxmox-gateway-patch.yaml
+  - target:
+      group: gateway.networking.k8s.io
+      version: v1
+      kind: Gateway
+      name: gateway-internal
+    path: truenas/truenas-gateway-patch.yaml
+  - target:
+      group: gateway.networking.k8s.io
+      version: v1
+      kind: Gateway
+      name: gateway-internal
+    path: monitoring/monitoring-gateway-patch.yaml
+  - target:
+      group: gateway.networking.k8s.io
+      version: v1
+      kind: Gateway
+      name: gateway-internal
+    path: bentopdf/bentopdf-gateway-patch.yaml
+  - target:
+      group: gateway.networking.k8s.io
+      version: v1
+      kind: Gateway
+      name: gateway-internal
+    path: it-tools/it-tools-gateway-patch.yaml
+  - target:
+      group: gateway.networking.k8s.io
+      version: v1
+      kind: Gateway
+      name: gateway-internal
+    path: jellyfin/jellyfin-gateway-patch.yaml
+  - target:
+      group: gateway.networking.k8s.io
+      version: v1
+      kind: Gateway
+      name: gateway-internal
+    path: passbolt/passbolt-gateway-patch.yaml
+  - target:
+      group: gateway.networking.k8s.io
+      version: v1
+      kind: Gateway
+      name: gateway-internal
+    path: resume/resume-gateway-patch.yaml
+  - target:
+      group: gateway.networking.k8s.io
+      version: v1
+      kind: Gateway
+      name: gateway-internal
+    path: wikijs/wikijs-gateway-patch.yaml
+  - target:
+      group: gateway.networking.k8s.io
+      version: v1
+      kind: Gateway
+      name: gateway-internal
+    path: zipline/zipline-gateway-patch.yaml
+  - target:
+      group: gateway.networking.k8s.io
+      version: v1
+      kind: Gateway
+      name: gateway-internal
+    path: minio-aistor/minio-aistor-api-gateway-patch.yaml
+  - target:
+      group: gateway.networking.k8s.io
+      version: v1
+      kind: Gateway
+      name: gateway-internal
+    path: minio-aistor/minio-aistor-console-gateway-patch.yaml
+  - target:
+      group: gateway.networking.k8s.io
+      version: v1
+      kind: Gateway
+      name: gateway-internal
+    path: vaultwarden/vaultwarden-gateway-patch.yaml
+  - target:
+      group: gateway.networking.k8s.io
+      version: v1
+      kind: Gateway
+      name: gateway-internal
+    path: databasus/databasus-gateway-patch.yaml
+  - target:
+      group: gateway.networking.k8s.io
+      version: v1
+      kind: Gateway
+      name: gateway-internal
+    path: excalidraw/excalidraw-gateway-patch.yaml
+  - target:
+      group: gateway.networking.k8s.io
+      version: v1
+      kind: Gateway
+      name: gateway-internal
+    path: gotify/gotify-gateway-patch.yaml
+  - target:
+      group: gateway.networking.k8s.io
+      version: v1
+      kind: Gateway
+      name: gateway-internal
+    path: uptime-kuma/uptime-kuma-gateway-patch.yaml
+  - target:
+      group: gateway.networking.k8s.io
+      version: v1
+      kind: Gateway
+      name: gateway-internal
+    path: ollama/ollama-gateway-patch.yaml
+  - target:
+      group: gateway.networking.k8s.io
+      version: v1
+      kind: Gateway
+      name: gateway-internal
+    path: openwebui/openwebui-gateway-patch.yaml
+  - target:
+      group: gateway.networking.k8s.io
+      version: v1
+      kind: Gateway
+      name: gateway-internal
+    path: searxng/searxng-gateway-patch.yaml
+  - target:
+      group: gateway.networking.k8s.io
+      version: v1
+      kind: Gateway
+      name: gateway-internal
+    path: affine/affine-gateway-patch.yaml
+  - target:
+      group: gateway.networking.k8s.io
+      version: v1
+      kind: Gateway
+      name: gateway-internal
+    path: pelican/pelican-gateway-patch.yaml
+  - target:
+      group: gateway.networking.k8s.io
+      version: v1
+      kind: Gateway
+      name: gateway-internal
+    path: pelican/pelican-wings-gateway-patch.yaml
+
+  # Public gateway patches
+  - target:
+      group: gateway.networking.k8s.io
+      version: v1
+      kind: Gateway
+      name: gateway-public
+    path: gitea/gitea-gateway-public-patch.yaml
+  - target:
+      group: gateway.networking.k8s.io
+      version: v1
+      kind: Gateway
+      name: gateway-public
+    path: authentik/authentik-gateway-public-patch.yaml
+  - target:
+      group: gateway.networking.k8s.io
+      version: v1
+      kind: Gateway
+      name: gateway-public
+    path: bentopdf/bentopdf-gateway-public-patch.yaml
+  - target:
+      group: gateway.networking.k8s.io
+      version: v1
+      kind: Gateway
+      name: gateway-public
+    path: it-tools/it-tools-gateway-public-patch.yaml
+  - target:
+      group: gateway.networking.k8s.io
+      version: v1
+      kind: Gateway
+      name: gateway-public
+    path: jellyfin/jellyfin-gateway-public-patch.yaml
+  - target:
+      group: gateway.networking.k8s.io
+      version: v1
+      kind: Gateway
+      name: gateway-public
+    path: immich/immich-gateway-public-patch.yaml
+  - target:
+      group: gateway.networking.k8s.io
+      version: v1
+      kind: Gateway
+      name: gateway-public
+    path: passbolt/passbolt-gateway-public-patch.yaml
+  - target:
+      group: gateway.networking.k8s.io
+      version: v1
+      kind: Gateway
+      name: gateway-public
+    path: resume/resume-gateway-public-patch.yaml
+  - target:
+      group: gateway.networking.k8s.io
+      version: v1
+      kind: Gateway
+      name: gateway-public
+    path: wikijs/wikijs-gateway-public-patch.yaml
+  - target:
+      group: gateway.networking.k8s.io
+      version: v1
+      kind: Gateway
+      name: gateway-public
+    path: zipline/zipline-gateway-public-patch.yaml
+  - target:
+      group: gateway.networking.k8s.io
+      version: v1
+      kind: Gateway
+      name: gateway-public
+    path: excalidraw/excalidraw-gateway-public-patch.yaml
+  - target:
+      group: gateway.networking.k8s.io
+      version: v1
+      kind: Gateway
+      name: gateway-public
+    path: gotify/gotify-gateway-public-patch.yaml
+  # Uncomment to expose Grafana publicly — ensure Grafana auth is properly configured first
+  # - target:
+  #     group: gateway.networking.k8s.io
+  #     version: v1
+  #     kind: Gateway
+  #     name: gateway-public
+  #   path: monitoring/monitoring-grafana-gateway-public-patch.yaml