REFACTOR(goldilocks): use managedNsMeta for Goldil

- Remove namespace.yaml files
- Add managedNamespaceMetadata with Goldilocks label
- Set CreateNamespace=true in syncOptions
- Update kustomization.yaml to remove namespace.yaml references

code-server/argocd.yaml

@@ -7,7 +7,6 @@ metadata:
   - resources-finalizer.argocd.argoproj.io
 spec:
   project: default
-
   sources:
   - repoURL: https://github.com/coder/code-server.git
     targetRevision: main
@@ -21,19 +20,21 @@ spec:
   - repoURL: https://gitea0213.kro.kr/bluemayne/applications.git
     targetRevision: main
     path: code-server
-
   destination:
     server: https://kubernetes.default.svc
     namespace: code-server
-
   syncPolicy:
     automated:
       prune: true
       selfHeal: true
-
     retry:
       limit: 5
       backoff:
         duration: 5s
         factor: 2
         maxDuration: 3m
+    managedNamespaceMetadata:
+      labels:
+        goldilocks.fairwinds.com/enabled: 'true'
+    syncOptions:
+    - CreateNamespace=true

code-server/kustomization.yaml

@@ -1,12 +1,7 @@
 apiVersion: kustomize.config.k8s.io/v1beta1
 kind: Kustomization
-
 namespace: code-server
-
 resources:
-
-  - namespace.yaml
-
 - vault/code-server-password.yaml
 - rbac.yaml
 - ingress.yaml

code-server/namespace.yaml

@@ -1,6 +0,0 @@
-apiVersion: v1
-kind: Namespace
-metadata:
-  name: code-server
-  labels:
-    goldilocks.fairwinds.com/enabled: "true"

docusaurus/argocd.yaml

@@ -7,44 +7,39 @@ metadata:
   - resources-finalizer.argocd.argoproj.io
 spec:
   project: default
-
   sources:
   - repoURL: https://gitea0213.kro.kr/bluemayne/applications.git
     targetRevision: main
     path: docusaurus
-
   destination:
     server: https://kubernetes.default.svc
     namespace: docusaurus
-
   syncPolicy:
     automated:
       prune: true
       selfHeal: true
       allowEmpty: false
-
     syncOptions:
+    - CreateNamespace=true
     - PrunePropagationPolicy=foreground
     - PruneLast=true
-
     retry:
       limit: 5
       backoff:
         duration: 5s
         factor: 2
         maxDuration: 3m
-
+    managedNamespaceMetadata:
+      labels:
+        goldilocks.fairwinds.com/enabled: 'true'
   revisionHistoryLimit: 10
-
-  # Ignore differences in checksum annotations and manual restart annotations
   ignoreDifferences:
   - group: apps
     kind: Deployment
     jqPathExpressions:
     - .spec.template.metadata.annotations
     - .metadata.annotations
-
+  - group: ''
-    - group: ""
     kind: Service
     name: docusaurus
     namespace: docusaurus

docusaurus/kustomization.yaml

@@ -1,11 +1,7 @@
 apiVersion: kustomize.config.k8s.io/v1beta1
 kind: Kustomization
-
 resources:
-
-  - namespace.yaml
 - deployment.yaml
 - service.yaml
 - ingress.yaml
-
 namespace: docusaurus

docusaurus/namespace.yaml

@@ -1,6 +0,0 @@
-apiVersion: v1
-kind: Namespace
-metadata:
-  name: docusaurus
-  labels:
-    goldilocks.fairwinds.com/enabled: "true"

gitea/argocd.yaml

@@ -7,43 +7,38 @@ metadata:
   - resources-finalizer.argocd.argoproj.io
 spec:
   project: default
-
   sources:
-    # Helm chart from Gitea repository
   - repoURL: https://dl.gitea.com/charts/
     chart: gitea
     targetRevision: 12.4.0
     helm:
       valueFiles:
       - $values/gitea/helm-values.yaml
-    # Values file from applications repository
   - repoURL: https://gitea0213.kro.kr/bluemayne/applications.git
     targetRevision: main
     ref: values
-    # Vault secrets from applications repository
   - repoURL: https://gitea0213.kro.kr/bluemayne/applications.git
     targetRevision: main
     path: gitea
-
   destination:
     server: https://kubernetes.default.svc
     namespace: gitea
-
   syncPolicy:
     automated:
       prune: true
       selfHeal: true
       allowEmpty: false
-
     syncOptions:
+    - CreateNamespace=true
     - PrunePropagationPolicy=foreground
     - PruneLast=true
-
     retry:
       limit: 5
       backoff:
         duration: 5s
         factor: 2
         maxDuration: 3m
-
+    managedNamespaceMetadata:
+      labels:
+        goldilocks.fairwinds.com/enabled: 'true'
   revisionHistoryLimit: 10

gitea/kustomization.yaml

@@ -1,15 +1,10 @@
 apiVersion: kustomize.config.k8s.io/v1beta1
 kind: Kustomization
-
 resources:
-  - namespace.yaml
-
 - deployment.yaml
-
 - vault/gitea-admin-secret.yaml
 - vault/gitea-postgres-password.yaml
 - vault/gitea-runner-token.yaml
 - vault/gitea-minio-credentials.yaml
 - vault/minio-root-password.yaml
-
 namespace: gitea

gitea/namespace.yaml

@@ -1,6 +0,0 @@
-apiVersion: v1
-kind: Namespace
-metadata:
-  name: gitea
-  labels:
-    goldilocks.fairwinds.com/enabled: "true"

homer/argocd.yaml

@@ -7,24 +7,25 @@ metadata:
   - resources-finalizer.argocd.argoproj.io
 spec:
   project: default
-  
   sources:
   - repoURL: https://gitea0213.kro.kr/bluemayne/applications.git
     targetRevision: main
     path: homer
-  
   destination:
     server: https://kubernetes.default.svc
     namespace: homer
-  
   syncPolicy:
     automated:
       prune: true
       selfHeal: true
-
     retry:
       limit: 5
       backoff:
         duration: 5s
         factor: 2
         maxDuration: 3m
+    managedNamespaceMetadata:
+      labels:
+        goldilocks.fairwinds.com/enabled: 'true'
+    syncOptions:
+    - CreateNamespace=true

homer/kustomization.yaml

@@ -1,12 +1,9 @@
 apiVersion: kustomize.config.k8s.io/v1beta1
 kind: Kustomization
-
 resources:
-  - namespace.yaml
 - deployment.yaml
 - service.yaml
 - ingress.yaml
-
 configMapGenerator:
 - name: homer-config
   namespace: homer

homer/namespace.yaml

@@ -1,6 +0,0 @@
-apiVersion: v1
-kind: Namespace
-metadata:
-  name: homer
-  labels:
-    goldilocks.fairwinds.com/enabled: "true"

umami/argocd.yaml

@@ -7,7 +7,6 @@ metadata:
   - resources-finalizer.argocd.argoproj.io
 spec:
   project: default
-  
   sources:
   - repoURL: https://charts.christianhuth.de
     chart: umami
@@ -21,29 +20,27 @@ spec:
   - repoURL: https://gitea0213.kro.kr/bluemayne/applications.git
     targetRevision: main
     path: umami
-  
   destination:
     server: https://kubernetes.default.svc
     namespace: umami
-  
   ignoreDifferences:
-    # Ignore app-secret data changes in umami-app-secret
+  - group: ''
-    # Helm chart generates random app-secret value on each sync,
-    # causing ArgoCD to detect it as OutOfSync
-    - group: ""
     kind: Secret
     name: umami-app-secret
     jsonPointers:
     - /data
-  
   syncPolicy:
     automated:
       prune: true
       selfHeal: true
-
     retry:
       limit: 5
       backoff:
         duration: 5s
         factor: 2
         maxDuration: 3m
+    managedNamespaceMetadata:
+      labels:
+        goldilocks.fairwinds.com/enabled: 'true'
+    syncOptions:
+    - CreateNamespace=true

umami/kustomization.yaml

@@ -1,7 +1,5 @@
 apiVersion: kustomize.config.k8s.io/v1beta1
 kind: Kustomization
-
 resources:
-  - namespace.yaml
 - vault/umami-password.yaml
 - ingress.yaml

umami/namespace.yaml

@@ -1,6 +0,0 @@
-apiVersion: v1
-kind: Namespace
-metadata:
-  name: umami
-  labels:
-    goldilocks.fairwinds.com/enabled: "true"