REFACTOR(goldilocks): use managedNamespaceMetadata for namespace labels

- Remove namespace.yaml files
- Add managedNamespaceMetadata with Goldilocks label
- Set CreateNamespace=true in syncOptions
- Update kustomization.yaml to remove namespace.yaml references

external-secrets/argocd.yaml

@@ -7,40 +7,35 @@ metadata:
   - resources-finalizer.argocd.argoproj.io
 spec:
   project: default
-
   sources:
-    # Helm chart from external repository
   - repoURL: https://charts.external-secrets.io
     chart: external-secrets
     targetRevision: 0.10.5
     helm:
       valueFiles:
       - $values/external-secrets/helm-values.yaml
-    # Values file from Git repository
   - repoURL: https://gitea0213.kro.kr/bluemayne/cluster-infrastructure.git
     targetRevision: main
     ref: values
-
   destination:
     server: https://kubernetes.default.svc
     namespace: external-secrets
-
   syncPolicy:
     automated:
       prune: true
       selfHeal: true
       allowEmpty: false
-
     syncOptions:
     - CreateNamespace=true
     - PrunePropagationPolicy=foreground
     - PruneLast=true
-
     retry:
       limit: 5
       backoff:
         duration: 5s
         factor: 2
         maxDuration: 3m
-
+    managedNamespaceMetadata:
+      labels:
+        goldilocks.fairwinds.com/enabled: 'true'
   revisionHistoryLimit: 10

external-secrets/kustomization.yaml

@@ -1,5 +1,3 @@
 apiVersion: kustomize.config.k8s.io/v1beta1
 kind: Kustomization
-
-resources:
-  - namespace.yaml
+resources: []

external-secrets/namespace.yaml

@@ -1,6 +0,0 @@
-apiVersion: v1
-kind: Namespace
-metadata:
-  name: external-secrets
-  labels:
-    goldilocks.fairwinds.com/enabled: "true"

falco/argocd.yaml

@@ -7,9 +7,7 @@ metadata:
   - resources-finalizer.argocd.argoproj.io
 spec:
   project: default
-
   source:
-    # Helm chart from Falcosecurity repository
     repoURL: https://falcosecurity.github.io/charts
     chart: falco
     targetRevision: 4.20.0
@@ -81,17 +79,14 @@ spec:
             key: node-role.kubernetes.io/master
           - effect: NoSchedule
             key: node-role.kubernetes.io/control-plane
-
   destination:
     server: https://kubernetes.default.svc
     namespace: falco
-
   syncPolicy:
     automated:
       prune: true
       selfHeal: true
       allowEmpty: false
-
     syncOptions:
     - CreateNamespace=true
     - PrunePropagationPolicy=foreground
@@ -99,23 +94,22 @@ spec:
     - ServerSideApply=true
     - RespectIgnoreDifferences=true
     - ApplyOutOfSyncOnly=true
-
     retry:
       limit: 5
       backoff:
         duration: 5s
         factor: 2
         maxDuration: 3m
-
-  # Ignore StatefulSet differences managed by Kubernetes
+    managedNamespaceMetadata:
+      labels:
+        goldilocks.fairwinds.com/enabled: 'true'
   ignoreDifferences:
   - group: apps
     kind: StatefulSet
     jqPathExpressions:
-        - '.spec.persistentVolumeClaimRetentionPolicy'
-        - '.spec.volumeClaimTemplates[].metadata.creationTimestamp'
-        - '.spec.volumeClaimTemplates[].status'
-        - '.spec.volumeClaimTemplates[].apiVersion'
-        - '.spec.volumeClaimTemplates[].kind'
-
+    - .spec.persistentVolumeClaimRetentionPolicy
+    - .spec.volumeClaimTemplates[].metadata.creationTimestamp
+    - .spec.volumeClaimTemplates[].status
+    - .spec.volumeClaimTemplates[].apiVersion
+    - .spec.volumeClaimTemplates[].kind
   revisionHistoryLimit: 10

falco/kustomization.yaml

@@ -1,7 +1,5 @@
 apiVersion: kustomize.config.k8s.io/v1beta1
 kind: Kustomization
-
 resources:
-  - namespace.yaml
-  - vault/falco-ui-secret.yaml
-  - ingress.yaml
+- vault/falco-ui-secret.yaml
+- ingress.yaml

falco/namespace.yaml

@@ -1,6 +0,0 @@
-apiVersion: v1
-kind: Namespace
-metadata:
-  name: falco
-  labels:
-    goldilocks.fairwinds.com/enabled: "true"

vault/argocd.yaml

@@ -7,7 +7,6 @@ metadata:
   - resources-finalizer.argocd.argoproj.io
 spec:
   project: default
-
   sources:
   - repoURL: https://helm.releases.hashicorp.com
     chart: vault
@@ -21,27 +20,25 @@ spec:
   - repoURL: https://gitea0213.kro.kr/bluemayne/cluster-infrastructure.git
     targetRevision: main
     path: vault
-
   destination:
     server: https://kubernetes.default.svc
     namespace: vault
-
   syncPolicy:
     automated:
       prune: true
       selfHeal: true
       allowEmpty: false
-
     syncOptions:
-      - CreateNamespace=false
+    - CreateNamespace=true
     - PrunePropagationPolicy=foreground
     - PruneLast=true
-
     retry:
       limit: 5
       backoff:
         duration: 5s
         factor: 2
         maxDuration: 3m
-
+    managedNamespaceMetadata:
+      labels:
+        goldilocks.fairwinds.com/enabled: 'true'
   revisionHistoryLimit: 10

vault/kustomization.yaml

@@ -1,6 +1,4 @@
 apiVersion: kustomize.config.k8s.io/v1beta1
 kind: Kustomization
-
 resources:
-  - namespace.yaml
-  - cluster-secret-store.yaml
+- cluster-secret-store.yaml

vault/namespace.yaml

@@ -1,6 +0,0 @@
-apiVersion: v1
-kind: Namespace
-metadata:
-  name: vault
-  labels:
-    goldilocks.fairwinds.com/enabled: "true"