feat(cluster)!: move cert-manager into kube-system namespace

cluster/apps/cert-manager/namespace.yaml

@@ -1,7 +0,0 @@
----
-apiVersion: v1
-kind: Namespace
-metadata:
-  name: cert-manager
-  labels:
-    kustomize.toolkit.fluxcd.io/prune: disabled

cluster/apps/kube-system/cert-manager/helm-release.yaml

@@ -3,7 +3,7 @@ apiVersion: helm.toolkit.fluxcd.io/v2beta1
 kind: HelmRelease
 metadata:
   name: cert-manager
-  namespace: cert-manager
+  namespace: kube-system
 spec:
   interval: 15m
   chart:

cluster/apps/kube-system/kustomization.yaml

@@ -3,6 +3,7 @@ apiVersion: kustomize.config.k8s.io/v1beta1
 kind: Kustomization
 resources:
   - namespace.yaml
+  - cert-manager
   - kube-vip
   # - kured
   - metrics-server

cluster/apps/kustomization.yaml

@@ -2,7 +2,6 @@
 apiVersion: kustomize.config.k8s.io/v1beta1
 kind: Kustomization
 resources:
-  - cert-manager
   - default
   - flux-system
   - kube-system

cluster/apps/networking/traefik/helm-release.yaml

@@ -24,7 +24,7 @@ spec:
       retries: 5
   dependsOn:
     - name: cert-manager
-      namespace: cert-manager
+      namespace: kube-system
     - name: metallb
       namespace: networking
   values:

tmpl/cluster/cert-manager-secret.sops.yaml

@@ -3,6 +3,6 @@ apiVersion: v1
 kind: Secret
 metadata:
   name: cloudflare-api-key
-  namespace: cert-manager
+  namespace: kube-system
 stringData:
     api-key: ${BOOTSTRAP_CLOUDFLARE_APIKEY}