feat: refactor config file (#1267)

Signed-off-by: Devin Buhl <devin@buhl.casa>

bootstrap/templates/kubernetes/flux/.mjfilter.py

@@ -0,0 +1 @@
+main = lambda data: data.get("flux").get("enabled") == True

bootstrap/templates/kubernetes/flux/config/cluster.yaml.j2

@@ -6,15 +6,13 @@ metadata:
   namespace: flux-system
 spec:
   interval: 30m
-  ref:
-    branch: "#{ bootstrap_advanced_flags.github_repository_branch|default('main', true) }#"
-  #% if bootstrap_private_github_repo %#
+  url: "#{ flux.github.address }#"
+  #% if flux.github.address.startswith('ssh://') %#
   secretRef:
     name: github-deploy-key
-  url: "ssh://github.com/#{ bootstrap_github_username }#/#{ bootstrap_github_repository_name }#"
-  #% else %#
-  url: "https://github.com/#{ bootstrap_github_username }#/#{ bootstrap_github_repository_name }#.git"
   #% endif %#
+  ref:
+    branch: "#{ flux.github.branch|default('main', true) }#"
   ignore: |
     # exclude all
     /*

bootstrap/templates/kubernetes/flux/repositories/helm/backube.yaml.j2

@@ -1,9 +0,0 @@
----
-apiVersion: source.toolkit.fluxcd.io/v1beta2
-kind: HelmRepository
-metadata:
-  name: backube
-  namespace: flux-system
-spec:
-  interval: 1h
-  url: https://backube.github.io/helm-charts

bootstrap/templates/kubernetes/flux/repositories/helm/bitnami.yaml.j2

@@ -1,10 +0,0 @@
----
-apiVersion: source.toolkit.fluxcd.io/v1beta2
-kind: HelmRepository
-metadata:
-  name: bitnami
-  namespace: flux-system
-spec:
-  type: oci
-  interval: 5m
-  url: oci://registry-1.docker.io/bitnamicharts

bootstrap/templates/kubernetes/flux/repositories/helm/coredns.yaml.j2

@@ -1,9 +0,0 @@
----
-apiVersion: source.toolkit.fluxcd.io/v1beta2
-kind: HelmRepository
-metadata:
-  name: coredns
-  namespace: flux-system
-spec:
-  interval: 1h
-  url: https://coredns.github.io/helm

bootstrap/templates/kubernetes/flux/repositories/helm/csi-driver-nfs.yaml.j2

@@ -1,9 +0,0 @@
----
-apiVersion: source.toolkit.fluxcd.io/v1beta2
-kind: HelmRepository
-metadata:
-  name: csi-driver-nfs
-  namespace: flux-system
-spec:
-  interval: 1h
-  url: https://raw.githubusercontent.com/kubernetes-csi/csi-driver-nfs/master/charts

bootstrap/templates/kubernetes/flux/repositories/helm/csi-driver-smb.yaml.j2

@@ -1,9 +0,0 @@
----
-apiVersion: source.toolkit.fluxcd.io/v1beta2
-kind: HelmRepository
-metadata:
-  name: csi-driver-smb
-  namespace: flux-system
-spec:
-  interval: 1h
-  url: https://raw.githubusercontent.com/kubernetes-csi/csi-driver-smb/master/charts

bootstrap/templates/kubernetes/flux/repositories/helm/descheduler.yaml.j2

@@ -1,9 +0,0 @@
----
-apiVersion: source.toolkit.fluxcd.io/v1beta2
-kind: HelmRepository
-metadata:
-  name: descheduler
-  namespace: flux-system
-spec:
-  interval: 1h
-  url: https://kubernetes-sigs.github.io/descheduler

bootstrap/templates/kubernetes/flux/repositories/helm/external-dns.yaml.j2

@@ -1,3 +1,4 @@
+#% if cloudflare.enabled %#
 ---
 apiVersion: source.toolkit.fluxcd.io/v1beta2
 kind: HelmRepository
@@ -7,3 +8,4 @@ metadata:
 spec:
   interval: 1h
   url: https://kubernetes-sigs.github.io/external-dns
+#% endif %#

bootstrap/templates/kubernetes/flux/repositories/helm/grafana.yaml.j2

@@ -1,9 +0,0 @@
----
-apiVersion: source.toolkit.fluxcd.io/v1beta2
-kind: HelmRepository
-metadata:
-  name: grafana
-  namespace: flux-system
-spec:
-  interval: 1h
-  url: https://grafana.github.io/helm-charts

bootstrap/templates/kubernetes/flux/repositories/helm/ingress-nginx.yaml.j2

@@ -1,3 +1,4 @@
+#% if cloudflare.enabled %#
 ---
 apiVersion: source.toolkit.fluxcd.io/v1beta2
 kind: HelmRepository
@@ -7,3 +8,4 @@ metadata:
 spec:
   interval: 1h
   url: https://kubernetes.github.io/ingress-nginx
+#% endif %#

bootstrap/templates/kubernetes/flux/repositories/helm/k8s-gateway.yaml.j2

@@ -1,3 +1,4 @@
+#% if cloudflare.enabled %#
 ---
 apiVersion: source.toolkit.fluxcd.io/v1beta2
 kind: HelmRepository
@@ -7,3 +8,4 @@ metadata:
 spec:
   interval: 1h
   url: https://ori-edge.github.io/k8s_gateway
+#% endif %#

bootstrap/templates/kubernetes/flux/repositories/helm/kubernetes-dashboard.yaml.j2

@@ -1,9 +0,0 @@
----
-apiVersion: source.toolkit.fluxcd.io/v1beta2
-kind: HelmRepository
-metadata:
-  name: kubernetes-dashboard
-  namespace: flux-system
-spec:
-  interval: 1h
-  url: https://kubernetes.github.io/dashboard

bootstrap/templates/kubernetes/flux/repositories/helm/kustomization.yaml.j2

@@ -2,26 +2,20 @@
 apiVersion: kustomize.config.k8s.io/v1beta1
 kind: Kustomization
 resources:
-  - ./backube.yaml
-  - ./bitnami.yaml
   - ./bjw-s.yaml
   - ./cilium.yaml
-  - ./coredns.yaml
-  - ./csi-driver-nfs.yaml
-  - ./csi-driver-smb.yaml
-  - ./descheduler.yaml
+  #% if cloudflare.enabled %#
   - ./external-dns.yaml
-  - ./grafana.yaml
   - ./ingress-nginx.yaml
-  - ./jetstack.yaml
   - ./k8s-gateway.yaml
-  - ./kubernetes-dashboard.yaml
-  - ./longhorn.yaml
+  #% endif %#
+  - ./jetstack.yaml
   - ./metrics-server.yaml
   - ./openebs.yaml
-  - ./piraeus.yaml
+  #% if distribution in ['talos'] %#
   - ./postfinance.yaml
-  - ./prometheus-community.yaml
+  #% endif %#
   - ./stakater.yaml
-  - ./weave-gitops.yaml
+  #% if distribution in ['k0s', 'talos'] %#
   - ./xenitab.yaml
+  #% endif %#

bootstrap/templates/kubernetes/flux/repositories/helm/longhorn.yaml.j2

@@ -1,9 +0,0 @@
----
-apiVersion: source.toolkit.fluxcd.io/v1beta2
-kind: HelmRepository
-metadata:
-  name: longhorn
-  namespace: flux-system
-spec:
-  interval: 1h
-  url: https://charts.longhorn.io

bootstrap/templates/kubernetes/flux/repositories/helm/piraeus.yaml.j2

@@ -1,9 +0,0 @@
----
-apiVersion: source.toolkit.fluxcd.io/v1beta2
-kind: HelmRepository
-metadata:
-  name: piraeus
-  namespace: flux-system
-spec:
-  interval: 1h
-  url: https://piraeus.io/helm-charts

bootstrap/templates/kubernetes/flux/repositories/helm/postfinance.yaml.j2

@@ -1,3 +1,4 @@
+#% if distribution in ['talos'] %#
 ---
 apiVersion: source.toolkit.fluxcd.io/v1beta2
 kind: HelmRepository
@@ -7,3 +8,4 @@ metadata:
 spec:
   interval: 1h
   url: https://postfinance.github.io/kubelet-csr-approver
+#% endif %#

bootstrap/templates/kubernetes/flux/repositories/helm/prometheus-community.yaml.j2

@@ -1,10 +0,0 @@
----
-apiVersion: source.toolkit.fluxcd.io/v1beta2
-kind: HelmRepository
-metadata:
-  name: prometheus-community
-  namespace: flux-system
-spec:
-  type: oci
-  interval: 5m
-  url: oci://ghcr.io/prometheus-community/charts

bootstrap/templates/kubernetes/flux/repositories/helm/weave-gitops.yaml.j2

@@ -1,10 +0,0 @@
----
-apiVersion: source.toolkit.fluxcd.io/v1beta2
-kind: HelmRepository
-metadata:
-  name: weave-gitops
-  namespace: flux-system
-spec:
-  type: oci
-  interval: 5m
-  url: oci://ghcr.io/weaveworks/charts

bootstrap/templates/kubernetes/flux/repositories/helm/xenitab.yaml.j2

@@ -1,3 +1,4 @@
+#% if distribution in ['k0s', 'talos'] %#
 ---
 apiVersion: source.toolkit.fluxcd.io/v1beta2
 kind: HelmRepository
@@ -8,3 +9,4 @@ spec:
   type: oci
   interval: 5m
   url: oci://ghcr.io/xenitab/helm-charts
+#% endif %#

bootstrap/templates/kubernetes/flux/vars/cluster-secrets.sops.yaml.j2

@@ -5,6 +5,9 @@ metadata:
   name: cluster-secrets
   namespace: flux-system
 stringData:
-  SECRET_DOMAIN: "#{ bootstrap_cloudflare_domain }#"
-  SECRET_ACME_EMAIL: "#{ bootstrap_acme_email }#"
-  SECRET_CLOUDFLARE_TUNNEL_ID: "#{ bootstrap_cloudflare_tunnel_id }#"
+  SECRET_EXAMPLE: Neque porro quisquam est qui dolorem ipsum quia dolor sit amet, consectetur, adipisci velit...
+  #% if cloudflare.enabled %#
+  SECRET_DOMAIN: "#{ cloudflare.domain }#"
+  SECRET_ACME_EMAIL: "#{ cloudflare.acme.email }#"
+  SECRET_CLOUDFLARE_TUNNEL_ID: "#{ cloudflare.tunnel.id }#"
+  #% endif %#

bootstrap/templates/kubernetes/flux/vars/cluster-settings.yaml.j2

@@ -5,13 +5,9 @@ metadata:
   name: cluster-settings
   namespace: flux-system
 data:
-  TIMEZONE: "#{ bootstrap_timezone }#"
-  COREDNS_ADDR: "#{ bootstrap_service_cidr.split(',')[0] | nthhost(10) }#"
-  KUBE_API_ADDR: "#{ bootstrap_kube_api_addr }#"
-  CLUSTER_CIDR: "#{ bootstrap_cluster_cidr.split(',')[0] }#"
-  SERVICE_CIDR: "#{ bootstrap_service_cidr.split(',')[0] }#"
-  NODE_CIDR: "#{ bootstrap_node_cidr }#"
-  #% if bootstrap_advanced_flags.dual_stack_ipv4_first|default(false) %#
-  CLUSTER_CIDR_V6: "#{ bootstrap_cluster_cidr.split(',')[1] }#"
-  SERVICE_CIDR_V6: "#{ bootstrap_service_cidr.split(',')[1] }#"
+  TIMEZONE: "#{ timezone }#"
+  CLUSTER_CIDR: "#{ cluster.pod_network.split(',')[0] }#"
+  NODE_CIDR: "#{ cluster.nodes.host_network }#"
+  #% if feature_gates.dual_stack_ipv4_first %#
+  CLUSTER_CIDR_V6: "#{ cluster.pod_network.split(',')[1] }#"
   #% endif %#