diff --git a/charts/sys/.helmignore b/apps/sys/.helmignore
similarity index 100%
rename from charts/sys/.helmignore
rename to apps/sys/.helmignore
diff --git a/charts/sys/Chart.yaml b/apps/sys/Chart.yaml
similarity index 100%
rename from charts/sys/Chart.yaml
rename to apps/sys/Chart.yaml
diff --git a/charts/sys/charts/sys-cilium-policies/.helmignore b/apps/sys/charts/sys-cilium-policies/.helmignore
similarity index 100%
rename from charts/sys/charts/sys-cilium-policies/.helmignore
rename to apps/sys/charts/sys-cilium-policies/.helmignore
diff --git a/charts/sys/charts/sys-cilium-policies/Chart.yaml b/apps/sys/charts/sys-cilium-policies/Chart.yaml
similarity index 100%
rename from charts/sys/charts/sys-cilium-policies/Chart.yaml
rename to apps/sys/charts/sys-cilium-policies/Chart.yaml
diff --git a/charts/sys/charts/sys-cilium-policies/templates/argocd/CiliumNetworkPolicy-allow-applicationset-ingress.yaml b/apps/sys/charts/sys-cilium-policies/templates/argocd/CiliumNetworkPolicy-allow-applicationset-ingress.yaml
similarity index 100%
rename from charts/sys/charts/sys-cilium-policies/templates/argocd/CiliumNetworkPolicy-allow-applicationset-ingress.yaml
rename to apps/sys/charts/sys-cilium-policies/templates/argocd/CiliumNetworkPolicy-allow-applicationset-ingress.yaml
diff --git a/charts/sys/charts/sys-cilium-policies/templates/argocd/CiliumNetworkPolicy-allow-argo-notifications.yaml b/apps/sys/charts/sys-cilium-policies/templates/argocd/CiliumNetworkPolicy-allow-argo-notifications.yaml
similarity index 100%
rename from charts/sys/charts/sys-cilium-policies/templates/argocd/CiliumNetworkPolicy-allow-argo-notifications.yaml
rename to apps/sys/charts/sys-cilium-policies/templates/argocd/CiliumNetworkPolicy-allow-argo-notifications.yaml
diff --git a/charts/sys/charts/sys-cilium-policies/templates/argocd/CiliumNetworkPolicy-allow-argo-repo-access-applicationset.yaml b/apps/sys/charts/sys-cilium-policies/templates/argocd/CiliumNetworkPolicy-allow-argo-repo-access-applicationset.yaml
similarity index 100%
rename from charts/sys/charts/sys-cilium-policies/templates/argocd/CiliumNetworkPolicy-allow-argo-repo-access-applicationset.yaml
rename to apps/sys/charts/sys-cilium-policies/templates/argocd/CiliumNetworkPolicy-allow-argo-repo-access-applicationset.yaml
diff --git a/charts/sys/charts/sys-cilium-policies/templates/argocd/CiliumNetworkPolicy-allow-argo-repo-access.yaml b/apps/sys/charts/sys-cilium-policies/templates/argocd/CiliumNetworkPolicy-allow-argo-repo-access.yaml
similarity index 100%
rename from charts/sys/charts/sys-cilium-policies/templates/argocd/CiliumNetworkPolicy-allow-argo-repo-access.yaml
rename to apps/sys/charts/sys-cilium-policies/templates/argocd/CiliumNetworkPolicy-allow-argo-repo-access.yaml
diff --git a/charts/sys/charts/sys-cilium-policies/templates/argocd/CiliumNetworkPolicy-allow-chartmuseum-ingress.yaml b/apps/sys/charts/sys-cilium-policies/templates/argocd/CiliumNetworkPolicy-allow-chartmuseum-ingress.yaml
similarity index 100%
rename from charts/sys/charts/sys-cilium-policies/templates/argocd/CiliumNetworkPolicy-allow-chartmuseum-ingress.yaml
rename to apps/sys/charts/sys-cilium-policies/templates/argocd/CiliumNetworkPolicy-allow-chartmuseum-ingress.yaml
diff --git a/charts/sys/charts/sys-cilium-policies/templates/argocd/CiliumNetworkPolicy-allow-image-updater-repo-access.yaml b/apps/sys/charts/sys-cilium-policies/templates/argocd/CiliumNetworkPolicy-allow-image-updater-repo-access.yaml
similarity index 100%
rename from charts/sys/charts/sys-cilium-policies/templates/argocd/CiliumNetworkPolicy-allow-image-updater-repo-access.yaml
rename to apps/sys/charts/sys-cilium-policies/templates/argocd/CiliumNetworkPolicy-allow-image-updater-repo-access.yaml
diff --git a/charts/sys/charts/sys-cilium-policies/templates/argocd/CiliumNetworkPolicy-allow-ingress.yaml b/apps/sys/charts/sys-cilium-policies/templates/argocd/CiliumNetworkPolicy-allow-ingress.yaml
similarity index 100%
rename from charts/sys/charts/sys-cilium-policies/templates/argocd/CiliumNetworkPolicy-allow-ingress.yaml
rename to apps/sys/charts/sys-cilium-policies/templates/argocd/CiliumNetworkPolicy-allow-ingress.yaml
diff --git a/charts/sys/charts/sys-cilium-policies/templates/argocd/CiliumNetworkPolicy-allow-kube-api.yaml b/apps/sys/charts/sys-cilium-policies/templates/argocd/CiliumNetworkPolicy-allow-kube-api.yaml
similarity index 100%
rename from charts/sys/charts/sys-cilium-policies/templates/argocd/CiliumNetworkPolicy-allow-kube-api.yaml
rename to apps/sys/charts/sys-cilium-policies/templates/argocd/CiliumNetworkPolicy-allow-kube-api.yaml
diff --git a/charts/sys/charts/sys-cilium-policies/templates/argocd/CiliumNetworkPolicy-allow-microsoft-sso.yaml b/apps/sys/charts/sys-cilium-policies/templates/argocd/CiliumNetworkPolicy-allow-microsoft-sso.yaml
similarity index 100%
rename from charts/sys/charts/sys-cilium-policies/templates/argocd/CiliumNetworkPolicy-allow-microsoft-sso.yaml
rename to apps/sys/charts/sys-cilium-policies/templates/argocd/CiliumNetworkPolicy-allow-microsoft-sso.yaml
diff --git a/charts/sys/charts/sys-cilium-policies/templates/argocd/CiliumNetworkPolicy-allow-prometheus-metrics-rollout.yaml b/apps/sys/charts/sys-cilium-policies/templates/argocd/CiliumNetworkPolicy-allow-prometheus-metrics-rollout.yaml
similarity index 100%
rename from charts/sys/charts/sys-cilium-policies/templates/argocd/CiliumNetworkPolicy-allow-prometheus-metrics-rollout.yaml
rename to apps/sys/charts/sys-cilium-policies/templates/argocd/CiliumNetworkPolicy-allow-prometheus-metrics-rollout.yaml
diff --git a/charts/sys/charts/sys-cilium-policies/templates/argocd/CiliumNetworkPolicy-allow-prometheus-metrics-workflows.yaml b/apps/sys/charts/sys-cilium-policies/templates/argocd/CiliumNetworkPolicy-allow-prometheus-metrics-workflows.yaml
similarity index 100%
rename from charts/sys/charts/sys-cilium-policies/templates/argocd/CiliumNetworkPolicy-allow-prometheus-metrics-workflows.yaml
rename to apps/sys/charts/sys-cilium-policies/templates/argocd/CiliumNetworkPolicy-allow-prometheus-metrics-workflows.yaml
diff --git a/charts/sys/charts/sys-cilium-policies/templates/argocd/CiliumNetworkPolicy-allow-prometheus-metrics.yaml b/apps/sys/charts/sys-cilium-policies/templates/argocd/CiliumNetworkPolicy-allow-prometheus-metrics.yaml
similarity index 100%
rename from charts/sys/charts/sys-cilium-policies/templates/argocd/CiliumNetworkPolicy-allow-prometheus-metrics.yaml
rename to apps/sys/charts/sys-cilium-policies/templates/argocd/CiliumNetworkPolicy-allow-prometheus-metrics.yaml
diff --git a/charts/sys/charts/sys-cilium-policies/templates/cert-manager/CiliumNetworkPolicy-allow-api-server-to-cert-manager.yaml b/apps/sys/charts/sys-cilium-policies/templates/cert-manager/CiliumNetworkPolicy-allow-api-server-to-cert-manager.yaml
similarity index 100%
rename from charts/sys/charts/sys-cilium-policies/templates/cert-manager/CiliumNetworkPolicy-allow-api-server-to-cert-manager.yaml
rename to apps/sys/charts/sys-cilium-policies/templates/cert-manager/CiliumNetworkPolicy-allow-api-server-to-cert-manager.yaml
diff --git a/charts/sys/charts/sys-cilium-policies/templates/cert-manager/CiliumNetworkPolicy-allow-api-server.yaml b/apps/sys/charts/sys-cilium-policies/templates/cert-manager/CiliumNetworkPolicy-allow-api-server.yaml
similarity index 100%
rename from charts/sys/charts/sys-cilium-policies/templates/cert-manager/CiliumNetworkPolicy-allow-api-server.yaml
rename to apps/sys/charts/sys-cilium-policies/templates/cert-manager/CiliumNetworkPolicy-allow-api-server.yaml
diff --git a/charts/sys/charts/sys-cilium-policies/templates/cert-manager/CiliumNetworkPolicy-allow-prometheus-metrics.yaml b/apps/sys/charts/sys-cilium-policies/templates/cert-manager/CiliumNetworkPolicy-allow-prometheus-metrics.yaml
similarity index 100%
rename from charts/sys/charts/sys-cilium-policies/templates/cert-manager/CiliumNetworkPolicy-allow-prometheus-metrics.yaml
rename to apps/sys/charts/sys-cilium-policies/templates/cert-manager/CiliumNetworkPolicy-allow-prometheus-metrics.yaml
diff --git a/charts/sys/charts/sys-cilium-policies/templates/cert-manager/CiliumNetworkPolicy-allow-world-traffic.yaml b/apps/sys/charts/sys-cilium-policies/templates/cert-manager/CiliumNetworkPolicy-allow-world-traffic.yaml
similarity index 100%
rename from charts/sys/charts/sys-cilium-policies/templates/cert-manager/CiliumNetworkPolicy-allow-world-traffic.yaml
rename to apps/sys/charts/sys-cilium-policies/templates/cert-manager/CiliumNetworkPolicy-allow-world-traffic.yaml
diff --git a/charts/sys/charts/sys-cilium-policies/templates/cilium-spire/CiliumNetworkPolicy-allow-api-server.yaml b/apps/sys/charts/sys-cilium-policies/templates/cilium-spire/CiliumNetworkPolicy-allow-api-server.yaml
similarity index 100%
rename from charts/sys/charts/sys-cilium-policies/templates/cilium-spire/CiliumNetworkPolicy-allow-api-server.yaml
rename to apps/sys/charts/sys-cilium-policies/templates/cilium-spire/CiliumNetworkPolicy-allow-api-server.yaml
diff --git a/charts/sys/charts/sys-cilium-policies/templates/cilium-spire/CiliumNetworkPolicy-allow-remote-node-to-server.yaml b/apps/sys/charts/sys-cilium-policies/templates/cilium-spire/CiliumNetworkPolicy-allow-remote-node-to-server.yaml
similarity index 100%
rename from charts/sys/charts/sys-cilium-policies/templates/cilium-spire/CiliumNetworkPolicy-allow-remote-node-to-server.yaml
rename to apps/sys/charts/sys-cilium-policies/templates/cilium-spire/CiliumNetworkPolicy-allow-remote-node-to-server.yaml
diff --git a/charts/sys/charts/sys-cilium-policies/templates/cilium-test/CiliumNetworkPolicy-allow-api-server.yaml b/apps/sys/charts/sys-cilium-policies/templates/cilium-test/CiliumNetworkPolicy-allow-api-server.yaml
similarity index 100%
rename from charts/sys/charts/sys-cilium-policies/templates/cilium-test/CiliumNetworkPolicy-allow-api-server.yaml
rename to apps/sys/charts/sys-cilium-policies/templates/cilium-test/CiliumNetworkPolicy-allow-api-server.yaml
diff --git a/charts/sys/charts/sys-cilium-policies/templates/clusterwide/CiliumClusterwideNetworkPolicy-allow-acme-solvers.yaml b/apps/sys/charts/sys-cilium-policies/templates/clusterwide/CiliumClusterwideNetworkPolicy-allow-acme-solvers.yaml
similarity index 100%
rename from charts/sys/charts/sys-cilium-policies/templates/clusterwide/CiliumClusterwideNetworkPolicy-allow-acme-solvers.yaml
rename to apps/sys/charts/sys-cilium-policies/templates/clusterwide/CiliumClusterwideNetworkPolicy-allow-acme-solvers.yaml
diff --git a/charts/sys/charts/sys-cilium-policies/templates/clusterwide/CiliumClusterwideNetworkPolicy-allow-dns.yaml b/apps/sys/charts/sys-cilium-policies/templates/clusterwide/CiliumClusterwideNetworkPolicy-allow-dns.yaml
similarity index 100%
rename from charts/sys/charts/sys-cilium-policies/templates/clusterwide/CiliumClusterwideNetworkPolicy-allow-dns.yaml
rename to apps/sys/charts/sys-cilium-policies/templates/clusterwide/CiliumClusterwideNetworkPolicy-allow-dns.yaml
diff --git a/charts/sys/charts/sys-cilium-policies/templates/clusterwide/CiliumClusterwideNetworkPolicy-allow-mariadb-operator.yaml b/apps/sys/charts/sys-cilium-policies/templates/clusterwide/CiliumClusterwideNetworkPolicy-allow-mariadb-operator.yaml
similarity index 100%
rename from charts/sys/charts/sys-cilium-policies/templates/clusterwide/CiliumClusterwideNetworkPolicy-allow-mariadb-operator.yaml
rename to apps/sys/charts/sys-cilium-policies/templates/clusterwide/CiliumClusterwideNetworkPolicy-allow-mariadb-operator.yaml
diff --git a/apps/sys/charts/sys-cilium-policies/templates/clusterwide/CiliumClusterwideNetworkPolicy-allow-s3.yaml b/apps/sys/charts/sys-cilium-policies/templates/clusterwide/CiliumClusterwideNetworkPolicy-allow-s3.yaml
new file mode 100644
index 00000000..43fed561
--- /dev/null
+++ b/apps/sys/charts/sys-cilium-policies/templates/clusterwide/CiliumClusterwideNetworkPolicy-allow-s3.yaml
@@ -0,0 +1,20 @@
+apiVersion: cilium.io/v2
+kind: CiliumClusterwideNetworkPolicy
+metadata:
+  name: allow-s3-traffic
+spec:
+  description: Policy for egress for CNPG Backups.
+  egress:
+    - toFQDNs:
+      {{- range .Values.s3.hosts }}
+        - matchName: {{ . | quote }}
+      {{- end }}
+      {{- range .Values.s3.patterns }}
+        - matchPattern: {{ . | quote }}
+      {{- end }}
+    - toCIDR:
+      {{- range .Values.s3.cidr }}
+        - {{ . | quote }}
+      {{- end }}
+  endpointSelector:
+    matchLabels: {}
diff --git a/charts/sys/charts/sys-cilium-policies/templates/clusterwide/CiliumClusterwideNetworkPolicy-cilium-health-checks.yaml b/apps/sys/charts/sys-cilium-policies/templates/clusterwide/CiliumClusterwideNetworkPolicy-cilium-health-checks.yaml
similarity index 100%
rename from charts/sys/charts/sys-cilium-policies/templates/clusterwide/CiliumClusterwideNetworkPolicy-cilium-health-checks.yaml
rename to apps/sys/charts/sys-cilium-policies/templates/clusterwide/CiliumClusterwideNetworkPolicy-cilium-health-checks.yaml
diff --git a/charts/sys/charts/sys-cilium-policies/templates/clusterwide/CiliumClusterwideNetworkPolicy-deny-all.yaml b/apps/sys/charts/sys-cilium-policies/templates/clusterwide/CiliumClusterwideNetworkPolicy-deny-all.yaml
similarity index 100%
rename from charts/sys/charts/sys-cilium-policies/templates/clusterwide/CiliumClusterwideNetworkPolicy-deny-all.yaml
rename to apps/sys/charts/sys-cilium-policies/templates/clusterwide/CiliumClusterwideNetworkPolicy-deny-all.yaml
diff --git a/charts/sys/charts/sys-cilium-policies/templates/cnpg/CiliumNetworkPolicy-allow-api-server.yaml b/apps/sys/charts/sys-cilium-policies/templates/cnpg/CiliumNetworkPolicy-allow-api-server.yaml
similarity index 100%
rename from charts/sys/charts/sys-cilium-policies/templates/cnpg/CiliumNetworkPolicy-allow-api-server.yaml
rename to apps/sys/charts/sys-cilium-policies/templates/cnpg/CiliumNetworkPolicy-allow-api-server.yaml
diff --git a/charts/sys/charts/sys-cilium-policies/templates/cnpg/CiliumNetworkPolicy-allow-remote-node-webhooks.yaml b/apps/sys/charts/sys-cilium-policies/templates/cnpg/CiliumNetworkPolicy-allow-remote-node-webhooks.yaml
similarity index 100%
rename from charts/sys/charts/sys-cilium-policies/templates/cnpg/CiliumNetworkPolicy-allow-remote-node-webhooks.yaml
rename to apps/sys/charts/sys-cilium-policies/templates/cnpg/CiliumNetworkPolicy-allow-remote-node-webhooks.yaml
diff --git a/charts/sys/charts/sys-cilium-policies/templates/downscaler/CiliumNetworkPolicy-allow-api-server.yaml b/apps/sys/charts/sys-cilium-policies/templates/downscaler/CiliumNetworkPolicy-allow-api-server.yaml
similarity index 100%
rename from charts/sys/charts/sys-cilium-policies/templates/downscaler/CiliumNetworkPolicy-allow-api-server.yaml
rename to apps/sys/charts/sys-cilium-policies/templates/downscaler/CiliumNetworkPolicy-allow-api-server.yaml
diff --git a/charts/sys/charts/sys-cilium-policies/templates/downscaler/CiliumNetworkPolicy-allow-remote-node-webhooks.yaml b/apps/sys/charts/sys-cilium-policies/templates/downscaler/CiliumNetworkPolicy-allow-remote-node-webhooks.yaml
similarity index 100%
rename from charts/sys/charts/sys-cilium-policies/templates/downscaler/CiliumNetworkPolicy-allow-remote-node-webhooks.yaml
rename to apps/sys/charts/sys-cilium-policies/templates/downscaler/CiliumNetworkPolicy-allow-remote-node-webhooks.yaml
diff --git a/charts/sys/charts/sys-cilium-policies/templates/ingress-nginx/CiliumNetworkPolicy-allow-host-traffic.yaml b/apps/sys/charts/sys-cilium-policies/templates/ingress-nginx/CiliumNetworkPolicy-allow-host-traffic.yaml
similarity index 100%
rename from charts/sys/charts/sys-cilium-policies/templates/ingress-nginx/CiliumNetworkPolicy-allow-host-traffic.yaml
rename to apps/sys/charts/sys-cilium-policies/templates/ingress-nginx/CiliumNetworkPolicy-allow-host-traffic.yaml
diff --git a/charts/sys/charts/sys-cilium-policies/templates/ingress-nginx/CiliumNetworkPolicy-allow-hubble-traffic.yaml b/apps/sys/charts/sys-cilium-policies/templates/ingress-nginx/CiliumNetworkPolicy-allow-hubble-traffic.yaml
similarity index 100%
rename from charts/sys/charts/sys-cilium-policies/templates/ingress-nginx/CiliumNetworkPolicy-allow-hubble-traffic.yaml
rename to apps/sys/charts/sys-cilium-policies/templates/ingress-nginx/CiliumNetworkPolicy-allow-hubble-traffic.yaml
diff --git a/charts/sys/charts/sys-cilium-policies/templates/ingress-nginx/CiliumNetworkPolicy-allow-prometheus-metrics.yaml b/apps/sys/charts/sys-cilium-policies/templates/ingress-nginx/CiliumNetworkPolicy-allow-prometheus-metrics.yaml
similarity index 100%
rename from charts/sys/charts/sys-cilium-policies/templates/ingress-nginx/CiliumNetworkPolicy-allow-prometheus-metrics.yaml
rename to apps/sys/charts/sys-cilium-policies/templates/ingress-nginx/CiliumNetworkPolicy-allow-prometheus-metrics.yaml
diff --git a/charts/sys/charts/sys-cilium-policies/templates/ingress-nginx/CiliumNetworkPolicy-allow-s3-traffic.yaml b/apps/sys/charts/sys-cilium-policies/templates/ingress-nginx/CiliumNetworkPolicy-allow-s3-traffic.yaml
similarity index 100%
rename from charts/sys/charts/sys-cilium-policies/templates/ingress-nginx/CiliumNetworkPolicy-allow-s3-traffic.yaml
rename to apps/sys/charts/sys-cilium-policies/templates/ingress-nginx/CiliumNetworkPolicy-allow-s3-traffic.yaml
diff --git a/charts/sys/charts/sys-cilium-policies/templates/ingress-nginx/CiliumNetworkPolicy-allow-world-to-ingress-nginx.yaml b/apps/sys/charts/sys-cilium-policies/templates/ingress-nginx/CiliumNetworkPolicy-allow-world-to-ingress-nginx.yaml
similarity index 100%
rename from charts/sys/charts/sys-cilium-policies/templates/ingress-nginx/CiliumNetworkPolicy-allow-world-to-ingress-nginx.yaml
rename to apps/sys/charts/sys-cilium-policies/templates/ingress-nginx/CiliumNetworkPolicy-allow-world-to-ingress-nginx.yaml
diff --git a/charts/sys/charts/sys-cilium-policies/templates/jaeger/CiliumNetworkPolicy-allow-kube-api.yaml b/apps/sys/charts/sys-cilium-policies/templates/jaeger/CiliumNetworkPolicy-allow-kube-api.yaml
similarity index 100%
rename from charts/sys/charts/sys-cilium-policies/templates/jaeger/CiliumNetworkPolicy-allow-kube-api.yaml
rename to apps/sys/charts/sys-cilium-policies/templates/jaeger/CiliumNetworkPolicy-allow-kube-api.yaml
diff --git a/charts/sys/charts/sys-cilium-policies/templates/jaeger/CiliumNetworkPolicy-allow-remote-node-to-jaeger.yaml b/apps/sys/charts/sys-cilium-policies/templates/jaeger/CiliumNetworkPolicy-allow-remote-node-to-jaeger.yaml
similarity index 100%
rename from charts/sys/charts/sys-cilium-policies/templates/jaeger/CiliumNetworkPolicy-allow-remote-node-to-jaeger.yaml
rename to apps/sys/charts/sys-cilium-policies/templates/jaeger/CiliumNetworkPolicy-allow-remote-node-to-jaeger.yaml
diff --git a/charts/sys/charts/sys-cilium-policies/templates/kafka/CiliumNetworkPolicy-allow-api-server.yaml b/apps/sys/charts/sys-cilium-policies/templates/kafka/CiliumNetworkPolicy-allow-api-server.yaml
similarity index 100%
rename from charts/sys/charts/sys-cilium-policies/templates/kafka/CiliumNetworkPolicy-allow-api-server.yaml
rename to apps/sys/charts/sys-cilium-policies/templates/kafka/CiliumNetworkPolicy-allow-api-server.yaml
diff --git a/charts/sys/charts/sys-cilium-policies/templates/kafka/CiliumNetworkPolicy-allow-remote-node-webhooks.yaml b/apps/sys/charts/sys-cilium-policies/templates/kafka/CiliumNetworkPolicy-allow-remote-node-webhooks.yaml
similarity index 100%
rename from charts/sys/charts/sys-cilium-policies/templates/kafka/CiliumNetworkPolicy-allow-remote-node-webhooks.yaml
rename to apps/sys/charts/sys-cilium-policies/templates/kafka/CiliumNetworkPolicy-allow-remote-node-webhooks.yaml
diff --git a/charts/sys/charts/sys-cilium-policies/templates/kube-system/CiliumNetworkPolicy-allow-controller-metrics.yaml b/apps/sys/charts/sys-cilium-policies/templates/kube-system/CiliumNetworkPolicy-allow-controller-metrics.yaml
similarity index 100%
rename from charts/sys/charts/sys-cilium-policies/templates/kube-system/CiliumNetworkPolicy-allow-controller-metrics.yaml
rename to apps/sys/charts/sys-cilium-policies/templates/kube-system/CiliumNetworkPolicy-allow-controller-metrics.yaml
diff --git a/charts/sys/charts/sys-cilium-policies/templates/kube-system/CiliumNetworkPolicy-allow-csi-webhook.yaml b/apps/sys/charts/sys-cilium-policies/templates/kube-system/CiliumNetworkPolicy-allow-csi-webhook.yaml
similarity index 100%
rename from charts/sys/charts/sys-cilium-policies/templates/kube-system/CiliumNetworkPolicy-allow-csi-webhook.yaml
rename to apps/sys/charts/sys-cilium-policies/templates/kube-system/CiliumNetworkPolicy-allow-csi-webhook.yaml
diff --git a/charts/sys/charts/sys-cilium-policies/templates/kube-system/CiliumNetworkPolicy-allow-dns-metrics.yaml b/apps/sys/charts/sys-cilium-policies/templates/kube-system/CiliumNetworkPolicy-allow-dns-metrics.yaml
similarity index 100%
rename from charts/sys/charts/sys-cilium-policies/templates/kube-system/CiliumNetworkPolicy-allow-dns-metrics.yaml
rename to apps/sys/charts/sys-cilium-policies/templates/kube-system/CiliumNetworkPolicy-allow-dns-metrics.yaml
diff --git a/charts/sys/charts/sys-cilium-policies/templates/kube-system/CiliumNetworkPolicy-allow-dns-world.yaml b/apps/sys/charts/sys-cilium-policies/templates/kube-system/CiliumNetworkPolicy-allow-dns-world.yaml
similarity index 100%
rename from charts/sys/charts/sys-cilium-policies/templates/kube-system/CiliumNetworkPolicy-allow-dns-world.yaml
rename to apps/sys/charts/sys-cilium-policies/templates/kube-system/CiliumNetworkPolicy-allow-dns-world.yaml
diff --git a/charts/sys/charts/sys-cilium-policies/templates/kube-system/CiliumNetworkPolicy-allow-dns.yaml b/apps/sys/charts/sys-cilium-policies/templates/kube-system/CiliumNetworkPolicy-allow-dns.yaml
similarity index 100%
rename from charts/sys/charts/sys-cilium-policies/templates/kube-system/CiliumNetworkPolicy-allow-dns.yaml
rename to apps/sys/charts/sys-cilium-policies/templates/kube-system/CiliumNetworkPolicy-allow-dns.yaml
diff --git a/charts/sys/charts/sys-cilium-policies/templates/kube-system/CiliumNetworkPolicy-allow-host-traffic.yaml b/apps/sys/charts/sys-cilium-policies/templates/kube-system/CiliumNetworkPolicy-allow-host-traffic.yaml
similarity index 100%
rename from charts/sys/charts/sys-cilium-policies/templates/kube-system/CiliumNetworkPolicy-allow-host-traffic.yaml
rename to apps/sys/charts/sys-cilium-policies/templates/kube-system/CiliumNetworkPolicy-allow-host-traffic.yaml
diff --git a/charts/sys/charts/sys-cilium-policies/templates/kube-system/CiliumNetworkPolicy-allow-hubble-ingress.yaml b/apps/sys/charts/sys-cilium-policies/templates/kube-system/CiliumNetworkPolicy-allow-hubble-ingress.yaml
similarity index 100%
rename from charts/sys/charts/sys-cilium-policies/templates/kube-system/CiliumNetworkPolicy-allow-hubble-ingress.yaml
rename to apps/sys/charts/sys-cilium-policies/templates/kube-system/CiliumNetworkPolicy-allow-hubble-ingress.yaml
diff --git a/charts/sys/charts/sys-cilium-policies/templates/kube-system/CiliumNetworkPolicy-allow-hubble-oauth2-ingress.yaml b/apps/sys/charts/sys-cilium-policies/templates/kube-system/CiliumNetworkPolicy-allow-hubble-oauth2-ingress.yaml
similarity index 100%
rename from charts/sys/charts/sys-cilium-policies/templates/kube-system/CiliumNetworkPolicy-allow-hubble-oauth2-ingress.yaml
rename to apps/sys/charts/sys-cilium-policies/templates/kube-system/CiliumNetworkPolicy-allow-hubble-oauth2-ingress.yaml
diff --git a/charts/sys/charts/sys-cilium-policies/templates/kube-system/CiliumNetworkPolicy-allow-hubble-relay-metrics.yaml b/apps/sys/charts/sys-cilium-policies/templates/kube-system/CiliumNetworkPolicy-allow-hubble-relay-metrics.yaml
similarity index 100%
rename from charts/sys/charts/sys-cilium-policies/templates/kube-system/CiliumNetworkPolicy-allow-hubble-relay-metrics.yaml
rename to apps/sys/charts/sys-cilium-policies/templates/kube-system/CiliumNetworkPolicy-allow-hubble-relay-metrics.yaml
diff --git a/charts/sys/charts/sys-cilium-policies/templates/kube-system/CiliumNetworkPolicy-allow-microsoft-sso.yaml b/apps/sys/charts/sys-cilium-policies/templates/kube-system/CiliumNetworkPolicy-allow-microsoft-sso.yaml
similarity index 100%
rename from charts/sys/charts/sys-cilium-policies/templates/kube-system/CiliumNetworkPolicy-allow-microsoft-sso.yaml
rename to apps/sys/charts/sys-cilium-policies/templates/kube-system/CiliumNetworkPolicy-allow-microsoft-sso.yaml
diff --git a/charts/sys/charts/sys-cilium-policies/templates/kube-system/CiliumNetworkPolicy-allow-namespace-traffic.yaml b/apps/sys/charts/sys-cilium-policies/templates/kube-system/CiliumNetworkPolicy-allow-namespace-traffic.yaml
similarity index 100%
rename from charts/sys/charts/sys-cilium-policies/templates/kube-system/CiliumNetworkPolicy-allow-namespace-traffic.yaml
rename to apps/sys/charts/sys-cilium-policies/templates/kube-system/CiliumNetworkPolicy-allow-namespace-traffic.yaml
diff --git a/charts/sys/charts/sys-cilium-policies/templates/kube-system/CiliumNetworkPolicy-allow-proxy-metrics.yaml b/apps/sys/charts/sys-cilium-policies/templates/kube-system/CiliumNetworkPolicy-allow-proxy-metrics.yaml
similarity index 100%
rename from charts/sys/charts/sys-cilium-policies/templates/kube-system/CiliumNetworkPolicy-allow-proxy-metrics.yaml
rename to apps/sys/charts/sys-cilium-policies/templates/kube-system/CiliumNetworkPolicy-allow-proxy-metrics.yaml
diff --git a/charts/sys/charts/sys-cilium-policies/templates/kubelet-serving/CiliumNetworkPolicy-allow-kube-api.yaml b/apps/sys/charts/sys-cilium-policies/templates/kubelet-serving/CiliumNetworkPolicy-allow-kube-api.yaml
similarity index 100%
rename from charts/sys/charts/sys-cilium-policies/templates/kubelet-serving/CiliumNetworkPolicy-allow-kube-api.yaml
rename to apps/sys/charts/sys-cilium-policies/templates/kubelet-serving/CiliumNetworkPolicy-allow-kube-api.yaml
diff --git a/charts/sys/charts/sys-cilium-policies/templates/kyverno/CiliumNetworkPolicy-allow-api-server.yaml b/apps/sys/charts/sys-cilium-policies/templates/kyverno/CiliumNetworkPolicy-allow-api-server.yaml
similarity index 100%
rename from charts/sys/charts/sys-cilium-policies/templates/kyverno/CiliumNetworkPolicy-allow-api-server.yaml
rename to apps/sys/charts/sys-cilium-policies/templates/kyverno/CiliumNetworkPolicy-allow-api-server.yaml
diff --git a/charts/sys/charts/sys-cilium-policies/templates/kyverno/CiliumNetworkPolicy-allow-prometheus-metrics.yaml b/apps/sys/charts/sys-cilium-policies/templates/kyverno/CiliumNetworkPolicy-allow-prometheus-metrics.yaml
similarity index 100%
rename from charts/sys/charts/sys-cilium-policies/templates/kyverno/CiliumNetworkPolicy-allow-prometheus-metrics.yaml
rename to apps/sys/charts/sys-cilium-policies/templates/kyverno/CiliumNetworkPolicy-allow-prometheus-metrics.yaml
diff --git a/charts/sys/charts/sys-cilium-policies/templates/kyverno/CiliumNetworkPolicy-allow-remote-node-to-kyverno.yaml b/apps/sys/charts/sys-cilium-policies/templates/kyverno/CiliumNetworkPolicy-allow-remote-node-to-kyverno.yaml
similarity index 100%
rename from charts/sys/charts/sys-cilium-policies/templates/kyverno/CiliumNetworkPolicy-allow-remote-node-to-kyverno.yaml
rename to apps/sys/charts/sys-cilium-policies/templates/kyverno/CiliumNetworkPolicy-allow-remote-node-to-kyverno.yaml
diff --git a/charts/sys/charts/sys-cilium-policies/templates/loki/CiliumNetworkPolicy-allow-loki-backend-to-api-server.yaml b/apps/sys/charts/sys-cilium-policies/templates/loki/CiliumNetworkPolicy-allow-loki-backend-to-api-server.yaml
similarity index 100%
rename from charts/sys/charts/sys-cilium-policies/templates/loki/CiliumNetworkPolicy-allow-loki-backend-to-api-server.yaml
rename to apps/sys/charts/sys-cilium-policies/templates/loki/CiliumNetworkPolicy-allow-loki-backend-to-api-server.yaml
diff --git a/charts/sys/charts/sys-cilium-policies/templates/loki/CiliumNetworkPolicy-allow-prometheus-metrics.yaml b/apps/sys/charts/sys-cilium-policies/templates/loki/CiliumNetworkPolicy-allow-prometheus-metrics.yaml
similarity index 100%
rename from charts/sys/charts/sys-cilium-policies/templates/loki/CiliumNetworkPolicy-allow-prometheus-metrics.yaml
rename to apps/sys/charts/sys-cilium-policies/templates/loki/CiliumNetworkPolicy-allow-prometheus-metrics.yaml
diff --git a/charts/sys/charts/sys-cilium-policies/templates/loki/CiliumNetworkPolicy-allow-promtail-to-api-server.yaml b/apps/sys/charts/sys-cilium-policies/templates/loki/CiliumNetworkPolicy-allow-promtail-to-api-server.yaml
similarity index 100%
rename from charts/sys/charts/sys-cilium-policies/templates/loki/CiliumNetworkPolicy-allow-promtail-to-api-server.yaml
rename to apps/sys/charts/sys-cilium-policies/templates/loki/CiliumNetworkPolicy-allow-promtail-to-api-server.yaml
diff --git a/charts/sys/charts/sys-cilium-policies/templates/loki/CiliumNetworkPolicy-allow-stats-grafana.yaml b/apps/sys/charts/sys-cilium-policies/templates/loki/CiliumNetworkPolicy-allow-stats-grafana.yaml
similarity index 100%
rename from charts/sys/charts/sys-cilium-policies/templates/loki/CiliumNetworkPolicy-allow-stats-grafana.yaml
rename to apps/sys/charts/sys-cilium-policies/templates/loki/CiliumNetworkPolicy-allow-stats-grafana.yaml
diff --git a/charts/sys/charts/sys-cilium-policies/templates/mariadb-operator/CiliumNetworkPolicy-allow-api-server.yaml b/apps/sys/charts/sys-cilium-policies/templates/mariadb-operator/CiliumNetworkPolicy-allow-api-server.yaml
similarity index 100%
rename from charts/sys/charts/sys-cilium-policies/templates/mariadb-operator/CiliumNetworkPolicy-allow-api-server.yaml
rename to apps/sys/charts/sys-cilium-policies/templates/mariadb-operator/CiliumNetworkPolicy-allow-api-server.yaml
diff --git a/charts/sys/charts/sys-cilium-policies/templates/mariadb-operator/CiliumNetworkPolicy-allow-host-to-mariadb.yaml b/apps/sys/charts/sys-cilium-policies/templates/mariadb-operator/CiliumNetworkPolicy-allow-host-to-mariadb.yaml
similarity index 100%
rename from charts/sys/charts/sys-cilium-policies/templates/mariadb-operator/CiliumNetworkPolicy-allow-host-to-mariadb.yaml
rename to apps/sys/charts/sys-cilium-policies/templates/mariadb-operator/CiliumNetworkPolicy-allow-host-to-mariadb.yaml
diff --git a/charts/sys/charts/sys-cilium-policies/templates/mariadb-operator/CiliumNetworkPolicy-allow-prometheus-metrics.yaml b/apps/sys/charts/sys-cilium-policies/templates/mariadb-operator/CiliumNetworkPolicy-allow-prometheus-metrics.yaml
similarity index 100%
rename from charts/sys/charts/sys-cilium-policies/templates/mariadb-operator/CiliumNetworkPolicy-allow-prometheus-metrics.yaml
rename to apps/sys/charts/sys-cilium-policies/templates/mariadb-operator/CiliumNetworkPolicy-allow-prometheus-metrics.yaml
diff --git a/charts/sys/charts/sys-cilium-policies/templates/mariadb-operator/CiliumNetworkPolicy-allow-remote-node-webhooks.yaml b/apps/sys/charts/sys-cilium-policies/templates/mariadb-operator/CiliumNetworkPolicy-allow-remote-node-webhooks.yaml
similarity index 100%
rename from charts/sys/charts/sys-cilium-policies/templates/mariadb-operator/CiliumNetworkPolicy-allow-remote-node-webhooks.yaml
rename to apps/sys/charts/sys-cilium-policies/templates/mariadb-operator/CiliumNetworkPolicy-allow-remote-node-webhooks.yaml
diff --git a/charts/sys/charts/sys-cilium-policies/templates/mayastor/CiliumNetworkPolicy-allow-host-traffic.yaml b/apps/sys/charts/sys-cilium-policies/templates/mayastor/CiliumNetworkPolicy-allow-host-traffic.yaml
similarity index 100%
rename from charts/sys/charts/sys-cilium-policies/templates/mayastor/CiliumNetworkPolicy-allow-host-traffic.yaml
rename to apps/sys/charts/sys-cilium-policies/templates/mayastor/CiliumNetworkPolicy-allow-host-traffic.yaml
diff --git a/charts/sys/charts/sys-cilium-policies/templates/mayastor/CiliumNetworkPolicy-allow-remote-node-to-agent-core.yaml b/apps/sys/charts/sys-cilium-policies/templates/mayastor/CiliumNetworkPolicy-allow-remote-node-to-agent-core.yaml
similarity index 100%
rename from charts/sys/charts/sys-cilium-policies/templates/mayastor/CiliumNetworkPolicy-allow-remote-node-to-agent-core.yaml
rename to apps/sys/charts/sys-cilium-policies/templates/mayastor/CiliumNetworkPolicy-allow-remote-node-to-agent-core.yaml
diff --git a/charts/sys/charts/sys-cilium-policies/templates/mayastor/CiliumNetworkPolicy-allow-remote-node-to-etcd.yaml b/apps/sys/charts/sys-cilium-policies/templates/mayastor/CiliumNetworkPolicy-allow-remote-node-to-etcd.yaml
similarity index 100%
rename from charts/sys/charts/sys-cilium-policies/templates/mayastor/CiliumNetworkPolicy-allow-remote-node-to-etcd.yaml
rename to apps/sys/charts/sys-cilium-policies/templates/mayastor/CiliumNetworkPolicy-allow-remote-node-to-etcd.yaml
diff --git a/charts/sys/charts/sys-cilium-policies/templates/mayastor/CiliumNetworkPolicy-allow-remote-node-to-maya.yaml b/apps/sys/charts/sys-cilium-policies/templates/mayastor/CiliumNetworkPolicy-allow-remote-node-to-maya.yaml
similarity index 100%
rename from charts/sys/charts/sys-cilium-policies/templates/mayastor/CiliumNetworkPolicy-allow-remote-node-to-maya.yaml
rename to apps/sys/charts/sys-cilium-policies/templates/mayastor/CiliumNetworkPolicy-allow-remote-node-to-maya.yaml
diff --git a/charts/sys/charts/sys-cilium-policies/templates/minio-operator/CiliumClusterwideNetworkPolicy-allow-kube-api.yaml b/apps/sys/charts/sys-cilium-policies/templates/minio-operator/CiliumClusterwideNetworkPolicy-allow-kube-api.yaml
similarity index 100%
rename from charts/sys/charts/sys-cilium-policies/templates/minio-operator/CiliumClusterwideNetworkPolicy-allow-kube-api.yaml
rename to apps/sys/charts/sys-cilium-policies/templates/minio-operator/CiliumClusterwideNetworkPolicy-allow-kube-api.yaml
diff --git a/charts/sys/charts/sys-cilium-policies/templates/minio-operator/CiliumClusterwideNetworkPolicy-allow-minio-operator.yaml b/apps/sys/charts/sys-cilium-policies/templates/minio-operator/CiliumClusterwideNetworkPolicy-allow-minio-operator.yaml
similarity index 100%
rename from charts/sys/charts/sys-cilium-policies/templates/minio-operator/CiliumClusterwideNetworkPolicy-allow-minio-operator.yaml
rename to apps/sys/charts/sys-cilium-policies/templates/minio-operator/CiliumClusterwideNetworkPolicy-allow-minio-operator.yaml
diff --git a/charts/sys/charts/sys-cilium-policies/templates/minio-operator/CiliumClusterwideNetworkPolicy-allow-nodeport-ingress.yaml b/apps/sys/charts/sys-cilium-policies/templates/minio-operator/CiliumClusterwideNetworkPolicy-allow-nodeport-ingress.yaml
similarity index 100%
rename from charts/sys/charts/sys-cilium-policies/templates/minio-operator/CiliumClusterwideNetworkPolicy-allow-nodeport-ingress.yaml
rename to apps/sys/charts/sys-cilium-policies/templates/minio-operator/CiliumClusterwideNetworkPolicy-allow-nodeport-ingress.yaml
diff --git a/charts/sys/charts/sys-cilium-policies/templates/minio-operator/CiliumNetworkPolicy-allow-kube-api.yaml b/apps/sys/charts/sys-cilium-policies/templates/minio-operator/CiliumNetworkPolicy-allow-kube-api.yaml
similarity index 100%
rename from charts/sys/charts/sys-cilium-policies/templates/minio-operator/CiliumNetworkPolicy-allow-kube-api.yaml
rename to apps/sys/charts/sys-cilium-policies/templates/minio-operator/CiliumNetworkPolicy-allow-kube-api.yaml
diff --git a/charts/sys/charts/sys-cilium-policies/templates/odigos-system/CiliumNetworkPolicy-allow-kube-api.yaml b/apps/sys/charts/sys-cilium-policies/templates/odigos-system/CiliumNetworkPolicy-allow-kube-api.yaml
similarity index 100%
rename from charts/sys/charts/sys-cilium-policies/templates/odigos-system/CiliumNetworkPolicy-allow-kube-api.yaml
rename to apps/sys/charts/sys-cilium-policies/templates/odigos-system/CiliumNetworkPolicy-allow-kube-api.yaml
diff --git a/charts/sys/charts/sys-cilium-policies/templates/odigos-system/CiliumNetworkPolicy-allow-port-4317.yaml b/apps/sys/charts/sys-cilium-policies/templates/odigos-system/CiliumNetworkPolicy-allow-port-4317.yaml
similarity index 100%
rename from charts/sys/charts/sys-cilium-policies/templates/odigos-system/CiliumNetworkPolicy-allow-port-4317.yaml
rename to apps/sys/charts/sys-cilium-policies/templates/odigos-system/CiliumNetworkPolicy-allow-port-4317.yaml
diff --git a/charts/sys/charts/sys-cilium-policies/templates/one-password-operator/CiliumNetworkPolicy-allow-api-server.yaml b/apps/sys/charts/sys-cilium-policies/templates/one-password-operator/CiliumNetworkPolicy-allow-api-server.yaml
similarity index 100%
rename from charts/sys/charts/sys-cilium-policies/templates/one-password-operator/CiliumNetworkPolicy-allow-api-server.yaml
rename to apps/sys/charts/sys-cilium-policies/templates/one-password-operator/CiliumNetworkPolicy-allow-api-server.yaml
diff --git a/charts/sys/charts/sys-cilium-policies/templates/one-password-operator/CiliumNetworkPolicy-allow-remote-node-webhooks.yaml b/apps/sys/charts/sys-cilium-policies/templates/one-password-operator/CiliumNetworkPolicy-allow-remote-node-webhooks.yaml
similarity index 100%
rename from charts/sys/charts/sys-cilium-policies/templates/one-password-operator/CiliumNetworkPolicy-allow-remote-node-webhooks.yaml
rename to apps/sys/charts/sys-cilium-policies/templates/one-password-operator/CiliumNetworkPolicy-allow-remote-node-webhooks.yaml
diff --git a/charts/sys/charts/sys-cilium-policies/templates/opencost/CiliumNetworkPolicy-allow-kube-api.yaml b/apps/sys/charts/sys-cilium-policies/templates/opencost/CiliumNetworkPolicy-allow-kube-api.yaml
similarity index 100%
rename from charts/sys/charts/sys-cilium-policies/templates/opencost/CiliumNetworkPolicy-allow-kube-api.yaml
rename to apps/sys/charts/sys-cilium-policies/templates/opencost/CiliumNetworkPolicy-allow-kube-api.yaml
diff --git a/charts/sys/charts/sys-cilium-policies/templates/otel/CiliumNetworkPolicy-allow-otel-collector-loadbalancer-ingress.yaml b/apps/sys/charts/sys-cilium-policies/templates/otel/CiliumNetworkPolicy-allow-otel-collector-loadbalancer-ingress.yaml
similarity index 100%
rename from charts/sys/charts/sys-cilium-policies/templates/otel/CiliumNetworkPolicy-allow-otel-collector-loadbalancer-ingress.yaml
rename to apps/sys/charts/sys-cilium-policies/templates/otel/CiliumNetworkPolicy-allow-otel-collector-loadbalancer-ingress.yaml
diff --git a/charts/sys/charts/sys-cilium-policies/templates/postfix/CiliumNetworkPolicy-allow-mail-egress.yaml b/apps/sys/charts/sys-cilium-policies/templates/postfix/CiliumNetworkPolicy-allow-mail-egress.yaml
similarity index 100%
rename from charts/sys/charts/sys-cilium-policies/templates/postfix/CiliumNetworkPolicy-allow-mail-egress.yaml
rename to apps/sys/charts/sys-cilium-policies/templates/postfix/CiliumNetworkPolicy-allow-mail-egress.yaml
diff --git a/charts/sys/charts/sys-cilium-policies/templates/postfix/CiliumNetworkPolicy-allow-mail-ingress.yaml b/apps/sys/charts/sys-cilium-policies/templates/postfix/CiliumNetworkPolicy-allow-mail-ingress.yaml
similarity index 100%
rename from charts/sys/charts/sys-cilium-policies/templates/postfix/CiliumNetworkPolicy-allow-mail-ingress.yaml
rename to apps/sys/charts/sys-cilium-policies/templates/postfix/CiliumNetworkPolicy-allow-mail-ingress.yaml
diff --git a/charts/sys/charts/sys-cilium-policies/templates/postfix/CiliumNetworkPolicy-allow-prometheus-metrics.yaml b/apps/sys/charts/sys-cilium-policies/templates/postfix/CiliumNetworkPolicy-allow-prometheus-metrics.yaml
similarity index 100%
rename from charts/sys/charts/sys-cilium-policies/templates/postfix/CiliumNetworkPolicy-allow-prometheus-metrics.yaml
rename to apps/sys/charts/sys-cilium-policies/templates/postfix/CiliumNetworkPolicy-allow-prometheus-metrics.yaml
diff --git a/charts/sys/charts/sys-cilium-policies/templates/prometheus/CiliumNetworkPolicy-allow-alerting.yaml b/apps/sys/charts/sys-cilium-policies/templates/prometheus/CiliumNetworkPolicy-allow-alerting.yaml
similarity index 100%
rename from charts/sys/charts/sys-cilium-policies/templates/prometheus/CiliumNetworkPolicy-allow-alerting.yaml
rename to apps/sys/charts/sys-cilium-policies/templates/prometheus/CiliumNetworkPolicy-allow-alerting.yaml
diff --git a/charts/sys/charts/sys-cilium-policies/templates/prometheus/CiliumNetworkPolicy-allow-alertmanager-ingress.yaml b/apps/sys/charts/sys-cilium-policies/templates/prometheus/CiliumNetworkPolicy-allow-alertmanager-ingress.yaml
similarity index 100%
rename from charts/sys/charts/sys-cilium-policies/templates/prometheus/CiliumNetworkPolicy-allow-alertmanager-ingress.yaml
rename to apps/sys/charts/sys-cilium-policies/templates/prometheus/CiliumNetworkPolicy-allow-alertmanager-ingress.yaml
diff --git a/charts/sys/charts/sys-cilium-policies/templates/prometheus/CiliumNetworkPolicy-allow-dns-metrics.yaml b/apps/sys/charts/sys-cilium-policies/templates/prometheus/CiliumNetworkPolicy-allow-dns-metrics.yaml
similarity index 100%
rename from charts/sys/charts/sys-cilium-policies/templates/prometheus/CiliumNetworkPolicy-allow-dns-metrics.yaml
rename to apps/sys/charts/sys-cilium-policies/templates/prometheus/CiliumNetworkPolicy-allow-dns-metrics.yaml
diff --git a/charts/sys/charts/sys-cilium-policies/templates/prometheus/CiliumNetworkPolicy-allow-etcd-metrics.yaml b/apps/sys/charts/sys-cilium-policies/templates/prometheus/CiliumNetworkPolicy-allow-etcd-metrics.yaml
similarity index 100%
rename from charts/sys/charts/sys-cilium-policies/templates/prometheus/CiliumNetworkPolicy-allow-etcd-metrics.yaml
rename to apps/sys/charts/sys-cilium-policies/templates/prometheus/CiliumNetworkPolicy-allow-etcd-metrics.yaml
diff --git a/charts/sys/charts/sys-cilium-policies/templates/prometheus/CiliumNetworkPolicy-allow-grafana-ingress.yaml b/apps/sys/charts/sys-cilium-policies/templates/prometheus/CiliumNetworkPolicy-allow-grafana-ingress.yaml
similarity index 100%
rename from charts/sys/charts/sys-cilium-policies/templates/prometheus/CiliumNetworkPolicy-allow-grafana-ingress.yaml
rename to apps/sys/charts/sys-cilium-policies/templates/prometheus/CiliumNetworkPolicy-allow-grafana-ingress.yaml
diff --git a/charts/sys/charts/sys-cilium-policies/templates/prometheus/CiliumNetworkPolicy-allow-grafana-oidc-login.yaml b/apps/sys/charts/sys-cilium-policies/templates/prometheus/CiliumNetworkPolicy-allow-grafana-oidc-login.yaml
similarity index 100%
rename from charts/sys/charts/sys-cilium-policies/templates/prometheus/CiliumNetworkPolicy-allow-grafana-oidc-login.yaml
rename to apps/sys/charts/sys-cilium-policies/templates/prometheus/CiliumNetworkPolicy-allow-grafana-oidc-login.yaml
diff --git a/charts/sys/charts/sys-cilium-policies/templates/prometheus/CiliumNetworkPolicy-allow-grafana-plugins.yaml b/apps/sys/charts/sys-cilium-policies/templates/prometheus/CiliumNetworkPolicy-allow-grafana-plugins.yaml
similarity index 100%
rename from charts/sys/charts/sys-cilium-policies/templates/prometheus/CiliumNetworkPolicy-allow-grafana-plugins.yaml
rename to apps/sys/charts/sys-cilium-policies/templates/prometheus/CiliumNetworkPolicy-allow-grafana-plugins.yaml
diff --git a/charts/sys/charts/sys-cilium-policies/templates/prometheus/CiliumNetworkPolicy-allow-grafana-secure-gravatar.yaml b/apps/sys/charts/sys-cilium-policies/templates/prometheus/CiliumNetworkPolicy-allow-grafana-secure-gravatar.yaml
similarity index 100%
rename from charts/sys/charts/sys-cilium-policies/templates/prometheus/CiliumNetworkPolicy-allow-grafana-secure-gravatar.yaml
rename to apps/sys/charts/sys-cilium-policies/templates/prometheus/CiliumNetworkPolicy-allow-grafana-secure-gravatar.yaml
diff --git a/charts/sys/charts/sys-cilium-policies/templates/prometheus/CiliumNetworkPolicy-allow-host-traffic.yaml b/apps/sys/charts/sys-cilium-policies/templates/prometheus/CiliumNetworkPolicy-allow-host-traffic.yaml
similarity index 100%
rename from charts/sys/charts/sys-cilium-policies/templates/prometheus/CiliumNetworkPolicy-allow-host-traffic.yaml
rename to apps/sys/charts/sys-cilium-policies/templates/prometheus/CiliumNetworkPolicy-allow-host-traffic.yaml
diff --git a/charts/sys/charts/sys-cilium-policies/templates/prometheus/CiliumNetworkPolicy-allow-nginx-ingress.yaml b/apps/sys/charts/sys-cilium-policies/templates/prometheus/CiliumNetworkPolicy-allow-nginx-ingress.yaml
similarity index 100%
rename from charts/sys/charts/sys-cilium-policies/templates/prometheus/CiliumNetworkPolicy-allow-nginx-ingress.yaml
rename to apps/sys/charts/sys-cilium-policies/templates/prometheus/CiliumNetworkPolicy-allow-nginx-ingress.yaml
diff --git a/charts/sys/charts/sys-cilium-policies/templates/prometheus/CiliumNetworkPolicy-allow-opencost-scrape.yaml b/apps/sys/charts/sys-cilium-policies/templates/prometheus/CiliumNetworkPolicy-allow-opencost-scrape.yaml
similarity index 100%
rename from charts/sys/charts/sys-cilium-policies/templates/prometheus/CiliumNetworkPolicy-allow-opencost-scrape.yaml
rename to apps/sys/charts/sys-cilium-policies/templates/prometheus/CiliumNetworkPolicy-allow-opencost-scrape.yaml
diff --git a/charts/sys/charts/sys-cilium-policies/templates/prometheus/CiliumNetworkPolicy-allow-remote-node-to-metrics-server.yaml b/apps/sys/charts/sys-cilium-policies/templates/prometheus/CiliumNetworkPolicy-allow-remote-node-to-metrics-server.yaml
similarity index 100%
rename from charts/sys/charts/sys-cilium-policies/templates/prometheus/CiliumNetworkPolicy-allow-remote-node-to-metrics-server.yaml
rename to apps/sys/charts/sys-cilium-policies/templates/prometheus/CiliumNetworkPolicy-allow-remote-node-to-metrics-server.yaml
diff --git a/charts/sys/charts/sys-cilium-policies/templates/prometheus/CiliumNetworkPolicy-allow-remote-node-to-webhook.yaml b/apps/sys/charts/sys-cilium-policies/templates/prometheus/CiliumNetworkPolicy-allow-remote-node-to-webhook.yaml
similarity index 100%
rename from charts/sys/charts/sys-cilium-policies/templates/prometheus/CiliumNetworkPolicy-allow-remote-node-to-webhook.yaml
rename to apps/sys/charts/sys-cilium-policies/templates/prometheus/CiliumNetworkPolicy-allow-remote-node-to-webhook.yaml
diff --git a/charts/sys/charts/sys-cilium-policies/templates/prometheus/CiliumNetworkPolicy-allow-robusta-ingress.yaml b/apps/sys/charts/sys-cilium-policies/templates/prometheus/CiliumNetworkPolicy-allow-robusta-ingress.yaml
similarity index 100%
rename from charts/sys/charts/sys-cilium-policies/templates/prometheus/CiliumNetworkPolicy-allow-robusta-ingress.yaml
rename to apps/sys/charts/sys-cilium-policies/templates/prometheus/CiliumNetworkPolicy-allow-robusta-ingress.yaml
diff --git a/charts/sys/charts/sys-cilium-policies/templates/prometheus/CiliumNetworkPolicy-allow-stats-grafana.yaml b/apps/sys/charts/sys-cilium-policies/templates/prometheus/CiliumNetworkPolicy-allow-stats-grafana.yaml
similarity index 100%
rename from charts/sys/charts/sys-cilium-policies/templates/prometheus/CiliumNetworkPolicy-allow-stats-grafana.yaml
rename to apps/sys/charts/sys-cilium-policies/templates/prometheus/CiliumNetworkPolicy-allow-stats-grafana.yaml
diff --git a/charts/sys/charts/sys-cilium-policies/templates/rabbitmq/CiliumNetworkPolicy-allow-inter-node-traffic.yaml b/apps/sys/charts/sys-cilium-policies/templates/rabbitmq/CiliumNetworkPolicy-allow-inter-node-traffic.yaml
similarity index 100%
rename from charts/sys/charts/sys-cilium-policies/templates/rabbitmq/CiliumNetworkPolicy-allow-inter-node-traffic.yaml
rename to apps/sys/charts/sys-cilium-policies/templates/rabbitmq/CiliumNetworkPolicy-allow-inter-node-traffic.yaml
diff --git a/charts/sys/charts/sys-cilium-policies/templates/rabbitmq/CiliumNetworkPolicy-allow-operator-traffic.yaml b/apps/sys/charts/sys-cilium-policies/templates/rabbitmq/CiliumNetworkPolicy-allow-operator-traffic.yaml
similarity index 100%
rename from charts/sys/charts/sys-cilium-policies/templates/rabbitmq/CiliumNetworkPolicy-allow-operator-traffic.yaml
rename to apps/sys/charts/sys-cilium-policies/templates/rabbitmq/CiliumNetworkPolicy-allow-operator-traffic.yaml
diff --git a/charts/sys/charts/sys-cilium-policies/templates/rabbitmq/CiliumNetworkPolicy-allow-rabbitmq-traffic.yaml b/apps/sys/charts/sys-cilium-policies/templates/rabbitmq/CiliumNetworkPolicy-allow-rabbitmq-traffic.yaml
similarity index 100%
rename from charts/sys/charts/sys-cilium-policies/templates/rabbitmq/CiliumNetworkPolicy-allow-rabbitmq-traffic.yaml
rename to apps/sys/charts/sys-cilium-policies/templates/rabbitmq/CiliumNetworkPolicy-allow-rabbitmq-traffic.yaml
diff --git a/charts/sys/charts/sys-cilium-policies/templates/robusta/CiliumNetworkPolicy-allow-ingress.yaml b/apps/sys/charts/sys-cilium-policies/templates/robusta/CiliumNetworkPolicy-allow-ingress.yaml
similarity index 100%
rename from charts/sys/charts/sys-cilium-policies/templates/robusta/CiliumNetworkPolicy-allow-ingress.yaml
rename to apps/sys/charts/sys-cilium-policies/templates/robusta/CiliumNetworkPolicy-allow-ingress.yaml
diff --git a/charts/sys/charts/sys-cilium-policies/templates/robusta/CiliumNetworkPolicy-allow-kube-api.yaml b/apps/sys/charts/sys-cilium-policies/templates/robusta/CiliumNetworkPolicy-allow-kube-api.yaml
similarity index 100%
rename from charts/sys/charts/sys-cilium-policies/templates/robusta/CiliumNetworkPolicy-allow-kube-api.yaml
rename to apps/sys/charts/sys-cilium-policies/templates/robusta/CiliumNetworkPolicy-allow-kube-api.yaml
diff --git a/charts/sys/charts/sys-cilium-policies/templates/robusta/CiliumNetworkPolicy-allow-slack.yaml b/apps/sys/charts/sys-cilium-policies/templates/robusta/CiliumNetworkPolicy-allow-slack.yaml
similarity index 100%
rename from charts/sys/charts/sys-cilium-policies/templates/robusta/CiliumNetworkPolicy-allow-slack.yaml
rename to apps/sys/charts/sys-cilium-policies/templates/robusta/CiliumNetworkPolicy-allow-slack.yaml
diff --git a/charts/sys/charts/sys-cilium-policies/templates/rook-ceph/CiliumNetworkPolicy-allow-oceanbox-subnet.yaml b/apps/sys/charts/sys-cilium-policies/templates/rook-ceph/CiliumNetworkPolicy-allow-oceanbox-subnet.yaml
similarity index 100%
rename from charts/sys/charts/sys-cilium-policies/templates/rook-ceph/CiliumNetworkPolicy-allow-oceanbox-subnet.yaml
rename to apps/sys/charts/sys-cilium-policies/templates/rook-ceph/CiliumNetworkPolicy-allow-oceanbox-subnet.yaml
diff --git a/charts/sys/charts/sys-cilium-policies/templates/s3-sync/CiliumNetworkPolicy-allow-s3-internal.yaml b/apps/sys/charts/sys-cilium-policies/templates/s3-sync/CiliumNetworkPolicy-allow-s3-internal.yaml
similarity index 100%
rename from charts/sys/charts/sys-cilium-policies/templates/s3-sync/CiliumNetworkPolicy-allow-s3-internal.yaml
rename to apps/sys/charts/sys-cilium-policies/templates/s3-sync/CiliumNetworkPolicy-allow-s3-internal.yaml
diff --git a/charts/sys/charts/sys-cilium-policies/templates/s3-sync/CiliumNetworkPolicy-allow-s3-sync.yaml b/apps/sys/charts/sys-cilium-policies/templates/s3-sync/CiliumNetworkPolicy-allow-s3-sync.yaml
similarity index 100%
rename from charts/sys/charts/sys-cilium-policies/templates/s3-sync/CiliumNetworkPolicy-allow-s3-sync.yaml
rename to apps/sys/charts/sys-cilium-policies/templates/s3-sync/CiliumNetworkPolicy-allow-s3-sync.yaml
diff --git a/charts/sys/charts/sys-cilium-policies/templates/sealed-secrets/CiliumNetworkPolicy-allow-kube-api.yaml b/apps/sys/charts/sys-cilium-policies/templates/sealed-secrets/CiliumNetworkPolicy-allow-kube-api.yaml
similarity index 100%
rename from charts/sys/charts/sys-cilium-policies/templates/sealed-secrets/CiliumNetworkPolicy-allow-kube-api.yaml
rename to apps/sys/charts/sys-cilium-policies/templates/sealed-secrets/CiliumNetworkPolicy-allow-kube-api.yaml
diff --git a/charts/sys/charts/sys-cilium-policies/templates/tempo/CiliumNetworkPolicy-allow-api-server.yaml b/apps/sys/charts/sys-cilium-policies/templates/tempo/CiliumNetworkPolicy-allow-api-server.yaml
similarity index 100%
rename from charts/sys/charts/sys-cilium-policies/templates/tempo/CiliumNetworkPolicy-allow-api-server.yaml
rename to apps/sys/charts/sys-cilium-policies/templates/tempo/CiliumNetworkPolicy-allow-api-server.yaml
diff --git a/charts/sys/charts/sys-cilium-policies/templates/velero/CiliumNetworkPolicy-allow-api-server.yaml b/apps/sys/charts/sys-cilium-policies/templates/velero/CiliumNetworkPolicy-allow-api-server.yaml
similarity index 100%
rename from charts/sys/charts/sys-cilium-policies/templates/velero/CiliumNetworkPolicy-allow-api-server.yaml
rename to apps/sys/charts/sys-cilium-policies/templates/velero/CiliumNetworkPolicy-allow-api-server.yaml
diff --git a/charts/sys/charts/sys-cilium-policies/templates/velero/CiliumNetworkPolicy-allow-job-api-server.yaml b/apps/sys/charts/sys-cilium-policies/templates/velero/CiliumNetworkPolicy-allow-job-api-server.yaml
similarity index 100%
rename from charts/sys/charts/sys-cilium-policies/templates/velero/CiliumNetworkPolicy-allow-job-api-server.yaml
rename to apps/sys/charts/sys-cilium-policies/templates/velero/CiliumNetworkPolicy-allow-job-api-server.yaml
diff --git a/charts/sys/charts/sys-cilium-policies/templates/velero/CiliumNetworkPolicy-allow-prometheus-metrics.yaml b/apps/sys/charts/sys-cilium-policies/templates/velero/CiliumNetworkPolicy-allow-prometheus-metrics.yaml
similarity index 100%
rename from charts/sys/charts/sys-cilium-policies/templates/velero/CiliumNetworkPolicy-allow-prometheus-metrics.yaml
rename to apps/sys/charts/sys-cilium-policies/templates/velero/CiliumNetworkPolicy-allow-prometheus-metrics.yaml
diff --git a/charts/sys/charts/sys-cilium-policies/templates/x509-exporter/CiliumNetworkPolicy-allow-api-server.yaml b/apps/sys/charts/sys-cilium-policies/templates/x509-exporter/CiliumNetworkPolicy-allow-api-server.yaml
similarity index 100%
rename from charts/sys/charts/sys-cilium-policies/templates/x509-exporter/CiliumNetworkPolicy-allow-api-server.yaml
rename to apps/sys/charts/sys-cilium-policies/templates/x509-exporter/CiliumNetworkPolicy-allow-api-server.yaml
diff --git a/charts/sys/charts/sys-cilium-policies/templates/x509-exporter/CiliumNetworkPolicy-allow-prometheus-metrics.yaml b/apps/sys/charts/sys-cilium-policies/templates/x509-exporter/CiliumNetworkPolicy-allow-prometheus-metrics.yaml
similarity index 100%
rename from charts/sys/charts/sys-cilium-policies/templates/x509-exporter/CiliumNetworkPolicy-allow-prometheus-metrics.yaml
rename to apps/sys/charts/sys-cilium-policies/templates/x509-exporter/CiliumNetworkPolicy-allow-prometheus-metrics.yaml
diff --git a/apps/sys/charts/sys-cilium-policies/values.yaml b/apps/sys/charts/sys-cilium-policies/values.yaml
new file mode 100644
index 00000000..3964005c
--- /dev/null
+++ b/apps/sys/charts/sys-cilium-policies/values.yaml
@@ -0,0 +1,5 @@
+s3:
+  hosts:
+  patterns:
+  cidr:
+    - 10.255.241.30/32
diff --git a/charts/sys/templates/actions-runner-controller.yaml b/apps/sys/templates/actions-runner-controller.yaml
similarity index 100%
rename from charts/sys/templates/actions-runner-controller.yaml
rename to apps/sys/templates/actions-runner-controller.yaml
diff --git a/charts/sys/templates/argo-rollouts.yaml b/apps/sys/templates/argo-rollouts.yaml
similarity index 100%
rename from charts/sys/templates/argo-rollouts.yaml
rename to apps/sys/templates/argo-rollouts.yaml
diff --git a/charts/sys/templates/argo-workflows.yaml b/apps/sys/templates/argo-workflows.yaml
similarity index 100%
rename from charts/sys/templates/argo-workflows.yaml
rename to apps/sys/templates/argo-workflows.yaml
diff --git a/charts/sys/templates/argocd-apps.yaml b/apps/sys/templates/argocd-apps.yaml
similarity index 100%
rename from charts/sys/templates/argocd-apps.yaml
rename to apps/sys/templates/argocd-apps.yaml
diff --git a/charts/sys/templates/argocd.yaml b/apps/sys/templates/argocd.yaml
similarity index 100%
rename from charts/sys/templates/argocd.yaml
rename to apps/sys/templates/argocd.yaml
diff --git a/charts/sys/templates/cert-manager.yaml b/apps/sys/templates/cert-manager.yaml
similarity index 100%
rename from charts/sys/templates/cert-manager.yaml
rename to apps/sys/templates/cert-manager.yaml
diff --git a/charts/sys/templates/chartmuseum.yaml b/apps/sys/templates/chartmuseum.yaml
similarity index 100%
rename from charts/sys/templates/chartmuseum.yaml
rename to apps/sys/templates/chartmuseum.yaml
diff --git a/charts/sys/templates/cilium.yaml b/apps/sys/templates/cilium.yaml
similarity index 100%
rename from charts/sys/templates/cilium.yaml
rename to apps/sys/templates/cilium.yaml
diff --git a/charts/sys/templates/clickhouse.yaml b/apps/sys/templates/clickhouse.yaml
similarity index 100%
rename from charts/sys/templates/clickhouse.yaml
rename to apps/sys/templates/clickhouse.yaml
diff --git a/charts/sys/templates/downscaler.yaml b/apps/sys/templates/downscaler.yaml
similarity index 100%
rename from charts/sys/templates/downscaler.yaml
rename to apps/sys/templates/downscaler.yaml
diff --git a/charts/sys/templates/gitlab-runner.yaml b/apps/sys/templates/gitlab-runner.yaml
similarity index 100%
rename from charts/sys/templates/gitlab-runner.yaml
rename to apps/sys/templates/gitlab-runner.yaml
diff --git a/charts/sys/templates/ingress-nginx.yaml b/apps/sys/templates/ingress-nginx.yaml
similarity index 100%
rename from charts/sys/templates/ingress-nginx.yaml
rename to apps/sys/templates/ingress-nginx.yaml
diff --git a/charts/sys/templates/jaeger-operator.yaml b/apps/sys/templates/jaeger-operator.yaml
similarity index 100%
rename from charts/sys/templates/jaeger-operator.yaml
rename to apps/sys/templates/jaeger-operator.yaml
diff --git a/charts/sys/templates/kubernetes-dashboard.yaml b/apps/sys/templates/kubernetes-dashboard.yaml
similarity index 100%
rename from charts/sys/templates/kubernetes-dashboard.yaml
rename to apps/sys/templates/kubernetes-dashboard.yaml
diff --git a/charts/sys/templates/kyverno.yaml b/apps/sys/templates/kyverno.yaml
similarity index 100%
rename from charts/sys/templates/kyverno.yaml
rename to apps/sys/templates/kyverno.yaml
diff --git a/charts/sys/templates/linkerd-crds.yaml b/apps/sys/templates/linkerd-crds.yaml
similarity index 100%
rename from charts/sys/templates/linkerd-crds.yaml
rename to apps/sys/templates/linkerd-crds.yaml
diff --git a/charts/sys/templates/linkerd-multicluster.yaml b/apps/sys/templates/linkerd-multicluster.yaml
similarity index 100%
rename from charts/sys/templates/linkerd-multicluster.yaml
rename to apps/sys/templates/linkerd-multicluster.yaml
diff --git a/charts/sys/templates/linkerd.yaml b/apps/sys/templates/linkerd.yaml
similarity index 100%
rename from charts/sys/templates/linkerd.yaml
rename to apps/sys/templates/linkerd.yaml
diff --git a/charts/sys/templates/loki.yaml b/apps/sys/templates/loki.yaml
similarity index 100%
rename from charts/sys/templates/loki.yaml
rename to apps/sys/templates/loki.yaml
diff --git a/charts/sys/templates/mariadb-operator.yaml b/apps/sys/templates/mariadb-operator.yaml
similarity index 100%
rename from charts/sys/templates/mariadb-operator.yaml
rename to apps/sys/templates/mariadb-operator.yaml
diff --git a/charts/sys/templates/metricserver.yaml b/apps/sys/templates/metricserver.yaml
similarity index 100%
rename from charts/sys/templates/metricserver.yaml
rename to apps/sys/templates/metricserver.yaml
diff --git a/charts/sys/templates/nfs-provisioner.yaml b/apps/sys/templates/nfs-provisioner.yaml
similarity index 100%
rename from charts/sys/templates/nfs-provisioner.yaml
rename to apps/sys/templates/nfs-provisioner.yaml
diff --git a/charts/sys/templates/oncall.yaml b/apps/sys/templates/oncall.yaml
similarity index 100%
rename from charts/sys/templates/oncall.yaml
rename to apps/sys/templates/oncall.yaml
diff --git a/charts/sys/templates/otel-collector.yaml b/apps/sys/templates/otel-collector.yaml
similarity index 100%
rename from charts/sys/templates/otel-collector.yaml
rename to apps/sys/templates/otel-collector.yaml
diff --git a/charts/sys/templates/policies/cnpg-add-backup-section.yaml b/apps/sys/templates/policies/cnpg-add-backup-section.yaml
similarity index 100%
rename from charts/sys/templates/policies/cnpg-add-backup-section.yaml
rename to apps/sys/templates/policies/cnpg-add-backup-section.yaml
diff --git a/charts/sys/templates/policies/cnpg-clone-secrets.yaml b/apps/sys/templates/policies/cnpg-clone-secrets.yaml
similarity index 100%
rename from charts/sys/templates/policies/cnpg-clone-secrets.yaml
rename to apps/sys/templates/policies/cnpg-clone-secrets.yaml
diff --git a/charts/sys/templates/policies/generate-external-admin-rolebinding.yaml b/apps/sys/templates/policies/generate-external-admin-rolebinding.yaml
similarity index 100%
rename from charts/sys/templates/policies/generate-external-admin-rolebinding.yaml
rename to apps/sys/templates/policies/generate-external-admin-rolebinding.yaml
diff --git a/charts/sys/templates/policies/prometheus-add-folder-to-default-dashboards.yaml b/apps/sys/templates/policies/prometheus-add-folder-to-default-dashboards.yaml
similarity index 100%
rename from charts/sys/templates/policies/prometheus-add-folder-to-default-dashboards.yaml
rename to apps/sys/templates/policies/prometheus-add-folder-to-default-dashboards.yaml
diff --git a/charts/sys/templates/policies/sync-gitlab.yaml b/apps/sys/templates/policies/sync-gitlab.yaml
similarity index 100%
rename from charts/sys/templates/policies/sync-gitlab.yaml
rename to apps/sys/templates/policies/sync-gitlab.yaml
diff --git a/charts/sys/templates/policies/sync-regcred.yaml b/apps/sys/templates/policies/sync-regcred.yaml
similarity index 100%
rename from charts/sys/templates/policies/sync-regcred.yaml
rename to apps/sys/templates/policies/sync-regcred.yaml
diff --git a/charts/sys/templates/policies/sync-s3-secret.yaml b/apps/sys/templates/policies/sync-s3-secret.yaml
similarity index 100%
rename from charts/sys/templates/policies/sync-s3-secret.yaml
rename to apps/sys/templates/policies/sync-s3-secret.yaml
diff --git a/charts/sys/templates/policies/whitelist-internal-ingresses.yaml b/apps/sys/templates/policies/whitelist-internal-ingresses.yaml
similarity index 100%
rename from charts/sys/templates/policies/whitelist-internal-ingresses.yaml
rename to apps/sys/templates/policies/whitelist-internal-ingresses.yaml
diff --git a/charts/sys/templates/postgres-operator.yaml b/apps/sys/templates/postgres-operator.yaml
similarity index 100%
rename from charts/sys/templates/postgres-operator.yaml
rename to apps/sys/templates/postgres-operator.yaml
diff --git a/charts/sys/templates/prometheus-thanos.yaml b/apps/sys/templates/prometheus-thanos.yaml
similarity index 100%
rename from charts/sys/templates/prometheus-thanos.yaml
rename to apps/sys/templates/prometheus-thanos.yaml
diff --git a/charts/sys/templates/prometheus.yaml b/apps/sys/templates/prometheus.yaml
similarity index 100%
rename from charts/sys/templates/prometheus.yaml
rename to apps/sys/templates/prometheus.yaml
diff --git a/charts/sys/templates/promtail.yaml b/apps/sys/templates/promtail.yaml
similarity index 100%
rename from charts/sys/templates/promtail.yaml
rename to apps/sys/templates/promtail.yaml
diff --git a/charts/sys/templates/rabbitmq-operator.yaml b/apps/sys/templates/rabbitmq-operator.yaml
similarity index 100%
rename from charts/sys/templates/rabbitmq-operator.yaml
rename to apps/sys/templates/rabbitmq-operator.yaml
diff --git a/charts/sys/templates/resources/cluster-auth-rbac.yaml b/apps/sys/templates/resources/cluster-auth-rbac.yaml
similarity index 100%
rename from charts/sys/templates/resources/cluster-auth-rbac.yaml
rename to apps/sys/templates/resources/cluster-auth-rbac.yaml
diff --git a/charts/sys/templates/resources/dashboards/argocd.yaml b/apps/sys/templates/resources/dashboards/argocd.yaml
similarity index 100%
rename from charts/sys/templates/resources/dashboards/argocd.yaml
rename to apps/sys/templates/resources/dashboards/argocd.yaml
diff --git a/charts/sys/templates/resources/dashboards/cilium-policy-verdicts.yaml b/apps/sys/templates/resources/dashboards/cilium-policy-verdicts.yaml
similarity index 100%
rename from charts/sys/templates/resources/dashboards/cilium-policy-verdicts.yaml
rename to apps/sys/templates/resources/dashboards/cilium-policy-verdicts.yaml
diff --git a/charts/sys/templates/resources/dashboards/cnpg-postgres.yaml b/apps/sys/templates/resources/dashboards/cnpg-postgres.yaml
similarity index 100%
rename from charts/sys/templates/resources/dashboards/cnpg-postgres.yaml
rename to apps/sys/templates/resources/dashboards/cnpg-postgres.yaml
diff --git a/charts/sys/templates/resources/dashboards/dotdc-grafana-dashboards-kubernetes.yaml b/apps/sys/templates/resources/dashboards/dotdc-grafana-dashboards-kubernetes.yaml
similarity index 100%
rename from charts/sys/templates/resources/dashboards/dotdc-grafana-dashboards-kubernetes.yaml
rename to apps/sys/templates/resources/dashboards/dotdc-grafana-dashboards-kubernetes.yaml
diff --git a/charts/sys/templates/resources/dashboards/gitlab-runner.yaml b/apps/sys/templates/resources/dashboards/gitlab-runner.yaml
similarity index 100%
rename from charts/sys/templates/resources/dashboards/gitlab-runner.yaml
rename to apps/sys/templates/resources/dashboards/gitlab-runner.yaml
diff --git a/charts/sys/templates/resources/dashboards/ingress-nginx.yaml b/apps/sys/templates/resources/dashboards/ingress-nginx.yaml
similarity index 100%
rename from charts/sys/templates/resources/dashboards/ingress-nginx.yaml
rename to apps/sys/templates/resources/dashboards/ingress-nginx.yaml
diff --git a/charts/sys/templates/resources/dashboards/persistent-volume-usage.yaml b/apps/sys/templates/resources/dashboards/persistent-volume-usage.yaml
similarity index 100%
rename from charts/sys/templates/resources/dashboards/persistent-volume-usage.yaml
rename to apps/sys/templates/resources/dashboards/persistent-volume-usage.yaml
diff --git a/charts/sys/templates/resources/dashboards/rabbitmq.yaml b/apps/sys/templates/resources/dashboards/rabbitmq.yaml
similarity index 100%
rename from charts/sys/templates/resources/dashboards/rabbitmq.yaml
rename to apps/sys/templates/resources/dashboards/rabbitmq.yaml
diff --git a/charts/sys/templates/resources/dashboards/velero.yaml b/apps/sys/templates/resources/dashboards/velero.yaml
similarity index 100%
rename from charts/sys/templates/resources/dashboards/velero.yaml
rename to apps/sys/templates/resources/dashboards/velero.yaml
diff --git a/charts/sys/templates/resources/dashboards/x509-exporter-dashbaoard.yaml b/apps/sys/templates/resources/dashboards/x509-exporter-dashbaoard.yaml
similarity index 100%
rename from charts/sys/templates/resources/dashboards/x509-exporter-dashbaoard.yaml
rename to apps/sys/templates/resources/dashboards/x509-exporter-dashbaoard.yaml
diff --git a/charts/sys/templates/resources/external-clusterrole.yaml b/apps/sys/templates/resources/external-clusterrole.yaml
similarity index 100%
rename from charts/sys/templates/resources/external-clusterrole.yaml
rename to apps/sys/templates/resources/external-clusterrole.yaml
diff --git a/charts/sys/templates/resources/external-clusterrolebinding.yaml b/apps/sys/templates/resources/external-clusterrolebinding.yaml
similarity index 100%
rename from charts/sys/templates/resources/external-clusterrolebinding.yaml
rename to apps/sys/templates/resources/external-clusterrolebinding.yaml
diff --git a/charts/sys/templates/resources/kube-flannel-rbac.yaml b/apps/sys/templates/resources/kube-flannel-rbac.yaml
similarity index 100%
rename from charts/sys/templates/resources/kube-flannel-rbac.yaml
rename to apps/sys/templates/resources/kube-flannel-rbac.yaml
diff --git a/charts/sys/templates/resources/kube-proxy-rbac.yaml b/apps/sys/templates/resources/kube-proxy-rbac.yaml
similarity index 100%
rename from charts/sys/templates/resources/kube-proxy-rbac.yaml
rename to apps/sys/templates/resources/kube-proxy-rbac.yaml
diff --git a/charts/sys/templates/resources/kyverno-cluster-admin.yaml b/apps/sys/templates/resources/kyverno-cluster-admin.yaml
similarity index 100%
rename from charts/sys/templates/resources/kyverno-cluster-admin.yaml
rename to apps/sys/templates/resources/kyverno-cluster-admin.yaml
diff --git a/charts/sys/templates/resources/kyverno-generate-cilium-network-policies.yaml b/apps/sys/templates/resources/kyverno-generate-cilium-network-policies.yaml
similarity index 100%
rename from charts/sys/templates/resources/kyverno-generate-cilium-network-policies.yaml
rename to apps/sys/templates/resources/kyverno-generate-cilium-network-policies.yaml
diff --git a/charts/sys/templates/resources/label-and-taint-nodes.yaml b/apps/sys/templates/resources/label-and-taint-nodes.yaml
similarity index 100%
rename from charts/sys/templates/resources/label-and-taint-nodes.yaml
rename to apps/sys/templates/resources/label-and-taint-nodes.yaml
diff --git a/charts/sys/templates/resources/operator-role.yaml b/apps/sys/templates/resources/operator-role.yaml
similarity index 100%
rename from charts/sys/templates/resources/operator-role.yaml
rename to apps/sys/templates/resources/operator-role.yaml
diff --git a/charts/sys/templates/resources/pre-cert-manager.yaml b/apps/sys/templates/resources/pre-cert-manager.yaml
similarity index 100%
rename from charts/sys/templates/resources/pre-cert-manager.yaml
rename to apps/sys/templates/resources/pre-cert-manager.yaml
diff --git a/charts/sys/templates/resources/pre-cilium.yaml b/apps/sys/templates/resources/pre-cilium.yaml
similarity index 100%
rename from charts/sys/templates/resources/pre-cilium.yaml
rename to apps/sys/templates/resources/pre-cilium.yaml
diff --git a/charts/sys/templates/resources/pre-gitlab-runner.yaml b/apps/sys/templates/resources/pre-gitlab-runner.yaml
similarity index 100%
rename from charts/sys/templates/resources/pre-gitlab-runner.yaml
rename to apps/sys/templates/resources/pre-gitlab-runner.yaml
diff --git a/charts/sys/templates/resources/pre-linkerd.yaml b/apps/sys/templates/resources/pre-linkerd.yaml
similarity index 100%
rename from charts/sys/templates/resources/pre-linkerd.yaml
rename to apps/sys/templates/resources/pre-linkerd.yaml
diff --git a/charts/sys/templates/resources/x509-certificates.yaml b/apps/sys/templates/resources/x509-certificates.yaml
similarity index 100%
rename from charts/sys/templates/resources/x509-certificates.yaml
rename to apps/sys/templates/resources/x509-certificates.yaml
diff --git a/charts/sys/templates/tempo.yaml b/apps/sys/templates/tempo.yaml
similarity index 100%
rename from charts/sys/templates/tempo.yaml
rename to apps/sys/templates/tempo.yaml
diff --git a/charts/sys/templates/velero.yaml b/apps/sys/templates/velero.yaml
similarity index 100%
rename from charts/sys/templates/velero.yaml
rename to apps/sys/templates/velero.yaml
diff --git a/charts/sys/templates/x509-exporter.yaml b/apps/sys/templates/x509-exporter.yaml
similarity index 100%
rename from charts/sys/templates/x509-exporter.yaml
rename to apps/sys/templates/x509-exporter.yaml
diff --git a/charts/sys/values.yaml b/apps/sys/values.yaml
similarity index 100%
rename from charts/sys/values.yaml
rename to apps/sys/values.yaml
diff --git a/charts/sys/charts/sys-cilium-policies/templates/clusterwide/CiliumClusterwideNetworkPolicy-allow-cnpg-backups.yaml b/charts/sys/charts/sys-cilium-policies/templates/clusterwide/CiliumClusterwideNetworkPolicy-allow-cnpg-backups.yaml
deleted file mode 100644
index 320d574f..00000000
--- a/charts/sys/charts/sys-cilium-policies/templates/clusterwide/CiliumClusterwideNetworkPolicy-allow-cnpg-backups.yaml
+++ /dev/null
@@ -1,12 +0,0 @@
-apiVersion: cilium.io/v2
-kind: CiliumClusterwideNetworkPolicy
-metadata:
-  name: allow-cnpg-backups
-spec:
-  description: Policy for egress for CNPG Backups.
-  egress:
-    - toFQDNs:
-        - matchName: s3.production.itpartner.no
-  endpointSelector:
-    matchLabels:
-      cnpg.io/podRole: instance
diff --git a/charts/sys/charts/sys-cilium-policies/templates/loki/CiliumNetworkPolicy-allow-s3-traffic.yaml b/charts/sys/charts/sys-cilium-policies/templates/loki/CiliumNetworkPolicy-allow-s3-traffic.yaml
deleted file mode 100644
index 3be3f4f6..00000000
--- a/charts/sys/charts/sys-cilium-policies/templates/loki/CiliumNetworkPolicy-allow-s3-traffic.yaml
+++ /dev/null
@@ -1,13 +0,0 @@
-apiVersion: cilium.io/v2
-kind: CiliumNetworkPolicy
-metadata:
-  name: allow-s3-traffic
-  namespace: loki
-spec:
-  egress:
-    - toCIDR:
-        - 10.139.2.20/32
-    - toCIDR:
-        - 10.139.2.21/32
-  endpointSelector:
-    matchLabels: {}
diff --git a/charts/sys/charts/sys-cilium-policies/templates/loki/CiliumNetworkPolicy-allow-s3.yaml b/charts/sys/charts/sys-cilium-policies/templates/loki/CiliumNetworkPolicy-allow-s3.yaml
deleted file mode 100644
index 66ce893f..00000000
--- a/charts/sys/charts/sys-cilium-policies/templates/loki/CiliumNetworkPolicy-allow-s3.yaml
+++ /dev/null
@@ -1,14 +0,0 @@
-apiVersion: cilium.io/v2
-kind: CiliumNetworkPolicy
-metadata:
-  name: allow-s3
-  namespace: loki
-spec:
-  description: Allow loki to ship logs to s3
-  egress:
-    - toFQDNs:
-        - matchName: s3.production.itpartner.no
-        - matchPattern: s3.*.itpartner.no
-  endpointSelector:
-    matchLabels:
-      app.kubernetes.io/instance: loki
diff --git a/charts/sys/charts/sys-cilium-policies/templates/tempo/CiliumNetworkPolicy-allow-argo-repo-access.yaml b/charts/sys/charts/sys-cilium-policies/templates/tempo/CiliumNetworkPolicy-allow-argo-repo-access.yaml
deleted file mode 100644
index 50b278c2..00000000
--- a/charts/sys/charts/sys-cilium-policies/templates/tempo/CiliumNetworkPolicy-allow-argo-repo-access.yaml
+++ /dev/null
@@ -1,12 +0,0 @@
-apiVersion: cilium.io/v2
-kind: CiliumNetworkPolicy
-metadata:
-  name: allow-argo-repo-access
-  namespace: tempo
-spec:
-  egress:
-    - toFQDNs:
-        - matchName: s3.production.itpartner.no
-  endpointSelector:
-    matchLabels:
-      app.kubernetes.io/instance: tempo
diff --git a/charts/sys/charts/sys-cilium-policies/templates/velero/CiliumNetworkPolicy-allow-s3.yaml b/charts/sys/charts/sys-cilium-policies/templates/velero/CiliumNetworkPolicy-allow-s3.yaml
deleted file mode 100644
index 3e080a9b..00000000
--- a/charts/sys/charts/sys-cilium-policies/templates/velero/CiliumNetworkPolicy-allow-s3.yaml
+++ /dev/null
@@ -1,12 +0,0 @@
-apiVersion: cilium.io/v2
-kind: CiliumNetworkPolicy
-metadata:
-  name: allow-s3
-  namespace: velero
-spec:
-  egress:
-    - toFQDNs:
-        - matchName: s3.production.itpartner.no
-    - toCIDR:
-        - 10.139.2.10/32
-  endpointSelector: {}
diff --git a/charts/sys/charts/sys-cilium-policies/values.yaml b/charts/sys/charts/sys-cilium-policies/values.yaml
deleted file mode 100644
index e69de29b..00000000