refactor: move general resources to separte top-level folder

charts/atlantis-resources/host-manifests/allow-loft-analytics.yaml

@@ -1,12 +0,0 @@
-apiVersion: cilium.io/v2
-kind: CiliumNetworkPolicy
-metadata:
-  name: allow-loft-analytics
-  namespace: atlantis
-spec:
-  egress:
-  - toFQDNs:
-    - matchName: analytics.loft.rocks
-  endpointSelector:
-    matchLabels:
-      app: vcluster

charts/atlantis-resources/host-manifests/sync-atlantis-secrets.yaml

@@ -1,46 +0,0 @@
-apiVersion: kyverno.io/v1
-kind: ClusterPolicy
-metadata:
-  name: sync-atlantis-secrets
-spec:
-  background: true
-  generateExistingOnPolicyUpdate: true
-  rules:
-  - name: sync-redis-secrets
-    generate:
-      apiVersion: v1
-      namespace: atlantis
-      synchronize: true
-      cloneList:
-        namespace: redis
-        kinds:
-          - Secret
-        selector:
-          matchLabels:
-            app.kubernetes.io/name: redis
-    match:
-      resources:
-        kinds:
-        - Namespace
-        names:
-        - atlantis
-  - name: sync-rabbitmq-secrets
-    generate:
-      apiVersion: v1
-      namespace: atlantis
-      synchronize: true
-      cloneList:
-        namespace: rabbitmq
-        kinds:
-          - Secret
-        selector:
-          matchLabels:
-            clone: "true"
-    match:
-      resources:
-        kinds:
-        - Namespace
-        names:
-        - atlantis
-  validationFailureAction: audit
-

charts/atlantis-resources/manifests/allow-atlantis-services.yaml

@@ -1,23 +0,0 @@
-apiVersion: cilium.io/v2
-kind: CiliumNetworkPolicy
-metadata:
-  name: allow-atlantis-services
-  namespace: atlantis
-spec:
-  egress:
-    - toEndpoints:
-      - matchLabels:
-          "k8s:io.kubernetes.pod.namespace": dapr-system
-    - toEndpoints:
-      - matchLabels:
-          "k8s:io.kubernetes.pod.namespace": redis
-    - toEndpoints:
-      - matchLabels:
-          "k8s:io.kubernetes.pod.namespace": rabbitmq
-    - toEndpoints:
-      - matchLabels:
-          "k8s:io.kubernetes.pod.namespace": jaeger
-  endpointSelector:
-    matchLabels: {}
-
-

charts/atlantis-resources/manifests/allow-external-s3.yaml

@@ -1,12 +0,0 @@
-apiVersion: cilium.io/v2
-kind: CiliumNetworkPolicy
-metadata:
-  name: allow-external-s3
-  namespace: atlantis
-spec:
-  egress:
-  - toFQDNs:
-    - matchName: s3.k1.itpartner.no
-  endpointSelector:
-    matchLabels: {}
-

charts/atlantis-resources/manifests/allow-external-services.yaml

@@ -1,12 +0,0 @@
-apiVersion: cilium.io/v2
-kind: CiliumNetworkPolicy
-metadata:
-  name: allow-external-services
-spec:
-  egress:
-  - toFQDNs:
-    - matchName: gitlab.com
-    - matchPattern: '*.gitlab.com'
-    - matchName: api.github.com
-  endpointSelector:
-    matchLabels: {}

charts/atlantis-resources/manifests/dapr-tracing.yaml

@@ -1,24 +0,0 @@
-apiVersion: jaegertracing.io/v1
-kind: "Jaeger"
-metadata:
-  name: jaeger
-spec:
-  strategy: allInOne
-  ingress:
-    enabled: false
-  allInOne:
-    image: jaegertracing/all-in-one:1.22
-    options:
-      query:
-        base-path: /jaeger
----
-apiVersion: dapr.io/v1alpha1
-kind: Configuration
-metadata:
-  name: tracing
-spec:
-  tracing:
-    samplingRate: "1"
-    zipkin:
-      endpointAddress: "http://jaeger-collector:9411/api/v2/spans"
-

charts/redis/staging/secret_patch.yaml

@@ -1,5 +1,5 @@
 - op: add
   path: /metadata/annotations
   value:
-    secret-syncer.cloudarmin.me/enabled: "true"
-    secret-syncer.cloudarmin.me/destination-namespace: "atlantis"
+    secret-syncer.vcluster-plugin.sh/enabled: "true"
+    secret-syncer.vcluster-plugin.sh/destination-namespace: "atlantis"