refactor(k8s): Reorganize into 5-layer structure with production kustomizations

2026-08-18 15:08:01 -07:00
parent 563f720d09
commit 0f30d77288
214 changed files with 405 additions and 885 deletions
@@ -0,0 +1,10 @@
+# k8s/cert-manager/cert-manager-values.yaml
+# cert-manager issues every per-hostname cert off homelab-ca and renews the
+# wildcard cert nginx serves — certmanager_certificate_expiration_timestamp_seconds
+# is the early-warning signal before any service's TLS breaks.
+
+prometheus:
+  enabled: true
+  servicemonitor:
+    enabled: true
+    interval: 60s
@@ -0,0 +1,5 @@
+apiVersion: kustomize.config.k8s.io/v1beta1
+kind: Kustomization
+namespace: cert-manager
+resources: []
+# cert-manager deployed via ArgoCD Helm source (see layer-2-bootstrap app)