refactor(k8s): Reorganize into 5-layer structure with production kustomizations

2026-07-16 14:28:19 -07:00
parent a81b9b6169
commit 2d7330798b
214 changed files with 405 additions and 885 deletions
@@ -0,0 +1,10 @@
+# k8s/cert-manager/cert-manager-values.yaml
+# cert-manager issues every per-hostname cert off homelab-ca and renews the
+# wildcard cert nginx serves — certmanager_certificate_expiration_timestamp_seconds
+# is the early-warning signal before any service's TLS breaks.
+
+prometheus:
+  enabled: true
+  servicemonitor:
+    enabled: true
+    interval: 60s
@@ -0,0 +1,5 @@
+apiVersion: kustomize.config.k8s.io/v1beta1
+kind: Kustomization
+namespace: cert-manager
+resources: []
+# cert-manager deployed via ArgoCD Helm source (see layer-2-bootstrap app)