Revert "feat(phase0): bootstrap External Secrets Operator and fix helmfile dual-ownership"

This reverts commit e7f3409d0f.
2026-07-15 14:59:54 -07:00
parent e7f3409d0f
commit d2f4b3c7e4
10 changed files with 156 additions and 324 deletions
@@ -1,83 +0,0 @@
-# Wave 0 — Parallel bootstrap: storage, messaging, and monitoring operators
-# No inter-dependencies; these provide foundational infrastructure.
-
---
-apiVersion: argoproj.io/v1alpha1
-kind: Application
-metadata:
-  name: strimzi-operator
-  namespace: argocd
-  annotations:
-    argocd.argoproj.io/sync-wave: "0"
-spec:
-  project: homelab
-  source:
-    repoURL: https://strimzi.io/charts/
-    chart: strimzi-kafka-operator
-    targetRevision: 0.46.0
-    helm:
-      values: |
-        watchNamespaces: ["sqs"]
-  destination:
-    server: https://kubernetes.default.svc
-    namespace: sqs
-  syncPolicy:
-    automated:
-      prune: true
-      selfHeal: true
-    syncOptions:
-      - CreateNamespace=true
-
---
-apiVersion: argoproj.io/v1alpha1
-kind: Application
-metadata:
-  name: kmsvc-redis
-  namespace: argocd
-  annotations:
-    argocd.argoproj.io/sync-wave: "0"
-spec:
-  project: homelab
-  source:
-    repoURL: https://charts.bitnami.com/bitnami
-    chart: redis
-    targetRevision: 20.6.0
-    helm:
-      valueFiles:
-        - k8s/sqs/redis-values.yaml
-  destination:
-    server: https://kubernetes.default.svc
-    namespace: sqs
-  syncPolicy:
-    automated:
-      prune: true
-      selfHeal: true
-    syncOptions:
-      - CreateNamespace=true
-
---
-apiVersion: argoproj.io/v1alpha1
-kind: Application
-metadata:
-  name: prometheus
-  namespace: argocd
-  annotations:
-    argocd.argoproj.io/sync-wave: "0"
-spec:
-  project: homelab
-  source:
-    repoURL: https://prometheus-community.github.io/helm-charts
-    chart: kube-prometheus-stack
-    targetRevision: latest
-    helm:
-      valueFiles:
-        - k8s/monitoring/prometheus-values.yaml
-  destination:
-    server: https://kubernetes.default.svc
-    namespace: monitoring
-  syncPolicy:
-    automated:
-      prune: true
-      selfHeal: true
-    syncOptions:
-      - CreateNamespace=true
@@ -1,19 +0,0 @@
-# ClusterSecretStore — ESO's connection to Vault
-# References the Vault instance deployed in the iam namespace.
-# Uses Kubernetes auth method (safe for in-cluster access).
-# Namespace: default (ClusterSecretStore is cluster-scoped, not namespaced).
-
-apiVersion: external-secrets.io/v1beta1
-kind: ClusterSecretStore
-metadata:
-  name: vault-homelab
-spec:
-  provider:
-    vault:
-      server: "http://vault.iam.svc.cluster.local:8200"
-      path: "secret"
-      version: "v2"
-      auth:
-        kubernetes:
-          mountPath: "kubernetes"
-          role: "external-secrets"