Repository containing Kubernetes manifests that are configured using FluxCD
- Shell 100%
| cert-manager | ||
| cnpg | ||
| descheduler | ||
| envoy-gateway | ||
| fj-bellows | ||
| flux-system | ||
| forgejo | ||
| juicefs | ||
| k8up | ||
| kube-prometheus-stack | ||
| restore-check | ||
| valkey | ||
| .gitignore | ||
| .sops.yaml | ||
| kustomization.yaml | ||
| LICENSE | ||
| README.md | ||
infra
GitOps repository for a Kubernetes cluster managed with Flux.
Flux watches this repository and reconciles the manifests from main. The root kustomization.yaml is the entry point that pulls in each managed component.
Structure
Most components follow a two-layer pattern:
component/install/: namespace, source, and install resources such asHelmReleasecomponent/: post-install resources that depend on the install layer
The root kustomization.yaml includes both layers so Flux can reconcile them in order.
Versioning
Helm-managed components are configured to auto-update within a version policy instead of pinning exact chart versions.
cert-manager,envoy-gateway, andk8upusemajor.*rangeskube-prometheus-stackcurrently uses*
Secrets
Secrets under secrets/*.yaml are encrypted with SOPS and Age. The repo-level .sops.yaml applies encryption rules to any YAML file under a secrets/ directory.
License
AGPLv3-or-later, see LICENSE