+1 -3

k8s/charts/README.md

Reviewed

··· 15 15 ├── audiobookshelf/ # Audiobook library with rclone-mounted media 16 16 ├── tranquil-pds/ # Reference atproto Personal Data Server 17 17 ├── cert-manager-issuers/ # Let's Encrypt ClusterIssuer + wildcard Certificates 18 18 - ├── cluster-tls/ # Cloudflare Origin TLS Secrets per domain 19 18 ├── external-routes/ # Ingress + Service + EndpointSlice for off-cluster targets 20 19 ├── forgejo/ # Git hosting (git.aly.codes) 21 20 ├── forward-auth/ # Per-app traefik-forward-auth frontends ··· 97 96 resources from `.Values.routes`. 98 97 - **`pg-shared`** renders CNPG roles/databases and backup resources from chart 99 98 values. 100 100 - - **`cluster-tls`** and **`cert-manager-issuers`** render repeated TLS or 101 101 - certificate resources from values. 99 99 + - **`cert-manager-issuers`** renders repeated certificate resources from values. 102 100 103 101 Those are data charts rather than app workload charts, so a little looping is 104 102 acceptable there.

-5

k8s/charts/cluster-tls/Chart.yaml

Reviewed

··· 1 1 - apiVersion: v2 2 2 - name: cluster-tls 3 3 - description: TLS Secrets for cluster ingresses (cert + key per domain) 4 4 - type: application 5 5 - version: 0.1.0

-1

k8s/charts/cluster-tls/values.yaml

Reviewed

··· 1 1 - # TLS Secrets are first-class SOPS manifests under k8s/flux/secrets.

-28

k8s/flux/platform/cluster-tls.yaml

Reviewed

··· 1 1 - apiVersion: helm.toolkit.fluxcd.io/v2 2 2 - kind: HelmRelease 3 3 - metadata: 4 4 - name: cluster-tls 5 5 - namespace: flux-system 6 6 - spec: 7 7 - interval: 15m 8 8 - releaseName: cluster-tls 9 9 - targetNamespace: default 10 10 - install: 11 11 - remediation: 12 12 - retries: 3 13 13 - upgrade: 14 14 - remediation: 15 15 - retries: 3 16 16 - chart: 17 17 - spec: 18 18 - chart: ./k8s/charts/cluster-tls 19 19 - interval: 15m 20 20 - reconcileStrategy: Revision 21 21 - sourceRef: 22 22 - kind: GitRepository 23 23 - name: flux-system 24 24 - namespace: flux-system 25 25 - valuesFrom: 26 26 - - kind: ConfigMap 27 27 - name: cute-haus-global 28 28 - valuesKey: values.yaml

-1

k8s/flux/platform/kustomization.yaml

Reviewed

··· 1 1 apiVersion: kustomize.config.k8s.io/v1beta1 2 2 kind: Kustomization 3 3 resources: 4 4 - - cluster-tls.yaml 5 4 - gotenberg.yaml 6 5 - kubernetes-alloy.yaml 7 6 - kubernetes-prometheus.yaml