first-try

base/calico/ippool.yaml

@@ -1,19 +0,0 @@
-apiVersion: projectcalico.org/v3
-items:
-- apiVersion: projectcalico.org/v3
-  kind: IPPool
-  metadata:
-    name: default-ipv4-ippool
-  spec:
-    cidr: 192.0.0.0/16
-    ipipMode: Always
-    natOutgoing: true
-    disabled: true
-- apiVersion: projectcalico.org/v3
-  kind: IPPool
-  metadata:
-    name: pod-ip-pool
-  spec:
-    cidr: 10.244.0.0/24
-    ipipMode: Always
-    natOutgoing: true

base/calico/kustomization.yaml

@@ -1,6 +0,0 @@
-apiVersion: kustomize.config.k8s.io/v1beta1
-kind: Kustomization
-
-bases:
-  - https://raw.githubusercontent.com/projectcalico/calico/v3.24.5/manifests/calico.yaml
-  - ippool.yaml

base/cloudnative-pg-operator/configurations/cnpg-cluster.yaml

@@ -0,0 +1,8 @@
+---
+nameReference:
+- kind: Secret
+  fieldSpecs:
+  - path: spec/superuserSecret/name
+    kind: Cluster
+  - path: spec/bootstrap/initdb/secret/name
+    kind: Cluster

base/cloudnative-pg-operator/kustomization.yaml

@@ -0,0 +1,8 @@
+apiVersion: kustomize.config.k8s.io/v1beta1
+kind: Kustomization
+
+resources:
+  - https://raw.githubusercontent.com/cloudnative-pg/cloudnative-pg/release-1.18/releases/cnpg-1.18.1.yaml
+
+configurations:
+  - ./configurations/cnpg-cluster.yaml

base/kustomization.yaml

@@ -2,10 +2,10 @@ apiVersion: kustomize.config.k8s.io/v1beta1
 kind: Kustomization
 
 bases:
-  - ./calico
+  - ./metallb
   - https://github.com/cert-manager/cert-manager/releases/download/v1.10.0/cert-manager.yaml
   - ./postgresql
   - ./redis
-  - ./metallb
   - ./minio
   - ./nginx
+  - ./cloudnative-pg-operator

base/local-path-provisionner/kustomization.yaml

@@ -0,0 +1,6 @@
+apiVersion: kustomize.config.k8s.io/v1beta1
+kind: Kustomization
+
+resources:
+  - github.com/rancher/local-path-provisioner/deploy?ref=v0.0.23
+

base/metallb/kustomization.yaml

@@ -1,4 +1,7 @@
+apiVersion: kustomize.config.k8s.io/v1beta1
+kind: Kustomization
 namespace: metallb-system
 
 resources:
-  - github.com/metallb/metallb/config/native?ref=v0.13.7
+- ./secrets
+- github.com/metallb/metallb/config/native?ref=v0.13.9

base/metallb/secrets/kustomization.yaml

@@ -0,0 +1,8 @@
+apiVersion: kustomize.config.k8s.io/v1beta1
+kind: Kustomization
+namespace: metallb-system
+
+secretGenerator:
+- name: memberlist
+  literals:
+  - secretkey=FiXmEiAmNoTaReAlSeCr3tAnDineedtobereplacewithapropersecretforyourinfrastruture 

base/minio/configurations/tenants.minio.min.io.yaml

@@ -0,0 +1,14 @@
+---
+nameReference:
+- kind: Secret
+  fieldSpecs:
+  - path: spec/credsSecret/name
+    kind: Tenant
+- kind: Secret
+  fieldSpecs:
+  - path: spec/configuration/name
+    kind: Tenant
+- kind: Secret
+  fieldSpecs:
+  - path: spec/users/name
+    kind: Tenant

base/minio/kustomization.yaml

@@ -7,4 +7,7 @@ commonAnnotations:
   operator.min.io/support: "https://subnet.min.io"
 
 resources:
-  - github.com/minio/operator/resources
+  - github.com/minio/operator/resources?ref=v4.5.8
+
+configurations:
+  - ./configurations/tenants.minio.min.io.yaml

base/postgresql/kustomization.yaml

@@ -4,7 +4,7 @@ namespace: postgresql-operator
 
 resources:
   - namespace.yaml
-  - github.com/zalando/postgres-operator/manifests
+  - github.com/zalando/postgres-operator/manifests?ref=v1.9.0
-  - github.com/zalando/postgres-operator/ui/manifests
+  - github.com/zalando/postgres-operator/ui/manifests?ref=v1.9.0
 
 

base/redis/kustomization.yaml

@@ -4,5 +4,5 @@ namespace: redis-operator
 
 resources:
   - namespace.yaml
-  - github.com/spotahome/redis-operator/manifests/kustomize/overlays/default
+  - github.com/spotahome/redis-operator/manifests/kustomize/overlays/default?ref=v1.2.4
 

lb/advertise.yaml

@@ -0,0 +1,9 @@
+apiVersion: metallb.io/v1beta1
+kind: L2Advertisement
+metadata:
+  name: l2-ip-pool-ad
+  namespace: metallb-system
+spec:
+  ipAddressPools:
+  - main-pool
+

lb/ipaddresspoool.yaml

@@ -0,0 +1,8 @@
+apiVersion: metallb.io/v1beta1
+kind: IPAddressPool
+metadata:
+  name: main-pool
+  namespace: metallb-system
+spec:
+  addresses:
+  - 192.168.10.30-192.168.10.36

lb/kustomization.yaml

@@ -0,0 +1,5 @@
+namespace: metallb-system
+
+resources:
+  - ipaddresspoool.yaml
+  - advertise.yaml