Justfile with nested kustomization to simply apply/deploy

deploy/00-infisical.sh

@@ -0,0 +1,30 @@
+#!/bin/bash
+
+# Parse command line arguments
+RECREATE=false
+for arg in "$@"; do
+  case $arg in
+    --recreate)
+      RECREATE=true
+      shift
+      ;;
+  esac
+done
+
+# Check if the secret already exists
+SECRET_EXISTS=$(kubectl get secret universal-auth-credentials -n infisical --ignore-not-found -o name)
+
+if [[ -n "$SECRET_EXISTS" && "$RECREATE" == "true" ]]; then
+  echo "Recreating Infisical bootstrap secret..."
+  kubectl delete secret universal-auth-credentials -n infisical
+  kubectl create secret generic universal-auth-credentials -n infisical \
+    --from-literal clientId=$(gopass show -o homelab/infisical/id) \
+    --from-literal clientSecret=$(gopass show -o homelab/infisical/secret)
+elif [[ -z "$SECRET_EXISTS" ]]; then
+  echo "Creating Infisical bootstrap secret..."
+  kubectl create secret generic universal-auth-credentials -n infisical \
+    --from-literal clientId=$(gopass show -o homelab/infisical/id) \
+    --from-literal clientSecret=$(gopass show -o homelab/infisical/secret)
+else
+  echo "Infisical bootstrap secret already exists, skipping creation (use --recreate to force)"
+fi

deploy/00-infisical/kustomization.yaml

@@ -0,0 +1,5 @@
+apiVersion: kustomize.config.k8s.io/v1beta1
+kind: Kustomization
+
+resources:
+  - ../../namespaces/infisical/

deploy/01-infra.sh

@@ -0,0 +1,6 @@
+#!/bin/bash
+echo -n "Checking for Infrastructure CRDs... "
+kubectl wait --for condition=established crd/httproutes.gateway.networking.k8s.io > /dev/null
+kubectl wait --for condition=established crd/volumes.longhorn.io > /dev/null
+kubectl wait --for condition=established crd/certificates.cert-manager.io > /dev/null
+echo "done"

deploy/01-infra/kustomization.yaml

@@ -0,0 +1,8 @@
+apiVersion: kustomize.config.k8s.io/v1beta1
+kind: Kustomization
+
+resources:
+  - ../../namespaces/cert-manager/
+  - ../../namespaces/homelab/
+  - ../../namespaces/longhorn/
+  - ../../namespaces/traefik/

deploy/10-apps/kustomization.yaml

@@ -0,0 +1,5 @@
+apiVersion: kustomize.config.k8s.io/v1beta1
+kind: Kustomization
+
+resources:
+  - ../../namespaces/

justfile

@@ -0,0 +1,43 @@
+set export := true
+verbose := "false"
+diff := "kubectl diff -k"
+apply := "kubectl apply -k"
+redirect := if verbose == "true" { "" } else { "> /dev/null" }
+
+default:
+    @just --list
+
+infisical_bootstrap_secret recreate="":
+    @echo "-- Adding Infisical Bootstrap secret --"
+    @./deploy/00-infisical.sh {{ recreate }}
+
+_diff_infisical:
+    @echo "-- Diffing Infisical resources --"
+    @{{ diff }} deploy/00-infisical || [ $? -eq 1 ]
+_diff_infra:
+    @echo "-- Diffing Infra resources --"
+    @{{ diff }} deploy/01-infra || [ $? -eq 1 ]
+_diff_apps:
+    @echo "-- Diffing Apps --"
+    @{{ diff }} deploy/10-apps || [ $? -eq 1 ]
+    # @./deploy/10-apps.sh
+
+_apply_infisical:
+    @echo "-- Applying Infisical resources --"
+    @{{ apply }} deploy/00-infisical {{ redirect }}
+_apply_infra:
+    @echo "-- Applying Infra resources --"
+    @{{ apply }} deploy/01-infra {{ redirect }}
+    @./deploy/01-infra.sh
+_apply_apps:
+    @echo "-- Applying Apps --"
+    @{{ apply }} deploy/10-apps {{ redirect }}
+
+_apply_post: _apply_infra _apply_apps
+
+diff: _diff_infisical _diff_infra _diff_apps
+apply: _apply_infisical _apply_post
+_deploy recreate="": _apply_infisical (infisical_bootstrap_secret recreate) _apply_post
+deploy: _deploy
+
+redeploy: (_deploy "--recreate")

namespaces/ai/kustomization.yaml

@@ -0,0 +1,8 @@
+apiVersion: kustomize.config.k8s.io/v1beta1
+kind: Kustomization
+
+resources:
+  - namespace.yaml
+  - ollama/
+  - tabby/
+  - openwebui/

namespaces/apps/kustomization.yaml

@@ -0,0 +1,13 @@
+apiVersion: kustomize.config.k8s.io/v1beta1
+kind: Kustomization
+
+resources:
+  - namespace.yaml
+  - smtp-secrets.yaml
+  - atuin/
+  - dolibarr/
+  - forgejo/
+  - linkwarden/
+  - mealie/
+  - paperless/
+  - vaultwarden/

namespaces/auth/namespace.yaml

@@ -0,0 +1,7 @@
+---
+apiVersion: v1
+kind: Namespace
+metadata:
+  labels:
+    homelab-access: "true"
+  name: auth

namespaces/cert-manager/kustomization.yaml

@@ -0,0 +1,6 @@
+apiVersion: kustomize.config.k8s.io/v1beta1
+kind: Kustomization
+
+resources:
+  - namespace.yaml
+  - cert-manager/

namespaces/cert-manager/post-crd/kustomization.yaml

@@ -0,0 +1,8 @@
+apiVersion: kustomize.config.k8s.io/v1beta1
+kind: Kustomization
+
+resources:
+  - cluster-issuer.yaml
+  - consultjlpdotcom-cert.yaml
+  - jlptechdotconsulting-cert.yaml
+  - leechpepindotcom-cert.yaml

namespaces/charts/kustomization.yaml

@@ -0,0 +1,6 @@
+apiVersion: kustomize.config.k8s.io/v1beta1
+kind: Kustomization
+
+resources:
+  - namespace.yaml
+  - gpu-runtime.yaml

namespaces/core/kustomization.yaml

@@ -0,0 +1,9 @@
+apiVersion: kustomize.config.k8s.io/v1beta1
+kind: Kustomization
+
+resources:
+  - namespace.yaml
+  - postgres/
+  - redis/
+  - tika/
+  - gotenburg/

namespaces/homelab/kustomization.yaml

@@ -0,0 +1,6 @@
+apiVersion: kustomize.config.k8s.io/v1beta1
+kind: Kustomization
+
+resources:
+  - namespace.yaml
+  - gateway.yaml

namespaces/infisical/kustomization.yaml

@@ -0,0 +1,6 @@
+apiVersion: kustomize.config.k8s.io/v1beta1
+kind: Kustomization
+
+resources:
+  - namespace.yaml
+  - infisical/

namespaces/kustomization.yaml

@@ -0,0 +1,12 @@
+apiVersion: kustomize.config.k8s.io/v1beta1
+kind: Kustomization
+
+resources:
+  - cert-manager/post-crd
+  - ai/
+  - apps/
+  - auth/
+  - core/
+  - charts/
+  - monitoring/
+  - public/

namespaces/longhorn/kustomization.yaml

@@ -0,0 +1,6 @@
+apiVersion: kustomize.config.k8s.io/v1beta1
+kind: Kustomization
+
+resources:
+  - namespace.yaml
+  - longhorn/

namespaces/monitoring/kustomization.yaml

@@ -0,0 +1,10 @@
+apiVersion: kustomize.config.k8s.io/v1beta1
+kind: Kustomization
+
+resources:
+  - namespace.yaml
+  - smtp-secrets.yaml
+  - umami/
+  - ntfy/
+  - diun/
+  - healthchecks/

namespaces/public/kustomization.yaml

@@ -0,0 +1,5 @@
+apiVersion: kustomize.config.k8s.io/v1beta1
+kind: Kustomization
+
+resources:
+  - namespace.yaml

namespaces/traefik/kustomization.yaml

@@ -0,0 +1,6 @@
+apiVersion: kustomize.config.k8s.io/v1beta1
+kind: Kustomization
+
+resources:
+  - namespace.yaml
+  - traefik/