From 08d7095a6cec286b895b3494dff7f64152e0dfd8 Mon Sep 17 00:00:00 2001
From: =?UTF-8?q?M=C3=A1rcio=20Fernandes?= <marcio.fernandes@outlook.pt>
Date: Thu, 4 Jun 2026 20:38:05 +0000
Subject: [PATCH] flux: prep kb act runner kustomization

---
 deploy/act-runners/kb/README.md               | 13 ----------
 .../kb/deploy/app/.env.d/.gitignore           |  2 --
 .../kb/deploy/app/kustomization.yaml          | 11 ++------
 deploy/act-runners/kb/deploy/app/secrets.yaml | 25 +++++++++++++++++++
 .../act-runners/kb/ops-scripts/apply-app.sh   |  4 ---
 .../act-runners/kb/ops-scripts/apply-infra.sh |  4 ---
 deploy/flux/backups-sync.yaml                 |  1 +
 7 files changed, 28 insertions(+), 32 deletions(-)
 delete mode 100644 deploy/act-runners/kb/README.md
 delete mode 100644 deploy/act-runners/kb/deploy/app/.env.d/.gitignore
 create mode 100644 deploy/act-runners/kb/deploy/app/secrets.yaml
 delete mode 100755 deploy/act-runners/kb/ops-scripts/apply-app.sh
 delete mode 100755 deploy/act-runners/kb/ops-scripts/apply-infra.sh

diff --git a/deploy/act-runners/kb/README.md b/deploy/act-runners/kb/README.md
deleted file mode 100644
index e20b3b1..0000000
--- a/deploy/act-runners/kb/README.md
+++ /dev/null
@@ -1,13 +0,0 @@
-# kb - act-runner
-
-**Deploy app:**
-
-```bash
-./ops-scripts/apply-app.sh
-```
-
-**Deploy Infra:**
-
-```bash
-./ops-scripts/apply-infra.sh
-```
diff --git a/deploy/act-runners/kb/deploy/app/.env.d/.gitignore b/deploy/act-runners/kb/deploy/app/.env.d/.gitignore
deleted file mode 100644
index 1287e9b..0000000
--- a/deploy/act-runners/kb/deploy/app/.env.d/.gitignore
+++ /dev/null
@@ -1,2 +0,0 @@
-**
-!.gitignore
diff --git a/deploy/act-runners/kb/deploy/app/kustomization.yaml b/deploy/act-runners/kb/deploy/app/kustomization.yaml
index efcdc70..c56edd3 100644
--- a/deploy/act-runners/kb/deploy/app/kustomization.yaml
+++ b/deploy/act-runners/kb/deploy/app/kustomization.yaml
@@ -1,14 +1,7 @@
 apiVersion: kustomize.config.k8s.io/v1beta1
 kind: Kustomization
+namespace: kb-cicd 
 resources:
   - configmap.yaml
   - deployment.yaml
-
-generatorOptions:
-  disableNameSuffixHash: true
-
-secretGenerator:
-  - name: act-runner
-    envs: 
-      - .env.d/.env
-
+  - secrets.yaml
diff --git a/deploy/act-runners/kb/deploy/app/secrets.yaml b/deploy/act-runners/kb/deploy/app/secrets.yaml
new file mode 100644
index 0000000..315d445
--- /dev/null
+++ b/deploy/act-runners/kb/deploy/app/secrets.yaml
@@ -0,0 +1,25 @@
+apiVersion: v1
+kind: Secret
+metadata:
+    name: backup-secrets
+    namespace: vault-limbosolutions-com
+type: Opaque
+data:
+    GITEA_INSTANCE_URL: ENC[AES256_GCM,data:X0XexV3aQYdEQxA6a9ISXGKjQtn8O3xYQP3gHJlL,iv:Yg0FBQ/BTfiZ7oOHHJr25XOxb3FFhELS21gy8sxD+Y4=,tag:7xypsWUMJccgpNCdqf21OA==,type:str]
+    GITEA_RUNNER_NAME: ENC[AES256_GCM,data:3P8BmPbEEzOMifDy,iv:WiV1cJRy/VRU6mBeuiqn/5LXw0biwakz7vOEuLjh9zg=,tag:j73X+dGtZah5kRND/+aPqw==,type:str]
+    GITEA_RUNNER_REGISTRATION_TOKEN: ENC[AES256_GCM,data:6cw2OKqgIrVx0ypyQl/ES/WNM9PWhfnn5ev7rtIloNgMp2/mC0PS0Q==,iv:V/lHT5I0qF0dAsiOo6/BQ/23spMJaXY3FnVslnmR65k=,tag:ZG/j4eBLsNLhk/uk4DT71A==,type:str]
+sops:
+    age:
+        - enc: |
+            -----BEGIN AGE ENCRYPTED FILE-----
+            YWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IFgyNTUxOSBISzBRd2dIelRUWE5DZGg3
+            M3NiM1RTdG9PdFhZSXBJY2NIWnc5QWpnclVRClNBYTRlSk5tcEkyOUNTZTZXTHl3
+            eTIwZHNYbElFTHVLbHlndi9hWHkwaWcKLS0tIFJXMVl1YmNka0ozc3kyUVY2eU5a
+            TFZUa1RuZFFQaS9zUmJzb3ZEdjhkT3cKx4AMFB2YEzz0j8xpuu9yu25avN3JGBty
+            XNAfbl8xvurndUNlw0aRxxVwsqgKJ9C3IpfAyJQYFN7T2a1/WTGPtQ==
+            -----END AGE ENCRYPTED FILE-----
+          recipient: age1gk946fp37xtm3fv500407zdd5h89a5lvxysrufhau3f73xcq8ewqcu8l5g
+    encrypted_regex: ^(data|stringData)$
+    lastmodified: "2026-06-04T20:30:31Z"
+    mac: ENC[AES256_GCM,data:/AxMd2+nb01TvlZal91Bt7/PevJOvz1KI9jq64sYAd4zWFpZ//M9KhlirTRO0o2iK+ApYdl7DUM5SckUG3cWtFYU0/t4+duXSV7FsM+eRQ/LeSvEb53rbHIguozVdoaza9FKk6Obl4KViX/NVTv0RP3iEZRx0kKS3By+10gE6SM=,iv:K31r0cwgCa7NQ86pl1t6NsinWm0d9JoRvCdTOj4USs8=,tag:NQeX6rC7ggTtGbROjyk0Sw==,type:str]
+    version: 3.13.1
diff --git a/deploy/act-runners/kb/ops-scripts/apply-app.sh b/deploy/act-runners/kb/ops-scripts/apply-app.sh
deleted file mode 100755
index 61251d7..0000000
--- a/deploy/act-runners/kb/ops-scripts/apply-app.sh
+++ /dev/null
@@ -1,4 +0,0 @@
-#!/bin/bash
-set -e
-NAMESPACE=kb-cicd
-kubectl kustomize deploy/app | kubectl --namespace ${NAMESPACE} apply -f -
\ No newline at end of file
diff --git a/deploy/act-runners/kb/ops-scripts/apply-infra.sh b/deploy/act-runners/kb/ops-scripts/apply-infra.sh
deleted file mode 100755
index ebaf10e..0000000
--- a/deploy/act-runners/kb/ops-scripts/apply-infra.sh
+++ /dev/null
@@ -1,4 +0,0 @@
-#!/bin/bash
-set -e
-NAMESPACE=kb-cicd
-kubectl create namespace ${NAMESPACE} || true
diff --git a/deploy/flux/backups-sync.yaml b/deploy/flux/backups-sync.yaml
index e25f59e..c1fd467 100644
--- a/deploy/flux/backups-sync.yaml
+++ b/deploy/flux/backups-sync.yaml
@@ -2,6 +2,7 @@ apiVersion: kustomize.toolkit.fluxcd.io/v1
 kind: Kustomization
 metadata:
   name: backups
+  namespace: git-limbosolutions-com
 spec:
   interval: 1m
   sourceRef: