flux: prep kb act runner kustomization

deploy/act-runners/kb/README.md

@@ -1,13 +0,0 @@
-# kb - act-runner
-
-**Deploy app:**
-
-```bash
-./ops-scripts/apply-app.sh
-```
-
-**Deploy Infra:**
-
-```bash
-./ops-scripts/apply-infra.sh
-```

deploy/act-runners/kb/deploy/app/.env.d/.gitignore

@@ -1,2 +0,0 @@
-**
-!.gitignore

deploy/act-runners/kb/deploy/app/kustomization.yaml

@@ -1,14 +1,7 @@
 apiVersion: kustomize.config.k8s.io/v1beta1
 kind: Kustomization
+namespace: kb-cicd 
 resources:
   - configmap.yaml
   - deployment.yaml
-
+  - secrets.yaml
-generatorOptions:
-  disableNameSuffixHash: true
-
-secretGenerator:
-  - name: act-runner
-    envs: 
-      - .env.d/.env
-

deploy/act-runners/kb/deploy/app/secrets.yaml

@@ -0,0 +1,25 @@
+apiVersion: v1
+kind: Secret
+metadata:
+    name: backup-secrets
+    namespace: vault-limbosolutions-com
+type: Opaque
+data:
+    GITEA_INSTANCE_URL: ENC[AES256_GCM,data:X0XexV3aQYdEQxA6a9ISXGKjQtn8O3xYQP3gHJlL,iv:Yg0FBQ/BTfiZ7oOHHJr25XOxb3FFhELS21gy8sxD+Y4=,tag:7xypsWUMJccgpNCdqf21OA==,type:str]
+    GITEA_RUNNER_NAME: ENC[AES256_GCM,data:3P8BmPbEEzOMifDy,iv:WiV1cJRy/VRU6mBeuiqn/5LXw0biwakz7vOEuLjh9zg=,tag:j73X+dGtZah5kRND/+aPqw==,type:str]
+    GITEA_RUNNER_REGISTRATION_TOKEN: ENC[AES256_GCM,data:6cw2OKqgIrVx0ypyQl/ES/WNM9PWhfnn5ev7rtIloNgMp2/mC0PS0Q==,iv:V/lHT5I0qF0dAsiOo6/BQ/23spMJaXY3FnVslnmR65k=,tag:ZG/j4eBLsNLhk/uk4DT71A==,type:str]
+sops:
+    age:
+        - enc: |
+            -----BEGIN AGE ENCRYPTED FILE-----
+            YWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IFgyNTUxOSBISzBRd2dIelRUWE5DZGg3
+            M3NiM1RTdG9PdFhZSXBJY2NIWnc5QWpnclVRClNBYTRlSk5tcEkyOUNTZTZXTHl3
+            eTIwZHNYbElFTHVLbHlndi9hWHkwaWcKLS0tIFJXMVl1YmNka0ozc3kyUVY2eU5a
+            TFZUa1RuZFFQaS9zUmJzb3ZEdjhkT3cKx4AMFB2YEzz0j8xpuu9yu25avN3JGBty
+            XNAfbl8xvurndUNlw0aRxxVwsqgKJ9C3IpfAyJQYFN7T2a1/WTGPtQ==
+            -----END AGE ENCRYPTED FILE-----
+          recipient: age1gk946fp37xtm3fv500407zdd5h89a5lvxysrufhau3f73xcq8ewqcu8l5g
+    encrypted_regex: ^(data|stringData)$
+    lastmodified: "2026-06-04T20:30:31Z"
+    mac: ENC[AES256_GCM,data:/AxMd2+nb01TvlZal91Bt7/PevJOvz1KI9jq64sYAd4zWFpZ//M9KhlirTRO0o2iK+ApYdl7DUM5SckUG3cWtFYU0/t4+duXSV7FsM+eRQ/LeSvEb53rbHIguozVdoaza9FKk6Obl4KViX/NVTv0RP3iEZRx0kKS3By+10gE6SM=,iv:K31r0cwgCa7NQ86pl1t6NsinWm0d9JoRvCdTOj4USs8=,tag:NQeX6rC7ggTtGbROjyk0Sw==,type:str]
+    version: 3.13.1

deploy/act-runners/kb/ops-scripts/apply-app.sh

@@ -1,4 +0,0 @@
-#!/bin/bash
-set -e
-NAMESPACE=kb-cicd
-kubectl kustomize deploy/app | kubectl --namespace ${NAMESPACE} apply -f -

deploy/act-runners/kb/ops-scripts/apply-infra.sh

@@ -1,4 +0,0 @@
-#!/bin/bash
-set -e
-NAMESPACE=kb-cicd
-kubectl create namespace ${NAMESPACE} || true

deploy/flux/backups-sync.yaml

@@ -2,6 +2,7 @@ apiVersion: kustomize.toolkit.fluxcd.io/v1
 kind: Kustomization
 metadata:
   name: backups
+  namespace: git-limbosolutions-com
 spec:
   interval: 1m
   sourceRef: