refactor: rename k8s-manifests directory to manifests

- Rename all `k8s-manifests` subdirectories and files to `manifests`
- Update all file paths in `argocd-init.yml` to reflect the new directory name

🤖

manifests/cert-manager/cert-manager.jsonnet

@@ -0,0 +1,12 @@
+local app = import "../_templates/argocd_app.libsonnet";
+
+[
+app + {
+  chart:: "cert-manager",
+  repo:: "https://charts.jetstack.io",
+  version:: "v1.12.*",
+  values:: |||
+    installCRDs: true
+  |||
+},
+]

manifests/cert-manager/letsencrypt-issuers.yml

@@ -0,0 +1,34 @@
+---
+apiVersion: cert-manager.io/v1
+kind: ClusterIssuer
+metadata:
+  name: letsencrypt-prod
+  namespace: cert-manager
+  annotations:
+    argocd.argoproj.io/sync-options: SkipDryRunOnMissingResource=true
+spec:
+  acme:
+    server: https://acme-v02.api.letsencrypt.org/directory
+    privateKeySecretRef:
+      name: le-prod-account-key
+    solvers:
+      - http01:
+          ingress:
+            class: nginx
+---
+apiVersion: cert-manager.io/v1
+kind: ClusterIssuer
+metadata:
+  name: letsencrypt-staging
+  namespace: cert-manager
+  annotations:
+    argocd.argoproj.io/sync-options: SkipDryRunOnMissingResource=true
+spec:
+  acme:
+    server: https://acme-staging-v02.api.letsencrypt.org/directory
+    privateKeySecretRef:
+      name: le-staging-account-key
+    solvers:
+      - http01:
+          ingress:
+            class: nginx

manifests/cert-manager/selfsigned-issuer.yaml

@@ -0,0 +1,10 @@
+---
+apiVersion: cert-manager.io/v1
+kind: ClusterIssuer
+metadata:
+  name: selfsigned
+  namespace: cert-manager
+  annotations:
+    argocd.argoproj.io/sync-options: SkipDryRunOnMissingResource=true
+spec:
+  selfSigned: {}

manifests/ingress-nginx.jsonnet

@@ -0,0 +1,30 @@
+local app = import "../_templates/argocd_app.libsonnet";
+
+[
+app + {
+  chart:: "ingress-nginx",
+  repo:: "https://kubernetes.github.io/ingress-nginx",
+  version:: "4.7.*",
+  values:: |||
+    defaultBackend:
+      enabled: true
+      image:
+        registry: ghcr.io
+        image: tarampampam/error-pages
+        tag: 2.13.0
+    controller:
+      watchIngressWithoutClass: true
+      custom-http-errors: "400,401,403,404,405,407,408,409,410,411,412,413,416,418,429,500,502,503,504,505"
+      image:
+        pullPolicy: Always
+      service:
+        externalTrafficPolicy: Local
+      metrics:
+        enabled: true
+        serviceMonitor:
+          enabled: true
+          additionalLabels:
+            release: prometheus-grafana  # same as prometheus-community chart name
+  |||
+}
+]

manifests/keel.jsonnet

@@ -0,0 +1,13 @@
+local app = import "../_templates/argocd_app.libsonnet";
+
+[
+app + {
+  chart:: "keel",
+  repo:: "https://charts.keel.sh",
+  version:: "1.0.*",
+  values:: |||
+    helmProvider:
+      enabled: false
+  |||
+}
+]

manifests/monitoring/loki-stack.jsonnet

@@ -0,0 +1,39 @@
+local app = import "../../_templates/argocd_app.libsonnet";
+
+[
+app + {
+  name:: "loki",
+  namespace:: "metrics",
+  chart:: "loki-stack",
+  repo:: "https://grafana.github.io/helm-charts",
+  version:: "2.9.*",
+	syncOptions:: ["CreateNamespace=true", "Force=true"],
+  values:: |||
+    loki:
+      isDefault: false
+    promtail:
+      extraScrapeConfigs:
+        - job_name: journal
+          journal:
+            path: /var/log/journal
+            max_age: 12h
+            labels:
+              job: systemd-journal
+          relabel_configs:
+            - source_labels:
+                - '__journal__systemd_unit'
+              target_label: 'unit'
+            - source_labels:
+                - '__journal__hostname'
+              target_label: 'hostname'
+      extraVolumes:
+        - name: journal
+          hostPath:
+            path: /var/log/journal
+      extraVolumeMounts:
+        - name: journal
+          mountPath: /var/log/journal
+          readOnly: true
+  |||
+}
+]

manifests/monitoring/prometheus-stack.jsonnet

@@ -0,0 +1,47 @@
+# see https://blog.ediri.io/kube-prometheus-stack-and-argocd-23-how-to-remove-a-workaround
+local app = import "../../_templates/argocd_app.libsonnet";
+
+local vars = {
+	"version": "48.2.3",
+	"namespace": "metrics"
+};
+
+[
+app + {
+  name:: "prometheus-crds",
+  namespace:: vars.namespace,
+  path:: "charts/kube-prometheus-stack/charts/crds/crds",
+  repo:: "https://github.com/prometheus-community/helm-charts.git",
+  version:: "kube-prometheus-stack-" + vars.version,
+  syncOptions:: ["CreateNamespace=true", "Replace=true"],
+  sync_wave:: -1,
+},
+app + {
+  name:: "prometheus-grafana",
+  namespace: vars.namespace,
+  chart:: "kube-prometheus-stack",
+  repo:: "https://prometheus-community.github.io/helm-charts",
+  version:: vars.version,
+  skipCrds:: true,
+  values:: |||
+    fullnameOverride: prometheus-stack
+    kubeProxy:
+      enabled: false
+    kubeScheduler:
+      enabled: false
+    kubeControllerManager:
+      enabled: false
+    alertmanager:
+      enabled: false
+    prometheus:
+      prometheusSpec:
+        storageSpec:
+          volumeClaimTemplate:
+            spec:
+              accessModes: ["ReadWriteOnce"]
+              resources:
+                requests:
+                  storage: 10Gi
+  |||
+}
+]

manifests/monitoring/zabbix-proxy.jsonnet

@@ -0,0 +1,21 @@
+local app = import "../../_templates/argocd_app.libsonnet";
+
+[
+app + {
+  name:: "zabbix-proxy",
+  namespace:: "monitoring",
+  chart:: "zabbix-helm-chrt",
+  repo:: "https://cdn.zabbix.com/zabbix/integrations/kubernetes-helm/6.4",
+  version:: "1.3.*",
+  values:: |||
+    zabbixAgent:
+      enabled: false
+    zabbixProxy:
+      env:
+        - name: ZBX_HOSTNAME
+          value: zabbix-proxy
+        - name: ZBX_SERVER_HOST
+          value: "zabbix.smsvc.net"
+  |||
+}
+]

manifests/reloader.jsonnet

@@ -0,0 +1,12 @@
+local app = import "../_templates/argocd_app.libsonnet";
+
+[
+app + {
+  chart:: "reloader",
+  repo:: "https://stakater.github.io/stakater-charts",
+  version:: "v1.0.*",
+  values:: |||
+    fullnameOverride: reloader
+  |||
+}
+]