feat(iot): Move to new kustomize-optimised config

apps/base/iot/kustomization.yaml

@@ -6,8 +6,8 @@ resources:
 - shelly-exporter.yaml
 - shelly-ht-monitor.yaml
 - ../../../shared/networkpolicies/allow-from-monitoring.yaml
-patchesStrategicMerge:
-  - networkpolicy.yaml
+patches:
+  - path: networkpolicy.yaml
 configMapGenerator:
   - name: iot-grafana-dashboards
     files:
@@ -15,3 +15,7 @@ configMapGenerator:
     options:
       labels:
         grafana_dashboard: iot
+
+components:
+  - ../../../shared/components/flux-namespace-admin
+  - ../../../shared/components/namespace-baseline
\ No newline at end of file

apps/base/iot/namespace.yaml

@@ -2,30 +2,4 @@ apiVersion: v1
 kind: Namespace
 metadata:
   name: iot
-  labels:
-    pod-security.kubernetes.io/audit: restricted
-    pod-security.kubernetes.io/enforce: baseline
-    pod-security.kubernetes.io/warn: restricted
-    pod-security.kubernetes.io/audit-version: v1.26
-    pod-security.kubernetes.io/enforce-version: v1.23
-    pod-security.kubernetes.io/warn-version: v1.26
----
-apiVersion: v1
-kind: ServiceAccount
-metadata:
-  name: flux-reconciler
-  namespace: iot
----
-apiVersion: rbac.authorization.k8s.io/v1
-kind: RoleBinding
-metadata:
-  name: flux-reconciler
-  namespace: iot
-roleRef:
-  apiGroup: rbac.authorization.k8s.io
-  kind: ClusterRole
-  name: admin
-subjects:
-  - kind: ServiceAccount
-    name: flux-reconciler
-    namespace: iot
+  labels: {}

apps/base/iot/shelly-exporter.yaml

@@ -4,7 +4,6 @@ metadata:
   name: shelly-exporter
   namespace: iot
 spec:
-  serviceAccountName: flux-reconciler
   releaseName: shelly-exporter
   chart:
     spec:

apps/k8s01/iot/kustomization.yaml

@@ -4,9 +4,11 @@ namespace: iot
 resources:
 - ../../base/iot
 - certificate.yaml
-- ../../../shared/applications/oauth2-proxy.yaml
 - oauth2.yaml
 - rainer.yaml
 - shelly.yaml
 - shelly-ht-monitor.yaml
 - monitoring.yaml
+
+components:
+ - ../../../shared/components/oauth2-proxy