feat(renovate): Use kustomize components

apps/base/renovate/kustomization.yaml

@@ -5,3 +5,6 @@ resources:
   - namespace.yaml
   - repository.yaml
   - release.yaml
+
+components:
+  - ../../../shared/components/flux-namespace-admin
\ No newline at end of file

apps/base/renovate/namespace.yaml

@@ -9,23 +9,3 @@ metadata:
     pod-security.kubernetes.io/audit-version: v1.26
     pod-security.kubernetes.io/enforce-version: v1.23
     pod-security.kubernetes.io/warn-version: v1.26
----
-apiVersion: v1
-kind: ServiceAccount
-metadata:
-  name: flux-reconciler
-  namespace: renovate
----
-apiVersion: rbac.authorization.k8s.io/v1
-kind: RoleBinding
-metadata:
-  name: flux-reconciler
-  namespace: renovate
-roleRef:
-  apiGroup: rbac.authorization.k8s.io
-  kind: ClusterRole
-  name: admin
-subjects:
-  - kind: ServiceAccount
-    name: flux-reconciler
-    namespace: renovate

shared/components/flux-namespace-admin/kustomization.yaml

+apiVersion: kustomize.config.k8s.io/v1alpha1
+kind: Component
+
+resources:
+  - serviceaccount.yaml
+  - rolebinding.yaml
\ No newline at end of file

shared/components/flux-namespace-admin/rolebinding.yaml

+---
+apiVersion: rbac.authorization.k8s.io/v1
+kind: RoleBinding
+metadata:
+  name: flux-reconciler
+roleRef:
+  apiGroup: rbac.authorization.k8s.io
+  kind: ClusterRole
+  name: admin
+subjects:
+  - kind: ServiceAccount
+    name: flux-reconciler
\ No newline at end of file

shared/components/flux-namespace-admin/serviceaccount.yaml

+---
+apiVersion: v1
+kind: ServiceAccount
+metadata:
+  name: flux-reconciler
+automountServiceAccountToken: false
\ No newline at end of file