move coder to its own namespace.

kubernetes/apps/coder/coder/app/externalsecret.yaml

@@ -4,7 +4,6 @@ apiVersion: external-secrets.io/v1beta1
 kind: ExternalSecret
 metadata:
   name: coder
-  namespace: default
 spec:
   secretStoreRef:
     kind: ClusterSecretStore

kubernetes/apps/coder/coder/app/helmrelease.yaml

@@ -20,9 +20,8 @@ spec:
   upgrade:
     cleanupOnFail: true
     remediation:
+      strategy: rollback
       retries: 3
-  uninstall:
-    keepHistory: false
   values:
     coder:
       podAnnotations:

kubernetes/apps/coder/coder/ks.yaml

@@ -6,14 +6,14 @@ metadata:
   name: &app coder
   namespace: flux-system
 spec:
-  targetNamespace: default
+  targetNamespace: coder
   commonMetadata:
     labels:
       app.kubernetes.io/name: *app
   dependsOn:
     - name: external-secrets-stores
     - name: crunchy-postgres-operator-cluster
-  path: ./kubernetes/apps/default/coder/app
+  path: ./kubernetes/apps/coder/coder/app
   prune: false
   sourceRef:
     kind: GitRepository

kubernetes/apps/coder/kustomization.yaml

@@ -0,0 +1,9 @@
+---
+# yaml-language-server: $schema=https://json.schemastore.org/kustomization.json
+apiVersion: kustomize.config.k8s.io/v1beta1
+kind: Kustomization
+resources:
+  # Pre Flux-Kustomizations
+  - ./namespace.yaml
+  # Flux-Kustomizations
+  - ./coder/ks.yaml

kubernetes/apps/coder/namespace.yaml

@@ -0,0 +1,9 @@
+---
+apiVersion: v1
+kind: Namespace
+metadata:
+  name: coder
+  labels:
+    kustomize.toolkit.fluxcd.io/prune: disabled
+    volsync.backube/privileged-movers: "true"
+    pgo-enabled-hsn.dev: "true"

kubernetes/apps/default/kustomization.yaml

@@ -8,7 +8,6 @@ resources:
   # Flux-Kustomizations
   - ./atuin/ks.yaml
   - ./autobrr/ks.yaml
-  - ./coder/ks.yaml
   - ./excalidraw/ks.yaml
   - ./it-tools/ks.yaml
   - ./maintainerr/ks.yaml