fixin

components/monitoring/controllers/base/rbac.yaml

@@ -56,3 +56,25 @@ subjects:
 - kind: ServiceAccount
   name: metrics-server
   namespace: monitoring
+---
+apiVersion: rbac.authorization.k8s.io/v1
+kind: ClusterRole
+metadata:
+  name: metrics-server-subjectaccessreview
+rules:
+- apiGroups: ["authorization.k8s.io"]
+  resources: ["subjectaccessreviews"]
+  verbs: ["create"]
+---
+apiVersion: rbac.authorization.k8s.io/v1
+kind: ClusterRoleBinding
+metadata:
+  name: metrics-server-subjectaccessreview-binding
+roleRef:
+  apiGroup: rbac.authorization.k8s.io
+  kind: ClusterRole
+  name: metrics-server-subjectaccessreview
+subjects:
+- kind: ServiceAccount
+  name: metrics-server
+  namespace: monitoring

components/storage/configs/base/kustomization.yaml

@@ -0,0 +1,5 @@
+apiVersion: kustomize.config.k8s.io/v1beta1
+kind: Kustomization
+namespace: storage
+resources: []
+

components/storage/configs/dev-amd64/kustomization.yaml

@@ -0,0 +1,3 @@
+apiVersion: kustomize.config.k8s.io/v1beta1
+kind: Kustomization
+resources: []

components/storage/configs/dev-arm64/kustomization.yaml

@@ -0,0 +1,3 @@
+apiVersion: kustomize.config.k8s.io/v1beta1
+kind: Kustomization
+resources: []

components/storage/controllers/base/namespace.yaml

@@ -0,0 +1,8 @@
+apiVersion: v1
+kind: Namespace
+metadata:
+  name: storage
+  labels:
+    app.kubernetes.io/component: admission
+    toolkit.fluxcd.io/tenant: platform-team
+    pod-security.kubernetes.io/enforce: baseline

components/storage/controllers/dev-amd64/kustomization.yaml

@@ -0,0 +1,4 @@
+apiVersion: kustomize.config.k8s.io/v1beta1
+kind: Kustomization
+resources: 
+  - ../base

components/storage/controllers/dev-arm64/kustomization.yaml

@@ -0,0 +1,4 @@
+apiVersion: kustomize.config.k8s.io/v1beta1
+kind: Kustomization
+resources: 
+  - ../base

update/kustomization.yaml

@@ -3,3 +3,4 @@ kind: Kustomization
 namespace: flux-system
 resources:
   - kyverno.yaml
+  - metrics-server.yaml