onedr0p · onedr0p · Jan 10, 2025 · Jan 10, 2025 · Jan 10, 2025 · Jan 10, 2025
diff --git a/...ager/cert-manager/issuers/issuers.yaml.j2 → ...rt-manager/issuers/clusterissuers.yaml.j2 b/...ager/cert-manager/issuers/issuers.yaml.j2 → ...rt-manager/issuers/clusterissuers.yaml.j2
diff --git a/templates/config/kubernetes/apps/cert-manager/cert-manager/issuers/kustomization.yaml.j2 b/templates/config/kubernetes/apps/cert-manager/cert-manager/issuers/kustomization.yaml.j2
@@ -4,4 +4,4 @@ apiVersion: kustomize.config.k8s.io/v1beta1
 kind: Kustomization
 resources:
   - ./secret.sops.yaml
-  - ./issuers.yaml
+  - ./clusterissuers.yaml
diff --git a/templates/config/kubernetes/apps/cert-manager/cert-manager/issuers/secret.sops.yaml.j2 b/templates/config/kubernetes/apps/cert-manager/cert-manager/issuers/secret.sops.yaml.j2
@@ -1,4 +1,5 @@
 ---
+# yaml-language-server: $schema=https://kubernetesjsonschema.dev/v1.18.1-standalone-strict/secret-v1.json
 apiVersion: v1
 kind: Secret
 metadata:

diff --git a/templates/config/kubernetes/apps/cert-manager/namespace.yaml.j2 b/templates/config/kubernetes/apps/cert-manager/namespace.yaml.j2
@@ -1,4 +1,5 @@
 ---
+# yaml-language-server: $schema=https://kubernetesjsonschema.dev/v1.18.1-standalone-strict/namespace-v1.json
 apiVersion: v1
 kind: Namespace
 metadata:

diff --git a/...ig/kubernetes/apps/flux-system/flux-operator/instance/github/webhooks/secret.sops.yaml.j2 b/...ig/kubernetes/apps/flux-system/flux-operator/instance/github/webhooks/secret.sops.yaml.j2
@@ -1,4 +1,5 @@
 ---
+# yaml-language-server: $schema=https://kubernetesjsonschema.dev/v1.18.1-standalone-strict/secret-v1.json
 apiVersion: v1
 kind: Secret
 metadata:

diff --git a/templates/config/kubernetes/apps/flux-system/namespace.yaml.j2 b/templates/config/kubernetes/apps/flux-system/namespace.yaml.j2
@@ -1,4 +1,5 @@
 ---
+# yaml-language-server: $schema=https://kubernetesjsonschema.dev/v1.18.1-standalone-strict/namespace-v1.json
 apiVersion: v1
 kind: Namespace
 metadata:

diff --git a/...be-system/cilium/config/cilium-l3.yaml.j2 → ...em/cilium/config/bgppeeringpolicy.yaml.j2 b/...be-system/cilium/config/cilium-l3.yaml.j2 → ...em/cilium/config/bgppeeringpolicy.yaml.j2
@@ -1,6 +1,6 @@
 #% if bgp.enabled %#
 ---
-# https://docs.cilium.io/en/latest/network/bgp-control-plane/
+# yaml-language-server: $schema=https://datreeio.github.io/CRDs-catalog/cilium.io/ciliumbgppeeringpolicy_v2alpha1.json
 apiVersion: cilium.io/v2alpha1
 kind: CiliumBGPPeeringPolicy
 metadata:
@@ -29,13 +29,4 @@ spec:
       serviceSelector:
         matchExpressions:
           - {key: somekey, operator: NotIn, values: ['never-used-value']}
----
-apiVersion: cilium.io/v2alpha1
-kind: CiliumLoadBalancerIPPool
-metadata:
-  name: l3-pool
-spec:
-  allowFirstLastIPs: "Yes"
-  blocks:
-    - cidr: "#{ bgp.advertised_network }#"
 #% endif %#
diff --git a/templates/config/kubernetes/apps/kube-system/cilium/config/kustomization.yaml.j2 b/templates/config/kubernetes/apps/kube-system/cilium/config/kustomization.yaml.j2
@@ -4,9 +4,11 @@ apiVersion: kustomize.config.k8s.io/v1beta1
 kind: Kustomization
 resources:
   #% if bgp.enabled %#
-  - ./cilium-l3.yaml
+  - ./bgppeeringpolicy.yaml
+  - ./loadbalancerippool.yaml
   #% elif not feature_gates.dual_stack_ipv4_first %#
-  - ./cilium-l2.yaml
+  - ./l2announcementpolicy.yaml
+  - ./loadbalancerippool.yaml
   #% else %#
   []
   #% endif %#
diff --git a/...be-system/cilium/config/cilium-l2.yaml.j2 → ...ilium/config/l2announcementpolicy.yaml.j2 b/...be-system/cilium/config/cilium-l2.yaml.j2 → ...ilium/config/l2announcementpolicy.yaml.j2
@@ -1,6 +1,6 @@
 #% if ((not bgp.enabled) and (not feature_gates.dual_stack_ipv4_first)) %#
 ---
-# https://docs.cilium.io/en/latest/network/l2-announcements
+# yaml-language-server: $schema=https://datreeio.github.io/CRDs-catalog/cilium.io/ciliuml2announcementpolicy_v2alpha1.json
 apiVersion: cilium.io/v2alpha1
 kind: CiliumL2AnnouncementPolicy
 metadata:
@@ -14,13 +14,4 @@ spec:
   nodeSelector:
     matchLabels:
       kubernetes.io/os: linux
----
-apiVersion: cilium.io/v2alpha1
-kind: CiliumLoadBalancerIPPool
-metadata:
-  name: l2-pool
-spec:
-  allowFirstLastIPs: "Yes"
-  blocks:
-    - cidr: "#{ node_network }#"
 #% endif %#
diff --git a/templates/config/kubernetes/apps/kube-system/cilium/config/loadbalancerippool.yaml.j2 b/templates/config/kubernetes/apps/kube-system/cilium/config/loadbalancerippool.yaml.j2
@@ -0,0 +1,18 @@
+---
+# yaml-language-server: $schema=https://datreeio.github.io/CRDs-catalog/cilium.io/ciliumloadbalancerippool_v2alpha1.json
+apiVersion: cilium.io/v2alpha1
+kind: CiliumLoadBalancerIPPool
+metadata:
+#% if bgp.enabled %#
+  name: l3-pool
+#% elif not feature_gates.dual_stack_ipv4_first %#
+  name: l2-pool
+#% endif %#
+spec:
+  allowFirstLastIPs: "Yes"
+  blocks:
+#% if bgp.enabled %#
+    - cidr: "#{ bgp.advertised_network }#"
+#% elif not feature_gates.dual_stack_ipv4_first %#
+    - cidr: "#{ node_network }#"
+#% endif %#
diff --git a/templates/config/kubernetes/apps/kube-system/namespace.yaml.j2 b/templates/config/kubernetes/apps/kube-system/namespace.yaml.j2
@@ -1,4 +1,5 @@
 ---
+# yaml-language-server: $schema=https://kubernetesjsonschema.dev/v1.18.1-standalone-strict/namespace-v1.json
 apiVersion: v1
 kind: Namespace
 metadata:

diff --git a/templates/config/kubernetes/apps/network/cloudflared/app/dnsendpoint.yaml.j2 b/templates/config/kubernetes/apps/network/cloudflared/app/dnsendpoint.yaml.j2
@@ -1,4 +1,5 @@
 ---
+# yaml-language-server: $schema=https://raw.githubusercontent.com/datreeio/CRDs-catalog/main/externaldns.k8s.io/dnsendpoint_v1alpha1.json
 apiVersion: externaldns.k8s.io/v1alpha1
 kind: DNSEndpoint
 metadata:

diff --git a/templates/config/kubernetes/apps/network/cloudflared/app/secret.sops.yaml.j2 b/templates/config/kubernetes/apps/network/cloudflared/app/secret.sops.yaml.j2
@@ -1,4 +1,5 @@
 ---
+# yaml-language-server: $schema=https://kubernetesjsonschema.dev/v1.18.1-standalone-strict/secret-v1.json
 apiVersion: v1
 kind: Secret
 metadata:

diff --git a/templates/config/kubernetes/apps/network/external-dns/app/secret.sops.yaml.j2 b/templates/config/kubernetes/apps/network/external-dns/app/secret.sops.yaml.j2
@@ -1,4 +1,5 @@
 ---
+# yaml-language-server: $schema=https://kubernetesjsonschema.dev/v1.18.1-standalone-strict/secret-v1.json
 apiVersion: v1
 kind: Secret
 metadata:

diff --git a/templates/config/kubernetes/apps/network/ingress-nginx/certificates/production.yaml.j2 b/templates/config/kubernetes/apps/network/ingress-nginx/certificates/production.yaml.j2
@@ -1,4 +1,5 @@
 ---
+# yaml-language-server: $schema=https://raw.githubusercontent.com/datreeio/CRDs-catalog/main/cert-manager.io/certificate_v1.json
 apiVersion: cert-manager.io/v1
 kind: Certificate
 metadata:

diff --git a/templates/config/kubernetes/apps/network/ingress-nginx/certificates/staging.yaml.j2 b/templates/config/kubernetes/apps/network/ingress-nginx/certificates/staging.yaml.j2
@@ -1,4 +1,5 @@
 ---
+# yaml-language-server: $schema=https://raw.githubusercontent.com/datreeio/CRDs-catalog/main/cert-manager.io/certificate_v1.json
 apiVersion: cert-manager.io/v1
 kind: Certificate
 metadata:

diff --git a/templates/config/kubernetes/apps/network/namespace.yaml.j2 b/templates/config/kubernetes/apps/network/namespace.yaml.j2
@@ -1,4 +1,5 @@
 ---
+# yaml-language-server: $schema=https://kubernetesjsonschema.dev/v1.18.1-standalone-strict/namespace-v1.json
 apiVersion: v1
 kind: Namespace
 metadata:

diff --git a/templates/config/kubernetes/apps/observability/namespace.yaml.j2 b/templates/config/kubernetes/apps/observability/namespace.yaml.j2
@@ -1,4 +1,5 @@
 ---
+# yaml-language-server: $schema=https://kubernetesjsonschema.dev/v1.18.1-standalone-strict/namespace-v1.json
 apiVersion: v1
 kind: Namespace
 metadata:

diff --git a/templates/config/kubernetes/apps/openebs-system/namespace.yaml.j2 b/templates/config/kubernetes/apps/openebs-system/namespace.yaml.j2
@@ -1,4 +1,5 @@
 ---
+# yaml-language-server: $schema=https://kubernetesjsonschema.dev/v1.18.1-standalone-strict/namespace-v1.json
 apiVersion: v1
 kind: Namespace
 metadata:

diff --git a/templates/config/kubernetes/bootstrap/flux/github-deploy-key.sops.yaml.j2 b/templates/config/kubernetes/bootstrap/flux/github-deploy-key.sops.yaml.j2
@@ -1,5 +1,6 @@
 #% if github.private_key %#
 ---
+# yaml-language-server: $schema=https://kubernetesjsonschema.dev/v1.18.1-standalone-strict/secret-v1.json
 apiVersion: v1
 kind: Secret
 metadata:

diff --git a/templates/config/kubernetes/flux/settings/cluster-secrets.sops.yaml.j2 b/templates/config/kubernetes/flux/settings/cluster-secrets.sops.yaml.j2
@@ -1,4 +1,5 @@
 ---
+# yaml-language-server: $schema=https://kubernetesjsonschema.dev/v1.18.1-standalone-strict/secret-v1.json
 apiVersion: v1
 kind: Secret
 metadata:

diff --git a/templates/config/kubernetes/flux/settings/cluster-settings.yaml.j2 b/templates/config/kubernetes/flux/settings/cluster-settings.yaml.j2
@@ -1,4 +1,5 @@
 ---
+# yaml-language-server: $schema=https://kubernetesjsonschema.dev/v1.18.1-standalone-strict/configmap-v1.json
 apiVersion: v1
 kind: ConfigMap
 metadata: