local-path patch

clusters/base/apps/vaultwarden/secret.enc.yaml

@@ -4,20 +4,20 @@ metadata:
     name: vaultwarden-secrets
     namespace: vaultwarden
 stringData:
-    #ENC[AES256_GCM,data:RvKI5x8D6+c5fTKlj430C8svWzED4XhOfOC7puf5rfwWxcpoqOKr0GqDCuES/omdIW6kcZZNOh61,iv:syL+WS+sEcnPNeU23RyA5F9YBI1v4n09c3VG/ypPxhs=,tag:wrWRpsNmbR3PEtSrqd0e1A==,type:comment]
-    ADMIN_TOKEN: ENC[AES256_GCM,data:B8k56akLv7bLEpkuAXUpz9vl9iBgjACqrO2jSdBR1oFwUgg/sH25oc4abPXpGzP/53CSfkOQYG1APGUEgmSdavwnGyh+N4y0/R/gHS1ccZ0Lx+o56D+8mYcwZDAn8qGuNctVsiQeFmU0Y1J1SPGH3mGXMR6wIg==,iv:2qYEo8gJfJgAll4l0rdAaxFbvRoUL2VRzKdWdHq5dF0=,tag:fK5PfnWVD+NLLylPOPbi/w==,type:str]
+    #ENC[AES256_GCM,data:43GMKgH2TzIgp2vuDvEIhuyJFqLbYOZDKN1/iFOtkhjE2Mb0s7uH8sBFDP508FWrQBNaGBYtoWjg,iv:bEL49MPBoA1k3sJRaM2i9BTr0qVpaurMDxB0MLIOyZQ=,tag:7mXwzEwHOaarY4dBhCY89A==,type:comment]
+    ADMIN_TOKEN: ENC[AES256_GCM,data:nutEdr75MO0kMIZ8XsETLXhI72tXmCjWZK4XOFUYyjAsShzJZ7J6MyZ9WeV4qTDW5UQNEsWFNKcgH0ZBPs6qSubYXUFWKM8IvGdhb/oTkpUFpujr3aSX601jRBAE9LpuMGEWAy05yCaiVIlHX0hvhR0K6lSB2A==,iv:xZJdd8UdV31BlpqykHYGbHrboqA1/Ed7vzVGkL819F8=,tag:AOMHXMnwj2t6dj8DhoMSXA==,type:str]
 sops:
     age:
         - recipient: age109zta6l0cwpkxn5wek82kvauxn6yqrq80rsz4mvu5atdnpcn9pusuvnqk5
           enc: |
             -----BEGIN AGE ENCRYPTED FILE-----
-            YWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IFgyNTUxOSBaZzA4OG9VbW1BUmltaGk2
-            M0NsTVFWc0NxQnlVTk9panhud1Z1WWRJWkc4ClExeEFpbGVMZHNyNFFmTkYvODhB
-            R0ZacHA3aGpOa2FyMG8xaDE0MDJHQkkKLS0tIHNwUk9mUVFQMVB0anBoczhqQ2dr
-            eXNkTVVNWWpLc2lHR3QyVm9zNWhOMUUKM/3WlLaiMxJnqaC2ujLIYy0XWKAkMiiH
-            383GFTsKM4lmor5FOcKvKcYFmdEXQc5sanb+n4WUq1h6OYDBHyW3ug==
+            YWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IFgyNTUxOSAyOWFTYWVrc1kxZGpodHUv
+            VmI1ZGRGQnRZNnhPOUZrZGpRUlAwczVEYXo4CitSMWEwaU4vT3gyWCtHRXFRbExo
+            b1BEMWpVRFQ0TktnMmNIT0RmUXcrR2cKLS0tIGZXcWdFWWpWVng0RlFpZ2FkV2Nn
+            NHY3amdFcndOVUJQYzNqdnJhMVk0M2cKcNgeVHKBssR4StbH9qQMLVBZsz+s8R+o
+            CTQR1nGhqs38JeP4B5iA9ABuXygPU8Le7RhOLsW1rpva35TEy98S4w==
             -----END AGE ENCRYPTED FILE-----
-    lastmodified: "2026-08-26T10:18:06Z"
-    mac: ENC[AES256_GCM,data:Xkbtsi2y0vJ54E+Qco0+Vy1O3EOlDYPp2NIRx3Bo1e4mW2AMV3gP3IcXQCCctd4nKM/wSkh5MYWQhX4B8RaCYyJHhq4QqceVR98knOT83X90HheR3Fi92WxtlTgVl4mVwEhfm2VhpdMYaFzHKtJAIzSWdPqW0G2OOC4OpdQcDqA=,iv:eG8B68eXOv236Ot2oOwlbWuvLS1yP2xJ4KZXlWysBew=,tag:QCofmMiBP91PJ6dywoYUpg==,type:str]
+    lastmodified: "2026-08-26T10:18:10Z"
+    mac: ENC[AES256_GCM,data:bHeWs6jRCt93vLbGQ/kcn3vPd9dQ2AR/oNc4E1mYVWCoVNilPMDa7uWHQuqjGKyZwk0aSKw7PH/KXmTgLPf35yoKYdJ2cedZB+hYlyBNao62h++bXqGoPEmBwHQ7uV1hyx6ro7IQc4fXKvcjFOU8XgNKlDZpi1iJHWkZBt0MJFU=,iv:xWO8IMXQXQsUC8ygHmnNG8a3Ds3/3/OvI5mrnsxf1uw=,tag:ipZnN/sAWFEuc9e/UrCKcw==,type:str]
     encrypted_regex: ^(data|stringData)$
     version: 3.11.0

clusters/base/apps/zigbee2mqtt/secret.enc.yaml

@@ -4,19 +4,19 @@ metadata:
     name: zigbee2mqtt-secrets
     namespace: zigbee2mqtt
 stringData:
-    secret.yaml: ENC[AES256_GCM,data:h2v+W+jYMhFgFYc1hUMeJ1IhWoxHC95IYf7oa7eA+1TW/dkX2quLQhMnhJvKrqJ1KYDXGsjrg5FleJP2HHY5GErF4EYKG7btoHqyhegW6BIClewV51ie+qv7v6cLDoSUolD/I33efeX+DUfx3QZl47+U6STmlvuyaUxJxFg=,iv:aAcIMNv3wFbooKl0JUo2LW3OJXs/A1dGmIaWoxW+Rv4=,tag:JDHB+KqG/CjszjD/6IWWyg==,type:str]
+    secret.yaml: ENC[AES256_GCM,data:L5tQ8uoFlnnRoh8GrerjFeCWBQj7VScq2U3lzpNfkN7SlBj1LijjKhDWN3x29w3wDNSk7l+HAQeoA9/jb9cLpKZVQOxUBncuyqOHqJ7gi6jbUl1a1Pp9XzTtllRxaZGeoMmnJIU3z0pGRGVZ46Sx2pGiS/RXfax96RmbctU=,iv:YZ3UyJ/u9tGDp/OdZ7wk76BUPRkZV59qlCV9r4O/EYg=,tag:gCSPil5+MC0e1m7XhN+sQg==,type:str]
 sops:
     age:
         - recipient: age1tu4xgfefvgdda0vn2thaqndq4p9tuydq2ud6qa98tzzgnff6749qnlcx29
           enc: |
             -----BEGIN AGE ENCRYPTED FILE-----
-            YWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IFgyNTUxOSA0eEdaalFIT1IvVHBYR1ZX
-            TlpGVTBTamw4SkE5Y01KYmh4NjBKZ0hoS0FBCk5VNTZSUUNVdCt2TzFEdFhsV1RV
-            cWVkNlVGR2J2eHhSaG93b08rUGNPVUkKLS0tIDVWQVIrdnlUaGN3TXFwd1IyQUsr
-            VlpNSHRPWEh0YzVkQldXUlVjTU5xOEUKANcu7Ydurb7Tx9VyqQTW8hhNEEVQDX/3
-            ioaeOVwkslk3wftioSuxyYGUN9lUQEpyYtLEcStM2n2NAICD1EqTTA==
+            YWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IFgyNTUxOSBuQXk5anBmNjVoSkZNREdC
+            aE15VlAvQUxyUGlDZm4rT2tkWWpTa0N4dnhNCjJVb29OUS8yTVdzTjhoaWhHM0ZL
+            akljSklJN1VLeHVIOHNmM2RvYndMWlEKLS0tIDNRZGU4MzllcVoyZ2QrUmpFaFA3
+            MGVNa1diK2x6QzdYdUJ2cVg0VktCck0KRa8HK4Kq0Pmtn02rIo67koGkIl/kp8ab
+            D05BSiruqY/UIKDU4i747W82lX0T1b4/DXA0T6vBSJus48GFI82hQw==
             -----END AGE ENCRYPTED FILE-----
-    lastmodified: "2026-08-26T10:18:07Z"
-    mac: ENC[AES256_GCM,data:HtNmHHCeg4/whs6kQFMNr0MUgwZV6BrZyax6hOTB0P7q4FkVfR20JECLZoMDNQ6TEfx4gx9ioshpSoY2OYZ1qSXU+fIp+Kdn9AqMTSIZxcC1d6ZzbOEEZ3zkfK2tCuPRpFqmvG1ossMurddyfnJhPn/kMknkDdme+PPOuseXwXY=,iv:45sCch/9jTC4e8hHPusGEv4h9Wsjx7SAAITBL73xPbk=,tag:xX5B1Hy/RF4U1G+KH1RkFQ==,type:str]
+    lastmodified: "2026-08-26T10:18:11Z"
+    mac: ENC[AES256_GCM,data:hdjwY6NMm3f3xuVIg1EaoR7Zg+Az+OZoBTEBmOkgWyDA1BjQIDLJHle2hCg6zxh+ziyYIJ11MIvSXbQsdsuEECxkzuZbXN58bDSWvwS3neMV6Wvt3Xg5nret7UaNuCsPWfNC7spYQbj5j9x0DMmDokvYR1asqn9WulvE7F+KYc8=,iv:vlXr9AbQ5VDH0S+eSyOi+NgUZ5/NPeadwKDNr7mgIwM=,tag:Z0GgsSOCLUZxRU7WibadHQ==,type:str]
     encrypted_regex: ^(data|stringData)$
     version: 3.11.0

clusters/base/infra/storage-class-local-path-patch/kustomization.yaml

@@ -0,0 +1,14 @@
+apiVersion: kustomize.config.k8s.io/v1beta1
+kind: Kustomization
+resources: []
+patches:
+  - patch: |
+      apiVersion: storage.k8s.io/v1
+      kind: StorageClass
+      metadata:
+        name: local-path
+        annotations:
+          storageclass.kubernetes.io/is-default-class: "false"
+    target:
+      kind: StorageClass
+      name: local-path

clusters/base/infra/storage-class-longhorn-retain/kustomization.yaml

@@ -1,4 +1,4 @@
 apiVersion: kustomize.config.k8s.io/v1beta1
 kind: Kustomization
 resources:
-  - longhorn-retain.yaml
+  - storageclass.yaml

clusters/home/infra/kustomization.yaml

@@ -1,4 +1,5 @@
 apiVersion: kustomize.config.k8s.io/v1beta1
 kind: Kustomization
 resources:
-  - storage-classes.yaml
+  - storage-class-local-path-patch.yaml
+  - storage-class-longhorn-retain.yaml

clusters/home/infra/storage-class-local-path-patch.yaml

@@ -0,0 +1,13 @@
+apiVersion: kustomize.toolkit.fluxcd.io/v1
+kind: Kustomization
+metadata:
+  name: local-path-defaultclass-patch
+  namespace: flux-system
+spec:
+  interval: 10m
+  sourceRef:
+    kind: GitRepository
+    name: flux-system
+  path: ./clusters/base/infra/patches/storage-class-local-path-patch
+  prune: false # its a local-storage-provisioner object, dont let flux destroy it
+  wait: true

clusters/home/infra/storage-class-longhorn-retain.yaml

@@ -1,19 +1,13 @@
 apiVersion: kustomize.toolkit.fluxcd.io/v1
 kind: Kustomization
 metadata:
-  name: storage-classes
+  name: local-path
   namespace: flux-system
 spec:
   interval: 10m
   sourceRef:
     kind: GitRepository
     name: flux-system
-  path: ./clusters/base/infra/storage-classes
+  path: ./clusters/base/infra/storage-class-longhorn-retain
   prune: true
   wait: true
-  dependsOn:
-    - name: namespaces
-  decryption:
-    provider: sops
-    secretRef:
-      name: sops-age