chore: apply external secrets from helm chart

.gitignore

@@ -1 +1,2 @@
 data
+charts

kustomization.yaml

@@ -4,8 +4,16 @@ resources:
 - mysql.yaml
 - postgres.yaml
 - rabbitmq.yaml
-- https://raw.githubusercontent.com/kubernetes/ingress-nginx/main/deploy/static/provider/kind/deploy.yaml
-- https://github.com/jetstack/cert-manager/releases/download/v1.11.0/cert-manager.yaml
-- certificates.yaml
 - external-secrets.yaml
+- https://raw.githubusercontent.com/kubernetes/ingress-nginx/main/deploy/static/provider/kind/deploy.yaml
+- https://github.com/jetstack/cert-manager/releases/download/v1.15.3/cert-manager.yaml
+- certificates.yaml
 - secrets-store.yaml
+helmCharts:
+- name: external-secrets
+  namespace: external-secrets
+  includeCRDs: true
+  releaseName: external-secrets
+  repo: https://charts.external-secrets.io
+  version: 0.10.3
+

setup

@@ -12,9 +12,12 @@ kubectl create secret docker-registry gitlab \
 
 kubectl patch serviceaccount default -p '{"imagePullSecrets": [{"name": "gitlab"}]}'
 
-kubectl apply -k . || true
+kustomized="$(mktemp --suffix .unboundkind.yaml --tmpdir=/tmp/)"
+
+kubectl kustomize --enable-helm . > "${kustomized}"
+kubectl apply -f "${kustomized}" || true
 kubectl wait --for=condition=Ready pods --all -n cert-manager --timeout=5m
 kubectl wait --for=condition=Ready pods --all -n external-secrets --timeout=5m
-kubectl apply -k .
+kubectl apply -f "${kustomized}"
 
 kubectl wait --for=condition=Ready pods --all --timeout=5m