From 2be29413438cd182962286fa1de09951c3c45f7f Mon Sep 17 00:00:00 2001
From: Laur IVAN <laur.ivan@ec.europa.eu>
Date: Thu, 26 Feb 2026 11:30:24 +0100
Subject: [PATCH] refactor: move infisical Kubernetes manifests from apps to
 beta directory

---
 kubernetes/apps/security/kustomization.yaml                | 2 --
 kubernetes/{apps => beta}/security/infisical/app.ks.yaml   | 2 +-
 .../{apps => beta}/security/infisical/app/helmrelease.yaml | 0
 .../security/infisical/app/helmrepository.yaml             | 0
 .../{apps => beta}/security/infisical/app/httproute.yaml   | 0
 .../security/infisical/app/kustomization.yaml              | 0
 .../security/infisical/app/postgres-cluster.yaml           | 0
 .../{apps => beta}/security/infisical/app/secret.sops.yaml | 0
 .../{apps => beta}/security/infisical/kustomization.yaml   | 0
 kubernetes/beta/security/kustomization.yaml                | 7 +++++++
 10 files changed, 8 insertions(+), 3 deletions(-)
 rename kubernetes/{apps => beta}/security/infisical/app.ks.yaml (91%)
 rename kubernetes/{apps => beta}/security/infisical/app/helmrelease.yaml (100%)
 rename kubernetes/{apps => beta}/security/infisical/app/helmrepository.yaml (100%)
 rename kubernetes/{apps => beta}/security/infisical/app/httproute.yaml (100%)
 rename kubernetes/{apps => beta}/security/infisical/app/kustomization.yaml (100%)
 rename kubernetes/{apps => beta}/security/infisical/app/postgres-cluster.yaml (100%)
 rename kubernetes/{apps => beta}/security/infisical/app/secret.sops.yaml (100%)
 rename kubernetes/{apps => beta}/security/infisical/kustomization.yaml (100%)
 create mode 100644 kubernetes/beta/security/kustomization.yaml

diff --git a/kubernetes/apps/security/kustomization.yaml b/kubernetes/apps/security/kustomization.yaml
index b852a8c..04abd90 100644
--- a/kubernetes/apps/security/kustomization.yaml
+++ b/kubernetes/apps/security/kustomization.yaml
@@ -5,8 +5,6 @@ namespace: security
 
 resources:
   - ./namespace.yaml
-  - ./infisical
-
 # External secrets should be implemented.
 # Most popular is 1password, but it's paid
 # https://github.com/tholinka/home-ops implements secrets via bitwarden (which is free)
diff --git a/kubernetes/apps/security/infisical/app.ks.yaml b/kubernetes/beta/security/infisical/app.ks.yaml
similarity index 91%
rename from kubernetes/apps/security/infisical/app.ks.yaml
rename to kubernetes/beta/security/infisical/app.ks.yaml
index e9dc69e..3d2009c 100644
--- a/kubernetes/apps/security/infisical/app.ks.yaml
+++ b/kubernetes/beta/security/infisical/app.ks.yaml
@@ -9,7 +9,7 @@ spec:
   commonMetadata:
     labels:
       app.kubernetes.io/name: *app
-  path: ./kubernetes/apps/security/infisical/app
+  path: ./kubernetes/beta/security/infisical/app
   prune: true
   sourceRef:
     kind: GitRepository
diff --git a/kubernetes/apps/security/infisical/app/helmrelease.yaml b/kubernetes/beta/security/infisical/app/helmrelease.yaml
similarity index 100%
rename from kubernetes/apps/security/infisical/app/helmrelease.yaml
rename to kubernetes/beta/security/infisical/app/helmrelease.yaml
diff --git a/kubernetes/apps/security/infisical/app/helmrepository.yaml b/kubernetes/beta/security/infisical/app/helmrepository.yaml
similarity index 100%
rename from kubernetes/apps/security/infisical/app/helmrepository.yaml
rename to kubernetes/beta/security/infisical/app/helmrepository.yaml
diff --git a/kubernetes/apps/security/infisical/app/httproute.yaml b/kubernetes/beta/security/infisical/app/httproute.yaml
similarity index 100%
rename from kubernetes/apps/security/infisical/app/httproute.yaml
rename to kubernetes/beta/security/infisical/app/httproute.yaml
diff --git a/kubernetes/apps/security/infisical/app/kustomization.yaml b/kubernetes/beta/security/infisical/app/kustomization.yaml
similarity index 100%
rename from kubernetes/apps/security/infisical/app/kustomization.yaml
rename to kubernetes/beta/security/infisical/app/kustomization.yaml
diff --git a/kubernetes/apps/security/infisical/app/postgres-cluster.yaml b/kubernetes/beta/security/infisical/app/postgres-cluster.yaml
similarity index 100%
rename from kubernetes/apps/security/infisical/app/postgres-cluster.yaml
rename to kubernetes/beta/security/infisical/app/postgres-cluster.yaml
diff --git a/kubernetes/apps/security/infisical/app/secret.sops.yaml b/kubernetes/beta/security/infisical/app/secret.sops.yaml
similarity index 100%
rename from kubernetes/apps/security/infisical/app/secret.sops.yaml
rename to kubernetes/beta/security/infisical/app/secret.sops.yaml
diff --git a/kubernetes/apps/security/infisical/kustomization.yaml b/kubernetes/beta/security/infisical/kustomization.yaml
similarity index 100%
rename from kubernetes/apps/security/infisical/kustomization.yaml
rename to kubernetes/beta/security/infisical/kustomization.yaml
diff --git a/kubernetes/beta/security/kustomization.yaml b/kubernetes/beta/security/kustomization.yaml
new file mode 100644
index 0000000..5c5e9b5
--- /dev/null
+++ b/kubernetes/beta/security/kustomization.yaml
@@ -0,0 +1,7 @@
+---
+apiVersion: kustomize.config.k8s.io/v1beta1
+kind: Kustomization
+namespace: security
+
+resources:
+  - ./infisical