fix labels

clusters/cl01tl/platform/authentik/templates/config-map.yaml

@@ -4,8 +4,9 @@ metadata:
   name: authentik-custom-css
   namespace: {{ .Release.Namespace }}
   labels:
-    app.kubernetes.io/name: {{ .Release.Name }}
+    app.kubernetes.io/name: authentik-custom-css
     app.kubernetes.io/instance: {{ .Release.Name }}
+    app.kubernetes.io/part-of: {{ .Release.Name }}
 data:
   custom.css: |
     /* Change sign button color */

clusters/cl01tl/platform/authentik/templates/external-secret.yaml

@@ -4,8 +4,9 @@ metadata:
   name: authentik-key-secret
   namespace: {{ .Release.Namespace }}
   labels:
-    app.kubernetes.io/name: {{ .Release.Name }}
+    app.kubernetes.io/name: authentik-key-secret
     app.kubernetes.io/instance: {{ .Release.Name }}
+    app.kubernetes.io/part-of: {{ .Release.Name }}
 spec:
   secretStoreRef:
     kind: ClusterSecretStore
@@ -26,8 +27,9 @@ metadata:
   name: authentik-cloudflared-secret
   namespace: {{ .Release.Namespace }}
   labels:
-    app.kubernetes.io/name: {{ .Release.Name }}
+    app.kubernetes.io/name: authentik-cloudflared-secret
     app.kubernetes.io/instance: {{ .Release.Name }}
+    app.kubernetes.io/part-of: {{ .Release.Name }}
 spec:
   secretStoreRef:
     kind: ClusterSecretStore
@@ -48,8 +50,9 @@ metadata:
   name: authentik-postgresql-17-cluster-backup-secret
   namespace: {{ .Release.Namespace }}
   labels:
-    app.kubernetes.io/name: {{ .Release.Name }}
+    app.kubernetes.io/name: authentik-postgresql-17-cluster-backup-secret
     app.kubernetes.io/instance: {{ .Release.Name }}
+    app.kubernetes.io/part-of: {{ .Release.Name }}
 spec:
   secretStoreRef:
     kind: ClusterSecretStore

clusters/cl01tl/platform/authentik/templates/http-route.yaml

@@ -4,8 +4,9 @@ metadata:
   name: http-route-authentik
   namespace: {{ .Release.Namespace }}
   labels:
-    app.kubernetes.io/name: {{ .Release.Name }}
+    app.kubernetes.io/name: http-route-authentik
     app.kubernetes.io/instance: {{ .Release.Name }}
+    app.kubernetes.io/part-of: {{ .Release.Name }}
 spec:
   parentRefs:
     - group: gateway.networking.k8s.io

clusters/cl01tl/platform/authentik/templates/ingress.yaml

@@ -4,9 +4,9 @@ metadata:
   name: authentik-tailscale
   namespace: {{ .Release.Namespace }}
   labels:
-    app.kubernetes.io/name: {{ .Release.Name }}
+    app.kubernetes.io/name: authentik-tailscale
     app.kubernetes.io/instance: {{ .Release.Name }}
-  labels:
+    app.kubernetes.io/part-of: {{ .Release.Name }}
     tailscale.com/proxy-class: no-metrics
   annotations:
     tailscale.com/experimental-forward-cluster-traffic-via-ingress: "true"

clusters/cl01tl/platform/external-secrets/templates/cluster-secret-store.yaml

@@ -4,8 +4,9 @@ metadata:
   name: vault
   namespace: {{ .Release.Namespace }}
   labels:
-    app.kubernetes.io/name: {{ .Release.Name }}
+    app.kubernetes.io/name: vault
     app.kubernetes.io/instance: {{ .Release.Name }}
+    app.kubernetes.io/part-of: {{ .Release.Name }}
 spec:
   provider:
     vault:

clusters/cl01tl/platform/gitea/templates/external-secret.yaml

@@ -4,8 +4,9 @@ metadata:
   name: gitea-admin-secret
   namespace: {{ .Release.Namespace }}
   labels:
-    app.kubernetes.io/name: {{ .Release.Name }}
+    app.kubernetes.io/name: gitea-admin-secret
     app.kubernetes.io/instance: {{ .Release.Name }}
+    app.kubernetes.io/part-of: {{ .Release.Name }}
 spec:
   secretStoreRef:
     kind: ClusterSecretStore
@@ -33,8 +34,9 @@ metadata:
   name: gitea-oidc-secret
   namespace: {{ .Release.Namespace }}
   labels:
-    app.kubernetes.io/name: {{ .Release.Name }}
+    app.kubernetes.io/name: gitea-oidc-secret
     app.kubernetes.io/instance: {{ .Release.Name }}
+    app.kubernetes.io/part-of: {{ .Release.Name }}
 spec:
   secretStoreRef:
     kind: ClusterSecretStore
@@ -62,8 +64,9 @@ metadata:
   name: gitea-runner-secret
   namespace: {{ .Release.Namespace }}
   labels:
-    app.kubernetes.io/name: {{ .Release.Name }}
+    app.kubernetes.io/name: gitea-runner-secret
     app.kubernetes.io/instance: {{ .Release.Name }}
+    app.kubernetes.io/part-of: {{ .Release.Name }}
 spec:
   secretStoreRef:
     kind: ClusterSecretStore
@@ -84,8 +87,9 @@ metadata:
   name: gitea-renovate-secret
   namespace: {{ .Release.Namespace }}
   labels:
-    app.kubernetes.io/name: {{ .Release.Name }}
+    app.kubernetes.io/name: gitea-renovate-secret
     app.kubernetes.io/instance: {{ .Release.Name }}
+    app.kubernetes.io/part-of: {{ .Release.Name }}
 spec:
   secretStoreRef:
     kind: ClusterSecretStore
@@ -134,8 +138,9 @@ metadata:
   name: gitea-renovate-ssh-secret
   namespace: {{ .Release.Namespace }}
   labels:
-    app.kubernetes.io/name: {{ .Release.Name }}
+    app.kubernetes.io/name: gitea-renovate-ssh-secret
     app.kubernetes.io/instance: {{ .Release.Name }}
+    app.kubernetes.io/part-of: {{ .Release.Name }}
 spec:
   secretStoreRef:
     kind: ClusterSecretStore
@@ -170,8 +175,9 @@ metadata:
   name: gitea-backup-s3
   namespace: {{ .Release.Namespace }}
   labels:
-    app.kubernetes.io/name: {{ .Release.Name }}
+    app.kubernetes.io/name: gitea-backup-s3
     app.kubernetes.io/instance: {{ .Release.Name }}
+    app.kubernetes.io/part-of: {{ .Release.Name }}
 spec:
   secretStoreRef:
     kind: ClusterSecretStore
@@ -206,8 +212,9 @@ metadata:
   name: gitea-s3cmd-config
   namespace: {{ .Release.Namespace }}
   labels:
-    app.kubernetes.io/name: {{ .Release.Name }}
+    app.kubernetes.io/name: gitea-s3cmd-config
     app.kubernetes.io/instance: {{ .Release.Name }}
+    app.kubernetes.io/part-of: {{ .Release.Name }}
 spec:
   secretStoreRef:
     kind: ClusterSecretStore
@@ -228,8 +235,9 @@ metadata:
   name: gitea-meilisearch-master-key-secret
   namespace: {{ .Release.Namespace }}
   labels:
-    app.kubernetes.io/name: {{ .Release.Name }}
+    app.kubernetes.io/name: gitea-meilisearch-master-key-secret
     app.kubernetes.io/instance: {{ .Release.Name }}
+    app.kubernetes.io/part-of: {{ .Release.Name }}
 spec:
   secretStoreRef:
     kind: ClusterSecretStore
@@ -256,8 +264,9 @@ metadata:
   name: gitea-cloudflared-secret
   namespace: {{ .Release.Namespace }}
   labels:
-    app.kubernetes.io/name: {{ .Release.Name }}
+    app.kubernetes.io/name: gitea-cloudflared-secret
     app.kubernetes.io/instance: {{ .Release.Name }}
+    app.kubernetes.io/part-of: {{ .Release.Name }}
 spec:
   secretStoreRef:
     kind: ClusterSecretStore
@@ -278,8 +287,9 @@ metadata:
   name: gitea-postgresql-17-cluster-backup-secret
   namespace: {{ .Release.Namespace }}
   labels:
-    app.kubernetes.io/name: {{ .Release.Name }}
+    app.kubernetes.io/name: gitea-postgresql-17-cluster-backup-secret
     app.kubernetes.io/instance: {{ .Release.Name }}
+    app.kubernetes.io/part-of: {{ .Release.Name }}
 spec:
   secretStoreRef:
     kind: ClusterSecretStore

clusters/cl01tl/platform/gitea/templates/http-route.yaml

@@ -4,8 +4,9 @@ metadata:
   name: http-route-gitea
   namespace: {{ .Release.Namespace }}
   labels:
-    app.kubernetes.io/name: {{ .Release.Name }}
+    app.kubernetes.io/name: http-route-gitea
     app.kubernetes.io/instance: {{ .Release.Name }}
+    app.kubernetes.io/part-of: {{ .Release.Name }}
 spec:
   parentRefs:
     - group: gateway.networking.k8s.io

clusters/cl01tl/platform/gitea/templates/ingress.yaml

@@ -4,9 +4,9 @@ metadata:
   name: gitea-tailscale
   namespace: {{ .Release.Namespace }}
   labels:
-    app.kubernetes.io/name: {{ .Release.Name }}
+    app.kubernetes.io/name: gitea-tailscale
     app.kubernetes.io/instance: {{ .Release.Name }}
-  labels:
+    app.kubernetes.io/part-of: {{ .Release.Name }}
     tailscale.com/proxy-class: no-metrics
   annotations:
     tailscale.com/experimental-forward-cluster-traffic-via-ingress: "true"

clusters/cl01tl/platform/gitea/templates/namespace.yaml

@@ -3,6 +3,9 @@ kind: Namespace
 metadata:
   name: gitea
   labels:
+    app.kubernetes.io/name: gitea
+    app.kubernetes.io/instance: {{ .Release.Name }}
+    app.kubernetes.io/part-of: {{ .Release.Name }}
     pod-security.kubernetes.io/audit: privileged
     pod-security.kubernetes.io/enforce: privileged
     pod-security.kubernetes.io/warn: privileged

clusters/cl01tl/platform/gitea/templates/persistent-volume-claim.yaml

@@ -4,8 +4,9 @@ metadata:
   name: gitea-nfs-storage-backup
   namespace: {{ .Release.Namespace }}
   labels:
-    app.kubernetes.io/name: {{ .Release.Name }}
+    app.kubernetes.io/name: gitea-nfs-storage-backup
     app.kubernetes.io/instance: {{ .Release.Name }}
+    app.kubernetes.io/part-of: {{ .Release.Name }}
 spec:
   volumeMode: Filesystem
   storageClassName: nfs-client

clusters/cl01tl/platform/gitea/templates/role-binding.yaml

@@ -4,8 +4,9 @@ metadata:
   name: gitea-backup
   namespace: {{ .Release.Namespace }}
   labels:
-    app.kubernetes.io/name: {{ .Release.Name }}
+    app.kubernetes.io/name: gitea-backup
     app.kubernetes.io/instance: {{ .Release.Name }}
+    app.kubernetes.io/part-of: {{ .Release.Name }}
 roleRef:
   apiGroup: rbac.authorization.k8s.io
   kind: Role

clusters/cl01tl/platform/gitea/templates/role.yaml

@@ -4,8 +4,9 @@ metadata:
   name: gitea-backup
   namespace: {{ .Release.Namespace }}
   labels:
-    app.kubernetes.io/name: {{ .Release.Name }}
+    app.kubernetes.io/name: gitea-backup
     app.kubernetes.io/instance: {{ .Release.Name }}
+    app.kubernetes.io/part-of: {{ .Release.Name }}
 rules:
   - apiGroups:
       - ""

clusters/cl01tl/platform/gitea/templates/service-monitor.yaml

@@ -4,8 +4,9 @@ metadata:
   name: gitea
   namespace: {{ .Release.Namespace }}
   labels:
-    app.kubernetes.io/name: {{ .Release.Name }}
+    app.kubernetes.io/name: gitea
     app.kubernetes.io/instance: {{ .Release.Name }}
+    app.kubernetes.io/part-of: {{ .Release.Name }}
 spec:
   selector:
     matchLabels:

clusters/cl01tl/platform/gitea/templates/tcp-route.yaml

@@ -4,8 +4,9 @@ metadata:
   name: tcp-route-gitea-ssh
   namespace: {{ .Release.Namespace }}
   labels:
-    app.kubernetes.io/name: {{ .Release.Name }}
+    app.kubernetes.io/name: tcp-route-gitea-ssh
     app.kubernetes.io/instance: {{ .Release.Name }}
+    app.kubernetes.io/part-of: {{ .Release.Name }}
 spec:
   parentRefs:
     - group: gateway.networking.k8s.io

clusters/cl01tl/platform/matrix-synapse/templates/external-secret.yaml

@@ -4,8 +4,9 @@ metadata:
   name: matrix-synapse-config-secret
   namespace: {{ .Release.Namespace }}
   labels:
-    app.kubernetes.io/name: {{ .Release.Name }}
+    app.kubernetes.io/name: matrix-synapse-config-secret
     app.kubernetes.io/instance: {{ .Release.Name }}
+    app.kubernetes.io/part-of: {{ .Release.Name }}
 spec:
   secretStoreRef:
     kind: ClusterSecretStore
@@ -33,8 +34,9 @@ metadata:
   name: matrix-synapse-signingkey
   namespace: {{ .Release.Namespace }}
   labels:
-    app.kubernetes.io/name: {{ .Release.Name }}
+    app.kubernetes.io/name: matrix-synapse-signingkey
     app.kubernetes.io/instance: {{ .Release.Name }}
+    app.kubernetes.io/part-of: {{ .Release.Name }}
 spec:
   secretStoreRef:
     kind: ClusterSecretStore
@@ -55,8 +57,9 @@ metadata:
   name: matrix-hookshot-config-secret
   namespace: {{ .Release.Namespace }}
   labels:
-    app.kubernetes.io/name: {{ .Release.Name }}
+    app.kubernetes.io/name: matrix-hookshot-config-secret
     app.kubernetes.io/instance: {{ .Release.Name }}
+    app.kubernetes.io/part-of: {{ .Release.Name }}
 spec:
   secretStoreRef:
     kind: ClusterSecretStore
@@ -156,8 +159,9 @@ metadata:
   name: double-puppet-registration-secret
   namespace: {{ .Release.Namespace }}
   labels:
-    app.kubernetes.io/name: {{ .Release.Name }}
+    app.kubernetes.io/name: double-puppet-registration-secret
     app.kubernetes.io/instance: {{ .Release.Name }}
+    app.kubernetes.io/part-of: {{ .Release.Name }}
 spec:
   secretStoreRef:
     kind: ClusterSecretStore
@@ -178,8 +182,9 @@ metadata:
   name: matrix-synapse-valkey-secret
   namespace: {{ .Release.Namespace }}
   labels:
-    app.kubernetes.io/name: {{ .Release.Name }}
+    app.kubernetes.io/name: matrix-synapse-valkey-secret
     app.kubernetes.io/instance: {{ .Release.Name }}
+    app.kubernetes.io/part-of: {{ .Release.Name }}
 spec:
   secretStoreRef:
     kind: ClusterSecretStore
@@ -200,8 +205,9 @@ metadata:
   name: matrix-synapse-cloudflared-synapse-secret
   namespace: {{ .Release.Namespace }}
   labels:
-    app.kubernetes.io/name: {{ .Release.Name }}
+    app.kubernetes.io/name: matrix-synapse-cloudflared-synapse-secret
     app.kubernetes.io/instance: {{ .Release.Name }}
+    app.kubernetes.io/part-of: {{ .Release.Name }}
 spec:
   secretStoreRef:
     kind: ClusterSecretStore
@@ -222,8 +228,9 @@ metadata:
   name: matrix-synapse-cloudflared-hookshot-secret
   namespace: {{ .Release.Namespace }}
   labels:
-    app.kubernetes.io/name: {{ .Release.Name }}
+    app.kubernetes.io/name: matrix-synapse-cloudflared-hookshot-secret
     app.kubernetes.io/instance: {{ .Release.Name }}
+    app.kubernetes.io/part-of: {{ .Release.Name }}
 spec:
   secretStoreRef:
     kind: ClusterSecretStore
@@ -244,8 +251,9 @@ metadata:
   name: matrix-synapse-backup-secret
   namespace: {{ .Release.Namespace }}
   labels:
-    app.kubernetes.io/name: {{ .Release.Name }}
+    app.kubernetes.io/name: matrix-synapse-backup-secret
     app.kubernetes.io/instance: {{ .Release.Name }}
+    app.kubernetes.io/part-of: {{ .Release.Name }}
 spec:
   secretStoreRef:
     kind: ClusterSecretStore
@@ -412,8 +420,9 @@ metadata:
   name: matrix-synapse-postgresql-17-cluster-backup-secret
   namespace: {{ .Release.Namespace }}
   labels:
-    app.kubernetes.io/name: {{ .Release.Name }}
+    app.kubernetes.io/name: matrix-synapse-postgresql-17-cluster-backup-secret
     app.kubernetes.io/instance: {{ .Release.Name }}
+    app.kubernetes.io/part-of: {{ .Release.Name }}
 spec:
   secretStoreRef:
     kind: ClusterSecretStore

clusters/cl01tl/platform/matrix-synapse/templates/replication-source.yaml

@@ -4,8 +4,9 @@ metadata:
   name: matrix-synapse-backup-source
   namespace: {{ .Release.Namespace }}
   labels:
-    app.kubernetes.io/name: {{ .Release.Name }}
+    app.kubernetes.io/name: matrix-synapse-backup-source
     app.kubernetes.io/instance: {{ .Release.Name }}
+    app.kubernetes.io/part-of: {{ .Release.Name }}
 spec:
   sourcePVC: matrix-synapse
   trigger:
@@ -29,9 +30,10 @@ spec:
 # metadata:
 #   name: mautrix-discord-data-backup-source
 #   namespace: {{ .Release.Namespace }}
-  # labels:
-  #   app.kubernetes.io/name: {{ .Release.Name }}
-  #   app.kubernetes.io/instance: {{ .Release.Name }}
+#   labels:
+#     app.kubernetes.io/name: mautrix-discord-data-backup-source
+#     app.kubernetes.io/instance: {{ .Release.Name }}
+#     app.kubernetes.io/part-of: {{ .Release.Name }}
 # spec:
 #   sourcePVC: mautrix-discord-data
 #   trigger:
@@ -40,11 +42,11 @@ spec:
 #     pruneIntervalDays: 7
 #     repository: mautrix-discord-data-backup-secret
 #     retain:
-      # hourly: 1
-      # daily: 3
-      # weekly: 2
-      # monthly: 2
-      # yearly: 4
+#       hourly: 1
+#       daily: 3
+#       weekly: 2
+#       monthly: 2
+#       yearly: 4
 #     moverSecurityContext:
 #       runAsUser: 1337
 #       runAsGroup: 1337
@@ -58,9 +60,10 @@ spec:
 # metadata:
 #   name: mautrix-whatsapp-data-backup-source
 #   namespace: {{ .Release.Namespace }}
-  # labels:
-  #   app.kubernetes.io/name: {{ .Release.Name }}
-  #   app.kubernetes.io/instance: {{ .Release.Name }}
+#   labels:
+#     app.kubernetes.io/name: mautrix-whatsapp-data-backup-source
+#     app.kubernetes.io/instance: {{ .Release.Name }}
+#     app.kubernetes.io/part-of: {{ .Release.Name }}
 # spec:
 #   sourcePVC: mautrix-whatsapp-data
 #   trigger:
@@ -69,11 +72,11 @@ spec:
 #     pruneIntervalDays: 7
 #     repository: mautrix-whatsapp-data-backup-secret
 #     retain:
-      # hourly: 1
-      # daily: 3
-      # weekly: 2
-      # monthly: 2
-      # yearly: 4
+#       hourly: 1
+#       daily: 3
+#       weekly: 2
+#       monthly: 2
+#       yearly: 4
 #     moverSecurityContext:
 #       runAsUser: 1337
 #       runAsGroup: 1337

clusters/cl01tl/platform/matrix-synapse/templates/service-monitor.yaml

@@ -4,8 +4,9 @@ metadata:
   name: matrix-synapse
   namespace: {{ .Release.Namespace }}
   labels:
-    app.kubernetes.io/name: {{ .Release.Name }}
+    app.kubernetes.io/name: matrix-synapse
     app.kubernetes.io/instance: {{ .Release.Name }}
+    app.kubernetes.io/part-of: {{ .Release.Name }}
 spec:
   selector:
     matchLabels:
@@ -24,8 +25,9 @@ metadata:
   name: matrix-hookshot
   namespace: {{ .Release.Namespace }}
   labels:
-    app.kubernetes.io/name: {{ .Release.Name }}
+    app.kubernetes.io/name: matrix-hookshot
     app.kubernetes.io/instance: {{ .Release.Name }}
+    app.kubernetes.io/part-of: {{ .Release.Name }}
 spec:
   selector:
     matchLabels:

clusters/cl01tl/platform/ollama/templates/external-secret.yaml

@@ -5,8 +5,9 @@ metadata:
   name: ollama-key-secret
   namespace: {{ .Release.Namespace }}
   labels:
-    app.kubernetes.io/name: {{ .Release.Name }}
+    app.kubernetes.io/name: ollama-key-secret
     app.kubernetes.io/instance: {{ .Release.Name }}
+    app.kubernetes.io/part-of: {{ .Release.Name }}
 spec:
   secretStoreRef:
     kind: ClusterSecretStore
@@ -27,8 +28,9 @@ metadata:
   name: ollama-oidc-secret
   namespace: {{ .Release.Namespace }}
   labels:
-    app.kubernetes.io/name: {{ .Release.Name }}
+    app.kubernetes.io/name: ollama-oidc-secret
     app.kubernetes.io/instance: {{ .Release.Name }}
+    app.kubernetes.io/part-of: {{ .Release.Name }}
 spec:
   secretStoreRef:
     kind: ClusterSecretStore
@@ -56,8 +58,9 @@ metadata:
   name: ollama-web-data-backup-secret
   namespace: {{ .Release.Namespace }}
   labels:
-    app.kubernetes.io/name: {{ .Release.Name }}
+    app.kubernetes.io/name: ollama-web-data-backup-secret
     app.kubernetes.io/instance: {{ .Release.Name }}
+    app.kubernetes.io/part-of: {{ .Release.Name }}
 spec:
   secretStoreRef:
     kind: ClusterSecretStore
@@ -112,8 +115,9 @@ metadata:
   name: ollama-web-postgresql-17-cluster-backup-secret
   namespace: {{ .Release.Namespace }}
   labels:
-    app.kubernetes.io/name: {{ .Release.Name }}
+    app.kubernetes.io/name: ollama-web-postgresql-17-cluster-backup-secret
     app.kubernetes.io/instance: {{ .Release.Name }}
+    app.kubernetes.io/part-of: {{ .Release.Name }}
 spec:
   secretStoreRef:
     kind: ClusterSecretStore

clusters/cl01tl/platform/ollama/templates/http-route.yaml

@@ -4,8 +4,9 @@ metadata:
   name: http-route-ollama
   namespace: {{ .Release.Namespace }}
   labels:
-    app.kubernetes.io/name: {{ .Release.Name }}
+    app.kubernetes.io/name: http-route-ollama
     app.kubernetes.io/instance: {{ .Release.Name }}
+    app.kubernetes.io/part-of: {{ .Release.Name }}
 spec:
   parentRefs:
     - group: gateway.networking.k8s.io

clusters/cl01tl/platform/ollama/templates/replication-source.yaml

@@ -4,8 +4,9 @@ metadata:
   name: ollama-web-data-backup-source
   namespace: {{ .Release.Namespace }}
   labels:
-    app.kubernetes.io/name: {{ .Release.Name }}
+    app.kubernetes.io/name: ollama-web-data-backup-source
     app.kubernetes.io/instance: {{ .Release.Name }}
+    app.kubernetes.io/part-of: {{ .Release.Name }}
 spec:
   sourcePVC: ollama-web-data
   trigger:

clusters/cl01tl/platform/ollama/templates/service.yaml

@@ -4,8 +4,9 @@ metadata:
   name: ollama-pd05wd
   namespace: {{ .Release.Namespace }}
   labels:
-    app.kubernetes.io/name: {{ .Release.Name }}
+    app.kubernetes.io/name: ollama-pd05wd
     app.kubernetes.io/instance: {{ .Release.Name }}
+    app.kubernetes.io/part-of: {{ .Release.Name }}
   annotations:
     tailscale.com/tailnet-fqdn: ollama-pd05wd.boreal-beaufort.ts.net
 spec:
@@ -19,8 +20,9 @@ metadata:
   name: stable-diffusion-pd05wd
   namespace: {{ .Release.Namespace }}
   labels:
-    app.kubernetes.io/name: {{ .Release.Name }}
+    app.kubernetes.io/name: stable-diffusion-pd05wd
     app.kubernetes.io/instance: {{ .Release.Name }}
+    app.kubernetes.io/part-of: {{ .Release.Name }}
   annotations:
     tailscale.com/tailnet-fqdn: stable-diffusion-pd05wd.boreal-beaufort.ts.net
 spec:

clusters/cl01tl/platform/qbittorrent/templates/config-map.yaml

@@ -4,8 +4,9 @@ metadata:
   name: glutun-update-script
   namespace: {{ .Release.Namespace }}
   labels:
-    app.kubernetes.io/name: {{ .Release.Name }}
+    app.kubernetes.io/name: glutun-update-script
     app.kubernetes.io/instance: {{ .Release.Name }}
+    app.kubernetes.io/part-of: {{ .Release.Name }}
 data:
   update.sh: |
     if ! command -v curl 2>&1 >/dev/null

clusters/cl01tl/platform/qbittorrent/templates/external-secret.yaml

@@ -4,8 +4,9 @@ metadata:
   name: qbittorrent-wireguard-conf
   namespace: {{ .Release.Namespace }}
   labels:
-    app.kubernetes.io/name: {{ .Release.Name }}
+    app.kubernetes.io/name: qbittorrent-wireguard-conf
     app.kubernetes.io/instance: {{ .Release.Name }}
+    app.kubernetes.io/part-of: {{ .Release.Name }}
 spec:
   secretStoreRef:
     kind: ClusterSecretStore

clusters/cl01tl/platform/qbittorrent/templates/http-route.yaml

@@ -4,8 +4,9 @@ metadata:
   name: http-route-qbittorrent
   namespace: {{ .Release.Namespace }}
   labels:
-    app.kubernetes.io/name: {{ .Release.Name }}
+    app.kubernetes.io/name: http-route-qbittorrent
     app.kubernetes.io/instance: {{ .Release.Name }}
+    app.kubernetes.io/part-of: {{ .Release.Name }}
 spec:
   parentRefs:
     - group: gateway.networking.k8s.io

clusters/cl01tl/platform/qbittorrent/templates/namespace.yaml

@@ -3,6 +3,9 @@ kind: Namespace
 metadata:
   name: qbittorrent
   labels:
+    app.kubernetes.io/name: qbittorrent
+    app.kubernetes.io/instance: {{ .Release.Name }}
+    app.kubernetes.io/part-of: {{ .Release.Name }}
     pod-security.kubernetes.io/audit: privileged
     pod-security.kubernetes.io/enforce: privileged
     pod-security.kubernetes.io/warn: privileged

clusters/cl01tl/platform/qbittorrent/templates/persistent-volume-claim.yaml

@@ -4,8 +4,9 @@ metadata:
   name: qbittorrent-config
   namespace: {{ .Release.Namespace }}
   labels:
-    app.kubernetes.io/name: {{ .Release.Name }}
+    app.kubernetes.io/name: qbittorrent-config
     app.kubernetes.io/instance: {{ .Release.Name }}
+    app.kubernetes.io/part-of: {{ .Release.Name }}
 spec:
   volumeName: qbittorrent-config
   storageClassName: nfs-client
@@ -22,8 +23,9 @@ metadata:
   name: qbittorrent-nfs-storage
   namespace: {{ .Release.Namespace }}
   labels:
-    app.kubernetes.io/name: {{ .Release.Name }}
+    app.kubernetes.io/name: qbittorrent-nfs-storage
     app.kubernetes.io/instance: {{ .Release.Name }}
+    app.kubernetes.io/part-of: {{ .Release.Name }}
 spec:
   volumeName: qbittorrent-nfs-storage
   storageClassName: nfs-client

clusters/cl01tl/platform/qbittorrent/templates/persistent-volume.yaml

@@ -4,8 +4,9 @@ metadata:
   name: qbittorrent-config
   namespace: {{ .Release.Namespace }}
   labels:
-    app.kubernetes.io/name: {{ .Release.Name }}
+    app.kubernetes.io/name: qbittorrent-config
     app.kubernetes.io/instance: {{ .Release.Name }}
+    app.kubernetes.io/part-of: {{ .Release.Name }}
 spec:
   persistentVolumeReclaimPolicy: Retain
   storageClassName: nfs-client
@@ -28,8 +29,9 @@ metadata:
   name: qbittorrent-nfs-storage
   namespace: {{ .Release.Namespace }}
   labels:
-    app.kubernetes.io/name: {{ .Release.Name }}
+    app.kubernetes.io/name: qbittorrent-nfs-storage
     app.kubernetes.io/instance: {{ .Release.Name }}
+    app.kubernetes.io/part-of: {{ .Release.Name }}
 spec:
   persistentVolumeReclaimPolicy: Retain
   storageClassName: nfs-client

clusters/cl01tl/platform/qbittorrent/templates/service-monitor.yaml

@@ -4,8 +4,9 @@ metadata:
   name: qbittorrent
   namespace: {{ .Release.Namespace }}
   labels:
-    app.kubernetes.io/name: {{ .Release.Name }}
+    app.kubernetes.io/name: qbittorrent
     app.kubernetes.io/instance: {{ .Release.Name }}
+    app.kubernetes.io/part-of: {{ .Release.Name }}
 spec:
   endpoints:
     - port: metrics

clusters/cl01tl/platform/stalwart/templates/external-secret.yaml

@@ -4,8 +4,9 @@ metadata:
   name: stalwart-elasticsearch-secret
   namespace: {{ .Release.Namespace }}
   labels:
-    app.kubernetes.io/name: {{ .Release.Name }}
+    app.kubernetes.io/name: stalwart-elasticsearch-secret
     app.kubernetes.io/instance: {{ .Release.Name }}
+    app.kubernetes.io/part-of: {{ .Release.Name }}
 spec:
   secretStoreRef:
     kind: ClusterSecretStore

clusters/cl01tl/platform/stalwart/templates/http-route.yaml

@@ -4,8 +4,9 @@ metadata:
   name: http-route-stalwart
   namespace: {{ .Release.Namespace }}
   labels:
-    app.kubernetes.io/name: {{ .Release.Name }}
+    app.kubernetes.io/name: http-route-stalwart
     app.kubernetes.io/instance: {{ .Release.Name }}
+    app.kubernetes.io/part-of: {{ .Release.Name }}
 spec:
   parentRefs:
     - group: gateway.networking.k8s.io

clusters/cl01tl/platform/stalwart/templates/namespace.yaml

@@ -3,6 +3,9 @@ kind: Namespace
 metadata:
   name: stalwart
   labels:
+    app.kubernetes.io/name: stalwart
+    app.kubernetes.io/instance: {{ .Release.Name }}
+    app.kubernetes.io/part-of: {{ .Release.Name }}
     pod-security.kubernetes.io/audit: privileged
     pod-security.kubernetes.io/enforce: privileged
     pod-security.kubernetes.io/warn: privileged

clusters/cl01tl/platform/stalwart/templates/replication-source.yaml

@@ -4,8 +4,9 @@ metadata:
   name: stalwart-config-backup-source
   namespace: {{ .Release.Namespace }}
   labels:
-    app.kubernetes.io/name: {{ .Release.Name }}
+    app.kubernetes.io/name: stalwart-config-backup-source
     app.kubernetes.io/instance: {{ .Release.Name }}
+    app.kubernetes.io/part-of: {{ .Release.Name }}
 spec:
   sourcePVC: stalwart-config
   trigger:

clusters/cl01tl/platform/unpackerr/templates/external-secret.yaml

@@ -4,8 +4,9 @@ metadata:
   name: unpackerr-key-secret
   namespace: {{ .Release.Namespace }}
   labels:
-    app.kubernetes.io/name: {{ .Release.Name }}
+    app.kubernetes.io/name: unpackerr-key-secret
     app.kubernetes.io/instance: {{ .Release.Name }}
+    app.kubernetes.io/part-of: {{ .Release.Name }}
 spec:
   secretStoreRef:
     kind: ClusterSecretStore

clusters/cl01tl/platform/unpackerr/templates/persistent-volume-claim.yaml

@@ -4,8 +4,9 @@ metadata:
   name: unpackerr-nfs-storage
   namespace: {{ .Release.Namespace }}
   labels:
-    app.kubernetes.io/name: {{ .Release.Name }}
+    app.kubernetes.io/name: unpackerr-nfs-storage
     app.kubernetes.io/instance: {{ .Release.Name }}
+    app.kubernetes.io/part-of: {{ .Release.Name }}
 spec:
   volumeName: unpackerr-nfs-storage
   storageClassName: nfs-client

clusters/cl01tl/platform/unpackerr/templates/persistent-volume.yaml

@@ -4,8 +4,9 @@ metadata:
   name: unpackerr-nfs-storage
   namespace: {{ .Release.Namespace }}
   labels:
-    app.kubernetes.io/name: {{ .Release.Name }}
+    app.kubernetes.io/name: unpackerr-nfs-storage
     app.kubernetes.io/instance: {{ .Release.Name }}
+    app.kubernetes.io/part-of: {{ .Release.Name }}
 spec:
   persistentVolumeReclaimPolicy: Retain
   storageClassName: nfs-client

clusters/cl01tl/platform/vault/templates/external-secret.yaml

@@ -4,8 +4,9 @@ metadata:
   name: vault-snapshot-agent-token
   namespace: {{ .Release.Namespace }}
   labels:
-    app.kubernetes.io/name: {{ .Release.Name }}
+    app.kubernetes.io/name: vault-snapshot-agent-token
     app.kubernetes.io/instance: {{ .Release.Name }}
+    app.kubernetes.io/part-of: {{ .Release.Name }}
 spec:
   secretStoreRef:
     kind: ClusterSecretStore
@@ -33,8 +34,9 @@ metadata:
   name: vault-snapshot-s3
   namespace: {{ .Release.Namespace }}
   labels:
-    app.kubernetes.io/name: {{ .Release.Name }}
+    app.kubernetes.io/name: vault-snapshot-s3
     app.kubernetes.io/instance: {{ .Release.Name }}
+    app.kubernetes.io/part-of: {{ .Release.Name }}
 spec:
   secretStoreRef:
     kind: ClusterSecretStore
@@ -69,8 +71,9 @@ metadata:
   name: vault-s3cmd-config
   namespace: {{ .Release.Namespace }}
   labels:
-    app.kubernetes.io/name: {{ .Release.Name }}
+    app.kubernetes.io/name: vault-s3cmd-config
     app.kubernetes.io/instance: {{ .Release.Name }}
+    app.kubernetes.io/part-of: {{ .Release.Name }}
 spec:
   secretStoreRef:
     kind: ClusterSecretStore
@@ -91,8 +94,9 @@ metadata:
   name: vault-unseal-config-1
   namespace: {{ .Release.Namespace }}
   labels:
-    app.kubernetes.io/name: {{ .Release.Name }}
+    app.kubernetes.io/name: vault-unseal-config-1
     app.kubernetes.io/instance: {{ .Release.Name }}
+    app.kubernetes.io/part-of: {{ .Release.Name }}
 spec:
   secretStoreRef:
     kind: ClusterSecretStore
@@ -169,8 +173,9 @@ metadata:
   name: vault-unseal-config-2
   namespace: {{ .Release.Namespace }}
   labels:
-    app.kubernetes.io/name: {{ .Release.Name }}
+    app.kubernetes.io/name: vault-unseal-config-2
     app.kubernetes.io/instance: {{ .Release.Name }}
+    app.kubernetes.io/part-of: {{ .Release.Name }}
 spec:
   secretStoreRef:
     kind: ClusterSecretStore
@@ -247,8 +252,9 @@ metadata:
   name: vault-unseal-config-3
   namespace: {{ .Release.Namespace }}
   labels:
-    app.kubernetes.io/name: {{ .Release.Name }}
+    app.kubernetes.io/name: vault-unseal-config-3
     app.kubernetes.io/instance: {{ .Release.Name }}
+    app.kubernetes.io/part-of: {{ .Release.Name }}
 spec:
   secretStoreRef:
     kind: ClusterSecretStore
@@ -325,8 +331,9 @@ metadata:
   name: vault-token
   namespace: {{ .Release.Namespace }}
   labels:
-    app.kubernetes.io/name: {{ .Release.Name }}
+    app.kubernetes.io/name: vault-token
     app.kubernetes.io/instance: {{ .Release.Name }}
+    app.kubernetes.io/part-of: {{ .Release.Name }}
 spec:
   secretStoreRef:
     kind: ClusterSecretStore

clusters/cl01tl/platform/vault/templates/http-route.yaml

@@ -4,8 +4,9 @@ metadata:
   name: http-route-vault
   namespace: {{ .Release.Namespace }}
   labels:
-    app.kubernetes.io/name: {{ .Release.Name }}
+    app.kubernetes.io/name: http-route-vault
     app.kubernetes.io/instance: {{ .Release.Name }}
+    app.kubernetes.io/part-of: {{ .Release.Name }}
 spec:
   parentRefs:
     - group: gateway.networking.k8s.io

clusters/cl01tl/platform/vault/templates/ingress.yaml

@@ -4,9 +4,9 @@ metadata:
   name: vault-tailscale
   namespace: {{ .Release.Namespace }}
   labels:
-    app.kubernetes.io/name: {{ .Release.Name }}
+    app.kubernetes.io/name: vault-tailscale
     app.kubernetes.io/instance: {{ .Release.Name }}
-  labels:
+    app.kubernetes.io/part-of: {{ .Release.Name }}
     tailscale.com/proxy-class: no-metrics
   annotations:
     tailscale.com/experimental-forward-cluster-traffic-via-ingress: "true"

clusters/cl01tl/platform/vault/templates/persistent-volume-claim.yaml

@@ -4,8 +4,9 @@ metadata:
   name: vault-nfs-storage-backup
   namespace: {{ .Release.Namespace }}
   labels:
-    app.kubernetes.io/name: {{ .Release.Name }}
+    app.kubernetes.io/name: vault-nfs-storage-backup
     app.kubernetes.io/instance: {{ .Release.Name }}
+    app.kubernetes.io/part-of: {{ .Release.Name }}
 spec:
   volumeMode: Filesystem
   storageClassName: nfs-client