apps: rename fewo namespace to ext-fewo

Author: frzifus

clusters/homelab/apps/fewo/deployment.yaml renamed to clusters/homelab/apps/ext-fewo/deployment.yaml

@@ -3,7 +3,7 @@ apiVersion: apps/v1
 kind: Deployment
 metadata:
   name: fewo
-  namespace: fewo
+  namespace: ext-fewo
   labels:
     app: fewo
 spec:

clusters/homelab/apps/ext-fewo/namespace.yaml

@@ -0,0 +1,5 @@
+---
+apiVersion: v1
+kind: Namespace
+metadata:
+  name: ext-fewo

clusters/homelab/apps/ext-fewo/network.yaml

@@ -0,0 +1,49 @@
+---
+apiVersion: "cilium.io/v2"
+kind: CiliumNetworkPolicy
+metadata:
+  name: default-deny-egress
+  namespace: ext-fewo
+spec:
+  endpointSelector: {}
+  egress: []
+---
+apiVersion: "cilium.io/v2"
+kind: CiliumNetworkPolicy
+metadata:
+  name: restrict-egress-and-internal-access
+  namespace: ext-fewo
+spec:
+  endpointSelector: {}
+
+  egress:
+  - toEntities:
+      - world
+    toPorts:
+    - ports:
+        - port: "443"
+          protocol: TCP
+        - port: "7844"
+          protocol: TCP
+        - port: "7844"
+          protocol: UDP
+  - toEntities:
+      - all
+    toPorts:
+      - ports:
+          - port: "53"
+            protocol: UDP
+          - port: "53"
+            protocol: TCP
+
+  - toServices:
+      - k8sService:
+          namespace: observability
+          serviceName: backend
+    toPorts:
+    - ports:
+        - port: "4318"
+          protocol: TCP
+      rules:
+        http:
+          - method: "POST"

clusters/homelab/apps/ext-fewo/secret-tunnel.yaml

@@ -0,0 +1,28 @@
+apiVersion: v1
+kind: Secret
+metadata:
+    name: cloudflared-secret
+    namespace: ext-fewo
+data:
+    tunnel-token: ENC[AES256_GCM,data:wg0O+JHc+mAXfo/yGih3BkgUYqMcaGT6QHypy39cNnI5VMj845oe1OYKi1Njt4s+cl85ArkDsTfxD8vvrsd/rrU9g6oR09sB6WP6pM+TgcdDiVEjg/PqDc/mbDHFR0j7RQrdNX9EnDGdZmyBK0xRig19eEBoYdVKcGEiROr09BOhneqRwFvekg/udVNG1rMFHYcTjfqDLWps/aCJXRQ/DKTDQS3jROEHW1r2ke3VAczxrWeOYpUzvPyFEtUMY9OleQsEQlkxslNq+cPjwzp4Q7jqJLC0JRhqZjvvql7iWWByGpm3eG9VDq45iU/nIIGcSYpb/gh7E/M=,iv:xMmES81rWbOrbNJvoiuvhTlfJBMePzIzUA40aVHPbCE=,tag:HbcmRuuD7G8wfOOwCf7aCQ==,type:str]
+type: Opaque
+sops:
+    kms: []
+    gcp_kms: []
+    azure_kv: []
+    hc_vault: []
+    age:
+        - recipient: age1nl4pnuny2pjg3ejfk9vrx0y4ssmna36xlw3wqmzv55ku38psdylsp2t2yw
+          enc: |
+            -----BEGIN AGE ENCRYPTED FILE-----
+            YWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IFgyNTUxOSBhemRWZXJ1NnFyWEdjUjR6
+            c2JLaytzZHFGSURkNDJ5OGJXOWpDOFg4NmlnCnJsYnF6Y3UwcjhXekk1ZDlSMnRI
+            ZzlXUldRQ3UzYk1TYytWZTRzWkhzcmsKLS0tIGJZNElZTlZReDR6RDhuSnUwdVEv
+            L2JCQUV2RjB5eFBDK3dGTFpRbnVNaTgKPek0h19QLlEOq1n2BriFRE44Jctid2ea
+            5FZu1kedaXpzKReGjEPxnjQ2GCy3UvsVwcthgAmuDi+nSqQqKP4JMg==
+            -----END AGE ENCRYPTED FILE-----
+    lastmodified: "2025-05-28T06:59:43Z"
+    mac: ENC[AES256_GCM,data:xKgyvJZ83NS7v9ARruJNXYCJn482CGdzhVYhAV9I7mnQS9yP0nhgn7NyVAQ71dCdZ421vkJI7UtD3WTmrQ+Dh09Y4Qis4WBVi888ZH2V6VIZlMJeR4385VmhLAyFFGte4Q2MU25V8QhrAx2omQfrBxJzraBW8NkPGZzmpbT8c5I=,iv:fnjOlH2B46dqmdV7oke+a1EH6MjrUNO9YeSHXkV2IPM=,tag:0s+ykfdzjeL041Uf2V75iQ==,type:str]
+    pgp: []
+    encrypted_regex: ^(data)$
+    version: 3.9.0

clusters/homelab/apps/fewo/servicemonitor.yaml renamed to clusters/homelab/apps/ext-fewo/servicemonitor.yaml

@@ -3,7 +3,7 @@ apiVersion: monitoring.coreos.com/v1
 kind: ServiceMonitor
 metadata:
   name: fewo-cloudflared
-  namespace: fewo
+  namespace: ext-fewo
 spec:
   selector:
     matchLabels:

clusters/homelab/apps/fewo/svc.yaml renamed to clusters/homelab/apps/ext-fewo/svc.yaml

@@ -3,7 +3,7 @@ apiVersion: v1
 kind: Service
 metadata:
   name: fewo
-  namespace: fewo
+  namespace: ext-fewo
 spec:
   selector:
     app: fewo
@@ -17,12 +17,13 @@ apiVersion: v1
 kind: Service
 metadata:
   name: fewo-monitoring
-  namespace: fewo
+  namespace: ext-fewo
 spec:
   selector:
     app: fewo
   ports:
-    - protocol: TCP
+    - name: http-metrics
+      protocol: TCP
       port: 2000
       targetPort: 2000
   type: ClusterIP