feat(eso): split config from deployment

[imgios]

This PR fixes the external-secrets-operator deployment error:

$ k get kustomizations -n external-secrets
external-secrets   external-secrets     55s   False     ClusterExternalSecret/external-secrets/sops-age dry-run failed: no matches for kind "ClusterExternalSecret" in version "external-secrets.io/v1"...

[sysadmin-cosplayer]

--- kubernetes/infrastructure/external-secrets-operator/app/deployment Kustomization: external-secrets/external-secrets ClusterSecretStore: external-secrets/sops-store

+++ kubernetes/infrastructure/external-secrets-operator/app/deployment Kustomization: external-secrets/external-secrets ClusterSecretStore: external-secrets/sops-store

@@ -1,26 +0,0 @@

----
-apiVersion: external-secrets.io/v1
-kind: ClusterSecretStore
-metadata:
-  labels:
-    app.kubernetes.io/name: external-secrets
-    kustomize.toolkit.fluxcd.io/name: external-secrets
-    kustomize.toolkit.fluxcd.io/namespace: external-secrets
-  name: sops-store
-  namespace: external-secrets
-spec:
-  provider:
-    kubernetes:
-      auth:
-        serviceAccount:
-          name: external-secrets
-          namespace: external-secrets
-      remoteNamespace: flux-system
-      server:
-        caProvider:
-          key: ca.crt
-          name: kube-root-ca.crt
-          namespace: flux-system
-          type: ConfigMap
-        url: https://kubernetes.default
-
--- kubernetes/infrastructure/external-secrets-operator/app/deployment Kustomization: external-secrets/external-secrets ClusterExternalSecret: external-secrets/sops-age

+++ kubernetes/infrastructure/external-secrets-operator/app/deployment Kustomization: external-secrets/external-secrets ClusterExternalSecret: external-secrets/sops-age

@@ -1,28 +0,0 @@

----
-apiVersion: external-secrets.io/v1
-kind: ClusterExternalSecret
-metadata:
-  labels:
-    app.kubernetes.io/name: external-secrets
-    kustomize.toolkit.fluxcd.io/name: external-secrets
-    kustomize.toolkit.fluxcd.io/namespace: external-secrets
-  name: sops-age
-  namespace: external-secrets
-spec:
-  externalSecretName: sops-age-es
-  externalSecretSpec:
-    dataFrom:
-    - extract:
-        key: sops-age
-    refreshInterval: 10m
-    secretStoreRef:
-      kind: ClusterSecretStore
-      name: sops-store
-    target:
-      creationPolicy: Owner
-      name: sops-age
-  namespaceSelectors:
-  - matchLabels:
-      decrypt.homelab.local/type: sops
-  refreshTime: 1h
-
--- kubernetes/infrastructure Kustomization: flux-system/infrastructure Kustomization: external-secrets/external-secrets-config

+++ kubernetes/infrastructure Kustomization: flux-system/infrastructure Kustomization: external-secrets/external-secrets-config

@@ -0,0 +1,25 @@

+---
+apiVersion: kustomize.toolkit.fluxcd.io/v1
+kind: Kustomization
+metadata:
+  labels:
+    kustomize.toolkit.fluxcd.io/name: infrastructure
+    kustomize.toolkit.fluxcd.io/namespace: flux-system
+  name: external-secrets-config
+  namespace: external-secrets
+spec:
+  commonMetadata:
+    labels:
+      app.kubernetes.io/name: external-secrets-config
+  dependsOn:
+  - name: external-secrets
+  interval: 10m0s
+  path: ./kubernetes/infrastructure/external-secrets-operator/app/config
+  prune: true
+  sourceRef:
+    kind: GitRepository
+    name: flux-system
+    namespace: flux-system
+  targetNamespace: external-secrets
+  timeout: 5m0s
+
--- kubernetes/infrastructure/external-secrets-operator/app/config Kustomization: external-secrets/external-secrets-config ClusterSecretStore: external-secrets/sops-store

+++ kubernetes/infrastructure/external-secrets-operator/app/config Kustomization: external-secrets/external-secrets-config ClusterSecretStore: external-secrets/sops-store

@@ -0,0 +1,26 @@

+---
+apiVersion: external-secrets.io/v1
+kind: ClusterSecretStore
+metadata:
+  labels:
+    app.kubernetes.io/name: external-secrets-config
+    kustomize.toolkit.fluxcd.io/name: external-secrets-config
+    kustomize.toolkit.fluxcd.io/namespace: external-secrets
+  name: sops-store
+  namespace: external-secrets
+spec:
+  provider:
+    kubernetes:
+      auth:
+        serviceAccount:
+          name: external-secrets
+          namespace: external-secrets
+      remoteNamespace: flux-system
+      server:
+        caProvider:
+          key: ca.crt
+          name: kube-root-ca.crt
+          namespace: flux-system
+          type: ConfigMap
+        url: https://kubernetes.default
+
--- kubernetes/infrastructure/external-secrets-operator/app/config Kustomization: external-secrets/external-secrets-config ClusterExternalSecret: external-secrets/sops-age

+++ kubernetes/infrastructure/external-secrets-operator/app/config Kustomization: external-secrets/external-secrets-config ClusterExternalSecret: external-secrets/sops-age

@@ -0,0 +1,28 @@

+---
+apiVersion: external-secrets.io/v1
+kind: ClusterExternalSecret
+metadata:
+  labels:
+    app.kubernetes.io/name: external-secrets-config
+    kustomize.toolkit.fluxcd.io/name: external-secrets-config
+    kustomize.toolkit.fluxcd.io/namespace: external-secrets
+  name: sops-age
+  namespace: external-secrets
+spec:
+  externalSecretName: sops-age-es
+  externalSecretSpec:
+    dataFrom:
+    - extract:
+        key: sops-age
+    refreshInterval: 10m
+    secretStoreRef:
+      kind: ClusterSecretStore
+      name: sops-store
+    target:
+      creationPolicy: Owner
+      name: sops-age
+  namespaceSelectors:
+  - matchLabels:
+      decrypt.homelab.local/type: sops
+  refreshTime: 1h
+