refactor(d8-ugmk-prod): move infrastructure patches into per-module overlays

Relocate patches from clusters/d8-ugmk-prod/infrastructure/patches into
infrastructure/<module>/d8-ugmk-prod/ overlays (base + patches), matching
the apps/<app>/<cluster> and existing yc-k8s-test layout.

clusters/d8-ugmk-prod/infrastructure/kustomization.yaml now just references
the kafka, rabbitmq, camunda, vault, postgresql and zitadel overlays, with
no patches block. The patches/ directory is removed.

No rendered change: HelmRelease, namespace patches are preserved 1:1.

clusters/d8-ugmk-prod/infrastructure/kustomization.yaml

@@ -1,103 +1,9 @@
 apiVersion: kustomize.config.k8s.io/v1beta1
 kind: Kustomization
 resources:
-  - ../../../infrastructure/kafka
+  - ../../../infrastructure/kafka/d8-ugmk-prod
-  - ../../../infrastructure/rabbitmq
+  - ../../../infrastructure/rabbitmq/d8-ugmk-prod
-  - ../../../infrastructure/camunda
+  - ../../../infrastructure/camunda/d8-ugmk-prod
-  - ../../../infrastructure/vault
+  - ../../../infrastructure/vault/d8-ugmk-prod
-  - ../../../infrastructure/postgresql
+  - ../../../infrastructure/postgresql/d8-ugmk-prod
-  - ../../../infrastructure/zitadel
+  - ../../../infrastructure/zitadel/d8-ugmk-prod
-patches:
-  - path: ./patches/kafka.yaml
-    target:
-      group: helm.toolkit.fluxcd.io
-      version: v2
-      kind: HelmRelease
-      name: kafka
-      namespace: kafka
-  - path: ./patches/kafka-namespace.yaml
-    target:
-      version: v1
-      kind: Namespace
-      name: kafka
-  - path: ./patches/rabbitmq.yaml
-    target:
-      group: helm.toolkit.fluxcd.io
-      version: v2
-      kind: HelmRelease
-      name: rabbitmq
-      namespace: rabbitmq
-  - path: ./patches/rabbitmq-namespace.yaml
-    target:
-      version: v1
-      kind: Namespace
-      name: rabbitmq
-  - path: ./patches/camunda.yaml
-    target:
-      group: helm.toolkit.fluxcd.io
-      version: v2
-      kind: HelmRelease
-      name: camunda
-      namespace: camunda
-  - path: ./patches/camunda-namespace.yaml
-    target:
-      version: v1
-      kind: Namespace
-      name: camunda
-  - path: ./patches/vault.yaml
-    target:
-      group: helm.toolkit.fluxcd.io
-      version: v2
-      kind: HelmRelease
-      name: vault
-      namespace: vault
-  - path: ./patches/vault-namespace.yaml
-    target:
-      version: v1
-      kind: Namespace
-      name: vault
-  - path: ./patches/postgresql.yaml
-    target:
-      group: helm.toolkit.fluxcd.io
-      version: v2
-      kind: HelmRelease
-      name: postgresql
-      namespace: postgresql
-  - patch: |-
-      - op: replace
-        path: /metadata/namespace
-        value: zitadel
-      - op: replace
-        path: /spec/values/primary/nodeSelector
-        value:
-          dedicated: null
-          node.deckhouse.io/group: generic
-      - op: replace
-        path: /spec/values/primary/tolerations
-        value:
-          - key: dedicated.deckhouse.io
-            operator: Equal
-            value: generic
-    target:
-      group: helm.toolkit.fluxcd.io
-      version: v2
-      kind: HelmRelease
-      name: postgresql
-      namespace: postgresql
-  - path: ./patches/postgresql-namespace-delete.yaml
-    target:
-      version: v1
-      kind: Namespace
-      name: postgresql
-  - path: ./patches/zitadel.yaml
-    target:
-      group: helm.toolkit.fluxcd.io
-      version: v2
-      kind: HelmRelease
-      name: zitadel
-      namespace: zitadel
-  - path: ./patches/zitadel-namespace.yaml
-    target:
-      version: v1
-      kind: Namespace
-      name: zitadel

infrastructure/camunda/d8-ugmk-prod/kustomization.yaml

@@ -0,0 +1,7 @@
+apiVersion: kustomize.config.k8s.io/v1beta1
+kind: Kustomization
+resources:
+  - ../base
+patches:
+  - path: namespace.yaml
+  - path: camunda.yaml

infrastructure/kafka/d8-ugmk-prod/kustomization.yaml

@@ -0,0 +1,7 @@
+apiVersion: kustomize.config.k8s.io/v1beta1
+kind: Kustomization
+resources:
+  - ../base
+patches:
+  - path: namespace.yaml
+  - path: kafka.yaml

infrastructure/postgresql/d8-ugmk-prod/kustomization.yaml

@@ -0,0 +1,28 @@
+apiVersion: kustomize.config.k8s.io/v1beta1
+kind: Kustomization
+resources:
+  - ../base
+patches:
+  - path: postgresql.yaml
+  - path: namespace.yaml
+  - patch: |-
+      - op: replace
+        path: /metadata/namespace
+        value: zitadel
+      - op: replace
+        path: /spec/values/primary/nodeSelector
+        value:
+          dedicated: null
+          node.deckhouse.io/group: generic
+      - op: replace
+        path: /spec/values/primary/tolerations
+        value:
+          - key: dedicated.deckhouse.io
+            operator: Equal
+            value: generic
+    target:
+      group: helm.toolkit.fluxcd.io
+      version: v2
+      kind: HelmRelease
+      name: postgresql
+      namespace: postgresql

infrastructure/rabbitmq/d8-ugmk-prod/kustomization.yaml

@@ -0,0 +1,7 @@
+apiVersion: kustomize.config.k8s.io/v1beta1
+kind: Kustomization
+resources:
+  - ../base
+patches:
+  - path: namespace.yaml
+  - path: rabbitmq.yaml

infrastructure/vault/d8-ugmk-prod/kustomization.yaml

@@ -0,0 +1,7 @@
+apiVersion: kustomize.config.k8s.io/v1beta1
+kind: Kustomization
+resources:
+  - ../base
+patches:
+  - path: namespace.yaml
+  - path: vault.yaml

infrastructure/zitadel/d8-ugmk-prod/kustomization.yaml

@@ -0,0 +1,7 @@
+apiVersion: kustomize.config.k8s.io/v1beta1
+kind: Kustomization
+resources:
+  - ../base
+patches:
+  - path: namespace.yaml
+  - path: zitadel.yaml