fix: traefik crds race condition

kubernetes/common/apps/traefik/app/kustomization.yaml

@@ -4,5 +4,4 @@ resources:
 - ./namespace.yaml
 - ./helm-repository.yaml
 - ./helm-release.yaml
-- ./default-tls-store.yaml
 - ./dashboard-ingress.yaml

kubernetes/common/apps/traefik/extra/kustomization.yaml

@@ -0,0 +1,4 @@
+apiVersion: kustomize.config.k8s.io/v1beta1
+kind: Kustomization
+resources:
+- ./default-tls-store.yaml

kubernetes/common/apps/traefik/ks.yaml

@@ -0,0 +1,40 @@
+# yaml-language-server: $schema=https://kubernetes-schemas.pages.dev/kustomize.toolkit.fluxcd.io/kustomization_v1.json
+apiVersion: kustomize.toolkit.fluxcd.io/v1
+kind: Kustomization
+metadata:
+  name: traefik
+  namespace: flux-system
+spec:
+  timeout: 5m
+  interval: 10m
+  path: ./kubernetes/common/apps/traefik/app
+  prune: true
+  sourceRef:
+    kind: GitRepository
+    name: home-cluster
+  decryption:
+    provider: sops
+    secretRef:
+      name: sops-gpg
+---
+# yaml-language-server: $schema=https://kubernetes-schemas.pages.dev/kustomize.toolkit.fluxcd.io/kustomization_v1.json
+apiVersion: kustomize.toolkit.fluxcd.io/v1
+kind: Kustomization
+metadata:
+  name: traefik-default-tls
+  namespace: flux-system
+spec:
+  timeout: 5m
+  interval: 10m
+  path: ./kubernetes/common/apps/traefik/extra
+  prune: true
+  sourceRef:
+    kind: GitRepository
+    name: home-cluster
+  decryption:
+    provider: sops
+    secretRef:
+      name: sops-gpg
+  dependsOn:
+  - name: traefik
+    namespace: flux-system

kubernetes/main/core/kustomization.yaml

@@ -5,7 +5,7 @@ resources:
 - ./helm-repositories.yaml
 - ./cert-manager
 - ../../common/apps/metallb
-- ../../common/apps/traefik
+- ../../common/apps/traefik/ks.yaml
 # storage
 - ./longhorn
 - ./openebs

kubernetes/thin/apps/kustomization.yaml

@@ -4,7 +4,7 @@ resources:
 - ./helm-repositories.yaml
 #- ../../common/apps/metallb
 - ./main-ip-pool.yaml
-- ../../common/apps/traefik
+- ../../common/apps/traefik/ks.yaml
 # storage
 #- ./longhorn
 #- ../../common/apps/openebs