Wrap all Kubernetes resources with mkNCSI and add component labels

- Wrap Job.init in secret.nix and ConfigMap.push in config.nix with mkNCSI
- Rename metadata/0.4.3.nix to metadata/0.4.3.md for proper file typing
- Add standard component labels to daemonset (node), statefulset (cache), deployments (builder/proxy), and init job
- Move common labels (name, part-of, managed-by, version) to options.nix config
- Each resource now identifies its component role for better querying and organization

This enables:
  - All resources get consistent labels via mkNCSI
  - Component-based queries: kubectl get pods -l app.kubernetes.io/component=cache
  - Standard Kubernetes label compliance

Author: Lillecarl

kubenix/builder.nix

@@ -86,8 +86,7 @@ in
   config =
     let
       baseLabels = {
-        "app.kubernetes.io/name" = "builder";
-        "app.kubernetes.io/part-of" = "nix-csi";
+        "app.kubernetes.io/component" = "builder";
       };
     in
     lib.mkIf (cfg.enable && cfg.builders.enable) {
@@ -215,8 +214,7 @@ in
                 spec =
                   let
                     labels = {
-                      "app.kubernetes.io/name" = "proxy";
-                      "app.kubernetes.io/part-of" = "nix-csi";
+                      "app.kubernetes.io/component" = "proxy";
                     };
                   in
                   {

kubenix/cache.nix

@@ -37,8 +37,7 @@ in
   config =
     let
       labels = {
-        "app.kubernetes.io/name" = "cache";
-        "app.kubernetes.io/part-of" = "nix-csi";
+        "app.kubernetes.io/component" = "cache";
       };
     in
     lib.mkIf (cfg.enable && cfg.cache.enable) {

kubenix/config.nix

@@ -46,7 +46,7 @@ in
         };
       };
     kubernetes.resources.${cfg.namespace} = {
-      ConfigMap.push = lib.mkIf cfg.push {
+      ConfigMap.push = lib.mkIf cfg.push (mkNCSI {
         data = {
           builder-aarch64-linux = armPkgs.nix-csi-builder-env;
           builder-x86_64-linux = x86Pkgs.nix-csi-builder-env;
@@ -57,7 +57,7 @@ in
           proxy-aarch64-linux = armPkgs.nix-csi-proxy-env;
           proxy-x86_64-linux = x86Pkgs.nix-csi-proxy-env;
         };
-      };
+      });
       ConfigMap.nix-node = mkNCSI {
         data = {
           "nix.conf" = builtins.readFile (cfg.node.nixConfig.nixConf);

kubenix/daemonset.nix

@@ -26,8 +26,7 @@ in
   config =
     let
       labels = {
-        "app.kubernetes.io/name" = "csi";
-        "app.kubernetes.io/part-of" = "nix-csi";
+        "app.kubernetes.io/component" = "node";
       };
     in
     lib.mkIf cfg.enable {

kubenix/options.nix

@@ -53,9 +53,9 @@ in
       apply = lib.mapAttrs (n: v: lib.trim (if lib.typeOf v == "path" then builtins.readFile v else v));
       default = { };
     };
-    metadata = lib.mkOption {
+    labels = lib.mkOption {
       description = "Labels added to nix-csi resources";
-      type = (curPkgs.formats.json { }).type;
+      type = lib.types.attrsOf lib.types.str;
       default = { };
     };
     version = lib.mkOption {
@@ -185,7 +185,7 @@ in
         mkNCSI =
           attrs:
           lib.recursiveUpdate {
-            inherit (cfg) metadata;
+            metadata.labels = cfg.labels;
           } attrs;
         subPath = spath: lib.removePrefix "/" (toString spath);
       };
@@ -208,6 +208,11 @@ in
           resource
       );
 
-      nix-csi = { };
+      nix-csi.labels = {
+        "app.kubernetes.io/name" = "nix-csi";
+        "app.kubernetes.io/part-of" = "nix-csi";
+        "app.kubernetes.io/managed-by" = "nix";
+        "app.kubernetes.io/version" = cfg.version;
+      };
     };
 }

kubenix/secret.nix

@@ -91,7 +91,7 @@ in
             fi
           '';
       };
-      Job.init = {
+      Job.init = mkNCSI {
         metadata.annotations = {
           "kluctl.io/hook" = "pre-deploy";
           "kluctl.io/hook-delete-policy" = "hook-succeeded"; # seems flaky
@@ -101,8 +101,7 @@ in
           # ttlSecondsAfterFinished = 0; # remove job when it's done
           template = {
             metadata.labels = {
-              "app.kubernetes.io/name" = "init";
-              "app.kubernetes.io/part-of" = "nix-csi";
+              "app.kubernetes.io/component" = "init";
             };
             spec = {
               restartPolicy = "OnFailure";