diff --git a/.github/workflows/validate.yml b/.github/workflows/validate.yml
new file mode 100644
index 0000000..f9601b4
--- /dev/null
+++ b/.github/workflows/validate.yml
@@ -0,0 +1,14 @@
+name: Validate framework
+
+on:
+  push:
+    branches: [master]
+  pull_request:
+
+jobs:
+  validate:
+    runs-on: ubuntu-latest
+    steps:
+      - uses: actions/checkout@v4
+      - name: Run validation gate
+        run: bash tests/validate.bash
diff --git a/.gitignore b/.gitignore
index d27b3fa..909800c 100644
--- a/.gitignore
+++ b/.gitignore
@@ -25,4 +25,6 @@ modules/docker/apache/images/*.png
 # Ignore everything in aliases/
 core/shells/bash/aliases/*
 ## But not this file
-!core/shells/bash/aliases/.aliases
\ No newline at end of file
+!core/shells/bash/aliases/.aliases
+# myshell machine-local state (menu enable/disable bookkeeping)
+.module_state/
diff --git a/.shellcheckrc b/.shellcheckrc
new file mode 100644
index 0000000..dfae473
--- /dev/null
+++ b/.shellcheckrc
@@ -0,0 +1,10 @@
+# shellcheck configuration - directive syntax only (https://www.shellcheck.net/wiki/Directive)
+# Note: shellcheck cannot exclude files from an rc file; to skip a file,
+# add "# shellcheck disable=all" below its shebang or omit it from the CLI invocation.
+
+# Extension-less profile/dot-files (.appearance, .aliases, ...) have no shebang;
+# treat everything as bash.
+shell=bash
+
+# Allow following source statements to files outside the checked file's directory
+external-sources=true
diff --git a/AGENTS.md b/AGENTS.md
new file mode 100644
index 0000000..6ec5f41
--- /dev/null
+++ b/AGENTS.md
@@ -0,0 +1,137 @@
+# myshell — agent guide (repo root)
+
+myshell is a personal bash framework: a `.bashrc` loader that sources functions, aliases
+and profiles from this repo, plus self-contained "modules" (mostly docker compose stacks)
+launched through aliases. Everything is bash; there is no build step.
+
+**Before editing under `core/shells/bash/`, read `core/shells/bash/AGENTS.md`.
+Before editing under `modules/`, read `modules/AGENTS.md`.**
+
+## How the framework loads (the one chain that explains everything)
+
+```
+~/.bash_profile            (machine file, NOT in repo)
+  └─ exports project_path=$HOME/Documents/myshell
+  └─ sources core/shells/bash/.bashrc, which:
+       1. runs core/shells/bash/jobs/public_ip.bash in background
+       2. sources core/shells/bash/functions/*.bash   (explicit if-blocks, one per file)
+       3. sources EVERY file in core/shells/bash/aliases/   (glob loop)
+       4. sources core/shells/bash/profiles/.*         (explicit if-blocks, one per file)
+```
+
+Module scripts are executed as `bash <script>` from aliases → they run in a **child
+shell** and only see **exported** variables. `$project_path` is exported; never hardcode
+`$HOME/Documents/myshell` in a script, always use `$project_path`.
+
+## Repo map
+
+| Path | What it is |
+|---|---|
+| `core/shells/bash/.bashrc` | The loader. Every new function/profile needs an if-block here. |
+| `core/shells/bash/functions/` | 8 sourced function files (`myshell.bash` is the manager UI). |
+| `core/shells/bash/aliases/.aliases` | THE tracked alias file. All module aliases live here. |
+| `core/shells/bash/aliases/*.sh` | Machine-local aliases. **Git-ignored by design** — never put shared aliases there. |
+| `core/shells/bash/profiles/.*` | Dot-file profiles (.appearance, .history, .path, ...). |
+| `core/shells/bash/jobs/` | Background jobs run at shell start. |
+| `modules/<category>/<module>/` | Self-contained tools: bw, docker, help, john, utils, yt-dlp. |
+| `tests/validate.bash` | The validation gate. Run it before calling anything done. |
+| `.module_state/` | Machine-local menu state (git-ignored). Bookkeeping only — nothing loads based on it. |
+
+## Golden rules (each one caused a real bug — do not relearn them)
+
+1. **Module aliases go ONLY in `core/shells/bash/aliases/.aliases`.** Every other file in
+   `aliases/` is git-ignored (`.gitignore` rule `core/shells/bash/aliases/*` with a single
+   `!.aliases` exception). An alias added to `.modules.sh` etc. silently never reaches git.
+2. **Every alias that points into `modules/` must reference a file that exists.**
+   `myshell list` derives the command list from `.aliases` and hides dead targets, so a
+   broken alias becomes invisible instead of failing loudly. `tests/validate.bash` enforces
+   this. (Cause: a batch of `modules/k8s` aliases survived the module's deletion.)
+3. **Use `docker compose` (plugin), never `docker-compose`.** With the plugin missing the
+   CLI fails with the misleading error `unknown shorthand flag: 'd' in -d`. If you see that
+   error, the compose plugin is missing — the script is not broken.
+4. **The `myshell` user interface is exactly two entry points:** `myshell` (interactive
+   menu) and `myshell list`. Do NOT add CLI subcommands; the owner removed them on purpose
+   (2026-07-12). New capabilities go into the menu.
+5. **The `c_green`/`c_red`/`c_blue`/... helpers in `myshell.bash` print ONLY their first
+   argument, with no newline and no printf formatting.** Passing `"%s" "$x"` prints a
+   literal `%s`. For formatted or colored lines use `printf` with escape codes directly.
+6. **`.module_state/enabled.modules` is bookkeeping, not a gate.** One name per line:
+   module directory basenames (`alpine`, `mysql5`), flat modules by their own dir name
+   (`bw`, `yt-dlp`), profiles with their leading dot (`.appearance`). Nothing in the
+   loader reads it; disabling a module does not remove its command.
+7. **`.shellcheckrc` accepts directives only** (`shell=bash`, `external-sources=true`).
+   No INI sections, no file excludes — those break every shellcheck run in the repo.
+8. **Never edit files under `modules/docker/*/Docker/` that came from upstream images**
+   (e.g. `catalina.bash` — 600+ line Tomcat vendor configs). They are container config
+   payloads, not framework code.
+
+## Cookbook (follow the recipe exactly; each step lists its coupled edits)
+
+### Add a docker service module
+1. `mkdir -p modules/docker/<name>` with `docker-compose.yaml` (copy `modules/docker/alpine/`
+   as reference: service with `container_name: <name>`, optional `build:` context `./Docker`).
+2. Create `modules/docker/<name>/<name>.bash`:
+   ```bash
+   #!/bin/bash
+   cd "$project_path/modules/docker/<name>" || exit 1
+   docker compose up -d --build --force-recreate
+   ```
+   Optional shell access: `<name>_exec.bash` with `docker exec -it <name> /bin/sh`.
+3. Add the alias in `core/shells/bash/aliases/.aliases`, INSIDE the docker-group guard
+   block (between `if [ "$docker_groups" = "$docker_str" ]` and its `else`):
+   `alias <name>="bash $project_path/modules/docker/<name>/<name>.bash"`
+4. Verify: `cd modules/docker/<name> && docker compose config --quiet` then
+   `bash tests/validate.bash`.
+
+One-shot tools (run-and-exit, like `k6`) use `docker compose run --rm <service> ...`
+instead of `up -d`. See `modules/docker/k6/k6.bash`.
+
+### Add a utility script
+1. Create `modules/utils/<topic>/<script>.bash` (use `$project_path`, pass shellcheck).
+2. Add alias in `.aliases` under `# Utils`.
+3. `bash tests/validate.bash`.
+
+### Add a core function file
+1. Create `core/shells/bash/functions/<name>.bash`.
+2. Add an if-block in `.bashrc` under `# Load functions` (copy an existing block).
+3. **Coupled edit:** add `<name>` to the `func_files` list in
+   `core/shells/bash/functions/myshell.bash` (function `do_status`) AND bump the
+   `Total: %d/N functions` counter on the next line. Grep first: `grep -n 'func_files=' core/shells/bash/functions/myshell.bash`.
+4. `bash tests/validate.bash`.
+
+### Add a profile
+1. Create `core/shells/bash/profiles/.<name>` (leading dot).
+2. Add an if-block in `.bashrc` under `# Load profiles`.
+3. `bash tests/validate.bash`.
+
+## Validation protocol — non-negotiable before "done"
+
+Ground every claim in tool output, not memory. In order:
+
+1. `bash -n <every file you touched>` — syntax.
+2. `shellcheck <touched .bash files>` — must be clean (repo `.shellcheckrc` applies).
+   Semgrep is available via MCP — scan touched files when you change logic.
+3. `bash tests/validate.bash` — the full gate: syntax of all shell files, shellcheck on
+   core functions, loader integrity (.bashrc targets exist), alias→script integrity,
+   `docker compose config` for every docker module, and a `myshell` smoke test.
+4. Quote the actual output in your report. If a check fails, fix and re-run; never report
+   a failing state as done.
+
+CI runs the same gate (`.github/workflows/validate.yml`) plus manual docker image builds
+(`manual.yml`, `schedule.yml` — do not touch those when doing framework work).
+
+## Do NOT
+
+- Do not resurrect `module_resolver.bash`, `framework_core.bash`, `env_core.bash` or any
+  `myshell_mod_*` function — removed on purpose (2026-07-12/13).
+- Do not add subcommands to `myshell` (rule 4).
+- Do not `git add -f` git-ignored files (machine-local aliases, `.module_state/`).
+- Do not delete or stop running containers/services without being asked.
+- Do not "fix" `modules/docker/*/Docker/` vendor payloads flagged by linters (rule 8).
+- Do not reference `modules/k8s`, `modules/ssh`, `modules/minikube`, `openldap`,
+  `passbolt` — deleted; they must not reappear in aliases or docs.
+
+## Commits
+
+Conventional commits: `feat:` / `fix:` / `docs:` / `refactor:` / `chore:`.
+All paths through `$project_path`. Run the validation protocol before every commit.
diff --git a/README.md b/README.md
index 893f9ee..a344d44 100644
--- a/README.md
+++ b/README.md
@@ -2,7 +2,7 @@
 
 `myshell` is a Bash-first hybrid framework for building, bootstrapping, and operating a modular user environment.
 
-It treats the shell runtime as the technical base, then layers optional profiles, user services, and operational modules on top of it. The result is a structured system that aims for two main properties:
+It treats the shell runtime as the technical base, then layers optional profiles and operational modules on top of it. The result is a structured system that aims for two main properties:
 
 - **modularity**: each component has a clear layer, a concrete purpose, and explicit activation
 - **reproducibility**: the managed local environment and its modular composition can be reproduced consistently
@@ -14,7 +14,7 @@ It treats the shell runtime as the technical base, then layers optional profiles
 `myshell` is designed to:
 - bootstrap a Bash-based user environment
 - manage shell runtime behavior through a structured core
-- load optional profiles and user services explicitly
+- load optional profiles explicitly
 - expose operational modules through a stable framework structure
 - integrate official external companion repositories such as `config_files`
 
@@ -42,18 +42,9 @@ Profiles are optional environment components loaded from `core/shells/bash/profi
 
 Profiles are part of the framework core model. They are used for shell environment setup, bootstrap behavior, and managed configuration deployment.
 
-Profiles are opt-in through explicit loader blocks in `.bashrc`.
+    Profile are opt-in through explicit loader blocks in `.bashrc`.
 
-### Services
-Services are optional components loaded from `core/shells/bash/services/`.
-
-Services are also part of the framework core model, but are intended for persistent or service-like integrations that should not live as normal shell profiles.
-
-Typical examples are `systemd --user` units and their companion scripts.
-
-Services are opt-in through explicit loader blocks in `.bashrc`.
-
-### Modules
+    ### Modules
 Modules are operational tooling components. They expose commands and workflows on top of the stable user-environment base provided by the framework.
 
 Modules are part of the core identity of `myshell`, not an afterthought.
@@ -89,7 +80,7 @@ This means:
 - the **experience of use**
 
 What may vary:
-- which profiles, services, and modules are enabled
+- which profiles and modules are enabled
 - which components are sourced from the official companion repository
 - future official external integrations in the `myshell` ecosystem
 
@@ -122,12 +113,10 @@ Current top-level structure relevant to the framework model:
   - framework runtime and shell entrypoints
 - `core/shells/bash/profiles/`
   - optional managed environment components
-- `core/shells/bash/services/`
-  - optional managed service integrations
 - `core/shells/bash/.bash_profile`
   - framework entrypoint
 - `core/shells/bash/.bashrc`
-  - explicit activation surface for profiles and services
+  - explicit activation surface for profiles
 - `modules/`
   - operational toolkit components
 - `core/shells/pwsh/`
@@ -166,9 +155,9 @@ If you want to use the PowerShell profile from Windows:
 2. Edit `$PROFILE` with the content from `core/shells/pwsh/Microsoft.PowerShell_profile.ps1`.
 3. Set the required values in the `VARIABLE DECLARATION` section.
 
-## Profiles and services
+## Profiles and modules
 
-`myshell` loads optional Bash components from `core/shells/bash/profiles/` and `core/shells/bash/services/` through explicit blocks in `core/shells/bash/.bashrc`.
+`myshell` loads optional Bash components from `core/shells/bash/profiles/` through explicit blocks in `core/shells/bash/.bashrc`.
 
 ### Profiles currently loaded by default blocks in `.bashrc`
 
@@ -183,49 +172,6 @@ Examples include:
 - `.config_files`
 - `.ssh`
 
-### Services currently supported
-
-Examples include:
-- `.hyprland-wallpaper`
-- `.nvidia-fan`
-
-These are framework-managed service integrations and are activated through `.bashrc` loader blocks.
-
-### Current service behavior
-
-`.hyprland-wallpaper`
-- downloads `hypr-wallpaper.service` from `config_files`
-- downloads `wallpaper-rotation.sh` from `config_files`
-- installs them into local user paths
-- runs `systemctl --user daemon-reload`
-- runs `systemctl --user enable --now hypr-wallpaper.service` when needed
-
-`.nvidia-fan`
-- downloads `nvidia-fan.service` from `config_files`
-- downloads `nvidiafan.sh` from `config_files`
-- installs them into local user paths
-- runs `systemctl --user daemon-reload`
-- runs `systemctl --user enable --now nvidia-fan.service` when needed
-
-### Service prerequisites
-
-`.hyprland-wallpaper`
-- `hyprpaper`
-- `hyprctl`
-- a valid `~/.config/hypr/hyprpaper.conf`
-- a local wallpaper directory configured in the script through `WALLPAPER_DIR`
-- `mpvpaper` if video wallpapers are used
-- monitor names and interval may need local adjustment
-
-`.nvidia-fan`
-- `nvidia-smi`
-- `nvidia-settings`
-- `sudo`
-- `xhost`
-- a deployed script at `~/.config/nvidia/nvidiafan.sh`
-- `sudo` for `nvidia-settings` must work non-interactively in the session where the service runs
-- the graphical session must be ready; the service definition uses a short startup delay to avoid login-time race conditions
-
 ## Companion repository: `config_files`
 
 `config_files` is the official companion repository of `myshell`.
diff --git a/core/shells/bash/.aliases-core b/core/shells/bash/.aliases-core
new file mode 100644
index 0000000..fb53d77
--- /dev/null
+++ b/core/shells/bash/.aliases-core
@@ -0,0 +1,2 @@
+#!/bin/bash
+# shellcheck disable=SC2143
diff --git a/core/shells/bash/.bashrc b/core/shells/bash/.bashrc
index 66f13ab..76344da 100644
--- a/core/shells/bash/.bashrc
+++ b/core/shells/bash/.bashrc
@@ -64,14 +64,7 @@ if [ -f "$project_path"/core/shells/bash/profiles/.config_files ]; then
 fi
 if [ -f "$project_path"/core/shells/bash/profiles/.ssh ]; then
 	. "$project_path"/core/shells/bash/profiles/.ssh
-fi
-# Load services
-if [ -f "$project_path"/core/shells/bash/services/.hyprland-wallpaper ]; then
-	. "$project_path"/core/shells/bash/services/.hyprland-wallpaper
-fi
-if [ -f "$project_path"/core/shells/bash/services/.nvidia-fan ]; then
-	. "$project_path"/core/shells/bash/services/.nvidia-fan
-fi
+	fi
 # Bash time lapse ends
 final_result=$(date +%s%3N)
 elapsed_time=$((final_result - initial_result))
diff --git a/core/shells/bash/AGENTS.md b/core/shells/bash/AGENTS.md
new file mode 100644
index 0000000..ae563de
--- /dev/null
+++ b/core/shells/bash/AGENTS.md
@@ -0,0 +1,67 @@
+# core/shells/bash — agent guide
+
+Read the root `AGENTS.md` first; this file adds the internals of the loader area.
+
+## File map
+
+| File | Purpose |
+|---|---|
+| `.bashrc` | Loader. Sourced by `~/.bash_profile` (machine file). Times its own startup. |
+| `.bash_profile` | Reference login-shell profile (repo copy; the live one is `~/.bash_profile`). |
+| `functions/checks.bash` | `checks` — system info dashboard (OS, CPU, docker, net). |
+| `functions/colors.bash` | Color helper functions (`red`, `cyan`, `nocolor`, ...) used by checks. |
+| `functions/crlf_to_lf.bash` | CRLF→LF converter helper. |
+| `functions/shfmt.bash`, `yamlfmt.bash`, `hadolint.bash`, `shellcheck.bash` | Wrappers that run the respective linters via docker/binary. |
+| `functions/myshell.bash` | The `myshell` manager: menu + list. See below. |
+| `aliases/.aliases` | Tracked aliases (facilities, git, terraform, bw, docker modules, john, utils, yt-dlp). |
+| `aliases/*.sh` | Machine-local, git-ignored. Never add shared aliases here. |
+| `profiles/.*` | 9 dot-file profiles, each with an explicit loader block in `.bashrc`. |
+| `jobs/public_ip.bash` | Backgrounded at shell start by `.bashrc`. |
+| `jobs/online_users.bash` | Present but its loader line in `.bashrc` is commented out. |
+
+## myshell.bash internals
+
+- Dispatch: `myshell` → `do_menu`; `myshell list` → `do_cmds_list`. Nothing else (owner
+  decision — do not extend the CLI).
+- `do_menu`: numbered menu, options 1-4 → `do_status`, `do_manage_modules`,
+  `do_manage_profiles`, `do_cmds_list`; `q` quits. `read -r || return` guards EOF.
+- `do_manage_modules` / `do_manage_profiles`: arrow-key menus. **Redraw invariant:** each
+  frame prints exactly `${#names[@]} + 5` lines and the redraw does `\033[<lines>A\033[J`.
+  If you add or remove a printed line inside the loop you MUST update the `lines`
+  variable, or the screen corrupts. First frame skips the cursor-up (`first` flag).
+- Key handling uses `IFS= read -rsn1` (silent, no stty juggling). ESC sequences: read 2
+  more bytes with `-t 0.05`; bare ESC returns to menu. Enter/T toggle, E enable,
+  D disable, Q back.
+- Categories with subdirectories toggle every child module (`_cat_enable`/`_cat_disable`);
+  flat modules (`bw`, `yt-dlp` — scripts directly in the category dir) are tracked by
+  their own directory name.
+- `_mod_disable` rewrites the state file via a temp file NEXT TO it (`${_MF}.tmp_$$`) and
+  treats `grep -v` exit 1 (no lines left) as success. Keep it that way: writing the temp
+  file to `/tmp` and swallowing failures caused silent no-op disables.
+- Color helpers `c_green`/`c_red`/... print only `$1`, no newline, no format expansion.
+  For colored formatted rows use `printf '\033[0;32m...\033[0m\n' args` directly.
+- `do_cmds_list` parses `alias X="... modules/..."` lines from `aliases/.aliases` and
+  `aliases/*.sh`, dedupes by name, and skips targets that do not exist on disk.
+
+## Editing rules for this area
+
+- New function file ⇒ three coupled edits: the file, the `.bashrc` if-block, and the
+  `func_files` list + `Total: %d/N` counter in `myshell.bash:do_status`.
+- `.bashrc` loader blocks reference files that MUST exist — `tests/validate.bash` checks
+  every `$project_path/...` it sources.
+- Profiles are dot-files; the state file records them WITH the leading dot.
+- Anything printed by `_mod_enable`/`_mod_disable` inside the interactive menus must stay
+  redirected to `/dev/null` (extra lines break the redraw arithmetic).
+
+## How to verify changes here (copy-paste)
+
+```bash
+bash -n core/shells/bash/functions/myshell.bash
+shellcheck core/shells/bash/functions/myshell.bash
+# menu smoke test with scripted keystrokes (2=modules, arrow down, q back, q quit):
+bash -c 'export project_path=$PWD MY_SHELL_ENV_DIR=$(mktemp -d);
+  source core/shells/bash/functions/myshell.bash;
+  printf "2\n\x1b[Bqq\n" | myshell >/dev/null && echo MENU_OK;
+  myshell list | head -5'
+bash tests/validate.bash
+```
diff --git a/core/shells/bash/aliases/.aliases b/core/shells/bash/aliases/.aliases
index a867bcf..d91dd47 100644
--- a/core/shells/bash/aliases/.aliases
+++ b/core/shells/bash/aliases/.aliases
@@ -65,14 +65,12 @@ alias mysql8_exec="bash $project_path/modules/docker/mysql8/mysql8_exec.bash"
 alias tomcat9="bash $project_path/modules/docker/tomcat9/tomcat9.bash"
 alias tomcat9_exec="bash $project_path/modules/docker/tomcat9/tomcat9_exec.bash"
 alias apache="bash $project_path/modules/docker/apache/apache.bash"
-alias openldap="bash $project_path/modules/docker/openldap/openldap.bash"
 alias mongodb="bash $project_path/modules/docker/mongodb/mongodb.bash"
 alias mongodb_exec="bash $project_path/modules/docker/mongodb/mongodb_exec.bash"
 alias maven="bash $project_path/modules/docker/maven/maven.bash"
 alias maven_exec="bash $project_path/modules/docker/maven/maven_exec.bash"
 alias nexus="bash $project_path/modules/docker/nexus/nexus.bash"
 alias nexus_exec="bash $project_path/modules/docker/nexus/nexus_exec.bash"
-alias passbolt="bash $project_path/modules/docker/passbolt/passbolt.bash"
 alias jira_software="bash $project_path/modules/docker/jira-software/jira-software.bash"
 alias jira_software_cero_exec="bash $project_path/modules/docker/jira-software/jira-software_cero_exec.bash"
 alias jira_software_uno_exec="bash $project_path/modules/docker/jira-software/jira-software_uno_exec.bash"
@@ -80,39 +78,13 @@ alias nodejs="bash $project_path/modules/docker/nodejs/nodejs.bash"
 alias nodejs_exec="bash $project_path/modules/docker/nodejs/nodejs_exec.bash"
 alias nginx="bash $project_path/modules/docker/nginx/nginx.bash"
 alias nginx_exec="bash $project_path/modules/docker/nginx/nginx_exec.bash"
-alias k6="pwsh $project_path/modules/docker/k6/k6.ps1"
-alias k6_exec="bash $project_path/modules/docker/k6/k6_exec.bash"
+alias k6="bash $project_path/modules/docker/k6/k6.bash"
 else
 echo "To use docker you must be in docker group"
 fi
-## modules - k8s
+# kubectl
 alias k="kubectl"
-check_kubectl=$(kubectl &> /dev/null; echo $?)
-if [ "$check_kubectl" = "0" ]
-        then
-export k8s_env_path=""$project_path"/modules/k8s/env"
 alias k3s="kubectl --kubeconfig ~/.kube/k3s"
-alias delete_namespace=""$project_path"/modules/k8s/menus/utils/delete-namespace.sh"
-alias api="bash $project_path/modules/k8s/menus/api/api.bash"
-alias checks_k8s="bash $project_path/modules/k8s/menus/checks_k8s/checks_k8s.bash"
-alias pod_state_ymls="bash $project_path/modules/k8s/menus/pod_state/ymls.bash"
-alias pod_actions_exec="bash $project_path/modules/k8s/menus/pod_actions/exec.bash"
-alias pod_actions_copy_from="bash $project_path/modules/k8s/menus/pod_actions/copy_from.bash"
-alias pod_actions_logs="bash $project_path/modules/k8s/menus/pod_actions/logs.bash"
-alias pod_actions_describe="bash $project_path/modules/k8s/menus/pod_actions/describe.bash"
-alias pod_actions_labels="bash $project_path/modules/k8s/menus/pod_actions/labels.bash"
-alias pvc="bash $project_path/modules/k8s/menus/storage/pvc.bash"
-alias storage_pvc_elimina="bash $project_path/modules/k8s/menus/storage/pvc_elimina.bash"
-alias storage_pv_released="bash $project_path/modules/k8s/menus/storage/pv_released.bash"
-alias storage_pv_elimina="bash $project_path/modules/k8s/menus/storage/pv_elimina.bash"
-alias rbac_crea="bash $project_path/modules/k8s/menus/rbac/crea_claus.bash"
-alias rbac_elimina="bash $project_path/modules/k8s/menus/rbac/elimina_claus.bash"
-alias secrets="bash $project_path/modules/k8s/menus/secrets/secrets.bash"
-fi
-## modules - minikube
-alias minikube_launch="bash $project_path/modules/minikube/menu.bash"
-## modules - ssh
-alias ssh_create="bash $project_path/modules/ssh/ssh_create/keys.bash"
 ## modules - john
 check_john=$(john &> /dev/null; echo $?)
 if [ "$check_john" = "0" ]
diff --git a/core/shells/bash/functions/crlf_to_lf.bash b/core/shells/bash/functions/crlf_to_lf.bash
index 2836a49..af8f5a2 100644
--- a/core/shells/bash/functions/crlf_to_lf.bash
+++ b/core/shells/bash/functions/crlf_to_lf.bash
@@ -1,6 +1,5 @@
 #!/bin/bash
 crlf_to_lf() {
-	cd $(pwd)
 	sub_dir=/tmp/"$RANDOM"
 	# la seguent comanda no treballa amb directoris/arxius ocults
 	find ./ -type d -not -path '*/.*' 1>"$sub_dir"
diff --git a/core/shells/bash/functions/hadolint.bash b/core/shells/bash/functions/hadolint.bash
index 69251e4..d9a63a8 100644
--- a/core/shells/bash/functions/hadolint.bash
+++ b/core/shells/bash/functions/hadolint.bash
@@ -1,6 +1,5 @@
 #!/bin/bash
 docker_files() {
-    cd "$(pwd)"
 	sub_dir=/tmp/"$RANDOM"
     find ./ -type f -name '.Dockerfile' -not -path '*/.*/*' 1>"$sub_dir"
     for relative_path in $(cat "$sub_dir"); do
diff --git a/core/shells/bash/functions/myshell.bash b/core/shells/bash/functions/myshell.bash
index be3b469..d507588 100644
--- a/core/shells/bash/functions/myshell.bash
+++ b/core/shells/bash/functions/myshell.bash
@@ -1,52 +1,437 @@
 #!/bin/bash
-# shellcheck disable=SC2154
-# shellcheck disable=SC1090
+# myshell - unified framework management (numbered text menu)
+
 myshell() {
-  source "$mod_colors"
-  #
-  #CORE
-  # commands
-  red
-  echo ">""$(cyan)myshell"
-  echo -e \
-   "myshell - available commands\nchecks - compatibility software checks"
-  echo ""
-  # help
-  red
-  echo ">""$(white)Help"
-  echo -e "help_arch\thelp_az\thelp_dig\thelp_docker\thelp_gcloud\thelp_git\thelp_kubectl\thelp_mysql\thelp_terraform"
-  #
-  #MODULES
-  # docker
-  echo ""
-  red
-  echo ">""$(blue)docker"
-  ls "$project_path"/modules/docker/
-  echo ""
-  # k8s
-  #
-  red
-  echo ">""$(magenta)k8s"
-  ls "$project_path"/modules/k8s/menus
-  echo ""
-  # ssh
-  red
-  echo ">""$(red)ssh"
-  ls "$project_path"/modules/ssh/
-  echo ""
-  # bw
-  red
-  echo ">""$(orange)bw - client"
-  echo -e "bw_push\t\tbw_clone\tbw_create"
-  echo ""
-  # john
-  red
-  echo ">""$(green)John"
-  echo -e "john_dictionary\tjohn_unshadow\tjohn_zip"
-  # utils
-  echo ""
-  red
-  echo ">""$(yellow)Utils"
-  echo -e "cert_base64_for_sealed_secret\tcheck_domains"
+    local cmd="${1:-menu}"
+    shift 2>/dev/null || true
+
+    # Module state file path
+    local _MF
+    if [[ -n "${MY_SHELL_ENV_DIR:-}" && "$MY_SHELL_ENV_DIR" != "/" ]]; then
+        _MF="$MY_SHELL_ENV_DIR/module_state/enabled.modules"
+    else
+        _MF="$project_path/.module_state/enabled.modules"
+    fi
+    mkdir -p "$(dirname "$_MF")" 2>/dev/null || true
+    [ -f "$_MF" ] || touch "$_MF"
+
+    # Color helpers
+    c_green()    { printf '\033[0;32m%s\033[0m' "$1"; }
+    c_red()      { printf '\033[0;31m%s\033[0m' "$1"; }
+    c_yellow()   { printf '\033[0;33m%s\033[0m' "$1"; }
+    c_blue()     { printf '\033[0;34m%s\033[0m' "$1"; }
+    c_cyan()     { printf '\033[0;36m%s\033[0m' "$1"; }
+    c_white()    { printf '\033[1;37m%s\033[0m' "$1"; }
+
+    # ── status display (default, vertical) ──
+
+    do_status() {
+        local n=0
+
+        echo ""
+        c_green "========================================="
+        echo ""
+        c_white "  myshell Framework Status"
+        echo ""
+        c_green "========================================="
+        echo ""
+
+        # Core files
+        c_blue "> CORE FILES"
+        echo ""
+        [ -f "$project_path/core/shells/bash/.bashrc" ] && { c_green "OK .bashrc"; echo ""; true; }
+        [ -f "$project_path/core/shells/bash/.bash_profile" ] && { c_green "OK .bash_profile"; echo ""; true; }
+
+        # Function files
+        local func_files="checks colors crlf_to_lf shfmt yamlfmt hadolint myshell shellcheck"
+        for f in $func_files; do
+            if [ -f "$project_path/core/shells/bash/functions/${f}.bash" ]; then
+                ((n++)) || true
+                c_green "OK ${f}.bash"; echo ""
+            else
+                c_red "MISSING ${f}.bash"; echo ""
+            fi
+        done
+        printf "  Total: %d/8 functions\n\n" "$n"
+
+        # Modules
+        c_blue "MODULES:"
+        echo ""
+        if [ -d "$project_path/modules" ]; then
+            for ct in "$project_path/modules"/*/; do
+                [ -d "$ct" ] || continue
+                local cn=0 es=0
+                for mp in "$ct"*/; do
+                    [ -d "$mp" ] || continue
+                    ((cn++)) || true
+                    if grep -qxF "$(basename "$mp")" "$_MF" 2>/dev/null; then
+                        c_green "  [+] $(basename "$ct")/$(basename "$mp")"; echo ""
+                        ((es++)) || true
+                    else
+                        printf "  [ ] %s/%s\n" "$(basename "$ct")" "$(basename "$mp")"
+                    fi
+                done
+                if [ "$cn" -gt 0 ]; then
+                    printf "  Category: %s (%d, %d enabled)\n\n" "$(basename "$ct")" "$cn" "$es"
+                else
+                    # flat module (no subdirectories): tracked by its own name
+                    if grep -qxF "$(basename "$ct")" "$_MF" 2>/dev/null; then
+                        c_green "  [+] $(basename "$ct")"; echo ""
+                    else
+                        printf "  [ ] %s\n" "$(basename "$ct")"
+                    fi
+                fi
+            done
+        else
+            c_yellow "  (none)"
+            echo ""
+        fi
+
+        # Profiles
+        c_blue "PROFILES:"
+        echo ""
+        if [ -d "$project_path/core/shells/bash/profiles" ]; then
+            for pf in "$project_path/core/shells/bash/profiles"/.*; do
+                [ -f "$pf" ] || continue
+                local pn
+                pn=$(basename "$pf")
+                if grep -qxF "$pn" "$_MF" 2>/dev/null; then
+                    c_green "  [+] $pn"; echo ""
+                else
+                    printf "  [ ] %s\n" "$pn"
+                fi
+            done
+        else
+            c_yellow "  (none)"
+            echo ""
+        fi
+
+        # Aliases
+        c_blue "> ALIASES"
+        echo ""
+        local ad="$project_path/core/shells/bash/aliases"
+        if [ -d "$ad" ]; then
+            local fa=0 ac=0 ec=0 sc2=0
+            for af in "$ad"/.*.sh; do
+                [ -f "$af" ] || continue
+                ((fa++)) || true
+                local a e s3
+                a=$(grep -c "^alias " "$af" 2>/dev/null) || a=0
+                e=$(grep -c "^export " "$af" 2>/dev/null) || e=0
+                s3=$(grep -c "^source " "$af" 2>/dev/null) || s3=0
+                ac=$((ac + a)) ec=$((ec + e)) sc2=$((sc2 + s3))
+            done
+            c_green "$fa file(s)"
+            echo ""
+            c_white "Total: $ac aliases | $ec exports | $sc2 sources"
+            echo ""
+        else
+            c_red "Aliases dir missing"
+            echo ""
+        fi
+
+        # Project
+        c_blue "> PROJECT"
+        echo ""
+        if command -v git >/dev/null 2>&1 && [ -d "$project_path/.git" ]; then
+            local br
+            br=$(git branch --show-current 2>/dev/null) || br="?"
+            local tg
+            tg=$(git describe --tags --always 2>/dev/null) || tg=""
+            if [ -z "$(git status --porcelain 2>/dev/null)" ]; then
+                c_white " $(basename "$project_path")@$br"
+                c_green "(clean)"
+                echo " ($tg)"
+            else
+                c_white " $(basename "$project_path")@$br"
+                c_yellow "(dirty)"
+                echo " ($tg)"
+            fi
+        elif [ -n "${project_path:-}" ]; then
+            c_cyan "path: $project_path (no .git)"
+            echo ""
+        fi
+        echo ""
+
+        # Docker images
+        if command -v docker >/dev/null 2>&1; then
+            c_blue "> DOCKER IMAGES"
+            echo ""
+            local imgs
+            imgs=$(docker images --format "{{.Repository}}:{{.Tag}}" 2>/dev/null | sort -u) || true
+            if [ -n "$imgs" ]; then
+                while IFS= read -r img; do printf "  %s\n" "$img"; done <<< "$imgs"
+            else
+                c_yellow "  (none)"
+                echo ""
+            fi
+        fi
+
+        c_green "========================================="
+        echo ""
+    }
+
+    # ── list module commands (standalone command only) ──
+
+    do_cmds_list() {
+        # Commands are the aliases pointing into modules/ (what you actually type)
+        local ad="$project_path/core/shells/bash/aliases"
+        local found=0 seen=" " af line name rel
+        echo ""
+        c_blue "MODULE COMMANDS (alias -> module script):"
+        echo ""
+        for af in "$ad"/.aliases "$ad"/.*.sh; do
+            [ -f "$af" ] || continue
+            while IFS= read -r line; do
+                case "$line" in
+                    *"alias "*=*modules/*) ;;
+                    *) continue ;;
+                esac
+                name="${line#*alias }"
+                name="${name%%=*}"
+                case "$seen" in *" $name "*) continue ;; esac
+                seen="$seen$name "
+                rel="${line#*modules/}"
+                rel="${rel%%\"*}"
+                rel="${rel%%\'*}"
+                # skip legacy aliases whose module script no longer exists
+                [ -f "$project_path/modules/$rel" ] || continue
+                printf "  \033[0;32m%-28s\033[0m -> %s\n" "$name" "$rel"
+                found=1
+            done < "$af"
+        done
+        [ "$found" -eq 0 ] && { c_yellow "  (none)"; echo ""; }
+        echo ""
+    }
+
+    # ── manage modules (arrow-key nav, Enter to toggle) ──
+
+    do_manage_modules() {
+        local -a names=() statuses=()
+        if [ -d "$project_path/modules" ]; then
+            for ct in "$project_path/modules"/*/; do
+                [ -d "$ct" ] || continue
+                local cat_name
+                cat_name=$(basename "$ct")
+                names+=("$cat_name")
+                local total=0 en=0 mp
+                for mp in "$ct"*/; do
+                    [ -d "$mp" ] || continue; ((total++)) || true
+                    grep -qxF "$(basename "$mp")" "$_MF" 2>/dev/null && { ((en++)) || true; }
+                done
+                if [ "$total" -eq 0 ]; then
+                    # flat module (scripts directly inside): track by its own name
+                    if grep -qxF "$cat_name" "$_MF" 2>/dev/null; then statuses+=("ON"); else statuses+=("OFF"); fi
+                elif [ "$total" -eq "$en" ]; then statuses+=("ON"); else statuses+=("OFF"); fi
+            done
+        fi
+
+        if [ "${#names[@]}" -eq 0 ]; then c_yellow "  (none)"; echo ""; return; fi
+
+        local sel=0 ch="" ch2="" first=1
+        local lines=$(( ${#names[@]} + 5 ))
+
+        while true; do
+            # Redraw in place (skip cursor-up on the first draw)
+            if [ "$first" -eq 1 ]; then first=0; else printf '\033[%dA\033[J' "$lines"; fi
+            echo ""
+            c_blue "MODULES (arrows navigate, Enter/T toggle, E enable, D disable, Q back):"
+            echo ""
+            for ((i=0; i < ${#names[@]}; i++)); do
+                if [ "$i" -eq "$sel" ]; then
+                    printf '  \033[0;32m> [%-3s] %s\033[0m\n' "${statuses[$i]}" "${names[$i]}"
+                else
+                    printf "    [%-3s] %s\n" "${statuses[$i]}" "${names[$i]}"
+                fi
+            done
+            echo ""
+            printf "  q) Back to menu\n"
+
+            # Get single keystroke (silent, unbuffered)
+            IFS= read -rsn1 ch || { echo ""; return 0; }
+
+            # Handle ESC sequences for arrow keys (bare ESC = back)
+            if [[ "$ch" == $'\x1b' ]]; then
+                ch2=""
+                IFS= read -rsn2 -t 0.05 ch2 || true
+                [ -z "$ch2" ] && { echo ""; return 0; }
+                case "${ch2:1:1}" in
+                    A|H) [ "$sel" -gt 0 ] && ((sel--)) || true ;;
+                    B|F) [ "$sel" -lt $(( ${#names[@]} - 1 )) ] && ((sel++)) || true ;;
+                esac
+                continue
+            fi
+
+            case "$ch" in
+                ""|t|T)  # Enter or T toggles the whole category
+                    if [ "${statuses[$sel]}" = "ON" ]; then
+                        _cat_disable "${names[$sel]}"; statuses[$sel]="OFF"
+                    else
+                        _cat_enable "${names[$sel]}"; statuses[$sel]="ON"
+                    fi ;;
+                e|E) _cat_enable  "${names[$sel]}"; statuses[$sel]="ON" ;;
+                d|D) _cat_disable "${names[$sel]}"; statuses[$sel]="OFF" ;;
+                q|Q|@) echo ""; return 0 ;;
+            esac
+        done
+    }
+
+    # ── category helpers: act on every module inside a category ──
+
+    _cat_enable() {
+        local mp found=0
+        for mp in "$project_path/modules/$1"/*/; do
+            [ -d "$mp" ] || continue
+            found=1
+            _mod_enable "$(basename "$mp")" >/dev/null
+        done
+        # flat module: no subdirectories, track by its own name
+        [ "$found" -eq 0 ] && _mod_enable "$1" >/dev/null
+    }
+
+    _cat_disable() {
+        local mp found=0
+        for mp in "$project_path/modules/$1"/*/; do
+            [ -d "$mp" ] || continue
+            found=1
+            _mod_disable "$(basename "$mp")" >/dev/null
+        done
+        [ "$found" -eq 0 ] && _mod_disable "$1" >/dev/null
+    }
+
+    # ── manage profiles (arrow-key nav, Enter to toggle) ──
+
+    do_manage_profiles() {
+        local -a names=() statuses=()
+
+        if [ -d "$project_path/core/shells/bash/profiles" ]; then
+            for pf in "$project_path/core/shells/bash/profiles"/.*; do
+                [ -f "$pf" ] || continue
+                local prof_name
+                prof_name=$(basename "$pf")
+                names+=("$prof_name")
+                grep -qxF "$prof_name" "$_MF" 2>/dev/null && statuses+=("ON") || statuses+=("OFF")
+            done
+        fi
+
+        if [ "${#names[@]}" -eq 0 ]; then c_yellow "  (none)"; echo ""; return; fi
+
+        local sel=0 ch="" ch2="" first=1
+        local lines=$(( ${#names[@]} + 5 ))
+
+        while true; do
+            if [ "$first" -eq 1 ]; then first=0; else printf '\033[%dA\033[J' "$lines"; fi
+            echo ""
+            c_blue "PROFILES (arrows navigate, Enter/T toggle, E enable, D disable, Q back):"
+            echo ""
+            for ((i=0; i < ${#names[@]}; i++)); do
+                if [ "$i" -eq "$sel" ]; then
+                    printf '  \033[0;32m> [%-3s] %s\033[0m\n' "${statuses[$i]}" "${names[$i]}"
+                else
+                    printf "    [%-3s] %s\n" "${statuses[$i]}" "${names[$i]}"
+                fi
+            done
+            echo ""
+            printf "  q) Back to menu\n"
+
+            IFS= read -rsn1 ch || { echo ""; return 0; }
+
+            # Handle ESC sequences for arrow keys (bare ESC = back)
+            if [[ "$ch" == $'\x1b' ]]; then
+                ch2=""
+                IFS= read -rsn2 -t 0.05 ch2 || true
+                [ -z "$ch2" ] && { echo ""; return 0; }
+                case "${ch2:1:1}" in
+                    A|H) [ "$sel" -gt 0 ] && ((sel--)) || true ;;
+                    B|F) [ "$sel" -lt $(( ${#names[@]} - 1 )) ] && ((sel++)) || true ;;
+                esac
+                continue
+            fi
+
+            case "$ch" in
+                ""|t|T)  # Enter or T toggles the profile
+                    if [ "${statuses[$sel]}" = "ON" ]; then
+                        _mod_disable "${names[$sel]}" >/dev/null; statuses[$sel]="OFF"
+                    else
+                        _mod_enable "${names[$sel]}" >/dev/null; statuses[$sel]="ON"
+                    fi ;;
+                e|E) _mod_enable  "${names[$sel]}" >/dev/null; statuses[$sel]="ON" ;;
+                d|D) _mod_disable "${names[$sel]}" >/dev/null; statuses[$sel]="OFF" ;;
+                q|Q|@) echo ""; return 0 ;;
+            esac
+        done
+    }
+
+    # ── enable helper ──
+
+    _mod_enable() {
+        local name="$1"
+        [ -z "$name" ] && { c_red "Usage: myshell enable <name>"; echo ""; return 1; }
+        grep -qxF "$name" "$_MF" 2>/dev/null && { c_yellow "'$name' already enabled"; echo ""; return 0; }
+        printf '%s\n' "$name" >> "$_MF" || true
+        c_green "Enabled: $name"
+        echo ""
+    }
+
+    # ── disable helper ──
+
+    _mod_disable() {
+        local name="$1"
+        [ -z "$name" ] && { c_red "Usage: myshell enable <name>"; echo ""; return 1; }
+        grep -qxF "$name" "$_MF" 2>/dev/null || { c_yellow "'$name' not enabled"; echo ""; return 0; }
+        local tmp="${_MF}.tmp_$$" rc=0
+        grep -vxF "$name" "$_MF" > "$tmp" 2>/dev/null || rc=$?
+        # grep exits 1 when no lines remain (removed the last entry) - still success
+        if [ "$rc" -le 1 ] && mv "$tmp" "$_MF" 2>/dev/null; then
+            c_red "Disabled: $name"
+            echo ""
+        else
+            rm -f "$tmp" 2>/dev/null
+            c_red "Failed to update $_MF"
+            echo ""
+            return 1
+        fi
+    }
+
+    # ── interactive menu (numbers, vertical) ──
+
+    do_menu() {
+        local choice
+        while true; do
+            echo ""
+            c_white "========================================="
+            echo ""
+            c_white "  myshell - Framework Manager"
+            echo ""
+            c_green "========================================="
+            echo ""
+            printf "  1) Show framework status\n"
+            printf "  2) Manage modules\n"
+            printf "  3) Manage profiles\n"
+            printf "  4) List module commands\n"
+            echo ""
+            c_yellow "  q) Quit"
+            echo ""
+            printf "%s" "Choice: "
+            read -r choice || { echo ""; return 0; }
+            case "$choice" in
+                1) do_status ;;
+                2) do_manage_modules ;;
+                3) do_manage_profiles ;;
+                4) do_cmds_list ;;
+                q|Q) echo ""; c_white "Bye."; return 0 ;;
+                *) c_yellow "Unknown option." ; echo "" ;;
+            esac
+        done
+    }
+
+    # ── dispatch: bare "myshell" opens the menu, "myshell list" lists commands ──
+    case "$cmd" in
+        list)     do_cmds_list ;;
+        menu|"")  do_menu ;;
+        *) c_white "myshell - Framework Manager"
+           echo ""
+           printf "Usage: myshell [list]\n"
+           ;;
+    esac
 }
-export myshell
\ No newline at end of file
diff --git a/core/shells/bash/functions/shellcheck.bash b/core/shells/bash/functions/shellcheck.bash
index a97bbe5..2e43c9e 100644
--- a/core/shells/bash/functions/shellcheck.bash
+++ b/core/shells/bash/functions/shellcheck.bash
@@ -1,6 +1,5 @@
 #!/bin/bash
 shellcheck_files() {
-    cd "$(pwd)"
 	sub_dir=/tmp/"$RANDOM"
     find ./ -type f -not -path '*/.*' \( -name '*.bash' -o -name '*.sh' \) 1>"$sub_dir"
     for relative_path in $(cat "$sub_dir"); do
diff --git a/core/shells/bash/functions/shfmt.bash b/core/shells/bash/functions/shfmt.bash
index 771fc96..7db16f2 100644
--- a/core/shells/bash/functions/shfmt.bash
+++ b/core/shells/bash/functions/shfmt.bash
@@ -1,6 +1,5 @@
 #!/bin/bash
 shfmt_files() {
-	cd "$(pwd)"
 	sub_dir=/tmp/"$RANDOM"
 	# The following command does not work with hidden directories/files
 	find ./ -type d -not -path '*/.*' 1>"$sub_dir"
diff --git a/core/shells/bash/functions/yamlfmt.bash b/core/shells/bash/functions/yamlfmt.bash
index 20330f6..387c0cf 100644
--- a/core/shells/bash/functions/yamlfmt.bash
+++ b/core/shells/bash/functions/yamlfmt.bash
@@ -1,6 +1,5 @@
 #!/bin/bash
 yamlfmt_files() {
-    cd "$(pwd)"
 	sub_dir=/tmp/"$RANDOM"
     find ./ -type f -not -path '*/.*' \( -name '*.yaml' -o -name '*.yml' \) 1>"$sub_dir"
     for relative_path in $(cat "$sub_dir"); do
diff --git a/core/shells/bash/services/.hyprland-wallpaper b/core/shells/bash/services/.hyprland-wallpaper
deleted file mode 100644
index 39163fd..0000000
--- a/core/shells/bash/services/.hyprland-wallpaper
+++ /dev/null
@@ -1,50 +0,0 @@
-#!/bin/bash
-
-if ! command -v systemctl >/dev/null 2>&1; then
-    return 0 2>/dev/null || exit 0
-fi
-
-if ! command -v Hyprland >/dev/null 2>&1 && [ ! -d "$HOME/.config/hypr" ]; then
-    return 0 2>/dev/null || exit 0
-fi
-
-SERVICE_DIR="$HOME/.config/systemd/user"
-LEGACY_SERVICE_FILE="$SERVICE_DIR/hypr-wallpaper.service"
-SCRIPT_DIR="$HOME/.config/hypr"
-LEGACY_SCRIPT_FILE="$SCRIPT_DIR/wallpaper-rotation.sh"
-HYPRPAPER_CONFIG_FILE="$SCRIPT_DIR/hyprpaper.conf"
-HYPRPAPER_CONFIG_URL="https://raw.githubusercontent.com/e-lemongrab/config_files/refs/heads/master/hyprland/hyprpaper.conf"
-
-changed=0
-
-mkdir -p "$SERVICE_DIR"
-mkdir -p "$SCRIPT_DIR"
-
-if ! curl -fsSL -o "$HYPRPAPER_CONFIG_FILE" "$HYPRPAPER_CONFIG_URL" >/dev/null 2>&1; then
-    return 0 2>/dev/null || exit 0
-fi
-changed=1
-
-if systemctl --user is-enabled hypr-wallpaper.service >/dev/null 2>&1; then
-    systemctl --user disable --now hypr-wallpaper.service >/dev/null 2>&1 || true
-    changed=1
-fi
-
-if [ -f "$LEGACY_SERVICE_FILE" ]; then
-    rm -f "$LEGACY_SERVICE_FILE"
-    changed=1
-fi
-
-if [ -f "$LEGACY_SCRIPT_FILE" ]; then
-    rm -f "$LEGACY_SCRIPT_FILE"
-    changed=1
-fi
-
-if ! systemctl --user is-enabled hyprpaper.service >/dev/null 2>&1; then
-    changed=1
-fi
-
-if [ "$changed" -eq 1 ]; then
-    systemctl --user daemon-reload >/dev/null 2>&1
-    systemctl --user enable --now hyprpaper.service >/dev/null 2>&1
-fi
diff --git a/core/shells/bash/services/.nvidia-fan b/core/shells/bash/services/.nvidia-fan
deleted file mode 100644
index 234a04a..0000000
--- a/core/shells/bash/services/.nvidia-fan
+++ /dev/null
@@ -1,43 +0,0 @@
-#!/bin/bash
-
-if ! command -v systemctl >/dev/null 2>&1; then
-    return 0 2>/dev/null || exit 0
-fi
-
-SERVICE_DIR="$HOME/.config/systemd/user"
-SERVICE_FILE="$SERVICE_DIR/nvidia-fan.service"
-SCRIPT_DIR="$HOME/.config/nvidia"
-SCRIPT_FILE="$SCRIPT_DIR/nvidiafan.sh"
-
-SERVICE_URL="https://raw.githubusercontent.com/e-lemongrab/config_files/refs/heads/master/services/nvidia/nvidia-fan.service"
-SCRIPT_URL="https://raw.githubusercontent.com/e-lemongrab/config_files/refs/heads/master/services/nvidia/nvidiafan.sh"
-
-changed=0
-
-mkdir -p "$SERVICE_DIR"
-mkdir -p "$SCRIPT_DIR"
-
-if [ ! -f "$SERVICE_FILE" ]; then
-    curl -o "$SERVICE_FILE" "$SERVICE_URL" > /dev/null 2>&1 && changed=1
-fi
-
-if [ ! -f "$SCRIPT_FILE" ]; then
-    curl -o "$SCRIPT_FILE" "$SCRIPT_URL" > /dev/null 2>&1 && changed=1
-fi
-
-if [ -f "$SCRIPT_FILE" ]; then
-    chmod +x "$SCRIPT_FILE"
-fi
-
-if [ ! -f "$SCRIPT_FILE" ]; then
-    return 0 2>/dev/null || exit 0
-fi
-
-if ! systemctl --user is-enabled nvidia-fan.service >/dev/null 2>&1; then
-    changed=1
-fi
-
-if [ "$changed" -eq 1 ]; then
-    systemctl --user daemon-reload >/dev/null 2>&1
-    systemctl --user enable --now nvidia-fan.service >/dev/null 2>&1
-fi
diff --git a/modules/AGENTS.md b/modules/AGENTS.md
new file mode 100644
index 0000000..dd81edb
--- /dev/null
+++ b/modules/AGENTS.md
@@ -0,0 +1,68 @@
+# modules/ — agent guide
+
+Read the root `AGENTS.md` first. A module is only reachable through an alias in
+`core/shells/bash/aliases/.aliases` — creating files here does nothing until that alias
+exists, and an alias without its target file is invisible dead weight (`myshell list`
+hides it; `tests/validate.bash` fails on it).
+
+## Categories (current, complete)
+
+| Category | Kind | Contents |
+|---|---|---|
+| `bw/` | flat (scripts at top level) | Bitwarden CLI helpers (`bw_create`, `bw_push`, `bw_clone`). |
+| `docker/` | one dir per service | 18 compose stacks: alpine, apache, cockroach, cockroach-insecure, jira-software, k6, liferay-7.2.1-ga2, liferay-7.3.5-ga6, maven, mongodb, mysql5, mysql8, nexus, nginx, nodejs, rainloop, syslog, tomcat9. Plus 3 special dirs (see below). |
+| `help/` | one dir per topic | Cheatsheet printers (`help_docker`, `help_az`, ...). Plain bash, no deps. |
+| `john/` | one dir per attack | John the Ripper recipes. Aliases only defined when `john` binary exists. |
+| `utils/` | one dir per topic | ssl checks, cert helpers, aws, disk format, etc. |
+| `yt-dlp/` | flat | `download` alias → `yt-dlp.bash`. |
+
+Deleted, must not reappear: `k8s/`, `ssh/`, `minikube/`, `docker/openldap`, `docker/passbolt`.
+
+## Special docker dirs (no compose service)
+
+- `docker/dock/` — loose docker utility scripts. Only `dockrm.bash` has an alias
+  (`dockrm`); `dockpush.bash`, `dockpush_k8s.bash`, `dock_ports_bind.bash` are run by
+  hand. `dockrm.bash` sources `$mod_colors` (exported in `.aliases`).
+- `docker/httpd/`, `docker/vtiger/` — Dockerfile + payload only, no launcher script and
+  no alias. Do not invent launchers for them unless asked.
+
+## Docker module anatomy (the pattern every compose stack follows)
+
+```
+modules/docker/<name>/
+├── docker-compose.yaml    # service, container_name: <name>, often build: ./Docker
+├── <name>.bash            # cd "$project_path/modules/docker/<name>" && docker compose up -d --build --force-recreate
+├── <name>_exec.bash       # optional: docker exec -it <name> /bin/sh (or bash)
+├── Docker/                # build context: dockerfile + payload. Vendor files live here — do not lint/fix them.
+└── configs/ README.md     # optional
+```
+
+The exception: `k6` is a one-shot job, not a service. Its `k6.bash` asks which script
+under `scripts/` to run, then `docker compose run --rm k6 run /mnt/local/scripts/<x>/<x>.js`.
+Never convert it to `up -d`.
+
+Aliases for docker modules sit INSIDE the docker-group guard in `.aliases`
+(`if [ "$docker_groups" = "$docker_str" ]` ... `else` warning `fi`). Aliases for john sit
+inside the john guard. Everything else is unguarded.
+
+## Rules
+
+- Scripts run in a child bash: only exported vars exist. Use `$project_path`, quote it:
+  `cd "$project_path/modules/..." || exit 1`.
+- `docker compose` (plugin syntax), never `docker-compose`.
+- Compose files must pass `docker compose config --quiet` from inside the module dir —
+  the validator runs exactly that for every `modules/docker/*/docker-compose.y*ml`.
+- Machine-generated data dirs (mysql-data, logs, liferay_data, ...) are git-ignored; do
+  not commit them and do not add code that writes elsewhere in the repo.
+- Removing a module = remove its directory AND its alias line(s) in `.aliases`, then run
+  `bash tests/validate.bash` (it fails on orphan aliases).
+
+## How to verify changes here (copy-paste)
+
+```bash
+bash -n modules/docker/<name>/<name>.bash
+shellcheck modules/docker/<name>/<name>.bash        # SC2154 for project_path is expected noise
+cd modules/docker/<name> && docker compose config --quiet && cd -
+bash tests/validate.bash
+```
+Do not `docker compose up` anything as a test unless the task asks you to run it.
diff --git a/modules/bw/bws-install.bash b/modules/bw/bws-install.bash
new file mode 100755
index 0000000..a6b4303
--- /dev/null
+++ b/modules/bw/bws-install.bash
@@ -0,0 +1,12 @@
+#!/bin/bash
+# Install/update bws (Bitwarden Secrets Manager CLI) from bitwarden/sdk-sm releases.
+# Espejo de bw-install.bash. Target: x86_64 Linux (glibc/gnu). Instala en el mismo dir que bw.
+# Get latest bws release tag (bws-vX.Y.Z)
+version=$(curl -s "https://api.github.com/repos/bitwarden/sdk-sm/releases?per_page=30" | jq -r '[.[] | select(.tag_name | test("bws-v"))][0].tag_name')
+# Download latest bws (x86_64 linux gnu)
+mkdir -p "$HOME/.config/Bitwarden CLI"
+curl -s "https://api.github.com/repos/bitwarden/sdk-sm/releases?per_page=30" | jq -r '[.[] | select(.tag_name | test("bws-v"))][0].assets[] | select(.name | test("x86_64-unknown-linux-gnu")) | .browser_download_url' | head -n 1 | xargs -I {} curl -L -o "$HOME/.config/Bitwarden CLI"/bws-$version.zip {}
+# Extract content
+unzip -o "$HOME/.config/Bitwarden CLI"/bws-$version.zip -d "$HOME/.config/Bitwarden CLI"/
+rm "$HOME/.config/Bitwarden CLI"/bws-$version.zip
+chmod +x "$HOME/.config/Bitwarden CLI"/bws
diff --git a/modules/docker/alpine/Docker/Dockerfile b/modules/docker/alpine/Docker/Dockerfile
new file mode 100644
index 0000000..2f37763
--- /dev/null
+++ b/modules/docker/alpine/Docker/Dockerfile
@@ -0,0 +1,18 @@
+ARG DOCKER_REGISTRY_CACHE
+ARG IMAGE_ALPINE
+FROM $DOCKER_REGISTRY_CACHE/$IMAGE_ALPINE
+EXPOSE 27017
+# System packages
+RUN echo 'https://dl-cdn.alpinelinux.org/alpine/latest-stable/main' >> /etc/apk/repositories; \
+    echo 'https://dl-cdn.alpinelinux.org/alpine/latest-stable/community' >> /etc/apk/repositories; \
+    apk update; \
+    apk upgrade
+# Entrypoint
+COPY Docker/entrypoint.sh /entrypoint.sh
+RUN chmod +x /entrypoint.sh
+# System user and service
+RUN adduser -s /bin/sh -h /home/mongouser -D mongouser && \
+    echo "mongouser:yourpassword" | chpasswd && \
+    addgroup mongouser wheel
+USER mongouser    
+ENTRYPOINT [ "/entrypoint.sh" ]
\ No newline at end of file
diff --git a/modules/docker/apache/Dockerfile b/modules/docker/apache/Dockerfile
new file mode 100644
index 0000000..107cb69
--- /dev/null
+++ b/modules/docker/apache/Dockerfile
@@ -0,0 +1,32 @@
+#FROM rancher-sic-local.$domain_stg_ba:8090/bcnact/tomcat/8-jdk8
+FROM debian:buster-slim
+EXPOSE 80
+#EXPOSE 443
+###########             SISTEMA
+RUN apt update
+RUN apt install nano dos2unix unzip apache2 -y
+###########             COPIES
+COPY /php/ /tmp/php
+COPY entrypoint.bash /
+#COPY /prestashop/* /tmp/
+#COPY web-dump/* /tmp/
+###########             SSL
+#COPY /ssl/ /tmp/ssl
+#COPY /servername/ /tmp/servername
+#RUN sh /tmp/servername/servername.bash
+#RUN sh /tmp/ssl/ssl.bash
+###########             RUNS
+RUN dos2unix /tmp/*
+RUN sh /tmp/php/php.bash
+RUN rm -rf /var/www/html/*
+COPY /images/ /var/www/html/images
+#RUN curl --insecure -o vtigercrm.tar.gz -SL https://sourceforge.net/projects/vtigercrm/files/vtiger%20CRM%207.0.1/Core%20Product/vtigercrm7.0.1.tar.gz \
+#    && tar -xzf vtigercrm.tar.gz \
+#    && rm vtigercrm.tar.gz \
+#    && chmod -R 775 vtigercrm \
+#    && chown -R www-data:www-data vtigercrm
+#RUN echo "Donant permisos www-data a directoris"
+#RUN chown -R www-data:www-data /etc/apache2/
+#RUN chown -R www-data:www-data /var/www/html/
+#RUN chmod -R 755 /var/www/html/
+ENTRYPOINT ["/entrypoint.bash"]
\ No newline at end of file
diff --git a/modules/docker/apache/apache.bash b/modules/docker/apache/apache.bash
index 6de982e..7bf37fe 100644
--- a/modules/docker/apache/apache.bash
+++ b/modules/docker/apache/apache.bash
@@ -1,15 +1,3 @@
 #!/bin/bash
-#!/bin/bash$
-cd $HOME/Documents/bash-profile/Docker/apache
-docker network create develop
-nom_imatge="apache"
-nom_contenidor="apache"
-if [[ exists=$(docker ps -a | grep $nom_contenidor) ]]; then
-	#Neteja
-	echo "Se elimina el container"
-	docker rm $nom_contenidor -f
-	#
-fi
-docker build --rm -t $nom_imatge -f .Dockerfile .
-docker run -it --name "$nom_contenidor" -p 1000:80 --net develop -v $PWD"\tmp":/tmp $nom_imatge /bin/bash
-cd
+cd "$project_path/modules/docker/apache" || exit 1
+docker compose up -d --build --force-recreate
diff --git a/modules/docker/apache/docker-compose.yaml b/modules/docker/apache/docker-compose.yaml
new file mode 100644
index 0000000..04642d4
--- /dev/null
+++ b/modules/docker/apache/docker-compose.yaml
@@ -0,0 +1,12 @@
+services:
+  apache:
+    container_name: apache
+    build:
+      context: .
+    ports:
+      - "1000:80"
+    volumes:
+      - ./tmp:/tmp
+networks:
+  default:
+    name: develop
diff --git a/modules/docker/cockroach-insecure/Docker/Dockerfile b/modules/docker/cockroach-insecure/Docker/Dockerfile
new file mode 100644
index 0000000..0fe0a23
--- /dev/null
+++ b/modules/docker/cockroach-insecure/Docker/Dockerfile
@@ -0,0 +1,14 @@
+ARG  DOCKER_REGISTRY_CACHE
+ARG IMATGE_BASEDEDADES
+FROM $DOCKER_REGISTRY_CACHE/$IMATGE_BASEDEDADES
+#Port
+EXPOSE 26257
+#System
+RUN cp -r -f /usr/share/zoneinfo/Europe/Madrid /etc/localtime && ls -la /etc/localtime
+#BASA_DOCKER
+COPY Docker/basa-docker-entrypoint.bash /basa-docker-entrypoint.bash
+#RUN dos2unix /basa-docker-entrypoint.bash
+RUN chmod +x /basa-docker-entrypoint.bash
+ENTRYPOINT [ "/basa-docker-entrypoint.bash" ]
+#ENTRYPOINT [ "/cockroach/cockroach.bash" ]
+#CMD [ "start-single-node" ]
\ No newline at end of file
diff --git a/modules/docker/httpd/Dockerfile b/modules/docker/httpd/Dockerfile
new file mode 100644
index 0000000..c0d9980
--- /dev/null
+++ b/modules/docker/httpd/Dockerfile
@@ -0,0 +1,29 @@
+#FROM rancher-sic-local.$domain_stg_ba:8090/bcnact/tomcat/8-jdk8
+FROM httpd:latest
+EXPOSE 80
+#EXPOSE 443
+###########             SISTEMA
+RUN apt update
+RUN apt install nano dos2unix -y
+###########             COPIES
+COPY entrypoint.bash /
+#COPY /prestashop/* /tmp/
+#COPY web-dump/* /tmp/
+###########             SSL
+#COPY /ssl/ /tmp/ssl
+#COPY /servername/ /tmp/servername
+#RUN sh /tmp/servername/servername.bash
+#RUN sh /tmp/ssl/ssl.bash
+###########             RUNS
+RUN rm -rf /var/www/html/*
+COPY /images/ /usr/local/apache2/htdocs
+#RUN curl --insecure -o vtigercrm.tar.gz -SL https://sourceforge.net/projects/vtigercrm/files/vtiger%20CRM%207.0.1/Core%20Product/vtigercrm7.0.1.tar.gz \
+#    && tar -xzf vtigercrm.tar.gz \
+#    && rm vtigercrm.tar.gz \
+#    && chmod -R 775 vtigercrm \
+#    && chown -R www-data:www-data vtigercrm
+#RUN echo "Donant permisos www-data a directoris"
+#RUN chown -R www-data:www-data /etc/apache2/
+#RUN chown -R www-data:www-data /var/www/html/
+#RUN chmod -R 755 /var/www/html/
+ENTRYPOINT ["/entrypoint.bash"]
\ No newline at end of file
diff --git a/modules/docker/httpd/httpd.ps1 b/modules/docker/httpd/httpd.ps1
deleted file mode 100644
index ac7b644..0000000
--- a/modules/docker/httpd/httpd.ps1
+++ /dev/null
@@ -1,20 +0,0 @@
-Set-Location $PATH\Docker\httpd\
-$DOCKER_REGISTRY_CACHE = "docker.io"
-docker login $DOCKER_REGISTRY_CACHE
-docker network create develop
-$nom_imatge="httpd"
-#Càrrega del contenidor
-$nom_contenidor="httpd"
-if (docker ps -a | Select-String $nom_contenidor) {
-        #Neteja
-        Write-Output "Se elimina el container"
-        docker rm $nom_contenidor -f
-        #
-}
-#Creació de la imatge
-docker build --rm -t $nom_imatge -f $PWD\.Dockerfile .
-#docker run --name "$nom_contenidor" $nom_imatge
-docker run -it --name "$nom_contenidor" -p 1000:80 --net develop -v $PWD"\tmp":/tmp  $nom_imatge /bin/bash
-#Write-Host "https://localhost:9000/sample"
-#docker exec -it "$nom_contenidor" /bin/bash
-Set-Location $HOME 
\ No newline at end of file
diff --git a/modules/docker/jira-software/Docker/Dockerfile b/modules/docker/jira-software/Docker/Dockerfile
new file mode 100644
index 0000000..c614742
--- /dev/null
+++ b/modules/docker/jira-software/Docker/Dockerfile
@@ -0,0 +1,19 @@
+ARG  DOCKER_REGISTRY_CACHE
+ARG JIRA_IMAGE
+FROM $DOCKER_REGISTRY_CACHE/$JIRA_IMAGE
+#Ports
+EXPOSE 8080
+EXPOSE 8081
+#System
+RUN apt update -y;apt upgrade -y
+RUN apt install dos2unix cron -y
+#COPY FILES
+COPY Docker/crontab /var/spool/cron/crontabs/root
+COPY Docker/1-download-files.bash /
+COPY Docker/3-remove-files.bash /
+RUN chmod +x /*.bash
+#ENTRYPOINT
+#COPY Docker/docker-entrypoint.bash /docker-entrypoint.bash
+#RUN dos2unix /*.bash
+#CMD ["/entrypoint.py"]
+#ENTRYPOINT [ "/docker-entrypoint.bash" ]
\ No newline at end of file
diff --git a/modules/docker/k6/docker-compose.yaml b/modules/docker/k6/docker-compose.yaml
new file mode 100644
index 0000000..39036fc
--- /dev/null
+++ b/modules/docker/k6/docker-compose.yaml
@@ -0,0 +1,10 @@
+services:
+  k6:
+    image: grafana/k6
+    extra_hosts:
+      - "host.docker.internal:host-gateway"
+    volumes:
+      - ./:/mnt/local
+networks:
+  default:
+    name: k6
diff --git a/modules/docker/k6/k6.bash b/modules/docker/k6/k6.bash
new file mode 100644
index 0000000..a28d21d
--- /dev/null
+++ b/modules/docker/k6/k6.bash
@@ -0,0 +1,20 @@
+#!/bin/bash
+cd "$project_path/modules/docker/k6" || exit 1
+
+# Neteja de contenidors k6 antics (de la versio ps1)
+if docker ps -a --format '{{.Names}}' | grep -qx "k6"; then
+    echo "Se elimina el container"
+    docker rm -f k6
+fi
+
+echo "Serveis per analitzar:"
+ls scripts/
+read -rp "Seleccioneu el que voleu fer: " entorn
+
+if [ ! -f "scripts/$entorn/$entorn.js" ]; then
+    echo "No existeix scripts/$entorn/$entorn.js"
+    exit 1
+fi
+
+docker compose run --rm k6 run "/mnt/local/scripts/$entorn/$entorn.js"
+# --out csv=/mnt/local/scripts/$entorn/$entorn.csv
diff --git a/modules/docker/k6/k6.ps1 b/modules/docker/k6/k6.ps1
deleted file mode 100644
index 486298a..0000000
--- a/modules/docker/k6/k6.ps1
+++ /dev/null
@@ -1,19 +0,0 @@
-Set-Location $project_path\modules\docker\k6\
-$nom_contenidor="k6"
-if (docker ps -a | Select-String $nom_contenidor) {
-        #Neteja
-        Write-Output "Se elimina el container"
-        docker rm $nom_contenidor -f
-        #
-}
-Write-Host "Serveis per analitzar"
-Get-ChildItem .\scripts
-$entorn = Read-Host "Seleccioneu el que voleu fer"
-#$IMATGE="loadimpact/k6:latest"
-$IMATGE="grafana/k6"
-docker network create k6
-docker run -it --add-host=host.docker.internal:host-gateway --name "$nom_contenidor" `
-        -v $project_path/modules/docker/k6/:/mnt/local $IMATGE `
-        run /mnt/local/scripts/$entorn/$entorn.js `
-        #--out csv=/mnt/local/scripts/$entorn/$entorn.csv
-Set-Location $HOME 
\ No newline at end of file
diff --git a/modules/docker/liferay-7.2.1-ga2/Docker/Dockerfile b/modules/docker/liferay-7.2.1-ga2/Docker/Dockerfile
new file mode 100644
index 0000000..36b1c96
--- /dev/null
+++ b/modules/docker/liferay-7.2.1-ga2/Docker/Dockerfile
@@ -0,0 +1,16 @@
+ARG DOCKER_REGISTRY_CACHE
+ARG IMATGE_APLICACIO
+FROM $DOCKER_REGISTRY_CACHE/$IMATGE_APLICACIO
+EXPOSE 8080
+COPY Docker/basa-docker-entrypoint.bash /basa-docker-entrypoint.bash
+#-------------------------------------------------
+COPY Docker/PreparaImatge.bash /
+COPY Docker/setenv.bash /opt/liferay/tomcat/bin/setenv.bash
+USER root
+RUN . /PreparaImatge.bash
+RUN chown liferay:liferay /opt/liferay/tomcat/bin/setenv.bash && dos2unix /opt/liferay/tomcat/bin/setenv.bash
+#-------------------------------------------------
+#COPY src/???? /???/???
+COPY RELEASE.txt /etc
+ENTRYPOINT [ "bash" ]
+CMD [ "/basa-docker-entrypoint.bash" ]
diff --git a/modules/docker/liferay-7.3.5-ga6/Docker/Dockerfile b/modules/docker/liferay-7.3.5-ga6/Docker/Dockerfile
new file mode 100644
index 0000000..ba072fa
--- /dev/null
+++ b/modules/docker/liferay-7.3.5-ga6/Docker/Dockerfile
@@ -0,0 +1,27 @@
+ARG DOCKER_REGISTRY_CACHE
+ARG IMATGE_APLICACIO
+FROM $DOCKER_REGISTRY_CACHE/$IMATGE_APLICACIO
+EXPOSE 8080
+#-------------------------------------------------
+#-- Arguments del sistema després del FROM --
+#-------------------------------------------------
+#ARG DIR_SIC
+#ARG DIR_CREA_IMATGE
+#----------------Per treballar en local-----------
+COPY Docker/basa-docker-entrypoint.bash /basa-docker-entrypoint.bash
+#----------------Configuracions imatge------------
+COPY Docker/PreparaImatge.bash /
+COPY Docker/setenv.bash /opt/liferay/tomcat/bin/setenv.bash
+COPY Docker/catalina.sh /opt/liferay/tomcat/bin/catalina.sh
+COPY Docker/portal-log4j-ext.xml /opt/liferay/tomcat/webapps/ROOT/WEB-INF/classes/META-INF/portal-log4j-ext.xml
+COPY Docker/portal-ext.properties /opt/liferay
+USER root
+RUN . /PreparaImatge.bash
+RUN chown liferay:liferay /opt/liferay/tomcat/bin/setenv.bash && dos2unix /opt/liferay/tomcat/bin/setenv.bash
+RUN chown liferay:liferay /opt/liferay/tomcat/bin/catalina.sh && dos2unix /opt/liferay/tomcat/bin/catalina.sh
+RUN chown liferay:liferay /opt/liferay/tomcat/webapps/ROOT/WEB-INF/classes/META-INF/portal-log4j-ext.xml && dos2unix /opt/liferay/tomcat/webapps/ROOT/WEB-INF/classes/META-INF/portal-log4j-ext.xml
+RUN chown liferay:liferay /opt/liferay/portal-ext.properties && dos2unix /opt/liferay/portal-ext.properties
+#-------------------------------------------------
+COPY RELEASE.txt /etc
+ENTRYPOINT [ "sh" ]
+CMD [ "/basa-docker-entrypoint.bash" ]
diff --git a/modules/docker/maven/Docker/Dockerfile b/modules/docker/maven/Docker/Dockerfile
new file mode 100644
index 0000000..02794a7
--- /dev/null
+++ b/modules/docker/maven/Docker/Dockerfile
@@ -0,0 +1,11 @@
+ARG  DOCKER_REGISTRY_CACHE
+ARG IMAGE_MAVEN
+FROM $DOCKER_REGISTRY_CACHE/$IMAGE_MAVEN
+RUN mkdir -p /usr/src/dependencies
+RUN mkdir -p ~/.m2/
+WORKDIR /usr/src/dependencies
+COPY env/pom.xml /usr/src/dependencies
+COPY env/settings.xml /usr/share/maven/conf/settings.xml
+COPY Docker/entrypoint.sh /entrypoint.sh
+RUN chmod +x /entrypoint.sh
+ENTRYPOINT ["/entrypoint.sh"]
diff --git a/modules/docker/mongodb/Docker/Dockerfile b/modules/docker/mongodb/Docker/Dockerfile
new file mode 100644
index 0000000..bad8701
--- /dev/null
+++ b/modules/docker/mongodb/Docker/Dockerfile
@@ -0,0 +1,40 @@
+ARG DOCKER_REGISTRY_CACHE
+ARG IMAGE_OPENSUSELEAP
+FROM $DOCKER_REGISTRY_CACHE/$IMAGE_OPENSUSELEAP
+ARG TARGETARCH
+ARG TARGETOS
+ENV TARGETARCH=${TARGETARCH}
+ENV TARGETOS=${TARGETOS}
+
+
+# Expose MongoDB port
+EXPOSE 27017
+
+# Install MongoDB
+RUN rpm --import https://pgp.mongodb.com/server-8.0.asc && \
+    zypper addrepo --gpgcheck "https://repo.mongodb.org/zypper/suse/15/mongodb-org/8.0/x86_64/" mongodb && \
+    # zypper refresh && \
+    # zypper update -y && \
+    zypper -n install mongodb-org
+
+# Add system user and group for MongoDB
+# RUN groupadd -g 1001 mongouser && \
+#     useradd -m -s /bin/bash -u 1001 -g mongouser mongouser && \
+#     echo "mongouser:yourpassword" | chpasswd
+RUN useradd -m -s /bin/bash -u 1002 -g mongod mongouser
+    
+# Create /data/db directory and ensure it's owned by mongouser
+RUN mkdir -p /data/db && \
+    chown -R mongouser:mongod /data/db && \
+    chmod -R 760 /data/db
+
+# Set up entrypoint script
+COPY Docker/entrypoint.sh /entrypoint.sh
+RUN chown mongouser:mongod /entrypoint.sh && \
+    chmod +x /entrypoint.sh
+
+# Switch to non-root user
+USER mongouser
+
+# Use the entrypoint
+ENTRYPOINT [ "/entrypoint.sh" ]
\ No newline at end of file
diff --git a/modules/docker/mysql5/Docker/Dockerfile b/modules/docker/mysql5/Docker/Dockerfile
new file mode 100644
index 0000000..3395ae1
--- /dev/null
+++ b/modules/docker/mysql5/Docker/Dockerfile
@@ -0,0 +1,18 @@
+ARG  DOCKER_REGISTRY_CACHE
+ARG IMAGE_MYSQL5
+FROM $DOCKER_REGISTRY_CACHE/$IMAGE_MYSQL5
+#Port
+EXPOSE 3306
+#System
+# RUN yum update -y
+RUN yum install dos2unix -y
+RUN cp -r -f /usr/share/zoneinfo/Europe/Madrid /etc/localtime && ls -la /etc/localtime
+# BASA_DOCKER
+COPY Docker/custom-docker-entrypoint.bash /custom-docker-entrypoint.bash
+RUN dos2unix /custom-docker-entrypoint.bash
+COPY configs /tmp/configs
+RUN dos2unix /custom-docker-entrypoint.bash && dos2unix /tmp/configs/**/*.* && chmod +x /custom-docker-entrypoint.bash
+RUN chmod +x /custom-docker-entrypoint.bash
+CMD [ "/custom-docker-entrypoint.bash" ]
+# ENTRYPOINT ["docker-entrypoint.sh"]
+# CMD ["mysqld"]
\ No newline at end of file
diff --git a/modules/docker/mysql8/Docker/Dockerfile b/modules/docker/mysql8/Docker/Dockerfile
new file mode 100644
index 0000000..1548c8b
--- /dev/null
+++ b/modules/docker/mysql8/Docker/Dockerfile
@@ -0,0 +1,18 @@
+ARG  DOCKER_REGISTRY_CACHE
+ARG IMAGE_MYSQL8
+FROM $DOCKER_REGISTRY_CACHE/$IMAGE_MYSQL8
+#Port
+EXPOSE 3306
+#System
+RUN microdnf update -y
+RUN microdnf upgrade -y
+RUN microdnf install dos2unix -y
+RUN cp -r -f /usr/share/zoneinfo/Europe/Madrid /etc/localtime && ls -la /etc/localtime
+#BASA_DOCKER
+COPY Docker/custom-docker-entrypoint.bash /custom-docker-entrypoint.bash
+RUN dos2unix /custom-docker-entrypoint.bash
+COPY configs /tmp/configs
+RUN dos2unix /custom-docker-entrypoint.bash && dos2unix /tmp/configs/**/*.* && chmod +x /custom-docker-entrypoint.bash
+CMD [ "/custom-docker-entrypoint.bash" ]
+# ENTRYPOINT ["docker-entrypoint.sh"]
+# CMD ["mysqld"]
\ No newline at end of file
diff --git a/modules/docker/nexus/docker-compose.yaml b/modules/docker/nexus/docker-compose.yaml
index ad3247c..f3e5c65 100644
--- a/modules/docker/nexus/docker-compose.yaml
+++ b/modules/docker/nexus/docker-compose.yaml
@@ -1,4 +1,3 @@
-version: '3.7'
 services:
   nexus:
     container_name: nexus
diff --git a/modules/docker/nginx/Docker/Dockerfile b/modules/docker/nginx/Docker/Dockerfile
new file mode 100644
index 0000000..b917871
--- /dev/null
+++ b/modules/docker/nginx/Docker/Dockerfile
@@ -0,0 +1,13 @@
+ARG  DOCKER_REGISTRY_CACHE
+ARG NGINX_IMAGE
+FROM $DOCKER_REGISTRY_CACHE/$NGINX_IMAGE
+#Ports
+EXPOSE 80
+#System
+RUN apt update -y;apt upgrade -y
+RUN apt install dos2unix -y
+#ENTRYPOINT
+COPY Docker/docker-entrypoint.bash /docker-entrypoint.bash
+RUN chmod +x /*.bash
+RUN dos2unix /*.bash
+ENTRYPOINT [ "/docker-entrypoint.bash" ]
\ No newline at end of file
diff --git a/modules/docker/nodejs/Docker/Dockerfile b/modules/docker/nodejs/Docker/Dockerfile
new file mode 100644
index 0000000..609fbc2
--- /dev/null
+++ b/modules/docker/nodejs/Docker/Dockerfile
@@ -0,0 +1,24 @@
+ARG  DOCKER_REGISTRY_CACHE
+ARG JIRA_IMAGE
+FROM $DOCKER_REGISTRY_CACHE/$JIRA_IMAGE
+#Ports
+EXPOSE 8020
+#System
+RUN apt update -y;apt upgrade -y
+RUN apt install nano dos2unix cron  curl gpg gnupg2 software-properties-common apt-transport-https lsb-release ca-certificates -y
+RUN mkdir -p /etc/apt/keyrings
+RUN curl -fsSL https://deb.nodesource.com/gpgkey/nodesource-repo.gpg.key | gpg --dearmor -o /etc/apt/keyrings/nodesource.gpg
+RUN NODE_MAJOR=20
+RUN echo "deb [signed-by=/etc/apt/keyrings/nodesource.gpg] https://deb.nodesource.com/node_$NODE_MAJOR.x nodistro main" | tee /etc/apt/sources.list.d/nodesource.list
+RUN apt install nodejs -y
+#COPY FILES
+#COPY Docker/crontab /var/spool/cron/crontabs/root
+#Nodejs
+RUN mkdir /api
+COPY Docker/*.js /api/
+#
+#ENTRYPOINT
+WORKDIR /api
+COPY Docker/docker-entrypoint.bash /docker-entrypoint.bash
+RUN dos2unix /*.bash
+ENTRYPOINT ["/docker-entrypoint.bash"]
\ No newline at end of file
diff --git a/modules/docker/rainloop/Docker/Dockerfile b/modules/docker/rainloop/Docker/Dockerfile
new file mode 100644
index 0000000..f5dc82d
--- /dev/null
+++ b/modules/docker/rainloop/Docker/Dockerfile
@@ -0,0 +1,14 @@
+ARG  DOCKER_REGISTRY_CACHE
+ARG IMATGE_BASE
+FROM $DOCKER_REGISTRY_CACHE/$IMATGE_BASE
+EXPOSE 80
+RUN apt update;
+RUN apt upgrade -y;
+RUN apt install nano unzip curl php php-curl php-dom php-xml -y;
+COPY Docker/rainloop-install.bash /rainloop-install.bash
+COPY Docker/docker-entrypoint.bash /docker-entrypoint.bash
+RUN chmod +x /docker-entrypoint.bash
+RUN chmod +x /rainloop-install.bash
+WORKDIR /usr/local/apache2/htdocs/
+CMD [ "/docker-entrypoint.bash" ]
+ENTRYPOINT [ "/bin/bash" ]
\ No newline at end of file
diff --git a/modules/docker/syslog/Docker/Dockerfile b/modules/docker/syslog/Docker/Dockerfile
new file mode 100644
index 0000000..3bd594c
--- /dev/null
+++ b/modules/docker/syslog/Docker/Dockerfile
@@ -0,0 +1,11 @@
+ARG DOCKER_REGISTRY_CACHE
+ARG IMATGE_APLICACIO
+FROM $DOCKER_REGISTRY_CACHE/$IMATGE_APLICACIO
+#RUN apk update && apk add git dos2unix curl nano -f
+#RUN apt update; apt upgrade -y
+RUN apt install crontab -y
+COPY Docker/basa-docker-entrypoint.bash /
+#COPY Docker/root /etc/crontabs/root
+#RUN dos2unix /basa-docker-entrypoint.bash
+#RUN dos2unix /etc/crontabs/root
+ENTRYPOINT ["/basa-docker-entrypoint.bash"]
\ No newline at end of file
diff --git a/modules/docker/tomcat9/Docker/Dockerfile b/modules/docker/tomcat9/Docker/Dockerfile
new file mode 100644
index 0000000..cf646c5
--- /dev/null
+++ b/modules/docker/tomcat9/Docker/Dockerfile
@@ -0,0 +1,13 @@
+ARG  DOCKER_REGISTRY_CACHE
+ARG IMATGE_APLICACIO
+FROM $DOCKER_REGISTRY_CACHE/$IMATGE_APLICACIO
+EXPOSE 8443
+#OS SW
+#COPY volum/mysql-connector-java-8.0.25.jar /usr/local/tomcat/lib
+#
+COPY Docker/entrypoint.bash /
+#COPY Docker/certs /certs
+COPY Docker/entorns /tpm/entorns
+COPY Docker/volum/server.xml /usr/local/tomcat/conf/
+COPY Docker/volum/sample.war /usr/local/tomcat/webapps/
+ENTRYPOINT ["/entrypoint.bash"]
\ No newline at end of file
diff --git a/modules/docker/vtiger/Dockerfile b/modules/docker/vtiger/Dockerfile
new file mode 100644
index 0000000..536d758
--- /dev/null
+++ b/modules/docker/vtiger/Dockerfile
@@ -0,0 +1,48 @@
+#FROM php:5.6-apache
+FROM php:7.2.0-apache
+EXPOSE 80
+
+RUN a2enmod rewrite expires
+
+# install the PHP extensions we need
+#RUN apt-get update && apt-get install -y --force-yes libpng12-dev libjpeg-dev libkrb5-dev
+#    && docker-php-ext-configure gd --with-png-dir=/usr --with-jpeg-dir=/usr \
+#    && docker-php-ext-install gd mysqli \
+#    && apt-get -y install libssl-dev libc-client2007e-dev libkrb5-dev \
+#    && docker-php-ext-configure imap --with-imap-ssl --with-kerberos \
+#    && docker-php-ext-install imap opcache \
+#    && rm -rf /var/lib/apt/lists/*
+
+# setting the recommended for vtiger
+RUN { \
+        echo 'display_errors=On'; \
+        echo 'max_execution_time=0'; \
+        echo 'error_reporting=E_WARNING & ~E_NOTICE & ~E_DEPRECATED'; \
+        echo 'log_errors=Off'; \
+        echo 'short_open_tag=On'; \
+    } > /usr/local/etc/php/conf.d/vtiger-recommended.ini
+
+# setting the reccomended for opcache
+# https://secure.php.net/manual/en/opcache.installation.php
+RUN { \
+        echo 'opcache.memory_consumption=128'; \
+        echo 'opcache.interned_strings_buffer=8'; \
+        echo 'opcache.max_accelerated_files=4000'; \
+        echo 'opcache.revalidate_freq=60'; \
+        echo 'opcache.fast_shutdown=1'; \
+        echo 'opcache.enable_cli=1'; \
+    } > /usr/local/etc/php/conf.d/opcache-recommended.ini
+
+WORKDIR /var/www/html
+
+RUN curl --insecure -o vtigercrm.tar.gz -SL https://sourceforge.net/projects/vtigercrm/files/vtiger%20CRM%207.0.1/Core%20Product/vtigercrm7.0.1.tar.gz \
+    && tar -xzf vtigercrm.tar.gz \
+    && rm vtigercrm.tar.gz \
+    && chmod -R 775 vtigercrm \
+    && chown -R www-data:www-data vtigercrm
+
+COPY entrypoint.bash /entrypoint.bash
+
+ENTRYPOINT ["/entrypoint.bash"]
+
+CMD ["apache2-foreground"]
\ No newline at end of file
diff --git a/modules/docker/vtiger/vtiger.ps1 b/modules/docker/vtiger/vtiger.ps1
deleted file mode 100644
index 8478cfc..0000000
--- a/modules/docker/vtiger/vtiger.ps1
+++ /dev/null
@@ -1,20 +0,0 @@
-Set-Location $PATH\Docker\vtiger\
-$DOCKER_REGISTRY_CACHE = "docker.io"
-docker login $DOCKER_REGISTRY_CACHE
-docker network create develop
-#Creació de la imatge
-$nom_imatge="vtiger"
-docker build --rm -t $nom_imatge -f $PWD\.Dockerfile .
-#Càrrega del contenidor
-$nom_contenidor="vtiger"
-#docker run --name "$nom_contenidor" $nom_imatge
-docker run -it --name "$nom_contenidor" -p 10010:80 --net develop -v $PWD"\tmp":/tmp  $nom_imatge /bin/bash
-#Write-Host "https://localhost:9000/sample"
-#docker exec -it "$nom_contenidor" /bin/bash
-#Neteja
-        Write-Output "Se elimina el container"
-        docker stop "$nom_contenidor"
-        docker rmi -f $nom_imatge
-        docker container rm $nom_contenidor
-#
-Set-Location $HOME 
\ No newline at end of file
diff --git a/modules/k8s/env/k3s/gitlab/gitlab-gitlab-runner-secret.yaml b/modules/k8s/env/k3s/gitlab/gitlab-gitlab-runner-secret.yaml
deleted file mode 100644
index ca8d69c..0000000
--- a/modules/k8s/env/k3s/gitlab/gitlab-gitlab-runner-secret.yaml
+++ /dev/null
@@ -1,14 +0,0 @@
-apiVersion: v1
-data:
-  runner-registration-token: dWFCanpDSHdIWk1lc3YtZHlQcFE=
-  runner-token: ""
-kind: Secret
-metadata:
-  labels:
-    app: gitlab
-    chart: gitlab-6.8.3
-    heritage: Helm
-    release: gitlab
-  name: gitlab-gitlab-runner-secret
-  namespace: gitlab-ce
-type: Opaque
diff --git a/modules/k8s/env/k3s/gitlab/gitlab-rails-secret.yaml b/modules/k8s/env/k3s/gitlab/gitlab-rails-secret.yaml
deleted file mode 100644
index c4debef..0000000
--- a/modules/k8s/env/k3s/gitlab/gitlab-rails-secret.yaml
+++ /dev/null
@@ -1,13 +0,0 @@
-apiVersion: v1
-data:
-  secrets.yml: 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
-kind: Secret
-metadata:
-  labels:
-    app: gitlab
-    chart: gitlab-6.8.3
-    heritage: Helm
-    release: gitlab
-  name: gitlab-rails-secret
-  namespace: gitlab-ce
-type: Opaque
diff --git a/modules/k8s/env/k3s/gitlab/intra-cert.yaml b/modules/k8s/env/k3s/gitlab/intra-cert.yaml
deleted file mode 100644
index 9ef8f18..0000000
--- a/modules/k8s/env/k3s/gitlab/intra-cert.yaml
+++ /dev/null
@@ -1,9 +0,0 @@
-apiVersion: v1
-data:
-  tls.crt: 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
-  tls.key: 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
-kind: Secret
-metadata:
-  name: intra-cert
-  namespace: gitlab-ce
-type: kubernetes.io/tls
diff --git a/modules/k8s/env/k3s/gitlab/storage-s3-task-cfg.yaml b/modules/k8s/env/k3s/gitlab/storage-s3-task-cfg.yaml
deleted file mode 100644
index edc8e72..0000000
--- a/modules/k8s/env/k3s/gitlab/storage-s3-task-cfg.yaml
+++ /dev/null
@@ -1,8 +0,0 @@
-apiVersion: v1
-data:
-  config: W2RlZmF1bHRdCmFjY2Vzc19rZXkgPSBnaXRsYWIKc2VjcmV0X2tleSA9IHZOd1ZCNDhtaDVDa1U0YjJocmFVVFU4RzEzZk84CmJ1Y2tldF9sb2NhdGlvbiA9IHVzLWVhc3QtMQpob3N0X2Jhc2UgPSBzdG9yZS5pbnRyYS5iYXJjZWxvbmFjdGl2YS5jYXQKaG9zdF9idWNrZXQgPSBzdG9yZS5pbnRyYS5iYXJjZWxvbmFjdGl2YS5jYXQvJShidWNrZXQpCmRlZmF1bHRfbWltZV90eXBlID0gYmluYXJ5L29jdGV0LXN0cmVhbQplbmFibGVfbXVsdGlwYXJ0ID0gVHJ1ZQptdWx0aXBhcnRfbWF4X2NodW5rcyA9IDEwMDAwCm11bHRpcGFydF9jaHVua19zaXplX21iID0gMTI4CnJlY3Vyc2l2ZSA9IFRydWUKcmVjdl9jaHVuayA9IDY1NTM2CnNlbmRfY2h1bmsgPSA2NTUzNgpzZXJ2ZXJfc2lkZV9lbmNyeXB0aW9uID0gRmFsc2UKc2lnbmF0dXJlX3YyID0gVHJ1ZQpzb2NrZXRfdGltZW91dCA9IDMwMAp1c2VfbWltZV9tYWdpYyA9IEZhbHNlCnZlcmJvc2l0eSA9IFdBUk5JTkcKd2Vic2l0ZV9lbmRwb2ludCA9IGh0dHBzOi8vc3RvcmUuaW50cmEuYmFyY2Vsb25hY3RpdmEuY2F0OjkwMDA=
-kind: Secret
-metadata:
-  name: storage-s3-task-cfg
-  namespace: gitlab-ce
-type: Opaque
diff --git a/modules/k8s/env/k3s/gitlab/storage-s3.yaml b/modules/k8s/env/k3s/gitlab/storage-s3.yaml
deleted file mode 100644
index ff34ea4..0000000
--- a/modules/k8s/env/k3s/gitlab/storage-s3.yaml
+++ /dev/null
@@ -1,8 +0,0 @@
-apiVersion: v1
-data:
-  config: cHJvdmlkZXI6IEFXUwpyZWdpb246IHVzLWVhc3QtMQphd3NfYWNjZXNzX2tleV9pZDogZ2l0bGFiCmF3c19zZWNyZXRfYWNjZXNzX2tleTogdk53VkI0OG1oNUNrVTRiMmhyYVVUVThHMTNmTzgKYXdzX3NpZ25hdHVyZV92ZXJzaW9uOiA0Cmhvc3Q6IHN0b3JlLmludHJhLmJhcmNlbG9uYWN0aXZhLmNhdAplbmRwb2ludDogImh0dHA6Ly9taW5pby1wdWJsaWMtc3ZjLm1pbmlvLnN2Yzo5MDAwIgpwYXRoX3N0eWxlOiB0cnVl
-kind: Secret
-metadata:
-  name: storage-s3
-  namespace: gitlab-ce
-type: Opaque
diff --git a/modules/k8s/env/k3s/gitlab/values.yml b/modules/k8s/env/k3s/gitlab/values.yml
deleted file mode 100644
index 919deeb..0000000
--- a/modules/k8s/env/k3s/gitlab/values.yml
+++ /dev/null
@@ -1,734 +0,0 @@
-# Versió chart:
-# 5.0.2
-# Document original
-# https://gitlab.com/gitlab-org/charts/gitlab/-/blob/master/values.yaml
-global:
-  common:
-    labels: {}
-  operator:
-    enabled: false
-    rollout:
-      autoPause: true
-  pod:
-    labels: {}
-  # Edició Gitlab
-  edition: ce
-  # Versió Gitlab
-  #gitlabVersion: 13.8.1
-  #gitlabVersion: 13.12.6
-  #gitlabVersion: 14.0.1
-  gitlabVersion: 15.8.3
-  application:
-    create: false
-    links: []
-    allowClusterRoles: true
-    # Configuracions per URL's 
-    # https://docs.gitlab.com/charts/charts/globals#configure-host-settings
-  hosts:
-    domain: domain.com
-    hostSuffix:
-    https: true
-    externalIP:
-    gitlab:
-      name: git.domain.com
-      https: true
-    registry:
-      name: r-gitlab2.domain.com
-      https: true
-    minio:
-      name: m-gitlab2.domain.com
-      https: true
-    smartcard:
-      name: s-gitlab2.domain.com
-    kas:
-      name: k-gitlab2.domain.com
-    pages:
-      name: p-gitlab2.domain.com
-      https: true
-  # Edició ingress, cal tenir generat el secret del certificat per al domini (secretName)
-  # https://docs.gitlab.com/charts/charts/globals#configure-ingress-settings
-  ingress:
-    configureCertmanager: false
-    provider: nginx
-    annotations: {}
-    enabled: true
-    tls:
-      enabled: true
-      secretName: intra-cert
-    path: /
-    pathType: Prefix
-    class: 'nginx'
-  gitlab:
-    license: {}
-  # Contrasenya inicial per usuari root
-  initialRootPassword:
-    secret: gitlab-gitlab-initial-root-password
-    key: password
-  psql:
-    connectTimeout:
-    password: {}
-  redis:
-    password:
-      enabled: true
-  # Configuracions per Gitaly
-  # https://docs.gitlab.com/charts/charts/globals#configure-gitaly-settings
-  gitaly:
-    # Dades de projectes, en volum (per defecte en host)
-    persistence:
-      enabled: true
-      storageClass: longhorn
-      accessMode: ReadWriteOnce
-      size: 5Gi
-      matchLabels: {}
-      matchExpressions: []
-      subPath: "/data"
-      annotations: {}
-    enabled: true
-    authToken: {}
-    internal:
-      names: ['default']
-    external: []
-    service:
-      name: gitaly
-      type: ClusterIP
-      externalPort: 8075
-      internalPort: 8075
-      tls:
-        externalPort: 8076
-        internalPort: 8076
-    tls:
-      enabled: false
-  praefect:
-    enabled: false
-    replaceInternalGitaly: true
-    authToken: {}
-    autoMigrate: true
-    dbSecret: {}
-    virtualStorages:
-      - name: default
-        # Repliques de gitaly
-        gitalyReplicas: 2
-        maxUnavailable: 1
-    psql:
-      sslMode: 'disable'
-    service:
-      name: praefect
-      type: ClusterIP
-      externalPort: 8075
-      internalPort: 8075
-      tls:
-        externalPort: 8076
-        internalPort: 8076
-    tls:
-      enabled: false
-  minio:
-    enabled: false
-    credentials: {}
-  grafana:
-    enabled: false
-  appConfig:
-    enableUsagePing: true
-    enableSeatLink: true
-    enableImpersonation:
-    applicationSettingsCacheSeconds: 60
-    defaultCanCreateGroup: true
-    usernameChangingEnabled: true
-    issueClosingPattern:
-    defaultTheme:
-    defaultProjectsFeatures:
-      issues: true
-      mergeRequests: true
-      wiki: false
-      snippets: true
-      builds: true
-    webhookTimeout:
-    maxRequestDurationSeconds:
-    cron_jobs:
-      expire_build_artifacts_worker:
-        cron: "*/7 * * * *"
-      repository_check_worker:
-        cron: "20 * * * *"
-      repository_archive_cache_worker:
-        cron: "0 * * * *"
-    contentSecurityPolicy:
-      enabled: false
-      report_only: true
-    gravatar:
-      plainUrl:
-      sslUrl:
-    extra:
-      googleAnalyticsId:
-      matomoUrl:
-      matomoSiteId:
-      matomoDisableCookies:
-    # Connexió amb s3 i definició buckets
-    # https://docs.gitlab.com/charts/charts/globals#lfs-artifacts-uploads-packages-external-mr-diffs
-    object_store:
-      enabled: true
-      proxy_download: true
-      storage_options: {}
-      connection:
-        secret: storage-s3
-        key: config
-    lfs:
-      enabled: true
-      proxy_download: true
-      bucket: gitlab-lfs
-      connection: {}
-    artifacts:
-      enabled: true
-      proxy_download: true
-      bucket: gitlab-artifacts
-      connection: {}
-    uploads:
-      enabled: true
-      proxy_download: true
-      bucket: gitlab-uploads
-      connection: {}
-    packages:
-      enabled: true
-      proxy_download: true
-      bucket: gitlab-packages
-      connection: {}
-    externalDiffs:
-      enabled: true
-      when:
-      proxy_download: true
-      bucket: gitlab-mr-diffs
-      connection: {}
-    terraformState:
-      enabled: true
-      bucket: gitlab-terraform-state
-      connection: {}
-    dependencyProxy:
-      enabled: true
-      proxy_download: true
-      bucket: gitlab-dependency-proxy
-      connection: {}
-    pseudonymizer:
-      configMap:
-      bucket: gitlab-pseudo
-      connection: {}
-    backups:
-      bucket: gitlab-backups
-      tmpBucket: gitlab-tmp-backup
-    incomingEmail:
-      enabled: false
-      address: ""
-      host: "imap.gmail.com"
-      port: 993
-      ssl: true
-      startTls: false
-      user: ""
-      password:
-        secret: ""
-        key: password
-      expungeDeleted: false
-      logger:
-        logPath: "/dev/stdout"
-      mailbox: inbox
-      idleTimeout: 60
-      inboxMethod: "imap"
-      clientSecret:
-        key: secret
-      pollInterval: 60
-    serviceDeskEmail:
-      enabled: false
-      address: ""
-      host: "imap.gmail.com"
-      port: 993
-      ssl: true
-      startTls: false
-      user: ""
-      password:
-        secret: ""
-        key: password
-      expungeDeleted: false
-      logger:
-        logPath: "/dev/stdout"
-      mailbox: inbox
-      idleTimeout: 60
-      inboxMethod: "imap"
-      clientSecret:
-        key: secret
-      pollInterval: 60
-    gitlab_kas: {}
-    omniauth:
-      enabled: false
-      autoSignInWithProvider:
-      syncProfileFromProvider: []
-      syncProfileAttributes: ['email']
-      allowSingleSignOn: ['saml']
-      blockAutoCreatedUsers: true
-      autoLinkLdapUser: false
-      autoLinkSamlUser: false
-      autoLinkUser: []
-      externalProviders: []
-      allowBypassTwoFactor: []
-      providers: []
-    sentry:
-      enabled: false
-      dsn:
-      clientside_dsn:
-      environment:
-    smartcard:
-      enabled: false
-      CASecret:
-      clientCertificateRequiredHost:
-      sanExtensions: false
-      requiredForGitAccess: false
-    sidekiq:
-      routingRules: []
-    initialDefaults: {}
-  oauth:
-    gitlab-pages: {}
-  geo:
-    enabled: false
-    role: primary
-    nodeName:
-    psql:
-      password: {}
-    registry:
-      replication:
-        enabled: false
-        primaryApiUrl:
-  kas:
-    enabled: false
-  shell:
-    authToken: {}
-    hostKeys: {}
-    tcp:
-      proxyProtocol: false
-  railsSecrets: {}
-  rails:
-    bootsnap:
-      enabled: true
-  registry:
-    bucket: gitlab-registry
-    certificate: {}
-    httpSecret: {}
-    notificationSecret: {}
-    notifications: {}
-  pages:
-    enabled: false
-    accessControl: false
-    path:
-    host:
-    port:
-    https: # default true
-    externalHttp: []
-    externalHttps: []
-    artifactsServer: true
-    objectStore:
-      enabled: true
-      bucket: gitlab-pages
-      connection: {}
-    apiSecret: {}
-    authSecret: {}
-  ## Timezone for containers.
-  time_zone: GMT
-  ## Global Service Annotations and Labels
-  service:
-    labels: {}
-    annotations: {}
-  ## Global Deployment Annotations
-  deployment:
-    annotations: {}
-  antiAffinity: soft
-  workhorse:
-    serviceName: webservice-default
-  ## https://docs.gitlab.com/charts/charts/globals#configure-webservice
-  webservice:
-    workerTimeout: 60
-  certificates:
-    image:
-      repository: registry.gitlab.com/gitlab-org/build/cng/alpine-certificates
-      tag: 20191127-r2
-    customCAs: []
-  kubectl:
-    image:
-      repository: registry.gitlab.com/gitlab-org/build/cng/kubectl
-      tag: 1.16.15
-      pullSecrets: []
-    securityContext:
-      runAsUser: 65534
-      fsGroup: 65534
-  busybox:
-    image:
-      repository: busybox
-      tag: latest
-  serviceAccount:
-    enabled: false
-    create: true
-    annotations: {}
-  tracing:
-    connection:
-      string: ""
-    urlTemplate: ""
-  extraEnv: {}
-## End of global
-upgradeCheck:
-  enabled: true
-  image: {}
-  # repository:
-  # tag:
-  securityContext:
-    # in alpine/debian/busybox based images, this is `nobody:nogroup`
-    runAsUser: 65534
-    fsGroup: 65534
-  tolerations: []
-  resources:
-    requests:
-      cpu: 50m
-certmanager:
-  installCRDs: false
-  nameOverride: certmanager
-  # Install cert-manager chart. Set to false if you already have cert-manager
-  # installed or if you are not using cert-manager.
-  install: false
-  # Other cert-manager configurations from upstream
-  # See https://github.com/jetstack/cert-manager/blob/master/deploy/charts/cert-manager/README#configuration
-  rbac:
-    create: false
-nginx-ingress:
-  enabled: false
-  tcpExternalConfig: "true"
-  controller:
-    addHeaders:
-      Referrer-Policy: strict-origin-when-cross-origin
-    config:
-      hsts: "false"
-      hsts-include-subdomains: "false"
-      server-name-hash-bucket-size: "256"
-      use-http2: "true"
-      ssl-ciphers: "ECDHE-RSA-AES256-GCM-SHA384:ECDHE-ECDSA-AES256-GCM-SHA384:ECDHE-RSA-AES128-GCM-SHA256:ECDHE-ECDSA-AES128-GCM-SHA256:ECDHE-RSA-AES256-SHA384:ECDHE-RSA-AES128-SHA256:ECDHE-RSA-AES256-SHA:ECDHE-RSA-AES128-SHA:AES256-GCM-SHA384:AES128-GCM-SHA256:AES256-SHA256:AES128-SHA256:AES256-SHA:AES128-SHA:!aNULL:!eNULL:!EXPORT:!DES:!MD5:!PSK:!RC4"
-      ssl-protocols: "TLSv1.3 TLSv1.2"
-      server-tokens: "false"
-    service:
-      externalTrafficPolicy: "Local"
-    resources:
-      requests:
-        cpu: 100m
-        memory: 100Mi
-    publishService:
-      enabled: true
-      # Nº repliques per ingress
-    replicaCount: 1
-    minAvailable: 1
-    scope:
-      enabled: true
-    metrics:
-      enabled: true
-      service:
-        annotations:
-          gitlab.com/prometheus_scrape: "true"
-          gitlab.com/prometheus_port: "10254"
-          prometheus.io/scrape: "true"
-          prometheus.io/port: "10254"
-    admissionWebhooks:
-      enabled: false
-  defaultBackend:
-    enabled: true
-    minAvailable: 1
-    replicaCount: 1
-    resources:
-      requests:
-        cpu: 5m
-        memory: 5Mi
-  rbac:
-    create: true
-    scope: true
-  serviceAccount:
-    create: true
-## Installation & configuration of stable/prometheus
-## See requirements.yaml for current version
-prometheus:
-  # Assignació StorageClass per al servei
-  persistence:
-    storageClass: longhorn
-    size: 5Gi
-  install: true
-  rbac:
-    create: true
-  alertmanager:
-    enabled: false
-  alertmanagerFiles:
-    alertmanager.yml: {}
-  kubeStateMetrics:
-    enabled: false
-  nodeExporter:
-    enabled: false
-  pushgateway:
-    enabled: false
-  server:
-    retention: 15d
-    strategy:
-      type: Recreate
-  #
-  serverFiles:
-    prometheus.yml:
-      scrape_configs:
-        - job_name: prometheus
-          static_configs:
-            - targets:
-                - localhost:9090
-        - job_name: 'kubernetes-apiservers'
-          kubernetes_sd_configs:
-            - role: endpoints
-          scheme: https
-          tls_config:
-            ca_file: /var/run/secrets/kubernetes.io/serviceaccount/ca.crt
-            insecure_skip_verify: true
-          bearer_token_file: /var/run/secrets/kubernetes.io/serviceaccount/token
-          relabel_configs:
-            - source_labels: [__meta_kubernetes_namespace, __meta_kubernetes_service_name, __meta_kubernetes_endpoint_port_name]
-              action: keep
-              regex: default;kubernetes;https
-        - job_name: 'kubernetes-pods'
-          kubernetes_sd_configs:
-            - role: pod
-          relabel_configs:
-            - source_labels: [__meta_kubernetes_pod_annotation_gitlab_com_prometheus_scrape]
-              action: keep
-              regex: true
-            - source_labels: [__meta_kubernetes_pod_annotation_gitlab_com_prometheus_path]
-              action: replace
-              target_label: __metrics_path__
-              regex: (.+)
-            - source_labels: [__address__, __meta_kubernetes_pod_annotation_gitlab_com_prometheus_port]
-              action: replace
-              regex: ([^:]+)(?::\d+)?;(\d+)
-              replacement: $1:$2
-              target_label: __address__
-            - action: labelmap
-              regex: __meta_kubernetes_pod_label_(.+)
-            - source_labels: [__meta_kubernetes_namespace]
-              action: replace
-              target_label: kubernetes_namespace
-            - source_labels: [__meta_kubernetes_pod_name]
-              action: replace
-              target_label: kubernetes_pod_name
-        - job_name: 'kubernetes-service-endpoints'
-          kubernetes_sd_configs:
-            - role: endpoints
-          relabel_configs:
-            - action: keep
-              regex: true
-              source_labels:
-                - __meta_kubernetes_service_annotation_gitlab_com_prometheus_scrape
-            - action: replace
-              regex: (https?)
-              source_labels:
-                - __meta_kubernetes_service_annotation_gitlab_com_prometheus_scheme
-              target_label: __scheme__
-            - action: replace
-              regex: (.+)
-              source_labels:
-                - __meta_kubernetes_service_annotation_gitlab_com_prometheus_path
-              target_label: __metrics_path__
-            - action: replace
-              regex: ([^:]+)(?::\d+)?;(\d+)
-              replacement: $1:$2
-              source_labels:
-                - __address__
-                - __meta_kubernetes_service_annotation_gitlab_com_prometheus_port
-              target_label: __address__
-            - action: labelmap
-              regex: __meta_kubernetes_service_label_(.+)
-            - action: replace
-              source_labels:
-                - __meta_kubernetes_namespace
-              target_label: kubernetes_namespace
-            - action: replace
-              source_labels:
-                - __meta_kubernetes_service_name
-              target_label: kubernetes_name
-            - action: replace
-              source_labels:
-                - __meta_kubernetes_pod_node_name
-              target_label: kubernetes_node
-        - job_name: 'kubernetes-services'
-          metrics_path: /probe
-          params:
-            module: [http_2xx]
-          kubernetes_sd_configs:
-            - role: service
-          relabel_configs:
-            - source_labels: [__meta_kubernetes_service_annotation_gitlab_com_prometheus_probe]
-              action: keep
-              regex: true
-            - source_labels: [__address__]
-              target_label: __param_target
-            - target_label: __address__
-              replacement: blackbox
-            - source_labels: [__param_target]
-              target_label: instance
-            - action: labelmap
-              regex: __meta_kubernetes_service_label_(.+)
-            - source_labels: [__meta_kubernetes_namespace]
-              target_label: kubernetes_namespace
-            - source_labels: [__meta_kubernetes_service_name]
-              target_label: kubernetes_name
-## Configuration of Redis
-## https://docs.gitlab.com/charts/architecture/decisions#redis
-## https://docs.gitlab.com/charts/installation/deployment.html#redis
-redis:
-  install: true
-  existingSecret: gitlab-redis-secret
-  existingSecretKey: redis-password
-  usePasswordFile: true
-  cluster:
-    enabled: false
-  metrics:
-    enabled: true
-    # Assignació StorageClass per al servei
-  master:
-    persistence:
-      storageClass: longhorn
-      size: 2Gi
-  volumePermissions:
-    enabled: true
-    containerSecurityContext:
-      runAsUser: 0
-postgresql:
-  postgresqlUsername: gitlab
-  postgresqlPostgresPassword: bogus
-  install: true
-  postgresqlDatabase: gitlabhq_production
-  image:
-    tag: 12.7.0
-  usePasswordFile: true
-  existingSecret: 'bogus'
-  initdbScriptsConfigMap: 'bogus'
-  master:
-    extraVolumeMounts:
-      - name: custom-init-scripts
-        mountPath: /docker-entrypoint-preinitdb.d/init_revision.bash
-        subPath: init_revision.bash
-    podAnnotations:
-      postgresql.gitlab/init-revision: "1"
-  volumePermissions:
-    enabled: true
-    securityContext:
-      runAsUser: 0
-  securityContext:
-    enabled: true
-    fsGroup: 0
-    runAsUser: 0
-    # Assignació StorageClass per al servei
-  persistence:
-    storageClass: longhorn
-    size: 5Gi
-  metrics:
-    enabled: true
-  registry:
-    enabled: false
-shared-secrets:
-  enabled: true
-  rbac:
-    create: true
-  selfsign:
-    image:
-      repository: registry.gitlab.com/gitlab-org/build/cng/cfssl-self-sign
-      tag: 1.2
-    keyAlgorithm: "rsa"
-    keySize: "4096"
-    expiry: "3650d"
-    caSubject: "GitLab Helm Chart"
-    pullSecrets: []
-  env: production
-  serviceAccount:
-    enabled: true
-    create: true
-    name: # Specify a pre-existing ServiceAccount name
-  resources:
-    requests:
-      cpu: 50m
-  securityContext:
-    # in debian/alpine based images, this is `nobody:nogroup`
-    runAsUser: 65534
-    fsGroup: 65534
-  tolerations: []
-  podLabels: {}
-  annotations: {}
-# Dades per minio
-## Installation & configuration of gitlab/gitlab-runner
-## See requirements.yaml for current version
-gitlab-runner:
-  install: true
-  rbac:
-    create: true
-  runners:
-    locked: false
-    config: |
-      [[runners]]
-        [runners.kubernetes]
-        image = "ubuntu:18.04"
-        [runners.cache]
-          Type = "s3"
-          Path = "gitlab-runner-cache"
-          Shared = true
-          [runners.cache.s3]
-            ServerAddress = "store.domain.com"
-            BucketName = "gitlab-runner-cache"
-            BucketLocation = "us-east-1"
-            Insecure = false
-            AccessKey = "gitlab"
-            SecretKey = "vNwVB48mh5CkU4b2hraUTU8G13fO8"
-  podAnnotations:
-    gitlab.com/prometheus_scrape: "true"
-    gitlab.com/prometheus_port: 9252
-grafana:
-  nameOverride: grafana-app
-  admin:
-    existingSecret: bogus
-  env:
-    GF_SECURITY_ADMIN_USER: bogus
-    GF_SECURITY_ADMIN_PASSWORD: bogus
-  command: ["sh", "-x", "/tmp/scripts/import-secret.bash"]
-  sidecar:
-    dashboards:
-      enabled: true
-      label: gitlab_grafana_dashboard
-    datasources:
-      enabled: true
-      label: gitlab_grafana_datasource
-  grafana.ini:
-    server:
-      serve_from_sub_path: true
-      root_url: http://localhost/-/grafana/
-    auth:
-      login_cookie_name: gitlab_grafana_session
-  extraSecretMounts:
-    - name: initial-password
-      mountPath: /tmp/initial
-      readOnly: true
-      secretName: gitlab-grafana-initial-password
-      defaultMode: 400
-  extraConfigmapMounts:
-    - name: import-secret
-      mountPath: /tmp/scripts
-      configMap: gitlab-grafana-import-secret
-      readOnly: true
-  testFramework:
-    enabled: false
-# Configuració per realitzar backups
-gitlab:
-  task-runner:
-    backups:
-      cron:
-        schedule: 5 23 * * *
-        successfulJobsHistoryLimit: 3
-        failedJobsHistoryLimit: 1
-        extraArgs: "--skip artifacts --maximum-backups 3"
-        enabled: true
-        concurrencyPolicy: Replace
-      objectStorage:
-        backend: s3
-        config:
-          secret: storage-s3-task-cfg
-          key: config
-    replicas: 1
-    antiAffinityLabels:
-      matchLabels:
-        app: 'gitaly'
diff --git a/modules/k8s/env/k3s/gogs/01-gogs-service.yaml b/modules/k8s/env/k3s/gogs/01-gogs-service.yaml
deleted file mode 100644
index 3d3096e..0000000
--- a/modules/k8s/env/k3s/gogs/01-gogs-service.yaml
+++ /dev/null
@@ -1,15 +0,0 @@
-apiVersion: v1
-kind: Service
-metadata:
-  name: gogs-service
-  namespace: gogs
-spec:
-  ports:
-    - name: http
-      port: 80
-      protocol: TCP
-      targetPort: 3000
-  selector:
-    app: gogs
-    tier: frontal
-  type: ClusterIP
diff --git a/modules/k8s/env/k3s/gogs/02-frontal.yaml b/modules/k8s/env/k3s/gogs/02-frontal.yaml
deleted file mode 100644
index 604b495..0000000
--- a/modules/k8s/env/k3s/gogs/02-frontal.yaml
+++ /dev/null
@@ -1,66 +0,0 @@
-apiVersion: apps/v1
-kind: Deployment
-metadata:
-  name: gogs
-  namespace: gogs
-spec:
-  replicas: 1
-  selector:
-    matchLabels:
-      app: gogs
-      tier: frontal
-  template:
-    metadata:
-      labels:
-        app: gogs
-        tier: frontal
-    spec:
-      #serviceAccountName: jenkins-admin
-      #securityContext:
-      #fsGroup: 1000
-      #runAsUser: 1000
-      containers:
-        - image: gogs/gogs
-          imagePullPolicy: Always
-          name: gogs
-          env:
-            - name: OK
-              value: OK
-          ports:
-            - containerPort: 3000
-              name: 80tcp
-              protocol: TCP
-          resources:
-            limits:
-              cpu: 500m
-              memory: 512Mi
-            requests:
-              cpu: 200m
-              memory: 128Mi
-          livenessProbe:
-            tcpSocket:
-              port: 3000
-            initialDelaySeconds: 45
-            periodSeconds: 5
-          readinessProbe:
-            tcpSocket:
-              port: 3000
-            initialDelaySeconds: 45
-            periodSeconds: 5
-          volumeMounts:
-            - mountPath: /data
-              name: gogs-data
-      volumes:
-        - name: gogs-data
-          persistentVolumeClaim:
-            claimName: gogs-data
-      affinity:
-        nodeAffinity:
-          requiredDuringSchedulingIgnoredDuringExecution:
-            nodeSelectorTerms:
-              - matchExpressions:
-                  - key: kubernetes.io/hostname
-                    operator: In
-                    values:
-                      - "k8s-master1"
-                      - "k8s-master2"
diff --git a/modules/k8s/env/k3s/gogs/03-gogs-service-db.yaml b/modules/k8s/env/k3s/gogs/03-gogs-service-db.yaml
deleted file mode 100644
index 21dbe28..0000000
--- a/modules/k8s/env/k3s/gogs/03-gogs-service-db.yaml
+++ /dev/null
@@ -1,15 +0,0 @@
-apiVersion: v1
-kind: Service
-metadata:
-  name: gogs-service-db
-  namespace: gogs
-spec:
-  ports:
-    - name: http
-      port: 6000
-      protocol: TCP
-      targetPort: 3306
-  selector:
-    app: gogs-db
-    tier: database
-  type: ClusterIP
diff --git a/modules/k8s/env/k3s/gogs/04-gogs-db.yaml b/modules/k8s/env/k3s/gogs/04-gogs-db.yaml
deleted file mode 100644
index cba3474..0000000
--- a/modules/k8s/env/k3s/gogs/04-gogs-db.yaml
+++ /dev/null
@@ -1,72 +0,0 @@
-apiVersion: apps/v1
-kind: Deployment
-metadata:
-  name: gogs-db
-  namespace: gogs
-spec:
-  replicas: 1
-  selector:
-    matchLabels:
-      app: gogs-db
-      tier: database
-  template:
-    metadata:
-      labels:
-        app: gogs-db
-        tier: database
-    spec:
-      #serviceAccountName: jenkins-admin
-      #securityContext:
-      #fsGroup: 1000
-      #runAsUser: 1000
-      containers:
-        - image: mariadb:10.8
-          imagePullPolicy: Always
-          name: gogs-db
-          env:
-            - name: MARIADB_ROOT_PASSWORD
-              value: b0999ce555555555555dafb0
-            - name: MARIADB_USER
-              value: gogs
-            - name: MARIADB_DATABASE
-              value: gogs
-            - name: MARIADB_PASSWORD
-              value: awi5a53Lk12skCC8He9O1FmdK6XS9g
-          ports:
-            - containerPort: 3306
-              name: 3306tcp
-              protocol: TCP
-          resources:
-            limits:
-              cpu: 200m
-              memory: 256Mi
-            requests:
-              cpu: 100m
-              memory: 128Mi
-          livenessProbe:
-            tcpSocket:
-              port: 3306
-            initialDelaySeconds: 45
-            periodSeconds: 5
-          readinessProbe:
-            tcpSocket:
-              port: 3306
-            initialDelaySeconds: 45
-            periodSeconds: 5
-          volumeMounts:
-            - mountPath: /var/lib/mysql
-              name: gogs-db
-      volumes:
-        - name: gogs-db
-          persistentVolumeClaim:
-            claimName: gogs-db
-      affinity:
-        nodeAffinity:
-          requiredDuringSchedulingIgnoredDuringExecution:
-            nodeSelectorTerms:
-              - matchExpressions:
-                  - key: kubernetes.io/hostname
-                    operator: In
-                    values:
-                      - "k8s-master0"
-                      - "k8s-master2"
diff --git a/modules/k8s/env/k3s/gogs/05-ingress.yaml b/modules/k8s/env/k3s/gogs/05-ingress.yaml
deleted file mode 100644
index d1468e2..0000000
--- a/modules/k8s/env/k3s/gogs/05-ingress.yaml
+++ /dev/null
@@ -1,22 +0,0 @@
-apiVersion: networking.k8s.io/v1
-kind: Ingress
-metadata:
-  name: gogs-ingress
-  namespace: gogs
-spec:
-  defaultBackend:
-    service:
-      name: gogs-service
-      port:
-        number: 80
-  rules:
-    - host: git.domain.com
-      http:
-        paths:
-          - backend:
-              service:
-                name: gogs-service
-                port:
-                  number: 80
-            path: /
-            pathType: Prefix
diff --git a/modules/k8s/env/k3s/gogs/readme.md b/modules/k8s/env/k3s/gogs/readme.md
deleted file mode 100644
index 190a361..0000000
--- a/modules/k8s/env/k3s/gogs/readme.md
+++ /dev/null
@@ -1,7 +0,0 @@
-Create on longhorn the volumes
-Deploy yamls
-
-Gogs installation:
-database type: mysql
-hosts: gogs-service-db.gogs.svc.cluster.local:6000
-Application URL: https://git.domain.com
\ No newline at end of file
diff --git a/modules/k8s/env/k3s/httpd/01-pvc.yaml b/modules/k8s/env/k3s/httpd/01-pvc.yaml
deleted file mode 100644
index d89d36a..0000000
--- a/modules/k8s/env/k3s/httpd/01-pvc.yaml
+++ /dev/null
@@ -1,17 +0,0 @@
-apiVersion: v1
-kind: PersistentVolumeClaim
-metadata:
-  name: cv-apache
-  namespace: cv
-  labels:
-    application: cv
-    entorn: pro
-    tecnologia: apache
-    tier: frontal
-spec:
-  storageClassName: longhorn
-  accessModes:
-    - ReadWriteOnce
-  resources:
-    requests:
-      storage: 1Gi
diff --git a/modules/k8s/env/k3s/httpd/02-service.yaml b/modules/k8s/env/k3s/httpd/02-service.yaml
deleted file mode 100644
index 51a2186..0000000
--- a/modules/k8s/env/k3s/httpd/02-service.yaml
+++ /dev/null
@@ -1,20 +0,0 @@
-apiVersion: v1
-kind: Service
-metadata:
-  name: cv-apache
-  namespace: cv
-  labels:
-    application: cv
-    entorn: pro
-    tecnologia: apache
-    tier: frontal
-spec:
-  ports:
-    - name: http
-      port: 80
-      protocol: TCP
-      targetPort: 80
-  selector:
-    application: cv
-    entorn: pro
-  type: ClusterIP
diff --git a/modules/k8s/env/k3s/httpd/03-ingress.yaml b/modules/k8s/env/k3s/httpd/03-ingress.yaml
deleted file mode 100644
index 7b00f2a..0000000
--- a/modules/k8s/env/k3s/httpd/03-ingress.yaml
+++ /dev/null
@@ -1,22 +0,0 @@
-apiVersion: networking.k8s.io/v1
-kind: Ingress
-metadata:
-  name: cv-apache
-  namespace: cv
-spec:
-  defaultBackend:
-    service:
-      name: cv-apache
-      port:
-        number: 80
-  rules:
-    - host: cv.domain.com
-      http:
-        paths:
-          - backend:
-              service:
-                name: cv-apache
-                port:
-                  number: 80
-            path: /
-            pathType: Prefix
diff --git a/modules/k8s/env/k3s/httpd/04-deployment.yaml b/modules/k8s/env/k3s/httpd/04-deployment.yaml
deleted file mode 100644
index cdb0907..0000000
--- a/modules/k8s/env/k3s/httpd/04-deployment.yaml
+++ /dev/null
@@ -1,46 +0,0 @@
-apiVersion: apps/v1
-kind: Deployment
-metadata:
-  name: cv-apache
-  namespace: cv
-spec:
-  selector:
-    matchLabels:
-      application: cv
-      entorn: pro
-      tecnologia: apache
-      tier: frontal
-  template:
-    metadata:
-      labels:
-        application: cv
-        entorn: pro
-        tecnologia: apache
-        tier: frontal
-    spec:
-      affinity: {}
-      containers:
-        - image: httpd
-          imagePullPolicy: Always
-          name: apache
-          ports:
-            - containerPort: 80
-              name: 80tcp
-              protocol: TCP
-          resources:
-            limits:
-              cpu: 500m
-              memory: 512Mi
-            requests:
-              cpu: 500m
-              memory: 128Mi
-          volumeMounts:
-            - mountPath: /usr/local/apache2/htdocs
-              name: cv-apache
-      volumes:
-        - name: cv-apache
-          persistentVolumeClaim:
-            claimName: cv-apache
-        - name: vol-rzxxk
-          persistentVolumeClaim:
-            claimName: cv-apache
diff --git a/modules/k8s/env/k3s/jenkins/02-service.yaml b/modules/k8s/env/k3s/jenkins/02-service.yaml
deleted file mode 100644
index 267aa0d..0000000
--- a/modules/k8s/env/k3s/jenkins/02-service.yaml
+++ /dev/null
@@ -1,21 +0,0 @@
-apiVersion: v1
-kind: Service
-metadata:
-  name: jenkins-service
-  namespace: jenkins
-  annotations:
-    prometheus.io/scrape: 'true'
-    prometheus.io/path: /
-    prometheus.io/port: '8080'
-spec:
-  selector:
-    app: jenkins
-  type: NodePort
-  ports:
-    - name: httpport
-      port: 8080
-      targetPort: 8080
-      nodePort: 31013
-    - name: jnlpport
-      port: 50000
-      targetPort: 50000
diff --git a/modules/k8s/env/k3s/jenkins/03-ingress.yaml b/modules/k8s/env/k3s/jenkins/03-ingress.yaml
deleted file mode 100644
index 085689a..0000000
--- a/modules/k8s/env/k3s/jenkins/03-ingress.yaml
+++ /dev/null
@@ -1,22 +0,0 @@
-apiVersion: networking.k8s.io/v1
-kind: Ingress
-metadata:
-  name: jenkins-ingress
-  namespace: jenkins
-spec:
-  defaultBackend:
-    service:
-      name: jenkins-service
-      port:
-        number: 8080
-  rules:
-    - host: jenkins.$domain_intra
-      http:
-        paths:
-          - backend:
-              service:
-                name: jenkins-service
-                port:
-                  number: 8080
-            path: /login
-            pathType: Prefix
diff --git a/modules/k8s/env/k3s/jenkins/04-service-account.yaml b/modules/k8s/env/k3s/jenkins/04-service-account.yaml
deleted file mode 100644
index 427a696..0000000
--- a/modules/k8s/env/k3s/jenkins/04-service-account.yaml
+++ /dev/null
@@ -1,40 +0,0 @@
-apiVersion: v1
-kind: ServiceAccount
-metadata:
-  name: jenkins-admin
-  namespace: jenkins
----
-apiVersion: rbac.authorization.k8s.io/v1
-kind: Role
-metadata:
-  name: jenkins
-  namespace: jenkins
-  labels:
-    "app.kubernetes.io/name": 'jenkins'
-rules:
-  - apiGroups: [""]
-    resources: ["pods"]
-    verbs: ["create", "delete", "exec", "get", "list", "patch", "update", "watch"]
-  - apiGroups: [""]
-    resources: ["pods/exec"]
-    verbs: ["create", "delete", "exec", "get", "list", "patch", "update", "watch"]
-  - apiGroups: [""]
-    resources: ["pods/log"]
-    verbs: ["get", "list", "watch"]
-  - apiGroups: [""]
-    resources: ["secrets"]
-    verbs: ["get"]
----
-apiVersion: rbac.authorization.k8s.io/v1
-kind: RoleBinding
-metadata:
-  name: jenkins-role-binding
-  namespace: jenkins
-roleRef:
-  apiGroup: rbac.authorization.k8s.io
-  kind: Role
-  name: jenkins
-subjects:
-  - kind: ServiceAccount
-    name: jenkins-admin
-    namespace: jenkins
diff --git a/modules/k8s/env/k3s/jenkins/05-deployment.yaml b/modules/k8s/env/k3s/jenkins/05-deployment.yaml
deleted file mode 100644
index df48dae..0000000
--- a/modules/k8s/env/k3s/jenkins/05-deployment.yaml
+++ /dev/null
@@ -1,71 +0,0 @@
-apiVersion: apps/v1
-kind: Deployment
-metadata:
-  name: jenkins
-  namespace: jenkins
-spec:
-  selector:
-    matchLabels:
-      app: jenkins
-  template:
-    metadata:
-      labels:
-        app: jenkins
-    spec:
-      serviceAccountName: jenkins-admin
-      securityContext:
-        fsGroup: 1000
-        runAsUser: 0
-      containers:
-        #- image: jenkins/jenkins:2.221-jdk11
-        - image: jenkins/jenkins:lts
-          imagePullPolicy: Always
-          name: jenkins
-          env:
-            - name: EXCLUDE_SESSION_ID
-              value: "true"
-            - name: DISABLE_CSRF_PROTECTION
-              value: "true"
-            - name: UNPROCESSED_PATHINFO
-              value: "true"
-          ports:
-            - name: httpport
-              containerPort: 8080
-              protocol: TCP
-            - name: jnlpport
-              containerPort: 50000
-              protocol: TCP
-          resources:
-            limits:
-              cpu: 1000m
-              memory: 2048Mi
-            requests:
-              cpu: 500m
-              memory: 512Mi
-          livenessProbe:
-            tcpSocket:
-              port: 8080
-            initialDelaySeconds: 45
-            periodSeconds: 5
-          readinessProbe:
-            tcpSocket:
-              port: 8080
-            initialDelaySeconds: 45
-            periodSeconds: 5
-          volumeMounts:
-            - mountPath: /var/jenkins_home
-              name: jenkins-data
-      volumes:
-        - name: jenkins-data
-          persistentVolumeClaim:
-            claimName: jenkins-data
-      affinity:
-        nodeAffinity:
-          requiredDuringSchedulingIgnoredDuringExecution:
-            nodeSelectorTerms:
-              - matchExpressions:
-                  - key: kubernetes.io/hostname
-                    operator: In
-                    values:
-                      - "k8s-master0"
-                      - "k8s-master1"
diff --git a/modules/k8s/env/k3s/jenkins/add-envar-to-node b/modules/k8s/env/k3s/jenkins/add-envar-to-node
deleted file mode 100644
index 58f16ca..0000000
--- a/modules/k8s/env/k3s/jenkins/add-envar-to-node
+++ /dev/null
@@ -1,17 +0,0 @@
-pipeline {
-    agent {
-        //[any, docker, dockerfile, label, none]
-        label 'Mainline'
-    }
-    stages {
-        stage("Env Variables - after"){
-            steps{
-                script{
-                    env.NEXUS_REGISTRY_PERMANENT = "registry-dns:5003"
-                    echo "Print NEXUS_REGISTRY_PERMANENT Env varaible"
-                    echo "${env.NEXUS_REGISTRY_PERMANENT}"
-                }
-            }
-        }
-    }
-}
\ No newline at end of file
diff --git a/modules/k8s/env/k3s/jenkins/install/01-ns.yml b/modules/k8s/env/k3s/jenkins/install/01-ns.yml
deleted file mode 100644
index 5eb2c27..0000000
--- a/modules/k8s/env/k3s/jenkins/install/01-ns.yml
+++ /dev/null
@@ -1,4 +0,0 @@
-apiVersion: v1
-kind: Namespace
-metadata:
-  name: jenkins
diff --git a/modules/k8s/env/k3s/jenkins/install/101-pvc-frontal.yml b/modules/k8s/env/k3s/jenkins/install/101-pvc-frontal.yml
deleted file mode 100644
index f459fcc..0000000
--- a/modules/k8s/env/k3s/jenkins/install/101-pvc-frontal.yml
+++ /dev/null
@@ -1,49 +0,0 @@
-apiVersion: v1
-kind: PersistentVolumeClaim
-metadata:
-  name: jenkins-data
-  namespace: jenkins
-spec:
-  accessModes:
-    - ReadWriteOnce
-  resources:
-    requests:
-      storage: 5Gi
-  storageClassName: longhorn-static
-  volumeName: jenkins-data
-status:
-  accessModes:
-    - ReadWriteOnce
-  capacity:
-    storage: 5Gi
-  phase: Bound
----
-apiVersion: v1
-kind: PersistentVolume
-metadata:
-  name: jenkins-data
-  namespace: jenkins
-spec:
-  accessModes:
-    - ReadWriteOnce
-  capacity:
-    storage: 5Gi
-  claimRef:
-    apiVersion: v1
-    kind: PersistentVolumeClaim
-    name: jenkins-data
-    namespace: jenkins
-  csi:
-    driver: driver.longhorn.io
-    fsType: ext4
-    volumeAttributes:
-      diskSelector: ""
-      nodeSelector: ""
-      numberOfReplicas: "2"
-      staleReplicaTimeout: "20"
-    volumeHandle: jenkins-data
-  persistentVolumeReclaimPolicy: Retain
-  storageClassName: longhorn-static
-  volumeMode: Filesystem
-#status:
-#  phase: Bound
diff --git a/modules/k8s/env/k3s/jenkins/pipeline-node-action b/modules/k8s/env/k3s/jenkins/pipeline-node-action
deleted file mode 100644
index 89d1cb4..0000000
--- a/modules/k8s/env/k3s/jenkins/pipeline-node-action
+++ /dev/null
@@ -1,13 +0,0 @@
-pipeline {
-    agent {
-        //[any, docker, dockerfile, label, none]
-        label 'docker'
-    }
-    stages{
-        stage("Env Variables"){
-            steps{
-                sh "printenv"
-            }
-        }
-    }
-}
\ No newline at end of file
diff --git a/modules/k8s/env/k3s/jenkins/pipline-get-env b/modules/k8s/env/k3s/jenkins/pipline-get-env
deleted file mode 100644
index fb8722e..0000000
--- a/modules/k8s/env/k3s/jenkins/pipline-get-env
+++ /dev/null
@@ -1,74 +0,0 @@
-pipeline {
-    agent none
-    stages {
-        stage('Run Tests') {
-            parallel {
-                stage('master') {
-                    agent {
-                        //[any, docker, dockerfile, label, none]
-                        label "master"
-                    }
-                    steps {
-                        sh "printenv"
-                    }
-                }
-                stage('ptyjenkins03') {
-                    agent {
-                        label "Infra"
-                    }
-                    steps {
-                        sh "printenv"
-                    }
-                }
-                stage('ptyjenkins04') {
-                    agent {
-                        label "Mainline"
-                    }
-                    steps {
-                        sh "printenv"
-                    }
-                }
-                stage('ptyjenkins05') {
-                    agent {
-                        label "Build01"
-                    }
-                    steps {
-                        sh "printenv"
-                    }
-                }
-                stage('ptyjenkins06') {
-                    agent {
-                        label "Build02"
-                    }
-                    steps {
-                        sh "printenv"
-                    }
-                }
-                stage('ptypajenkins07') {
-                    agent {
-                        label "control-program"
-                    }
-                    steps {
-                        sh "printenv"
-                    }
-                }
-                stage('pajenkins08') {
-                    agent {
-                        label "pajenkins08"
-                    }
-                    steps {
-                        sh "printenv"
-                    }
-                }
-                stage('pajenkins09') {
-                    agent {
-                        label "pajenkins09"
-                    }
-                    steps {
-                        sh "printenv"
-                    }
-                }
-            }
-        }
-    }
-}
\ No newline at end of file
diff --git a/modules/k8s/env/k3s/jenkins/readme.md b/modules/k8s/env/k3s/jenkins/readme.md
deleted file mode 100644
index 3081147..0000000
--- a/modules/k8s/env/k3s/jenkins/readme.md
+++ /dev/null
@@ -1,24 +0,0 @@
-## links install and initial config:
-# Kubernetes Manifests for Jenkins Deployment
-
-Refer https://devopscube.com/setup-jenkins-on-kubernetes-cluster/ for step by step process to use these manifests.
-
-    - https://www.jenkins.io/doc/book/installing/kubernetes/
-    - https://devopscube.com/jenkins-build-agents-kubernetes/
-    - https://devopscube.com/build-docker-image-kubernetes-pod/
-
-## links configs CI/CD
-
-    - https://www.sparksupport.com/blog/2020/02/11/ci-cd-pipeline-using-jenkins-and-gogs-tutorial/
-
-
-## initial pass at:
-
-    - $JENKINS_HOME/secrets/initialAdminPassword
-
-
-1. install - files to install jenkins
-2. setup haproxy, initial config (disable CRFS) and install plugins (strict scrumb(if not ssl install) - kubernetes) 
-3. Plugin kubernetes:
-   - http://jenkins-service.jenkins.svc.cluster.local:8080
-   - pod label: jenkins - agent
\ No newline at end of file
diff --git a/modules/k8s/env/k3s/longhorn/environment_check.bash b/modules/k8s/env/k3s/longhorn/environment_check.bash
deleted file mode 100644
index 05c9bb8..0000000
--- a/modules/k8s/env/k3s/longhorn/environment_check.bash
+++ /dev/null
@@ -1,334 +0,0 @@
-#!/bin/bash
-
-######################################################
-# Log
-######################################################
-export RED='\x1b[0;31m'
-export GREEN='\x1b[38;5;22m'
-export CYAN='\x1b[36m'
-export YELLOW='\x1b[33m'
-export NO_COLOR='\x1b[0m'
-
-if [ -z "${LOG_TITLE}" ]; then
-	LOG_TITLE=''
-fi
-if [ -z "${LOG_LEVEL}" ]; then
-	LOG_LEVEL="INFO"
-fi
-
-debug() {
-	if [[ "${LOG_LEVEL}" == "DEBUG" ]]; then
-		local log_title
-		if [ -n "${LOG_TITLE}" ]; then
-			log_title="(${LOG_TITLE})"
-		else
-			log_title=''
-		fi
-		echo -e "${GREEN}[DEBUG]${log_title} ${NO_COLOR}$1"
-	fi
-}
-
-info() {
-	if [[ "${LOG_LEVEL}" == "DEBUG" ]] ||
-		[[ "${LOG_LEVEL}" == "INFO" ]]; then
-		local log_title
-		if [ -n "${LOG_TITLE}" ]; then
-			log_title="(${LOG_TITLE})"
-		else
-			log_title=''
-		fi
-		echo -e "${CYAN}[INFO] ${log_title} ${NO_COLOR}$1"
-	fi
-}
-
-warn() {
-	if [[ "${LOG_LEVEL}" == "DEBUG" ]] ||
-		[[ "${LOG_LEVEL}" == "INFO" ]] ||
-		[[ "${LOG_LEVEL}" == "WARN" ]]; then
-		local log_title
-		if [ -n "${LOG_TITLE}" ]; then
-			log_title="(${LOG_TITLE})"
-		else
-			log_title=''
-		fi
-		echo -e "${YELLOW}[WARN] ${log_title} ${NO_COLOR}$1"
-	fi
-}
-
-error() {
-	if [[ "${LOG_LEVEL}" == "DEBUG" ]] ||
-		[[ "${LOG_LEVEL}" == "INFO" ]] ||
-		[[ "${LOG_LEVEL}" == "WARN" ]] ||
-		[[ "${LOG_LEVEL}" == "ERROR" ]]; then
-		local log_title
-		if [ -n "${LOG_TITLE}" ]; then
-			log_title="(${LOG_TITLE})"
-		else
-			log_title=''
-		fi
-		echo -e "${RED}[ERROR]${log_title} ${NO_COLOR}$1"
-	fi
-}
-
-######################################################
-# Check logics
-######################################################
-set_packages_and_check_cmd() {
-	case $OS in
-	*"debian"* | *"ubuntu"*)
-		CHECK_CMD='dpkg -l | grep -w'
-		PACKAGES=(nfs-common open-iscsi)
-		;;
-	*"centos"* | *"fedora"* | *"rocky"* | *"ol"*)
-		CHECK_CMD='rpm -q'
-		PACKAGES=(nfs-utils iscsi-initiator-utils)
-		;;
-	*"suse"*)
-		CHECK_CMD='rpm -q'
-		PACKAGES=(nfs-client open-iscsi)
-		;;
-	*"arch"*)
-		CHECK_CMD='pacman -Q'
-		PACKAGES=(nfs-utils open-iscsi)
-		;;
-	*"gentoo"*)
-		CHECK_CMD='qlist -I'
-		PACKAGES=(net-fs/nfs-utils sys-block/open-iscsi)
-		;;
-	*)
-		CHECK_CMD=''
-		PACKAGES=()
-		warn "Stop the environment check because '$OS' is not supported in the environment check script."
-		exit 1
-		;;
-	esac
-}
-
-detect_node_os() {
-	local pod="$1"
-
-	OS=$(kubectl exec -i $pod -- nsenter --mount=/proc/1/ns/mnt -- bash -c 'grep -E "^ID_LIKE=" /etc/os-release | cut -d= -f2')
-	if [[ -z "${OS}" ]]; then
-		OS=$(kubectl exec -i $pod -- nsenter --mount=/proc/1/ns/mnt -- bash -c 'grep -E "^ID=" /etc/os-release | cut -d= -f2')
-	fi
-	echo "$OS"
-}
-
-check_local_dependencies() {
-	local targets=($@)
-
-	local all_found=true
-	for ((i = 0; i < ${#targets[@]}; i++)); do
-		local target=${targets[$i]}
-		if [ "$(which $target)" == "" ]; then
-			all_found=false
-			error "Not found: $target"
-		fi
-	done
-
-	if [ "$all_found" == "false" ]; then
-		msg="Please install missing dependencies: ${targets[@]}."
-		info "$msg"
-		exit 2
-	fi
-
-	msg="Required dependencies '${targets[@]}' are installed."
-	info "$msg"
-}
-
-create_ds() {
-	cat <<EOF >$TEMP_DIR/environment_check.yaml
-apiVersion: apps/v1
-kind: DaemonSet
-metadata:
-  labels:
-    app: longhorn-environment-check
-  name: longhorn-environment-check
-spec:
-  selector:
-    matchLabels:
-      app: longhorn-environment-check
-  template:
-    metadata:
-      labels:
-        app: longhorn-environment-check
-    spec:
-      hostPID: true
-      containers:
-      - name: longhorn-environment-check
-        image: alpine:3.12
-        args: ["/bin/sh", "-c", "sleep 1000000000"]
-        volumeMounts:
-        - name: mountpoint
-          mountPath: /tmp/longhorn-environment-check
-          mountPropagation: Bidirectional
-        securityContext:
-          privileged: true
-      volumes:
-      - name: mountpoint
-        hostPath:
-            path: /tmp/longhorn-environment-check
-EOF
-	kubectl create -f $TEMP_DIR/environment_check.yaml >/dev/null
-}
-
-cleanup() {
-	info "Cleaning up longhorn-environment-check pods..."
-	kubectl delete -f $TEMP_DIR/environment_check.yaml >/dev/null
-	rm -rf $TEMP_DIR
-	info "Cleanup completed."
-}
-
-wait_ds_ready() {
-	while true; do
-		local ds=$(kubectl get ds/longhorn-environment-check -o json)
-		local numberReady=$(echo $ds | jq .status.numberReady)
-		local desiredNumberScheduled=$(echo $ds | jq .status.desiredNumberScheduled)
-
-		if [ "$desiredNumberScheduled" == "$numberReady" ] && [ "$desiredNumberScheduled" != "0" ]; then
-			info "All longhorn-environment-check pods are ready ($numberReady/$desiredNumberScheduled)."
-			return
-		fi
-
-		info "Waiting for longhorn-environment-check pods to become ready ($numberReady/$desiredNumberScheduled)..."
-		sleep 3
-	done
-}
-
-check_mount_propagation() {
-	local allSupported=true
-	local pods=$(kubectl -l app=longhorn-environment-check get po -o json)
-
-	local ds=$(kubectl get ds/longhorn-environment-check -o json)
-	local desiredNumberScheduled=$(echo $ds | jq .status.desiredNumberScheduled)
-
-	for ((i = 0; i < desiredNumberScheduled; i++)); do
-		local pod=$(echo $pods | jq .items[$i])
-		local nodeName=$(echo $pod | jq -r .spec.nodeName)
-		local mountPropagation=$(echo $pod | jq -r '.spec.containers[0].volumeMounts[] | select(.name=="mountpoint") | .mountPropagation')
-
-		if [ "$mountPropagation" != "Bidirectional" ]; then
-			allSupported=false
-			error "node $nodeName: MountPropagation is disabled"
-		fi
-	done
-
-	if [ "$allSupported" != "true" ]; then
-		error "MountPropagation is disabled on at least one node. As a result, CSI driver and Base image cannot be supported."
-		exit 1
-	else
-		info "MountPropagation is enabled."
-	fi
-}
-
-check_package_installed() {
-	local pods=$(kubectl get pods -o name -l app=longhorn-environment-check)
-
-	local all_found=true
-
-	for pod in ${pods}; do
-		OS=$(detect_node_os $pod)
-		if [ x"$OS" == x"" ]; then
-			error "Unable to detect OS on node $node."
-			exit 2
-		fi
-
-		set_packages_and_check_cmd "$OS"
-
-		for ((i = 0; i < ${#PACKAGES[@]}; i++)); do
-			local package=${PACKAGES[$i]}
-
-			kubectl exec -i $pod -- nsenter --mount=/proc/1/ns/mnt -- timeout 30 bash -c "$CHECK_CMD $package" >/dev/null 2>&1
-			if [ $? != 0 ]; then
-				all_found=false
-				node=$(kubectl get ${pod} --no-headers -o=custom-columns=:.spec.nodeName)
-				error "$package is not found in $node."
-			fi
-		done
-	done
-
-	if [ "$all_found" == "false" ]; then
-		error "Please install missing packages."
-		exit 2
-	fi
-
-	info "Required packages are installed."
-}
-
-check_hostname_uniqueness() {
-	hostnames=$(kubectl get nodes -o jsonpath='{.items[*].status.addresses[?(@.type=="Hostname")].address}')
-
-	declare -A deduplicate_hostnames
-	num_nodes=0
-	for hostname in ${hostnames}; do
-		num_nodes=$((num_nodes + 1))
-		deduplicate_hostnames["${hostname}"]="${hostname}"
-	done
-
-	if [ "${#deduplicate_hostnames[@]}" != "${num_nodes}" ]; then
-		error "Nodes do not have unique hostnames."
-		exit 2
-	fi
-
-	info "Hostname uniqueness check is passed."
-}
-
-check_multipathd() {
-	local pods=$(kubectl get pods -o name -l app=longhorn-environment-check)
-	local all_not_found=true
-
-	for pod in ${pods}; do
-		kubectl exec -t $pod -- nsenter --mount=/proc/1/ns/mnt -- bash -c "systemctl status --no-pager multipathd.service" >/dev/null 2>&1
-		if [ $? = 0 ]; then
-			all_not_found=false
-			node=$(kubectl get ${pod} --no-headers -o=custom-columns=:.spec.nodeName)
-			warn "multipathd is running on $node."
-		fi
-	done
-
-	if [ "$all_not_found" == "false" ]; then
-		warn "multipathd would probably result in the Longhorn volume mount failure. Please refer to https://longhorn.io/kb/troubleshooting-volume-with-multipath for more information."
-	fi
-}
-
-check_iscsid() {
-	local pods=$(kubectl get pods -o name -l app=longhorn-environment-check)
-	local all_found=true
-
-	for pod in ${pods}; do
-		kubectl exec -t $pod -- nsenter --mount=/proc/1/ns/mnt -- bash -c "systemctl status --no-pager iscsid.service" >/dev/null 2>&1
-
-		if [ $? != 0 ]; then
-			all_found=false
-			node=$(kubectl get ${pod} --no-headers -o=custom-columns=:.spec.nodeName)
-			error "iscsid is not running on $node."
-		fi
-	done
-
-	if [ "$all_found" == "false" ]; then
-		exit 2
-	fi
-}
-
-######################################################
-# Main logics
-######################################################
-DEPENDENCIES=("kubectl" "jq" "mktemp")
-check_local_dependencies "${DEPENDENCIES[@]}"
-
-# Check the each host has a unique hostname (for RWX volume)
-check_hostname_uniqueness
-
-# Create a daemonset for checking the requirements in each node
-TEMP_DIR=$(mktemp -d)
-
-trap cleanup EXIT
-create_ds
-wait_ds_ready
-
-check_package_installed
-check_iscsid
-check_multipathd
-check_mount_propagation
-
-exit 0
diff --git a/modules/k8s/env/k3s/longhorn/longhorn.yaml b/modules/k8s/env/k3s/longhorn/longhorn.yaml
deleted file mode 100644
index 15d703b..0000000
--- a/modules/k8s/env/k3s/longhorn/longhorn.yaml
+++ /dev/null
@@ -1,3801 +0,0 @@
-# Builtin: "helm template" does not respect --create-namespace
-apiVersion: v1
-kind: Namespace
-metadata:
-  name: longhorn-system
----
-# Source: longhorn/templates/psp.yaml
-apiVersion: policy/v1beta1
-kind: PodSecurityPolicy
-metadata:
-  name: longhorn-psp
-  labels:
-    app.kubernetes.io/name: longhorn
-    app.kubernetes.io/instance: longhorn
-    app.kubernetes.io/version: v1.3.2
-spec:
-  privileged: true
-  allowPrivilegeEscalation: true
-  requiredDropCapabilities:
-    - NET_RAW
-  allowedCapabilities:
-    - SYS_ADMIN
-  hostNetwork: false
-  hostIPC: false
-  hostPID: true
-  runAsUser:
-    rule: RunAsAny
-  seLinux:
-    rule: RunAsAny
-  fsGroup:
-    rule: RunAsAny
-  supplementalGroups:
-    rule: RunAsAny
-  volumes:
-    - configMap
-    - downwardAPI
-    - emptyDir
-    - secret
-    - projected
-    - hostPath
----
-# Source: longhorn/templates/serviceaccount.yaml
-apiVersion: v1
-kind: ServiceAccount
-metadata:
-  name: longhorn-service-account
-  namespace: longhorn-system
-  labels:
-    app.kubernetes.io/name: longhorn
-    app.kubernetes.io/instance: longhorn
-    app.kubernetes.io/version: v1.3.2
----
-# Source: longhorn/templates/default-setting.yaml
-apiVersion: v1
-kind: ConfigMap
-metadata:
-  name: longhorn-default-setting
-  namespace: longhorn-system
-  labels:
-    app.kubernetes.io/name: longhorn
-    app.kubernetes.io/instance: longhorn
-    app.kubernetes.io/version: v1.3.2
-data:
-  default-setting.yaml: ""
----
-# Source: longhorn/templates/storageclass.yaml
-apiVersion: v1
-kind: ConfigMap
-metadata:
-  name: longhorn-storageclass
-  namespace: longhorn-system
-  labels:
-    app.kubernetes.io/name: longhorn
-    app.kubernetes.io/instance: longhorn
-    app.kubernetes.io/version: v1.3.2
-data:
-  storageclass.yaml: |
-    kind: StorageClass
-    apiVersion: storage.k8s.io/v1
-    metadata:
-      name: longhorn
-      annotations:
-        storageclass.kubernetes.io/is-default-class: "true"
-    provisioner: driver.longhorn.io
-    allowVolumeExpansion: true
-    reclaimPolicy: "Delete"
-    volumeBindingMode: Immediate
-    parameters:
-      numberOfReplicas: "3"
-      staleReplicaTimeout: "30"
-      fromBackup: ""
-      fsType: "ext4"
-      dataLocality: "disabled"
----
-# Source: longhorn/templates/crds.yaml
-apiVersion: apiextensions.k8s.io/v1
-kind: CustomResourceDefinition
-metadata:
-  annotations:
-    controller-gen.kubebuilder.io/version: v0.7.0
-  creationTimestamp: null
-  labels:
-    app.kubernetes.io/name: longhorn
-    app.kubernetes.io/instance: longhorn
-    app.kubernetes.io/version: v1.3.2
-    longhorn-manager: ""
-  name: backingimagedatasources.longhorn.io
-spec:
-  group: longhorn.io
-  names:
-    kind: BackingImageDataSource
-    listKind: BackingImageDataSourceList
-    plural: backingimagedatasources
-    shortNames:
-      - lhbids
-    singular: backingimagedatasource
-  scope: Namespaced
-  versions:
-    - additionalPrinterColumns:
-        - description: The current state of the pod used to provision the backing image file from source
-          jsonPath: .status.currentState
-          name: State
-          type: string
-        - description: The data source type
-          jsonPath: .spec.sourceType
-          name: SourceType
-          type: string
-        - description: The node the backing image file will be prepared on
-          jsonPath: .spec.nodeID
-          name: Node
-          type: string
-        - description: The disk the backing image file will be prepared on
-          jsonPath: .spec.diskUUID
-          name: DiskUUID
-          type: string
-        - jsonPath: .metadata.creationTimestamp
-          name: Age
-          type: date
-      name: v1beta1
-      schema:
-        openAPIV3Schema:
-          description: BackingImageDataSource is where Longhorn stores backing image data source object.
-          properties:
-            apiVersion:
-              description: 'APIVersion defines the versioned schema of this representation of an object. Servers should convert recognized schemas to the latest internal value, and may reject unrecognized values. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#resources'
-              type: string
-            kind:
-              description: 'Kind is a string value representing the REST resource this object represents. Servers may infer this from the endpoint the client submits requests to. Cannot be updated. In CamelCase. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#types-kinds'
-              type: string
-            metadata:
-              type: object
-            spec:
-              x-kubernetes-preserve-unknown-fields: true
-            status:
-              x-kubernetes-preserve-unknown-fields: true
-          type: object
-      served: true
-      storage: false
-      subresources:
-        status: {}
-    - additionalPrinterColumns:
-        - description: The system generated UUID of the provisioned backing image file
-          jsonPath: .spec.uuid
-          name: UUID
-          type: string
-        - description: The current state of the pod used to provision the backing image file from source
-          jsonPath: .status.currentState
-          name: State
-          type: string
-        - description: The data source type
-          jsonPath: .spec.sourceType
-          name: SourceType
-          type: string
-        - description: The backing image file size
-          jsonPath: .status.size
-          name: Size
-          type: string
-        - description: The node the backing image file will be prepared on
-          jsonPath: .spec.nodeID
-          name: Node
-          type: string
-        - description: The disk the backing image file will be prepared on
-          jsonPath: .spec.diskUUID
-          name: DiskUUID
-          type: string
-        - jsonPath: .metadata.creationTimestamp
-          name: Age
-          type: date
-      name: v1beta2
-      schema:
-        openAPIV3Schema:
-          description: BackingImageDataSource is where Longhorn stores backing image data source object.
-          properties:
-            apiVersion:
-              description: 'APIVersion defines the versioned schema of this representation of an object. Servers should convert recognized schemas to the latest internal value, and may reject unrecognized values. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#resources'
-              type: string
-            kind:
-              description: 'Kind is a string value representing the REST resource this object represents. Servers may infer this from the endpoint the client submits requests to. Cannot be updated. In CamelCase. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#types-kinds'
-              type: string
-            metadata:
-              type: object
-            spec:
-              description: BackingImageDataSourceSpec defines the desired state of the Longhorn backing image data source
-              properties:
-                checksum:
-                  type: string
-                diskPath:
-                  type: string
-                diskUUID:
-                  type: string
-                fileTransferred:
-                  type: boolean
-                nodeID:
-                  type: string
-                parameters:
-                  additionalProperties:
-                    type: string
-                  type: object
-                sourceType:
-                  enum:
-                    - download
-                    - upload
-                    - export-from-volume
-                  type: string
-                uuid:
-                  type: string
-              type: object
-            status:
-              description: BackingImageDataSourceStatus defines the observed state of the Longhorn backing image data source
-              properties:
-                checksum:
-                  type: string
-                currentState:
-                  type: string
-                ip:
-                  type: string
-                message:
-                  type: string
-                ownerID:
-                  type: string
-                progress:
-                  type: integer
-                runningParameters:
-                  additionalProperties:
-                    type: string
-                  nullable: true
-                  type: object
-                size:
-                  format: int64
-                  type: integer
-                storageIP:
-                  type: string
-              type: object
-          type: object
-      served: true
-      storage: true
-      subresources:
-        status: {}
-status:
-  acceptedNames:
-    kind: ""
-    plural: ""
-  conditions: []
-  storedVersions: []
----
-# Source: longhorn/templates/crds.yaml
-apiVersion: apiextensions.k8s.io/v1
-kind: CustomResourceDefinition
-metadata:
-  annotations:
-    controller-gen.kubebuilder.io/version: v0.7.0
-  creationTimestamp: null
-  labels:
-    app.kubernetes.io/name: longhorn
-    app.kubernetes.io/instance: longhorn
-    app.kubernetes.io/version: v1.3.2
-    longhorn-manager: ""
-  name: backingimagemanagers.longhorn.io
-spec:
-  group: longhorn.io
-  names:
-    kind: BackingImageManager
-    listKind: BackingImageManagerList
-    plural: backingimagemanagers
-    shortNames:
-      - lhbim
-    singular: backingimagemanager
-  scope: Namespaced
-  versions:
-    - additionalPrinterColumns:
-        - description: The current state of the manager
-          jsonPath: .status.currentState
-          name: State
-          type: string
-        - description: The image the manager pod will use
-          jsonPath: .spec.image
-          name: Image
-          type: string
-        - description: The node the manager is on
-          jsonPath: .spec.nodeID
-          name: Node
-          type: string
-        - description: The disk the manager is responsible for
-          jsonPath: .spec.diskUUID
-          name: DiskUUID
-          type: string
-        - description: The disk path the manager is using
-          jsonPath: .spec.diskPath
-          name: DiskPath
-          type: string
-        - jsonPath: .metadata.creationTimestamp
-          name: Age
-          type: date
-      name: v1beta1
-      schema:
-        openAPIV3Schema:
-          description: BackingImageManager is where Longhorn stores backing image manager object.
-          properties:
-            apiVersion:
-              description: 'APIVersion defines the versioned schema of this representation of an object. Servers should convert recognized schemas to the latest internal value, and may reject unrecognized values. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#resources'
-              type: string
-            kind:
-              description: 'Kind is a string value representing the REST resource this object represents. Servers may infer this from the endpoint the client submits requests to. Cannot be updated. In CamelCase. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#types-kinds'
-              type: string
-            metadata:
-              type: object
-            spec:
-              x-kubernetes-preserve-unknown-fields: true
-            status:
-              x-kubernetes-preserve-unknown-fields: true
-          type: object
-      served: true
-      storage: false
-      subresources:
-        status: {}
-    - additionalPrinterColumns:
-        - description: The current state of the manager
-          jsonPath: .status.currentState
-          name: State
-          type: string
-        - description: The image the manager pod will use
-          jsonPath: .spec.image
-          name: Image
-          type: string
-        - description: The node the manager is on
-          jsonPath: .spec.nodeID
-          name: Node
-          type: string
-        - description: The disk the manager is responsible for
-          jsonPath: .spec.diskUUID
-          name: DiskUUID
-          type: string
-        - description: The disk path the manager is using
-          jsonPath: .spec.diskPath
-          name: DiskPath
-          type: string
-        - jsonPath: .metadata.creationTimestamp
-          name: Age
-          type: date
-      name: v1beta2
-      schema:
-        openAPIV3Schema:
-          description: BackingImageManager is where Longhorn stores backing image manager object.
-          properties:
-            apiVersion:
-              description: 'APIVersion defines the versioned schema of this representation of an object. Servers should convert recognized schemas to the latest internal value, and may reject unrecognized values. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#resources'
-              type: string
-            kind:
-              description: 'Kind is a string value representing the REST resource this object represents. Servers may infer this from the endpoint the client submits requests to. Cannot be updated. In CamelCase. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#types-kinds'
-              type: string
-            metadata:
-              type: object
-            spec:
-              description: BackingImageManagerSpec defines the desired state of the Longhorn backing image manager
-              properties:
-                backingImages:
-                  additionalProperties:
-                    type: string
-                  type: object
-                diskPath:
-                  type: string
-                diskUUID:
-                  type: string
-                image:
-                  type: string
-                nodeID:
-                  type: string
-              type: object
-            status:
-              description: BackingImageManagerStatus defines the observed state of the Longhorn backing image manager
-              properties:
-                apiMinVersion:
-                  type: integer
-                apiVersion:
-                  type: integer
-                backingImageFileMap:
-                  additionalProperties:
-                    properties:
-                      currentChecksum:
-                        type: string
-                      directory:
-                        description: 'Deprecated: This field is useless.'
-                        type: string
-                      downloadProgress:
-                        description: 'Deprecated: This field is renamed to `Progress`.'
-                        type: integer
-                      message:
-                        type: string
-                      name:
-                        type: string
-                      progress:
-                        type: integer
-                      senderManagerAddress:
-                        type: string
-                      sendingReference:
-                        type: integer
-                      size:
-                        format: int64
-                        type: integer
-                      state:
-                        type: string
-                      url:
-                        description: 'Deprecated: This field is useless now. The manager of backing image files doesn''t care if a file is downloaded and how.'
-                        type: string
-                      uuid:
-                        type: string
-                    type: object
-                  nullable: true
-                  type: object
-                currentState:
-                  type: string
-                ip:
-                  type: string
-                ownerID:
-                  type: string
-                storageIP:
-                  type: string
-              type: object
-          type: object
-      served: true
-      storage: true
-      subresources:
-        status: {}
-status:
-  acceptedNames:
-    kind: ""
-    plural: ""
-  conditions: []
-  storedVersions: []
----
-# Source: longhorn/templates/crds.yaml
-apiVersion: apiextensions.k8s.io/v1
-kind: CustomResourceDefinition
-metadata:
-  annotations:
-    controller-gen.kubebuilder.io/version: v0.7.0
-  creationTimestamp: null
-  labels:
-    app.kubernetes.io/name: longhorn
-    app.kubernetes.io/instance: longhorn
-    app.kubernetes.io/version: v1.3.2
-    longhorn-manager: ""
-  name: backingimages.longhorn.io
-spec:
-  conversion:
-    strategy: Webhook
-    webhook:
-      clientConfig:
-        service:
-          name: longhorn-conversion-webhook
-          namespace: longhorn-system
-          path: /v1/webhook/conversion
-          port: 9443
-      conversionReviewVersions:
-        - v1beta2
-        - v1beta1
-  group: longhorn.io
-  names:
-    kind: BackingImage
-    listKind: BackingImageList
-    plural: backingimages
-    shortNames:
-      - lhbi
-    singular: backingimage
-  scope: Namespaced
-  versions:
-    - additionalPrinterColumns:
-        - description: The backing image name
-          jsonPath: .spec.image
-          name: Image
-          type: string
-        - jsonPath: .metadata.creationTimestamp
-          name: Age
-          type: date
-      name: v1beta1
-      schema:
-        openAPIV3Schema:
-          description: BackingImage is where Longhorn stores backing image object.
-          properties:
-            apiVersion:
-              description: 'APIVersion defines the versioned schema of this representation of an object. Servers should convert recognized schemas to the latest internal value, and may reject unrecognized values. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#resources'
-              type: string
-            kind:
-              description: 'Kind is a string value representing the REST resource this object represents. Servers may infer this from the endpoint the client submits requests to. Cannot be updated. In CamelCase. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#types-kinds'
-              type: string
-            metadata:
-              type: object
-            spec:
-              x-kubernetes-preserve-unknown-fields: true
-            status:
-              x-kubernetes-preserve-unknown-fields: true
-          type: object
-      served: true
-      storage: false
-      subresources:
-        status: {}
-    - additionalPrinterColumns:
-        - description: The system generated UUID
-          jsonPath: .status.uuid
-          name: UUID
-          type: string
-        - description: The source of the backing image file data
-          jsonPath: .spec.sourceType
-          name: SourceType
-          type: string
-        - description: The backing image file size in each disk
-          jsonPath: .status.size
-          name: Size
-          type: string
-        - jsonPath: .metadata.creationTimestamp
-          name: Age
-          type: date
-      name: v1beta2
-      schema:
-        openAPIV3Schema:
-          description: BackingImage is where Longhorn stores backing image object.
-          properties:
-            apiVersion:
-              description: 'APIVersion defines the versioned schema of this representation of an object. Servers should convert recognized schemas to the latest internal value, and may reject unrecognized values. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#resources'
-              type: string
-            kind:
-              description: 'Kind is a string value representing the REST resource this object represents. Servers may infer this from the endpoint the client submits requests to. Cannot be updated. In CamelCase. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#types-kinds'
-              type: string
-            metadata:
-              type: object
-            spec:
-              description: BackingImageSpec defines the desired state of the Longhorn backing image
-              properties:
-                checksum:
-                  type: string
-                disks:
-                  additionalProperties:
-                    type: string
-                  type: object
-                imageURL:
-                  description: 'Deprecated: This kind of info will be included in the related BackingImageDataSource.'
-                  type: string
-                sourceParameters:
-                  additionalProperties:
-                    type: string
-                  type: object
-                sourceType:
-                  enum:
-                    - download
-                    - upload
-                    - export-from-volume
-                  type: string
-              type: object
-            status:
-              description: BackingImageStatus defines the observed state of the Longhorn backing image status
-              properties:
-                checksum:
-                  type: string
-                diskDownloadProgressMap:
-                  additionalProperties:
-                    type: integer
-                  description: 'Deprecated: Replaced by field `Progress` in `DiskFileStatusMap`.'
-                  nullable: true
-                  type: object
-                diskDownloadStateMap:
-                  additionalProperties:
-                    description: BackingImageDownloadState is replaced by BackingImageState.
-                    type: string
-                  description: 'Deprecated: Replaced by field `State` in `DiskFileStatusMap`.'
-                  nullable: true
-                  type: object
-                diskFileStatusMap:
-                  additionalProperties:
-                    properties:
-                      lastStateTransitionTime:
-                        type: string
-                      message:
-                        type: string
-                      progress:
-                        type: integer
-                      state:
-                        type: string
-                    type: object
-                  nullable: true
-                  type: object
-                diskLastRefAtMap:
-                  additionalProperties:
-                    type: string
-                  nullable: true
-                  type: object
-                ownerID:
-                  type: string
-                size:
-                  format: int64
-                  type: integer
-                uuid:
-                  type: string
-              type: object
-          type: object
-      served: true
-      storage: true
-      subresources:
-        status: {}
-status:
-  acceptedNames:
-    kind: ""
-    plural: ""
-  conditions: []
-  storedVersions: []
----
-# Source: longhorn/templates/crds.yaml
-apiVersion: apiextensions.k8s.io/v1
-kind: CustomResourceDefinition
-metadata:
-  annotations:
-    controller-gen.kubebuilder.io/version: v0.7.0
-  creationTimestamp: null
-  labels:
-    app.kubernetes.io/name: longhorn
-    app.kubernetes.io/instance: longhorn
-    app.kubernetes.io/version: v1.3.2
-    longhorn-manager: ""
-  name: backups.longhorn.io
-spec:
-  group: longhorn.io
-  names:
-    kind: Backup
-    listKind: BackupList
-    plural: backups
-    shortNames:
-      - lhb
-    singular: backup
-  scope: Namespaced
-  versions:
-    - additionalPrinterColumns:
-        - description: The snapshot name
-          jsonPath: .status.snapshotName
-          name: SnapshotName
-          type: string
-        - description: The snapshot size
-          jsonPath: .status.size
-          name: SnapshotSize
-          type: string
-        - description: The snapshot creation time
-          jsonPath: .status.snapshotCreatedAt
-          name: SnapshotCreatedAt
-          type: string
-        - description: The backup state
-          jsonPath: .status.state
-          name: State
-          type: string
-        - description: The backup last synced time
-          jsonPath: .status.lastSyncedAt
-          name: LastSyncedAt
-          type: string
-      name: v1beta1
-      schema:
-        openAPIV3Schema:
-          description: Backup is where Longhorn stores backup object.
-          properties:
-            apiVersion:
-              description: 'APIVersion defines the versioned schema of this representation of an object. Servers should convert recognized schemas to the latest internal value, and may reject unrecognized values. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#resources'
-              type: string
-            kind:
-              description: 'Kind is a string value representing the REST resource this object represents. Servers may infer this from the endpoint the client submits requests to. Cannot be updated. In CamelCase. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#types-kinds'
-              type: string
-            metadata:
-              type: object
-            spec:
-              x-kubernetes-preserve-unknown-fields: true
-            status:
-              x-kubernetes-preserve-unknown-fields: true
-          type: object
-      served: true
-      storage: false
-      subresources:
-        status: {}
-    - additionalPrinterColumns:
-        - description: The snapshot name
-          jsonPath: .status.snapshotName
-          name: SnapshotName
-          type: string
-        - description: The snapshot size
-          jsonPath: .status.size
-          name: SnapshotSize
-          type: string
-        - description: The snapshot creation time
-          jsonPath: .status.snapshotCreatedAt
-          name: SnapshotCreatedAt
-          type: string
-        - description: The backup state
-          jsonPath: .status.state
-          name: State
-          type: string
-        - description: The backup last synced time
-          jsonPath: .status.lastSyncedAt
-          name: LastSyncedAt
-          type: string
-      name: v1beta2
-      schema:
-        openAPIV3Schema:
-          description: Backup is where Longhorn stores backup object.
-          properties:
-            apiVersion:
-              description: 'APIVersion defines the versioned schema of this representation of an object. Servers should convert recognized schemas to the latest internal value, and may reject unrecognized values. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#resources'
-              type: string
-            kind:
-              description: 'Kind is a string value representing the REST resource this object represents. Servers may infer this from the endpoint the client submits requests to. Cannot be updated. In CamelCase. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#types-kinds'
-              type: string
-            metadata:
-              type: object
-            spec:
-              description: BackupSpec defines the desired state of the Longhorn backup
-              properties:
-                labels:
-                  additionalProperties:
-                    type: string
-                  description: The labels of snapshot backup.
-                  type: object
-                snapshotName:
-                  description: The snapshot name.
-                  type: string
-                syncRequestedAt:
-                  description: The time to request run sync the remote backup.
-                  format: date-time
-                  nullable: true
-                  type: string
-              type: object
-            status:
-              description: BackupStatus defines the observed state of the Longhorn backup
-              properties:
-                backupCreatedAt:
-                  description: The snapshot backup upload finished time.
-                  type: string
-                error:
-                  description: The error message when taking the snapshot backup.
-                  type: string
-                labels:
-                  additionalProperties:
-                    type: string
-                  description: The labels of snapshot backup.
-                  nullable: true
-                  type: object
-                lastSyncedAt:
-                  description: The last time that the backup was synced with the remote backup target.
-                  format: date-time
-                  nullable: true
-                  type: string
-                messages:
-                  additionalProperties:
-                    type: string
-                  description: The error messages when calling longhorn engine on listing or inspecting backups.
-                  nullable: true
-                  type: object
-                ownerID:
-                  description: The node ID on which the controller is responsible to reconcile this backup CR.
-                  type: string
-                progress:
-                  description: The snapshot backup progress.
-                  type: integer
-                replicaAddress:
-                  description: The address of the replica that runs snapshot backup.
-                  type: string
-                size:
-                  description: The snapshot size.
-                  type: string
-                snapshotCreatedAt:
-                  description: The snapshot creation time.
-                  type: string
-                snapshotName:
-                  description: The snapshot name.
-                  type: string
-                state:
-                  description: The backup creation state. Can be "", "InProgress", "Completed", "Error", "Unknown".
-                  type: string
-                url:
-                  description: The snapshot backup URL.
-                  type: string
-                volumeBackingImageName:
-                  description: The volume's backing image name.
-                  type: string
-                volumeCreated:
-                  description: The volume creation time.
-                  type: string
-                volumeName:
-                  description: The volume name.
-                  type: string
-                volumeSize:
-                  description: The volume size.
-                  type: string
-              type: object
-          type: object
-      served: true
-      storage: true
-      subresources:
-        status: {}
-status:
-  acceptedNames:
-    kind: ""
-    plural: ""
-  conditions: []
-  storedVersions: []
----
-# Source: longhorn/templates/crds.yaml
-apiVersion: apiextensions.k8s.io/v1
-kind: CustomResourceDefinition
-metadata:
-  annotations:
-    controller-gen.kubebuilder.io/version: v0.7.0
-  creationTimestamp: null
-  labels:
-    app.kubernetes.io/name: longhorn
-    app.kubernetes.io/instance: longhorn
-    app.kubernetes.io/version: v1.3.2
-    longhorn-manager: ""
-  name: backuptargets.longhorn.io
-spec:
-  conversion:
-    strategy: Webhook
-    webhook:
-      clientConfig:
-        service:
-          name: longhorn-conversion-webhook
-          namespace: longhorn-system
-          path: /v1/webhook/conversion
-          port: 9443
-      conversionReviewVersions:
-        - v1beta2
-        - v1beta1
-  group: longhorn.io
-  names:
-    kind: BackupTarget
-    listKind: BackupTargetList
-    plural: backuptargets
-    shortNames:
-      - lhbt
-    singular: backuptarget
-  scope: Namespaced
-  versions:
-    - additionalPrinterColumns:
-        - description: The backup target URL
-          jsonPath: .spec.backupTargetURL
-          name: URL
-          type: string
-        - description: The backup target credential secret
-          jsonPath: .spec.credentialSecret
-          name: Credential
-          type: string
-        - description: The backup target poll interval
-          jsonPath: .spec.pollInterval
-          name: LastBackupAt
-          type: string
-        - description: Indicate whether the backup target is available or not
-          jsonPath: .status.available
-          name: Available
-          type: boolean
-        - description: The backup target last synced time
-          jsonPath: .status.lastSyncedAt
-          name: LastSyncedAt
-          type: string
-      name: v1beta1
-      schema:
-        openAPIV3Schema:
-          description: BackupTarget is where Longhorn stores backup target object.
-          properties:
-            apiVersion:
-              description: 'APIVersion defines the versioned schema of this representation of an object. Servers should convert recognized schemas to the latest internal value, and may reject unrecognized values. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#resources'
-              type: string
-            kind:
-              description: 'Kind is a string value representing the REST resource this object represents. Servers may infer this from the endpoint the client submits requests to. Cannot be updated. In CamelCase. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#types-kinds'
-              type: string
-            metadata:
-              type: object
-            spec:
-              x-kubernetes-preserve-unknown-fields: true
-            status:
-              x-kubernetes-preserve-unknown-fields: true
-          type: object
-      served: true
-      storage: false
-      subresources:
-        status: {}
-    - additionalPrinterColumns:
-        - description: The backup target URL
-          jsonPath: .spec.backupTargetURL
-          name: URL
-          type: string
-        - description: The backup target credential secret
-          jsonPath: .spec.credentialSecret
-          name: Credential
-          type: string
-        - description: The backup target poll interval
-          jsonPath: .spec.pollInterval
-          name: LastBackupAt
-          type: string
-        - description: Indicate whether the backup target is available or not
-          jsonPath: .status.available
-          name: Available
-          type: boolean
-        - description: The backup target last synced time
-          jsonPath: .status.lastSyncedAt
-          name: LastSyncedAt
-          type: string
-      name: v1beta2
-      schema:
-        openAPIV3Schema:
-          description: BackupTarget is where Longhorn stores backup target object.
-          properties:
-            apiVersion:
-              description: 'APIVersion defines the versioned schema of this representation of an object. Servers should convert recognized schemas to the latest internal value, and may reject unrecognized values. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#resources'
-              type: string
-            kind:
-              description: 'Kind is a string value representing the REST resource this object represents. Servers may infer this from the endpoint the client submits requests to. Cannot be updated. In CamelCase. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#types-kinds'
-              type: string
-            metadata:
-              type: object
-            spec:
-              description: BackupTargetSpec defines the desired state of the Longhorn backup target
-              properties:
-                backupTargetURL:
-                  description: The backup target URL.
-                  type: string
-                credentialSecret:
-                  description: The backup target credential secret.
-                  type: string
-                pollInterval:
-                  description: The interval that the cluster needs to run sync with the backup target.
-                  type: string
-                syncRequestedAt:
-                  description: The time to request run sync the remote backup target.
-                  format: date-time
-                  nullable: true
-                  type: string
-              type: object
-            status:
-              description: BackupTargetStatus defines the observed state of the Longhorn backup target
-              properties:
-                available:
-                  description: Available indicates if the remote backup target is available or not.
-                  type: boolean
-                conditions:
-                  description: Records the reason on why the backup target is unavailable.
-                  items:
-                    properties:
-                      lastProbeTime:
-                        description: Last time we probed the condition.
-                        type: string
-                      lastTransitionTime:
-                        description: Last time the condition transitioned from one status to another.
-                        type: string
-                      message:
-                        description: Human-readable message indicating details about last transition.
-                        type: string
-                      reason:
-                        description: Unique, one-word, CamelCase reason for the condition's last transition.
-                        type: string
-                      status:
-                        description: Status is the status of the condition. Can be True, False, Unknown.
-                        type: string
-                      type:
-                        description: Type is the type of the condition.
-                        type: string
-                    type: object
-                  nullable: true
-                  type: array
-                lastSyncedAt:
-                  description: The last time that the controller synced with the remote backup target.
-                  format: date-time
-                  nullable: true
-                  type: string
-                ownerID:
-                  description: The node ID on which the controller is responsible to reconcile this backup target CR.
-                  type: string
-              type: object
-          type: object
-      served: true
-      storage: true
-      subresources:
-        status: {}
-status:
-  acceptedNames:
-    kind: ""
-    plural: ""
-  conditions: []
-  storedVersions: []
----
-# Source: longhorn/templates/crds.yaml
-apiVersion: apiextensions.k8s.io/v1
-kind: CustomResourceDefinition
-metadata:
-  annotations:
-    controller-gen.kubebuilder.io/version: v0.7.0
-  creationTimestamp: null
-  labels:
-    app.kubernetes.io/name: longhorn
-    app.kubernetes.io/instance: longhorn
-    app.kubernetes.io/version: v1.3.2
-    longhorn-manager: ""
-  name: backupvolumes.longhorn.io
-spec:
-  group: longhorn.io
-  names:
-    kind: BackupVolume
-    listKind: BackupVolumeList
-    plural: backupvolumes
-    shortNames:
-      - lhbv
-    singular: backupvolume
-  scope: Namespaced
-  versions:
-    - additionalPrinterColumns:
-        - description: The backup volume creation time
-          jsonPath: .status.createdAt
-          name: CreatedAt
-          type: string
-        - description: The backup volume last backup name
-          jsonPath: .status.lastBackupName
-          name: LastBackupName
-          type: string
-        - description: The backup volume last backup time
-          jsonPath: .status.lastBackupAt
-          name: LastBackupAt
-          type: string
-        - description: The backup volume last synced time
-          jsonPath: .status.lastSyncedAt
-          name: LastSyncedAt
-          type: string
-      name: v1beta1
-      schema:
-        openAPIV3Schema:
-          description: BackupVolume is where Longhorn stores backup volume object.
-          properties:
-            apiVersion:
-              description: 'APIVersion defines the versioned schema of this representation of an object. Servers should convert recognized schemas to the latest internal value, and may reject unrecognized values. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#resources'
-              type: string
-            kind:
-              description: 'Kind is a string value representing the REST resource this object represents. Servers may infer this from the endpoint the client submits requests to. Cannot be updated. In CamelCase. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#types-kinds'
-              type: string
-            metadata:
-              type: object
-            spec:
-              x-kubernetes-preserve-unknown-fields: true
-            status:
-              x-kubernetes-preserve-unknown-fields: true
-          type: object
-      served: true
-      storage: false
-      subresources:
-        status: {}
-    - additionalPrinterColumns:
-        - description: The backup volume creation time
-          jsonPath: .status.createdAt
-          name: CreatedAt
-          type: string
-        - description: The backup volume last backup name
-          jsonPath: .status.lastBackupName
-          name: LastBackupName
-          type: string
-        - description: The backup volume last backup time
-          jsonPath: .status.lastBackupAt
-          name: LastBackupAt
-          type: string
-        - description: The backup volume last synced time
-          jsonPath: .status.lastSyncedAt
-          name: LastSyncedAt
-          type: string
-      name: v1beta2
-      schema:
-        openAPIV3Schema:
-          description: BackupVolume is where Longhorn stores backup volume object.
-          properties:
-            apiVersion:
-              description: 'APIVersion defines the versioned schema of this representation of an object. Servers should convert recognized schemas to the latest internal value, and may reject unrecognized values. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#resources'
-              type: string
-            kind:
-              description: 'Kind is a string value representing the REST resource this object represents. Servers may infer this from the endpoint the client submits requests to. Cannot be updated. In CamelCase. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#types-kinds'
-              type: string
-            metadata:
-              type: object
-            spec:
-              description: BackupVolumeSpec defines the desired state of the Longhorn backup volume
-              properties:
-                syncRequestedAt:
-                  description: The time to request run sync the remote backup volume.
-                  format: date-time
-                  nullable: true
-                  type: string
-              type: object
-            status:
-              description: BackupVolumeStatus defines the observed state of the Longhorn backup volume
-              properties:
-                backingImageChecksum:
-                  description: the backing image checksum.
-                  type: string
-                backingImageName:
-                  description: The backing image name.
-                  type: string
-                createdAt:
-                  description: The backup volume creation time.
-                  type: string
-                dataStored:
-                  description: The backup volume block count.
-                  type: string
-                labels:
-                  additionalProperties:
-                    type: string
-                  description: The backup volume labels.
-                  nullable: true
-                  type: object
-                lastBackupAt:
-                  description: The latest volume backup time.
-                  type: string
-                lastBackupName:
-                  description: The latest volume backup name.
-                  type: string
-                lastModificationTime:
-                  description: The backup volume config last modification time.
-                  format: date-time
-                  nullable: true
-                  type: string
-                lastSyncedAt:
-                  description: The last time that the backup volume was synced into the cluster.
-                  format: date-time
-                  nullable: true
-                  type: string
-                messages:
-                  additionalProperties:
-                    type: string
-                  description: The error messages when call longhorn engine on list or inspect backup volumes.
-                  nullable: true
-                  type: object
-                ownerID:
-                  description: The node ID on which the controller is responsible to reconcile this backup volume CR.
-                  type: string
-                size:
-                  description: The backup volume size.
-                  type: string
-              type: object
-          type: object
-      served: true
-      storage: true
-      subresources:
-        status: {}
-status:
-  acceptedNames:
-    kind: ""
-    plural: ""
-  conditions: []
-  storedVersions: []
----
-# Source: longhorn/templates/crds.yaml
-apiVersion: apiextensions.k8s.io/v1
-kind: CustomResourceDefinition
-metadata:
-  annotations:
-    controller-gen.kubebuilder.io/version: v0.7.0
-  creationTimestamp: null
-  labels:
-    app.kubernetes.io/name: longhorn
-    app.kubernetes.io/instance: longhorn
-    app.kubernetes.io/version: v1.3.2
-    longhorn-manager: ""
-  name: engineimages.longhorn.io
-spec:
-  preserveUnknownFields: false
-  conversion:
-    strategy: Webhook
-    webhook:
-      clientConfig:
-        service:
-          name: longhorn-conversion-webhook
-          namespace: longhorn-system
-          path: /v1/webhook/conversion
-          port: 9443
-      conversionReviewVersions:
-        - v1beta2
-        - v1beta1
-  group: longhorn.io
-  names:
-    kind: EngineImage
-    listKind: EngineImageList
-    plural: engineimages
-    shortNames:
-      - lhei
-    singular: engineimage
-  scope: Namespaced
-  versions:
-    - additionalPrinterColumns:
-        - description: State of the engine image
-          jsonPath: .status.state
-          name: State
-          type: string
-        - description: The Longhorn engine image
-          jsonPath: .spec.image
-          name: Image
-          type: string
-        - description: Number of resources using the engine image
-          jsonPath: .status.refCount
-          name: RefCount
-          type: integer
-        - description: The build date of the engine image
-          jsonPath: .status.buildDate
-          name: BuildDate
-          type: date
-        - jsonPath: .metadata.creationTimestamp
-          name: Age
-          type: date
-      name: v1beta1
-      schema:
-        openAPIV3Schema:
-          description: EngineImage is where Longhorn stores engine image object.
-          properties:
-            apiVersion:
-              description: 'APIVersion defines the versioned schema of this representation of an object. Servers should convert recognized schemas to the latest internal value, and may reject unrecognized values. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#resources'
-              type: string
-            kind:
-              description: 'Kind is a string value representing the REST resource this object represents. Servers may infer this from the endpoint the client submits requests to. Cannot be updated. In CamelCase. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#types-kinds'
-              type: string
-            metadata:
-              type: object
-            spec:
-              x-kubernetes-preserve-unknown-fields: true
-            status:
-              x-kubernetes-preserve-unknown-fields: true
-          type: object
-      served: true
-      storage: false
-      subresources:
-        status: {}
-    - additionalPrinterColumns:
-        - description: State of the engine image
-          jsonPath: .status.state
-          name: State
-          type: string
-        - description: The Longhorn engine image
-          jsonPath: .spec.image
-          name: Image
-          type: string
-        - description: Number of resources using the engine image
-          jsonPath: .status.refCount
-          name: RefCount
-          type: integer
-        - description: The build date of the engine image
-          jsonPath: .status.buildDate
-          name: BuildDate
-          type: date
-        - jsonPath: .metadata.creationTimestamp
-          name: Age
-          type: date
-      name: v1beta2
-      schema:
-        openAPIV3Schema:
-          description: EngineImage is where Longhorn stores engine image object.
-          properties:
-            apiVersion:
-              description: 'APIVersion defines the versioned schema of this representation of an object. Servers should convert recognized schemas to the latest internal value, and may reject unrecognized values. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#resources'
-              type: string
-            kind:
-              description: 'Kind is a string value representing the REST resource this object represents. Servers may infer this from the endpoint the client submits requests to. Cannot be updated. In CamelCase. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#types-kinds'
-              type: string
-            metadata:
-              type: object
-            spec:
-              description: EngineImageSpec defines the desired state of the Longhorn engine image
-              properties:
-                image:
-                  minLength: 1
-                  type: string
-              required:
-                - image
-              type: object
-            status:
-              description: EngineImageStatus defines the observed state of the Longhorn engine image
-              properties:
-                buildDate:
-                  type: string
-                cliAPIMinVersion:
-                  type: integer
-                cliAPIVersion:
-                  type: integer
-                conditions:
-                  items:
-                    properties:
-                      lastProbeTime:
-                        description: Last time we probed the condition.
-                        type: string
-                      lastTransitionTime:
-                        description: Last time the condition transitioned from one status to another.
-                        type: string
-                      message:
-                        description: Human-readable message indicating details about last transition.
-                        type: string
-                      reason:
-                        description: Unique, one-word, CamelCase reason for the condition's last transition.
-                        type: string
-                      status:
-                        description: Status is the status of the condition. Can be True, False, Unknown.
-                        type: string
-                      type:
-                        description: Type is the type of the condition.
-                        type: string
-                    type: object
-                  nullable: true
-                  type: array
-                controllerAPIMinVersion:
-                  type: integer
-                controllerAPIVersion:
-                  type: integer
-                dataFormatMinVersion:
-                  type: integer
-                dataFormatVersion:
-                  type: integer
-                gitCommit:
-                  type: string
-                noRefSince:
-                  type: string
-                nodeDeploymentMap:
-                  additionalProperties:
-                    type: boolean
-                  nullable: true
-                  type: object
-                ownerID:
-                  type: string
-                refCount:
-                  type: integer
-                state:
-                  type: string
-                version:
-                  type: string
-              type: object
-          type: object
-      served: true
-      storage: true
-      subresources:
-        status: {}
-status:
-  acceptedNames:
-    kind: ""
-    plural: ""
-  conditions: []
-  storedVersions: []
----
-# Source: longhorn/templates/crds.yaml
-apiVersion: apiextensions.k8s.io/v1
-kind: CustomResourceDefinition
-metadata:
-  annotations:
-    controller-gen.kubebuilder.io/version: v0.7.0
-  creationTimestamp: null
-  labels:
-    app.kubernetes.io/name: longhorn
-    app.kubernetes.io/instance: longhorn
-    app.kubernetes.io/version: v1.3.2
-    longhorn-manager: ""
-  name: engines.longhorn.io
-spec:
-  group: longhorn.io
-  names:
-    kind: Engine
-    listKind: EngineList
-    plural: engines
-    shortNames:
-      - lhe
-    singular: engine
-  scope: Namespaced
-  versions:
-    - additionalPrinterColumns:
-        - description: The current state of the engine
-          jsonPath: .status.currentState
-          name: State
-          type: string
-        - description: The node that the engine is on
-          jsonPath: .spec.nodeID
-          name: Node
-          type: string
-        - description: The instance manager of the engine
-          jsonPath: .status.instanceManagerName
-          name: InstanceManager
-          type: string
-        - description: The current image of the engine
-          jsonPath: .status.currentImage
-          name: Image
-          type: string
-        - jsonPath: .metadata.creationTimestamp
-          name: Age
-          type: date
-      name: v1beta1
-      schema:
-        openAPIV3Schema:
-          description: Engine is where Longhorn stores engine object.
-          properties:
-            apiVersion:
-              description: 'APIVersion defines the versioned schema of this representation of an object. Servers should convert recognized schemas to the latest internal value, and may reject unrecognized values. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#resources'
-              type: string
-            kind:
-              description: 'Kind is a string value representing the REST resource this object represents. Servers may infer this from the endpoint the client submits requests to. Cannot be updated. In CamelCase. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#types-kinds'
-              type: string
-            metadata:
-              type: object
-            spec:
-              x-kubernetes-preserve-unknown-fields: true
-            status:
-              x-kubernetes-preserve-unknown-fields: true
-          type: object
-      served: true
-      storage: false
-      subresources:
-        status: {}
-    - additionalPrinterColumns:
-        - description: The current state of the engine
-          jsonPath: .status.currentState
-          name: State
-          type: string
-        - description: The node that the engine is on
-          jsonPath: .spec.nodeID
-          name: Node
-          type: string
-        - description: The instance manager of the engine
-          jsonPath: .status.instanceManagerName
-          name: InstanceManager
-          type: string
-        - description: The current image of the engine
-          jsonPath: .status.currentImage
-          name: Image
-          type: string
-        - jsonPath: .metadata.creationTimestamp
-          name: Age
-          type: date
-      name: v1beta2
-      schema:
-        openAPIV3Schema:
-          description: Engine is where Longhorn stores engine object.
-          properties:
-            apiVersion:
-              description: 'APIVersion defines the versioned schema of this representation of an object. Servers should convert recognized schemas to the latest internal value, and may reject unrecognized values. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#resources'
-              type: string
-            kind:
-              description: 'Kind is a string value representing the REST resource this object represents. Servers may infer this from the endpoint the client submits requests to. Cannot be updated. In CamelCase. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#types-kinds'
-              type: string
-            metadata:
-              type: object
-            spec:
-              description: EngineSpec defines the desired state of the Longhorn engine
-              properties:
-                active:
-                  type: boolean
-                backupVolume:
-                  type: string
-                desireState:
-                  type: string
-                disableFrontend:
-                  type: boolean
-                engineImage:
-                  type: string
-                frontend:
-                  enum:
-                    - blockdev
-                    - iscsi
-                    - ""
-                  type: string
-                logRequested:
-                  type: boolean
-                nodeID:
-                  type: string
-                replicaAddressMap:
-                  additionalProperties:
-                    type: string
-                  type: object
-                requestedBackupRestore:
-                  type: string
-                requestedDataSource:
-                  type: string
-                revisionCounterDisabled:
-                  type: boolean
-                salvageRequested:
-                  type: boolean
-                upgradedReplicaAddressMap:
-                  additionalProperties:
-                    type: string
-                  type: object
-                volumeName:
-                  type: string
-                volumeSize:
-                  format: int64
-                  type: string
-              type: object
-            status:
-              description: EngineStatus defines the observed state of the Longhorn engine
-              properties:
-                backupStatus:
-                  additionalProperties:
-                    properties:
-                      backupURL:
-                        type: string
-                      error:
-                        type: string
-                      progress:
-                        type: integer
-                      replicaAddress:
-                        type: string
-                      snapshotName:
-                        type: string
-                      state:
-                        type: string
-                    type: object
-                  nullable: true
-                  type: object
-                cloneStatus:
-                  additionalProperties:
-                    properties:
-                      error:
-                        type: string
-                      fromReplicaAddress:
-                        type: string
-                      isCloning:
-                        type: boolean
-                      progress:
-                        type: integer
-                      snapshotName:
-                        type: string
-                      state:
-                        type: string
-                    type: object
-                  nullable: true
-                  type: object
-                currentImage:
-                  type: string
-                currentReplicaAddressMap:
-                  additionalProperties:
-                    type: string
-                  nullable: true
-                  type: object
-                currentSize:
-                  format: int64
-                  type: string
-                currentState:
-                  type: string
-                endpoint:
-                  type: string
-                instanceManagerName:
-                  type: string
-                ip:
-                  type: string
-                isExpanding:
-                  type: boolean
-                lastExpansionError:
-                  type: string
-                lastExpansionFailedAt:
-                  type: string
-                lastRestoredBackup:
-                  type: string
-                logFetched:
-                  type: boolean
-                ownerID:
-                  type: string
-                port:
-                  type: integer
-                purgeStatus:
-                  additionalProperties:
-                    properties:
-                      error:
-                        type: string
-                      isPurging:
-                        type: boolean
-                      progress:
-                        type: integer
-                      state:
-                        type: string
-                    type: object
-                  nullable: true
-                  type: object
-                rebuildStatus:
-                  additionalProperties:
-                    properties:
-                      error:
-                        type: string
-                      fromReplicaAddress:
-                        type: string
-                      isRebuilding:
-                        type: boolean
-                      progress:
-                        type: integer
-                      state:
-                        type: string
-                    type: object
-                  nullable: true
-                  type: object
-                replicaModeMap:
-                  additionalProperties:
-                    type: string
-                  nullable: true
-                  type: object
-                restoreStatus:
-                  additionalProperties:
-                    properties:
-                      backupURL:
-                        type: string
-                      currentRestoringBackup:
-                        type: string
-                      error:
-                        type: string
-                      filename:
-                        type: string
-                      isRestoring:
-                        type: boolean
-                      lastRestored:
-                        type: string
-                      progress:
-                        type: integer
-                      state:
-                        type: string
-                    type: object
-                  nullable: true
-                  type: object
-                salvageExecuted:
-                  type: boolean
-                snapshots:
-                  additionalProperties:
-                    properties:
-                      children:
-                        additionalProperties:
-                          type: boolean
-                        nullable: true
-                        type: object
-                      created:
-                        type: string
-                      labels:
-                        additionalProperties:
-                          type: string
-                        nullable: true
-                        type: object
-                      name:
-                        type: string
-                      parent:
-                        type: string
-                      removed:
-                        type: boolean
-                      size:
-                        type: string
-                      usercreated:
-                        type: boolean
-                    type: object
-                  nullable: true
-                  type: object
-                snapshotsError:
-                  type: string
-                started:
-                  type: boolean
-                storageIP:
-                  type: string
-              type: object
-          type: object
-      served: true
-      storage: true
-      subresources:
-        status: {}
-status:
-  acceptedNames:
-    kind: ""
-    plural: ""
-  conditions: []
-  storedVersions: []
----
-# Source: longhorn/templates/crds.yaml
-apiVersion: apiextensions.k8s.io/v1
-kind: CustomResourceDefinition
-metadata:
-  annotations:
-    controller-gen.kubebuilder.io/version: v0.7.0
-  creationTimestamp: null
-  labels:
-    app.kubernetes.io/name: longhorn
-    app.kubernetes.io/instance: longhorn
-    app.kubernetes.io/version: v1.3.2
-    longhorn-manager: ""
-  name: instancemanagers.longhorn.io
-spec:
-  group: longhorn.io
-  names:
-    kind: InstanceManager
-    listKind: InstanceManagerList
-    plural: instancemanagers
-    shortNames:
-      - lhim
-    singular: instancemanager
-  scope: Namespaced
-  versions:
-    - additionalPrinterColumns:
-        - description: The state of the instance manager
-          jsonPath: .status.currentState
-          name: State
-          type: string
-        - description: The type of the instance manager (engine or replica)
-          jsonPath: .spec.type
-          name: Type
-          type: string
-        - description: The node that the instance manager is running on
-          jsonPath: .spec.nodeID
-          name: Node
-          type: string
-        - jsonPath: .metadata.creationTimestamp
-          name: Age
-          type: date
-      name: v1beta1
-      schema:
-        openAPIV3Schema:
-          description: InstanceManager is where Longhorn stores instance manager object.
-          properties:
-            apiVersion:
-              description: 'APIVersion defines the versioned schema of this representation of an object. Servers should convert recognized schemas to the latest internal value, and may reject unrecognized values. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#resources'
-              type: string
-            kind:
-              description: 'Kind is a string value representing the REST resource this object represents. Servers may infer this from the endpoint the client submits requests to. Cannot be updated. In CamelCase. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#types-kinds'
-              type: string
-            metadata:
-              type: object
-            spec:
-              x-kubernetes-preserve-unknown-fields: true
-            status:
-              x-kubernetes-preserve-unknown-fields: true
-          type: object
-      served: true
-      storage: false
-      subresources:
-        status: {}
-    - additionalPrinterColumns:
-        - description: The state of the instance manager
-          jsonPath: .status.currentState
-          name: State
-          type: string
-        - description: The type of the instance manager (engine or replica)
-          jsonPath: .spec.type
-          name: Type
-          type: string
-        - description: The node that the instance manager is running on
-          jsonPath: .spec.nodeID
-          name: Node
-          type: string
-        - jsonPath: .metadata.creationTimestamp
-          name: Age
-          type: date
-      name: v1beta2
-      schema:
-        openAPIV3Schema:
-          description: InstanceManager is where Longhorn stores instance manager object.
-          properties:
-            apiVersion:
-              description: 'APIVersion defines the versioned schema of this representation of an object. Servers should convert recognized schemas to the latest internal value, and may reject unrecognized values. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#resources'
-              type: string
-            kind:
-              description: 'Kind is a string value representing the REST resource this object represents. Servers may infer this from the endpoint the client submits requests to. Cannot be updated. In CamelCase. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#types-kinds'
-              type: string
-            metadata:
-              type: object
-            spec:
-              description: InstanceManagerSpec defines the desired state of the Longhorn instancer manager
-              properties:
-                engineImage:
-                  description: 'TODO: deprecate this field'
-                  type: string
-                image:
-                  type: string
-                nodeID:
-                  type: string
-                type:
-                  enum:
-                    - engine
-                    - replica
-                  type: string
-              type: object
-            status:
-              description: InstanceManagerStatus defines the observed state of the Longhorn instance manager
-              properties:
-                apiMinVersion:
-                  type: integer
-                apiVersion:
-                  type: integer
-                proxyApiMinVersion:
-                  type: integer
-                proxyApiVersion:
-                  type: integer
-                currentState:
-                  type: string
-                instances:
-                  additionalProperties:
-                    properties:
-                      spec:
-                        properties:
-                          name:
-                            type: string
-                        type: object
-                      status:
-                        properties:
-                          endpoint:
-                            type: string
-                          errorMsg:
-                            type: string
-                          listen:
-                            type: string
-                          portEnd:
-                            format: int32
-                            type: integer
-                          portStart:
-                            format: int32
-                            type: integer
-                          resourceVersion:
-                            format: int64
-                            type: integer
-                          state:
-                            type: string
-                          type:
-                            type: string
-                        type: object
-                    type: object
-                  nullable: true
-                  type: object
-                ip:
-                  type: string
-                ownerID:
-                  type: string
-              type: object
-          type: object
-      served: true
-      storage: true
-      subresources:
-        status: {}
-status:
-  acceptedNames:
-    kind: ""
-    plural: ""
-  conditions: []
-  storedVersions: []
----
-# Source: longhorn/templates/crds.yaml
-apiVersion: apiextensions.k8s.io/v1
-kind: CustomResourceDefinition
-metadata:
-  annotations:
-    controller-gen.kubebuilder.io/version: v0.7.0
-  creationTimestamp: null
-  labels:
-    app.kubernetes.io/name: longhorn
-    app.kubernetes.io/instance: longhorn
-    app.kubernetes.io/version: v1.3.2
-    longhorn-manager: ""
-  name: nodes.longhorn.io
-spec:
-  preserveUnknownFields: false
-  conversion:
-    strategy: Webhook
-    webhook:
-      clientConfig:
-        service:
-          name: longhorn-conversion-webhook
-          namespace: longhorn-system
-          path: /v1/webhook/conversion
-          port: 9443
-      conversionReviewVersions:
-        - v1beta2
-        - v1beta1
-  group: longhorn.io
-  names:
-    kind: Node
-    listKind: NodeList
-    plural: nodes
-    shortNames:
-      - lhn
-    singular: node
-  scope: Namespaced
-  versions:
-    - additionalPrinterColumns:
-        - description: Indicate whether the node is ready
-          jsonPath: .status.conditions['Ready']['status']
-          name: Ready
-          type: string
-        - description: Indicate whether the user disabled/enabled replica scheduling for the node
-          jsonPath: .spec.allowScheduling
-          name: AllowScheduling
-          type: boolean
-        - description: Indicate whether Longhorn can schedule replicas on the node
-          jsonPath: .status.conditions['Schedulable']['status']
-          name: Schedulable
-          type: string
-        - jsonPath: .metadata.creationTimestamp
-          name: Age
-          type: date
-      name: v1beta1
-      schema:
-        openAPIV3Schema:
-          description: Node is where Longhorn stores Longhorn node object.
-          properties:
-            apiVersion:
-              description: 'APIVersion defines the versioned schema of this representation of an object. Servers should convert recognized schemas to the latest internal value, and may reject unrecognized values. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#resources'
-              type: string
-            kind:
-              description: 'Kind is a string value representing the REST resource this object represents. Servers may infer this from the endpoint the client submits requests to. Cannot be updated. In CamelCase. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#types-kinds'
-              type: string
-            metadata:
-              type: object
-            spec:
-              x-kubernetes-preserve-unknown-fields: true
-            status:
-              x-kubernetes-preserve-unknown-fields: true
-          type: object
-      served: true
-      storage: false
-      subresources:
-        status: {}
-    - additionalPrinterColumns:
-        - description: Indicate whether the node is ready
-          jsonPath: .status.conditions[?(@.type=='Ready')].status
-          name: Ready
-          type: string
-        - description: Indicate whether the user disabled/enabled replica scheduling for the node
-          jsonPath: .spec.allowScheduling
-          name: AllowScheduling
-          type: boolean
-        - description: Indicate whether Longhorn can schedule replicas on the node
-          jsonPath: .status.conditions[?(@.type=='Schedulable')].status
-          name: Schedulable
-          type: string
-        - jsonPath: .metadata.creationTimestamp
-          name: Age
-          type: date
-      name: v1beta2
-      schema:
-        openAPIV3Schema:
-          description: Node is where Longhorn stores Longhorn node object.
-          properties:
-            apiVersion:
-              description: 'APIVersion defines the versioned schema of this representation of an object. Servers should convert recognized schemas to the latest internal value, and may reject unrecognized values. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#resources'
-              type: string
-            kind:
-              description: 'Kind is a string value representing the REST resource this object represents. Servers may infer this from the endpoint the client submits requests to. Cannot be updated. In CamelCase. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#types-kinds'
-              type: string
-            metadata:
-              type: object
-            spec:
-              description: NodeSpec defines the desired state of the Longhorn node
-              properties:
-                allowScheduling:
-                  type: boolean
-                disks:
-                  additionalProperties:
-                    properties:
-                      allowScheduling:
-                        type: boolean
-                      evictionRequested:
-                        type: boolean
-                      path:
-                        type: string
-                      storageReserved:
-                        format: int64
-                        type: integer
-                      tags:
-                        items:
-                          type: string
-                        type: array
-                    type: object
-                  type: object
-                engineManagerCPURequest:
-                  type: integer
-                evictionRequested:
-                  type: boolean
-                name:
-                  type: string
-                replicaManagerCPURequest:
-                  type: integer
-                tags:
-                  items:
-                    type: string
-                  type: array
-              type: object
-            status:
-              description: NodeStatus defines the observed state of the Longhorn node
-              properties:
-                conditions:
-                  items:
-                    properties:
-                      lastProbeTime:
-                        description: Last time we probed the condition.
-                        type: string
-                      lastTransitionTime:
-                        description: Last time the condition transitioned from one status to another.
-                        type: string
-                      message:
-                        description: Human-readable message indicating details about last transition.
-                        type: string
-                      reason:
-                        description: Unique, one-word, CamelCase reason for the condition's last transition.
-                        type: string
-                      status:
-                        description: Status is the status of the condition. Can be True, False, Unknown.
-                        type: string
-                      type:
-                        description: Type is the type of the condition.
-                        type: string
-                    type: object
-                  nullable: true
-                  type: array
-                diskStatus:
-                  additionalProperties:
-                    properties:
-                      conditions:
-                        items:
-                          properties:
-                            lastProbeTime:
-                              description: Last time we probed the condition.
-                              type: string
-                            lastTransitionTime:
-                              description: Last time the condition transitioned from one status to another.
-                              type: string
-                            message:
-                              description: Human-readable message indicating details about last transition.
-                              type: string
-                            reason:
-                              description: Unique, one-word, CamelCase reason for the condition's last transition.
-                              type: string
-                            status:
-                              description: Status is the status of the condition. Can be True, False, Unknown.
-                              type: string
-                            type:
-                              description: Type is the type of the condition.
-                              type: string
-                          type: object
-                        nullable: true
-                        type: array
-                      diskUUID:
-                        type: string
-                      scheduledReplica:
-                        additionalProperties:
-                          format: int64
-                          type: integer
-                        nullable: true
-                        type: object
-                      storageAvailable:
-                        format: int64
-                        type: integer
-                      storageMaximum:
-                        format: int64
-                        type: integer
-                      storageScheduled:
-                        format: int64
-                        type: integer
-                    type: object
-                  nullable: true
-                  type: object
-                region:
-                  type: string
-                zone:
-                  type: string
-              type: object
-          type: object
-      served: true
-      storage: true
-      subresources:
-        status: {}
-status:
-  acceptedNames:
-    kind: ""
-    plural: ""
-  conditions: []
-  storedVersions: []
----
-# Source: longhorn/templates/crds.yaml
-apiVersion: apiextensions.k8s.io/v1
-kind: CustomResourceDefinition
-metadata:
-  annotations:
-    controller-gen.kubebuilder.io/version: v0.7.0
-  creationTimestamp: null
-  labels:
-    app.kubernetes.io/name: longhorn
-    app.kubernetes.io/instance: longhorn
-    app.kubernetes.io/version: v1.3.2
-    longhorn-manager: ""
-  name: orphans.longhorn.io
-spec:
-  group: longhorn.io
-  names:
-    kind: Orphan
-    listKind: OrphanList
-    plural: orphans
-    shortNames:
-      - lho
-    singular: orphan
-  scope: Namespaced
-  versions:
-    - additionalPrinterColumns:
-        - description: The type of the orphan
-          jsonPath: .spec.orphanType
-          name: Type
-          type: string
-        - description: The node that the orphan is on
-          jsonPath: .spec.nodeID
-          name: Node
-          type: string
-      name: v1beta2
-      schema:
-        openAPIV3Schema:
-          description: Orphan is where Longhorn stores orphan object.
-          properties:
-            apiVersion:
-              description: 'APIVersion defines the versioned schema of this representation of an object. Servers should convert recognized schemas to the latest internal value, and may reject unrecognized values. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#resources'
-              type: string
-            kind:
-              description: 'Kind is a string value representing the REST resource this object represents. Servers may infer this from the endpoint the client submits requests to. Cannot be updated. In CamelCase. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#types-kinds'
-              type: string
-            metadata:
-              type: object
-            spec:
-              description: OrphanSpec defines the desired state of the Longhorn orphaned data
-              properties:
-                nodeID:
-                  description: The node ID on which the controller is responsible to reconcile this orphan CR.
-                  type: string
-                orphanType:
-                  description: The type of the orphaned data. Can be "replica".
-                  type: string
-                parameters:
-                  additionalProperties:
-                    type: string
-                  description: The parameters of the orphaned data
-                  type: object
-              type: object
-            status:
-              description: OrphanStatus defines the observed state of the Longhorn orphaned data
-              properties:
-                conditions:
-                  items:
-                    properties:
-                      lastProbeTime:
-                        description: Last time we probed the condition.
-                        type: string
-                      lastTransitionTime:
-                        description: Last time the condition transitioned from one status to another.
-                        type: string
-                      message:
-                        description: Human-readable message indicating details about last transition.
-                        type: string
-                      reason:
-                        description: Unique, one-word, CamelCase reason for the condition's last transition.
-                        type: string
-                      status:
-                        description: Status is the status of the condition. Can be True, False, Unknown.
-                        type: string
-                      type:
-                        description: Type is the type of the condition.
-                        type: string
-                    type: object
-                  nullable: true
-                  type: array
-                ownerID:
-                  type: string
-              type: object
-          type: object
-      served: true
-      storage: true
-      subresources:
-        status: {}
-status:
-  acceptedNames:
-    kind: ""
-    plural: ""
-  conditions: []
-  storedVersions: []
----
-# Source: longhorn/templates/crds.yaml
-apiVersion: apiextensions.k8s.io/v1
-kind: CustomResourceDefinition
-metadata:
-  annotations:
-    controller-gen.kubebuilder.io/version: v0.7.0
-  creationTimestamp: null
-  labels:
-    longhorn-manager: ""
-  name: recurringjobs.longhorn.io
-spec:
-  group: longhorn.io
-  names:
-    kind: RecurringJob
-    listKind: RecurringJobList
-    plural: recurringjobs
-    shortNames:
-      - lhrj
-    singular: recurringjob
-  scope: Namespaced
-  versions:
-    - additionalPrinterColumns:
-        - description: Sets groupings to the jobs. When set to "default" group will be added to the volume label when no other job label exist in volume
-          jsonPath: .spec.groups
-          name: Groups
-          type: string
-        - description: Should be one of "backup" or "snapshot"
-          jsonPath: .spec.task
-          name: Task
-          type: string
-        - description: The cron expression represents recurring job scheduling
-          jsonPath: .spec.cron
-          name: Cron
-          type: string
-        - description: The number of snapshots/backups to keep for the volume
-          jsonPath: .spec.retain
-          name: Retain
-          type: integer
-        - description: The concurrent job to run by each cron job
-          jsonPath: .spec.concurrency
-          name: Concurrency
-          type: integer
-        - jsonPath: .metadata.creationTimestamp
-          name: Age
-          type: date
-        - description: Specify the labels
-          jsonPath: .spec.labels
-          name: Labels
-          type: string
-      name: v1beta1
-      schema:
-        openAPIV3Schema:
-          description: RecurringJob is where Longhorn stores recurring job object.
-          properties:
-            apiVersion:
-              description: 'APIVersion defines the versioned schema of this representation of an object. Servers should convert recognized schemas to the latest internal value, and may reject unrecognized values. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#resources'
-              type: string
-            kind:
-              description: 'Kind is a string value representing the REST resource this object represents. Servers may infer this from the endpoint the client submits requests to. Cannot be updated. In CamelCase. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#types-kinds'
-              type: string
-            metadata:
-              type: object
-            spec:
-              x-kubernetes-preserve-unknown-fields: true
-            status:
-              x-kubernetes-preserve-unknown-fields: true
-          type: object
-      served: true
-      storage: false
-      subresources:
-        status: {}
-    - additionalPrinterColumns:
-        - description: Sets groupings to the jobs. When set to "default" group will be added to the volume label when no other job label exist in volume
-          jsonPath: .spec.groups
-          name: Groups
-          type: string
-        - description: Should be one of "backup" or "snapshot"
-          jsonPath: .spec.task
-          name: Task
-          type: string
-        - description: The cron expression represents recurring job scheduling
-          jsonPath: .spec.cron
-          name: Cron
-          type: string
-        - description: The number of snapshots/backups to keep for the volume
-          jsonPath: .spec.retain
-          name: Retain
-          type: integer
-        - description: The concurrent job to run by each cron job
-          jsonPath: .spec.concurrency
-          name: Concurrency
-          type: integer
-        - jsonPath: .metadata.creationTimestamp
-          name: Age
-          type: date
-        - description: Specify the labels
-          jsonPath: .spec.labels
-          name: Labels
-          type: string
-      name: v1beta2
-      schema:
-        openAPIV3Schema:
-          description: RecurringJob is where Longhorn stores recurring job object.
-          properties:
-            apiVersion:
-              description: 'APIVersion defines the versioned schema of this representation of an object. Servers should convert recognized schemas to the latest internal value, and may reject unrecognized values. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#resources'
-              type: string
-            kind:
-              description: 'Kind is a string value representing the REST resource this object represents. Servers may infer this from the endpoint the client submits requests to. Cannot be updated. In CamelCase. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#types-kinds'
-              type: string
-            metadata:
-              type: object
-            spec:
-              description: RecurringJobSpec defines the desired state of the Longhorn recurring job
-              properties:
-                concurrency:
-                  description: The concurrency of taking the snapshot/backup.
-                  type: integer
-                cron:
-                  description: The cron setting.
-                  type: string
-                groups:
-                  description: The recurring job group.
-                  items:
-                    type: string
-                  type: array
-                labels:
-                  additionalProperties:
-                    type: string
-                  description: The label of the snapshot/backup.
-                  type: object
-                name:
-                  description: The recurring job name.
-                  type: string
-                retain:
-                  description: The retain count of the snapshot/backup.
-                  type: integer
-                task:
-                  description: The recurring job type. Can be "snapshot" or "backup".
-                  enum:
-                    - snapshot
-                    - backup
-                  type: string
-              type: object
-            status:
-              description: RecurringJobStatus defines the observed state of the Longhorn recurring job
-              properties:
-                ownerID:
-                  description: The owner ID which is responsible to reconcile this recurring job CR.
-                  type: string
-              type: object
-          type: object
-      served: true
-      storage: true
-      subresources:
-        status: {}
-status:
-  acceptedNames:
-    kind: ""
-    plural: ""
-  conditions: []
-  storedVersions: []
----
-# Source: longhorn/templates/crds.yaml
-apiVersion: apiextensions.k8s.io/v1
-kind: CustomResourceDefinition
-metadata:
-  annotations:
-    controller-gen.kubebuilder.io/version: v0.7.0
-  creationTimestamp: null
-  labels:
-    app.kubernetes.io/name: longhorn
-    app.kubernetes.io/instance: longhorn
-    app.kubernetes.io/version: v1.3.2
-    longhorn-manager: ""
-  name: replicas.longhorn.io
-spec:
-  group: longhorn.io
-  names:
-    kind: Replica
-    listKind: ReplicaList
-    plural: replicas
-    shortNames:
-      - lhr
-    singular: replica
-  scope: Namespaced
-  versions:
-    - additionalPrinterColumns:
-        - description: The current state of the replica
-          jsonPath: .status.currentState
-          name: State
-          type: string
-        - description: The node that the replica is on
-          jsonPath: .spec.nodeID
-          name: Node
-          type: string
-        - description: The disk that the replica is on
-          jsonPath: .spec.diskID
-          name: Disk
-          type: string
-        - description: The instance manager of the replica
-          jsonPath: .status.instanceManagerName
-          name: InstanceManager
-          type: string
-        - description: The current image of the replica
-          jsonPath: .status.currentImage
-          name: Image
-          type: string
-        - jsonPath: .metadata.creationTimestamp
-          name: Age
-          type: date
-      name: v1beta1
-      schema:
-        openAPIV3Schema:
-          description: Replica is where Longhorn stores replica object.
-          properties:
-            apiVersion:
-              description: 'APIVersion defines the versioned schema of this representation of an object. Servers should convert recognized schemas to the latest internal value, and may reject unrecognized values. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#resources'
-              type: string
-            kind:
-              description: 'Kind is a string value representing the REST resource this object represents. Servers may infer this from the endpoint the client submits requests to. Cannot be updated. In CamelCase. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#types-kinds'
-              type: string
-            metadata:
-              type: object
-            spec:
-              x-kubernetes-preserve-unknown-fields: true
-            status:
-              x-kubernetes-preserve-unknown-fields: true
-          type: object
-      served: true
-      storage: false
-      subresources:
-        status: {}
-    - additionalPrinterColumns:
-        - description: The current state of the replica
-          jsonPath: .status.currentState
-          name: State
-          type: string
-        - description: The node that the replica is on
-          jsonPath: .spec.nodeID
-          name: Node
-          type: string
-        - description: The disk that the replica is on
-          jsonPath: .spec.diskID
-          name: Disk
-          type: string
-        - description: The instance manager of the replica
-          jsonPath: .status.instanceManagerName
-          name: InstanceManager
-          type: string
-        - description: The current image of the replica
-          jsonPath: .status.currentImage
-          name: Image
-          type: string
-        - jsonPath: .metadata.creationTimestamp
-          name: Age
-          type: date
-      name: v1beta2
-      schema:
-        openAPIV3Schema:
-          description: Replica is where Longhorn stores replica object.
-          properties:
-            apiVersion:
-              description: 'APIVersion defines the versioned schema of this representation of an object. Servers should convert recognized schemas to the latest internal value, and may reject unrecognized values. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#resources'
-              type: string
-            kind:
-              description: 'Kind is a string value representing the REST resource this object represents. Servers may infer this from the endpoint the client submits requests to. Cannot be updated. In CamelCase. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#types-kinds'
-              type: string
-            metadata:
-              type: object
-            spec:
-              description: ReplicaSpec defines the desired state of the Longhorn replica
-              properties:
-                active:
-                  type: boolean
-                backingImage:
-                  type: string
-                baseImage:
-                  description: Deprecated. Rename to BackingImage
-                  type: string
-                dataDirectoryName:
-                  type: string
-                dataPath:
-                  description: Deprecated
-                  type: string
-                desireState:
-                  type: string
-                diskID:
-                  type: string
-                diskPath:
-                  type: string
-                engineImage:
-                  type: string
-                engineName:
-                  type: string
-                failedAt:
-                  type: string
-                hardNodeAffinity:
-                  type: string
-                healthyAt:
-                  type: string
-                logRequested:
-                  type: boolean
-                nodeID:
-                  type: string
-                rebuildRetryCount:
-                  type: integer
-                revisionCounterDisabled:
-                  type: boolean
-                salvageRequested:
-                  type: boolean
-                volumeName:
-                  type: string
-                volumeSize:
-                  format: int64
-                  type: string
-              type: object
-            status:
-              description: ReplicaStatus defines the observed state of the Longhorn replica
-              properties:
-                currentImage:
-                  type: string
-                currentState:
-                  type: string
-                evictionRequested:
-                  type: boolean
-                instanceManagerName:
-                  type: string
-                ip:
-                  type: string
-                logFetched:
-                  type: boolean
-                ownerID:
-                  type: string
-                port:
-                  type: integer
-                salvageExecuted:
-                  type: boolean
-                started:
-                  type: boolean
-                storageIP:
-                  type: string
-              type: object
-          type: object
-      served: true
-      storage: true
-      subresources:
-        status: {}
-status:
-  acceptedNames:
-    kind: ""
-    plural: ""
-  conditions: []
-  storedVersions: []
----
-# Source: longhorn/templates/crds.yaml
-apiVersion: apiextensions.k8s.io/v1
-kind: CustomResourceDefinition
-metadata:
-  annotations:
-    controller-gen.kubebuilder.io/version: v0.7.0
-  creationTimestamp: null
-  labels:
-    app.kubernetes.io/name: longhorn
-    app.kubernetes.io/instance: longhorn
-    app.kubernetes.io/version: v1.3.2
-    longhorn-manager: ""
-  name: settings.longhorn.io
-spec:
-  group: longhorn.io
-  names:
-    kind: Setting
-    listKind: SettingList
-    plural: settings
-    shortNames:
-      - lhs
-    singular: setting
-  scope: Namespaced
-  versions:
-    - additionalPrinterColumns:
-        - description: The value of the setting
-          jsonPath: .value
-          name: Value
-          type: string
-        - jsonPath: .metadata.creationTimestamp
-          name: Age
-          type: date
-      name: v1beta1
-      schema:
-        openAPIV3Schema:
-          description: Setting is where Longhorn stores setting object.
-          properties:
-            apiVersion:
-              description: 'APIVersion defines the versioned schema of this representation of an object. Servers should convert recognized schemas to the latest internal value, and may reject unrecognized values. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#resources'
-              type: string
-            kind:
-              description: 'Kind is a string value representing the REST resource this object represents. Servers may infer this from the endpoint the client submits requests to. Cannot be updated. In CamelCase. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#types-kinds'
-              type: string
-            metadata:
-              type: object
-            value:
-              type: string
-          required:
-            - value
-          type: object
-      served: true
-      storage: false
-      subresources:
-        status: {}
-    - additionalPrinterColumns:
-        - description: The value of the setting
-          jsonPath: .value
-          name: Value
-          type: string
-        - jsonPath: .metadata.creationTimestamp
-          name: Age
-          type: date
-      name: v1beta2
-      schema:
-        openAPIV3Schema:
-          description: Setting is where Longhorn stores setting object.
-          properties:
-            apiVersion:
-              description: 'APIVersion defines the versioned schema of this representation of an object. Servers should convert recognized schemas to the latest internal value, and may reject unrecognized values. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#resources'
-              type: string
-            kind:
-              description: 'Kind is a string value representing the REST resource this object represents. Servers may infer this from the endpoint the client submits requests to. Cannot be updated. In CamelCase. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#types-kinds'
-              type: string
-            metadata:
-              type: object
-            value:
-              type: string
-          required:
-            - value
-          type: object
-      served: true
-      storage: true
-      subresources:
-        status: {}
-status:
-  acceptedNames:
-    kind: ""
-    plural: ""
-  conditions: []
-  storedVersions: []
----
-# Source: longhorn/templates/crds.yaml
-apiVersion: apiextensions.k8s.io/v1
-kind: CustomResourceDefinition
-metadata:
-  annotations:
-    controller-gen.kubebuilder.io/version: v0.7.0
-  creationTimestamp: null
-  labels:
-    app.kubernetes.io/name: longhorn
-    app.kubernetes.io/instance: longhorn
-    app.kubernetes.io/version: v1.3.2
-    longhorn-manager: ""
-  name: sharemanagers.longhorn.io
-spec:
-  group: longhorn.io
-  names:
-    kind: ShareManager
-    listKind: ShareManagerList
-    plural: sharemanagers
-    shortNames:
-      - lhsm
-    singular: sharemanager
-  scope: Namespaced
-  versions:
-    - additionalPrinterColumns:
-        - description: The state of the share manager
-          jsonPath: .status.state
-          name: State
-          type: string
-        - description: The node that the share manager is owned by
-          jsonPath: .status.ownerID
-          name: Node
-          type: string
-        - jsonPath: .metadata.creationTimestamp
-          name: Age
-          type: date
-      name: v1beta1
-      schema:
-        openAPIV3Schema:
-          description: ShareManager is where Longhorn stores share manager object.
-          properties:
-            apiVersion:
-              description: 'APIVersion defines the versioned schema of this representation of an object. Servers should convert recognized schemas to the latest internal value, and may reject unrecognized values. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#resources'
-              type: string
-            kind:
-              description: 'Kind is a string value representing the REST resource this object represents. Servers may infer this from the endpoint the client submits requests to. Cannot be updated. In CamelCase. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#types-kinds'
-              type: string
-            metadata:
-              type: object
-            spec:
-              x-kubernetes-preserve-unknown-fields: true
-            status:
-              x-kubernetes-preserve-unknown-fields: true
-          type: object
-      served: true
-      storage: false
-      subresources:
-        status: {}
-    - additionalPrinterColumns:
-        - description: The state of the share manager
-          jsonPath: .status.state
-          name: State
-          type: string
-        - description: The node that the share manager is owned by
-          jsonPath: .status.ownerID
-          name: Node
-          type: string
-        - jsonPath: .metadata.creationTimestamp
-          name: Age
-          type: date
-      name: v1beta2
-      schema:
-        openAPIV3Schema:
-          description: ShareManager is where Longhorn stores share manager object.
-          properties:
-            apiVersion:
-              description: 'APIVersion defines the versioned schema of this representation of an object. Servers should convert recognized schemas to the latest internal value, and may reject unrecognized values. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#resources'
-              type: string
-            kind:
-              description: 'Kind is a string value representing the REST resource this object represents. Servers may infer this from the endpoint the client submits requests to. Cannot be updated. In CamelCase. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#types-kinds'
-              type: string
-            metadata:
-              type: object
-            spec:
-              description: ShareManagerSpec defines the desired state of the Longhorn share manager
-              properties:
-                image:
-                  type: string
-              type: object
-            status:
-              description: ShareManagerStatus defines the observed state of the Longhorn share manager
-              properties:
-                endpoint:
-                  type: string
-                ownerID:
-                  type: string
-                state:
-                  type: string
-              type: object
-          type: object
-      served: true
-      storage: true
-      subresources:
-        status: {}
-status:
-  acceptedNames:
-    kind: ""
-    plural: ""
-  conditions: []
-  storedVersions: []
----
-# Source: longhorn/templates/crds.yaml
-apiVersion: apiextensions.k8s.io/v1
-kind: CustomResourceDefinition
-metadata:
-  annotations:
-    controller-gen.kubebuilder.io/version: v0.7.0
-  creationTimestamp: null
-  labels:
-    app.kubernetes.io/name: longhorn
-    app.kubernetes.io/instance: longhorn
-    app.kubernetes.io/version: v1.3.2
-    longhorn-manager: ""
-  name: snapshots.longhorn.io
-spec:
-  group: longhorn.io
-  names:
-    kind: Snapshot
-    listKind: SnapshotList
-    plural: snapshots
-    shortNames:
-      - lhsnap
-    singular: snapshot
-  scope: Namespaced
-  versions:
-    - additionalPrinterColumns:
-        - description: The volume that this snapshot belongs to
-          jsonPath: .spec.volume
-          name: Volume
-          type: string
-        - description: Timestamp when the point-in-time snapshot was taken
-          jsonPath: .status.creationTime
-          name: CreationTime
-          type: string
-        - description: Indicates if the snapshot is ready to be used to restore/backup a volume
-          jsonPath: .status.readyToUse
-          name: ReadyToUse
-          type: boolean
-        - description: Represents the minimum size of volume required to rehydrate from this snapshot
-          jsonPath: .status.restoreSize
-          name: RestoreSize
-          type: string
-        - description: The actual size of the snapshot
-          jsonPath: .status.size
-          name: Size
-          type: string
-        - jsonPath: .metadata.creationTimestamp
-          name: Age
-          type: date
-      name: v1beta2
-      schema:
-        openAPIV3Schema:
-          description: Snapshot is the Schema for the snapshots API
-          properties:
-            apiVersion:
-              description: 'APIVersion defines the versioned schema of this representation of an object. Servers should convert recognized schemas to the latest internal value, and may reject unrecognized values. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#resources'
-              type: string
-            kind:
-              description: 'Kind is a string value representing the REST resource this object represents. Servers may infer this from the endpoint the client submits requests to. Cannot be updated. In CamelCase. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#types-kinds'
-              type: string
-            metadata:
-              type: object
-            spec:
-              description: SnapshotSpec defines the desired state of Longhorn Snapshot
-              properties:
-                createSnapshot:
-                  description: require creating a new snapshot
-                  type: boolean
-                labels:
-                  additionalProperties:
-                    type: string
-                  description: The labels of snapshot
-                  nullable: true
-                  type: object
-                volume:
-                  description: the volume that this snapshot belongs to. This field is immutable after creation. Required
-                  type: string
-              required:
-                - volume
-              type: object
-            status:
-              description: SnapshotStatus defines the observed state of Longhorn Snapshot
-              properties:
-                children:
-                  additionalProperties:
-                    type: boolean
-                  nullable: true
-                  type: object
-                creationTime:
-                  type: string
-                error:
-                  type: string
-                labels:
-                  additionalProperties:
-                    type: string
-                  nullable: true
-                  type: object
-                markRemoved:
-                  type: boolean
-                ownerID:
-                  type: string
-                parent:
-                  type: string
-                readyToUse:
-                  type: boolean
-                restoreSize:
-                  format: int64
-                  type: integer
-                size:
-                  format: int64
-                  type: integer
-                userCreated:
-                  type: boolean
-              type: object
-          type: object
-      served: true
-      storage: true
-      subresources:
-        status: {}
-status:
-  acceptedNames:
-    kind: ""
-    plural: ""
-  conditions: []
-  storedVersions: []
----
-# Source: longhorn/templates/crds.yaml
-apiVersion: apiextensions.k8s.io/v1
-kind: CustomResourceDefinition
-metadata:
-  annotations:
-    controller-gen.kubebuilder.io/version: v0.7.0
-  labels:
-    app.kubernetes.io/name: longhorn
-    app.kubernetes.io/instance: longhorn
-    app.kubernetes.io/version: v1.3.2
-    longhorn-manager: ""
-  name: volumes.longhorn.io
-spec:
-  preserveUnknownFields: false
-  conversion:
-    strategy: Webhook
-    webhook:
-      clientConfig:
-        service:
-          name: longhorn-conversion-webhook
-          namespace: longhorn-system
-          path: /v1/webhook/conversion
-          port: 9443
-      conversionReviewVersions:
-        - v1beta2
-        - v1beta1
-  group: longhorn.io
-  names:
-    kind: Volume
-    listKind: VolumeList
-    plural: volumes
-    shortNames:
-      - lhv
-    singular: volume
-  scope: Namespaced
-  versions:
-    - additionalPrinterColumns:
-        - description: The state of the volume
-          jsonPath: .status.state
-          name: State
-          type: string
-        - description: The robustness of the volume
-          jsonPath: .status.robustness
-          name: Robustness
-          type: string
-        - description: The scheduled condition of the volume
-          jsonPath: .status.conditions['scheduled']['status']
-          name: Scheduled
-          type: string
-        - description: The size of the volume
-          jsonPath: .spec.size
-          name: Size
-          type: string
-        - description: The node that the volume is currently attaching to
-          jsonPath: .status.currentNodeID
-          name: Node
-          type: string
-        - jsonPath: .metadata.creationTimestamp
-          name: Age
-          type: date
-      name: v1beta1
-      schema:
-        openAPIV3Schema:
-          description: Volume is where Longhorn stores volume object.
-          properties:
-            apiVersion:
-              description: 'APIVersion defines the versioned schema of this representation of an object. Servers should convert recognized schemas to the latest internal value, and may reject unrecognized values. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#resources'
-              type: string
-            kind:
-              description: 'Kind is a string value representing the REST resource this object represents. Servers may infer this from the endpoint the client submits requests to. Cannot be updated. In CamelCase. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#types-kinds'
-              type: string
-            metadata:
-              type: object
-            spec:
-              x-kubernetes-preserve-unknown-fields: true
-            status:
-              x-kubernetes-preserve-unknown-fields: true
-          type: object
-      served: true
-      storage: false
-      subresources:
-        status: {}
-    - additionalPrinterColumns:
-        - description: The state of the volume
-          jsonPath: .status.state
-          name: State
-          type: string
-        - description: The robustness of the volume
-          jsonPath: .status.robustness
-          name: Robustness
-          type: string
-        - description: The scheduled condition of the volume
-          jsonPath: .status.conditions[?(@.type=='Schedulable')].status
-          name: Scheduled
-          type: string
-        - description: The size of the volume
-          jsonPath: .spec.size
-          name: Size
-          type: string
-        - description: The node that the volume is currently attaching to
-          jsonPath: .status.currentNodeID
-          name: Node
-          type: string
-        - jsonPath: .metadata.creationTimestamp
-          name: Age
-          type: date
-      name: v1beta2
-      schema:
-        openAPIV3Schema:
-          description: Volume is where Longhorn stores volume object.
-          properties:
-            apiVersion:
-              description: 'APIVersion defines the versioned schema of this representation of an object. Servers should convert recognized schemas to the latest internal value, and may reject unrecognized values. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#resources'
-              type: string
-            kind:
-              description: 'Kind is a string value representing the REST resource this object represents. Servers may infer this from the endpoint the client submits requests to. Cannot be updated. In CamelCase. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#types-kinds'
-              type: string
-            metadata:
-              type: object
-            spec:
-              description: VolumeSpec defines the desired state of the Longhorn volume
-              properties:
-                Standby:
-                  type: boolean
-                accessMode:
-                  enum:
-                    - rwo
-                    - rwx
-                  type: string
-                backingImage:
-                  type: string
-                baseImage:
-                  description: Deprecated. Rename to BackingImage
-                  type: string
-                dataLocality:
-                  enum:
-                    - disabled
-                    - best-effort
-                  type: string
-                dataSource:
-                  type: string
-                disableFrontend:
-                  type: boolean
-                diskSelector:
-                  items:
-                    type: string
-                  type: array
-                encrypted:
-                  type: boolean
-                engineImage:
-                  type: string
-                fromBackup:
-                  type: string
-                frontend:
-                  enum:
-                    - blockdev
-                    - iscsi
-                    - ""
-                  type: string
-                lastAttachedBy:
-                  type: string
-                migratable:
-                  type: boolean
-                migrationNodeID:
-                  type: string
-                nodeID:
-                  type: string
-                nodeSelector:
-                  items:
-                    type: string
-                  type: array
-                numberOfReplicas:
-                  type: integer
-                recurringJobs:
-                  description: Deprecated. Replaced by a separate resource named "RecurringJob"
-                  items:
-                    description: 'VolumeRecurringJobSpec is a deprecated struct. TODO: Should be removed when recurringJobs gets removed from the volume       spec.'
-                    properties:
-                      concurrency:
-                        type: integer
-                      cron:
-                        type: string
-                      groups:
-                        items:
-                          type: string
-                        type: array
-                      labels:
-                        additionalProperties:
-                          type: string
-                        type: object
-                      name:
-                        type: string
-                      retain:
-                        type: integer
-                      task:
-                        enum:
-                          - snapshot
-                          - backup
-                        type: string
-                    type: object
-                  type: array
-                replicaAutoBalance:
-                  enum:
-                    - ignored
-                    - disabled
-                    - least-effort
-                    - best-effort
-                  type: string
-                revisionCounterDisabled:
-                  type: boolean
-                size:
-                  format: int64
-                  type: string
-                staleReplicaTimeout:
-                  type: integer
-              type: object
-            status:
-              description: VolumeStatus defines the observed state of the Longhorn volume
-              properties:
-                actualSize:
-                  format: int64
-                  type: integer
-                cloneStatus:
-                  properties:
-                    snapshot:
-                      type: string
-                    sourceVolume:
-                      type: string
-                    state:
-                      type: string
-                  type: object
-                conditions:
-                  items:
-                    properties:
-                      lastProbeTime:
-                        description: Last time we probed the condition.
-                        type: string
-                      lastTransitionTime:
-                        description: Last time the condition transitioned from one status to another.
-                        type: string
-                      message:
-                        description: Human-readable message indicating details about last transition.
-                        type: string
-                      reason:
-                        description: Unique, one-word, CamelCase reason for the condition's last transition.
-                        type: string
-                      status:
-                        description: Status is the status of the condition. Can be True, False, Unknown.
-                        type: string
-                      type:
-                        description: Type is the type of the condition.
-                        type: string
-                    type: object
-                  nullable: true
-                  type: array
-                currentImage:
-                  type: string
-                currentNodeID:
-                  type: string
-                expansionRequired:
-                  type: boolean
-                frontendDisabled:
-                  type: boolean
-                isStandby:
-                  type: boolean
-                kubernetesStatus:
-                  properties:
-                    lastPVCRefAt:
-                      type: string
-                    lastPodRefAt:
-                      type: string
-                    namespace:
-                      description: determine if PVC/Namespace is history or not
-                      type: string
-                    pvName:
-                      type: string
-                    pvStatus:
-                      type: string
-                    pvcName:
-                      type: string
-                    workloadsStatus:
-                      description: determine if Pod/Workload is history or not
-                      items:
-                        properties:
-                          podName:
-                            type: string
-                          podStatus:
-                            type: string
-                          workloadName:
-                            type: string
-                          workloadType:
-                            type: string
-                        type: object
-                      nullable: true
-                      type: array
-                  type: object
-                lastBackup:
-                  type: string
-                lastBackupAt:
-                  type: string
-                lastDegradedAt:
-                  type: string
-                ownerID:
-                  type: string
-                pendingNodeID:
-                  type: string
-                remountRequestedAt:
-                  type: string
-                restoreInitiated:
-                  type: boolean
-                restoreRequired:
-                  type: boolean
-                robustness:
-                  type: string
-                shareEndpoint:
-                  type: string
-                shareState:
-                  type: string
-                state:
-                  type: string
-              type: object
-          type: object
-      served: true
-      storage: true
-      subresources:
-        status: {}
-status:
-  acceptedNames:
-    kind: ""
-    plural: ""
-  conditions: []
-  storedVersions: []
----
-# Source: longhorn/templates/clusterrole.yaml
-apiVersion: rbac.authorization.k8s.io/v1
-kind: ClusterRole
-metadata:
-  name: longhorn-role
-  labels:
-    app.kubernetes.io/name: longhorn
-    app.kubernetes.io/instance: longhorn
-    app.kubernetes.io/version: v1.3.2
-rules:
-  - apiGroups:
-      - apiextensions.k8s.io
-    resources:
-      - customresourcedefinitions
-    verbs:
-      - "*"
-  - apiGroups: [""]
-    resources: ["pods", "events", "persistentvolumes", "persistentvolumeclaims", "persistentvolumeclaims/status", "nodes", "proxy/nodes", "pods/log", "secrets", "services", "endpoints", "configmaps"]
-    verbs: ["*"]
-  - apiGroups: [""]
-    resources: ["namespaces"]
-    verbs: ["get", "list"]
-  - apiGroups: ["apps"]
-    resources: ["daemonsets", "statefulsets", "deployments"]
-    verbs: ["*"]
-  - apiGroups: ["batch"]
-    resources: ["jobs", "cronjobs"]
-    verbs: ["*"]
-  - apiGroups: ["policy"]
-    resources: ["poddisruptionbudgets"]
-    verbs: ["*"]
-  - apiGroups: ["scheduling.k8s.io"]
-    resources: ["priorityclasses"]
-    verbs: ["watch", "list"]
-  - apiGroups: ["storage.k8s.io"]
-    resources: ["storageclasses", "volumeattachments", "volumeattachments/status", "csinodes", "csidrivers"]
-    verbs: ["*"]
-  - apiGroups: ["snapshot.storage.k8s.io"]
-    resources: ["volumesnapshotclasses", "volumesnapshots", "volumesnapshotcontents", "volumesnapshotcontents/status"]
-    verbs: ["*"]
-  - apiGroups: ["longhorn.io"]
-    resources: ["volumes", "volumes/status", "engines", "engines/status", "replicas", "replicas/status", "settings", "engineimages", "engineimages/status", "nodes", "nodes/status", "instancemanagers", "instancemanagers/status", "sharemanagers", "sharemanagers/status", "backingimages", "backingimages/status", "backingimagemanagers", "backingimagemanagers/status", "backingimagedatasources", "backingimagedatasources/status", "backuptargets", "backuptargets/status", "backupvolumes", "backupvolumes/status", "backups", "backups/status", "recurringjobs", "recurringjobs/status", "orphans", "orphans/status", "snapshots", "snapshots/status"]
-    verbs: ["*"]
-  - apiGroups: ["coordination.k8s.io"]
-    resources: ["leases"]
-    verbs: ["*"]
-  - apiGroups: ["metrics.k8s.io"]
-    resources: ["pods", "nodes"]
-    verbs: ["get", "list"]
-  - apiGroups: ["apiregistration.k8s.io"]
-    resources: ["apiservices"]
-    verbs: ["list", "watch"]
-  - apiGroups: ["admissionregistration.k8s.io"]
-    resources: ["mutatingwebhookconfigurations", "validatingwebhookconfigurations"]
-    verbs: ["get", "list", "create", "patch", "delete"]
----
-# Source: longhorn/templates/clusterrolebinding.yaml
-apiVersion: rbac.authorization.k8s.io/v1
-kind: ClusterRoleBinding
-metadata:
-  name: longhorn-bind
-  labels:
-    app.kubernetes.io/name: longhorn
-    app.kubernetes.io/instance: longhorn
-    app.kubernetes.io/version: v1.3.2
-roleRef:
-  apiGroup: rbac.authorization.k8s.io
-  kind: ClusterRole
-  name: longhorn-role
-subjects:
-  - kind: ServiceAccount
-    name: longhorn-service-account
-    namespace: longhorn-system
----
-# Source: longhorn/templates/psp.yaml
-apiVersion: rbac.authorization.k8s.io/v1
-kind: Role
-metadata:
-  name: longhorn-psp-role
-  labels:
-    app.kubernetes.io/name: longhorn
-    app.kubernetes.io/instance: longhorn
-    app.kubernetes.io/version: v1.3.2
-  namespace: longhorn-system
-rules:
-  - apiGroups:
-      - policy
-    resources:
-      - podsecuritypolicies
-    verbs:
-      - use
-    resourceNames:
-      - longhorn-psp
----
-# Source: longhorn/templates/psp.yaml
-apiVersion: rbac.authorization.k8s.io/v1
-kind: RoleBinding
-metadata:
-  name: longhorn-psp-binding
-  labels:
-    app.kubernetes.io/name: longhorn
-    app.kubernetes.io/instance: longhorn
-    app.kubernetes.io/version: v1.3.2
-  namespace: longhorn-system
-roleRef:
-  apiGroup: rbac.authorization.k8s.io
-  kind: Role
-  name: longhorn-psp-role
-subjects:
-  - kind: ServiceAccount
-    name: longhorn-service-account
-    namespace: longhorn-system
-  - kind: ServiceAccount
-    name: default
-    namespace: longhorn-system
----
-# Source: longhorn/templates/daemonset-sa.yaml
-apiVersion: v1
-kind: Service
-metadata:
-  labels:
-    app.kubernetes.io/name: longhorn
-    app.kubernetes.io/instance: longhorn
-    app.kubernetes.io/version: v1.3.2
-    app: longhorn-manager
-  name: longhorn-backend
-  namespace: longhorn-system
-spec:
-  type: ClusterIP
-  sessionAffinity: ClientIP
-  selector:
-    app: longhorn-manager
-  ports:
-    - name: manager
-      port: 9500
-      targetPort: manager
----
-# Source: longhorn/templates/deployment-ui.yaml
-kind: Service
-apiVersion: v1
-metadata:
-  labels:
-    app.kubernetes.io/name: longhorn
-    app.kubernetes.io/instance: longhorn
-    app.kubernetes.io/version: v1.3.2
-    app: longhorn-ui
-  name: longhorn-frontend
-  namespace: longhorn-system
-spec:
-  type: ClusterIP
-  selector:
-    app: longhorn-ui
-  ports:
-    - name: http
-      port: 80
-      targetPort: http
-      nodePort: null
----
-# Source: longhorn/templates/services.yaml
-apiVersion: v1
-kind: Service
-metadata:
-  labels:
-    app.kubernetes.io/name: longhorn
-    app.kubernetes.io/instance: longhorn
-    app.kubernetes.io/version: v1.3.2
-    app: longhorn-conversion-webhook
-  name: longhorn-conversion-webhook
-  namespace: longhorn-system
-spec:
-  type: ClusterIP
-  sessionAffinity: ClientIP
-  selector:
-    app: longhorn-conversion-webhook
-  ports:
-    - name: conversion-webhook
-      port: 9443
-      targetPort: conversion-wh
----
-# Source: longhorn/templates/services.yaml
-apiVersion: v1
-kind: Service
-metadata:
-  labels:
-    app.kubernetes.io/name: longhorn
-    app.kubernetes.io/instance: longhorn
-    app.kubernetes.io/version: v1.3.2
-    app: longhorn-admission-webhook
-  name: longhorn-admission-webhook
-  namespace: longhorn-system
-spec:
-  type: ClusterIP
-  sessionAffinity: ClientIP
-  selector:
-    app: longhorn-admission-webhook
-  ports:
-    - name: admission-webhook
-      port: 9443
-      targetPort: admission-wh
----
-# Source: longhorn/templates/services.yaml
-apiVersion: v1
-kind: Service
-metadata:
-  labels:
-    app.kubernetes.io/name: longhorn
-    app.kubernetes.io/instance: longhorn
-    app.kubernetes.io/version: v1.3.2
-  name: longhorn-engine-manager
-  namespace: longhorn-system
-spec:
-  clusterIP: None
-  selector:
-    longhorn.io/component: instance-manager
-    longhorn.io/instance-manager-type: engine
----
-# Source: longhorn/templates/services.yaml
-apiVersion: v1
-kind: Service
-metadata:
-  labels:
-    app.kubernetes.io/name: longhorn
-    app.kubernetes.io/instance: longhorn
-    app.kubernetes.io/version: v1.3.2
-  name: longhorn-replica-manager
-  namespace: longhorn-system
-spec:
-  clusterIP: None
-  selector:
-    longhorn.io/component: instance-manager
-    longhorn.io/instance-manager-type: replica
----
-# Source: longhorn/templates/daemonset-sa.yaml
-apiVersion: apps/v1
-kind: DaemonSet
-metadata:
-  labels:
-    app.kubernetes.io/name: longhorn
-    app.kubernetes.io/instance: longhorn
-    app.kubernetes.io/version: v1.3.2
-    app: longhorn-manager
-  name: longhorn-manager
-  namespace: longhorn-system
-spec:
-  selector:
-    matchLabels:
-      app: longhorn-manager
-  template:
-    metadata:
-      labels:
-        app.kubernetes.io/name: longhorn
-        app.kubernetes.io/instance: longhorn
-        app.kubernetes.io/version: v1.3.2
-        app: longhorn-manager
-    spec:
-      initContainers:
-        - name: wait-longhorn-admission-webhook
-          image: longhornio/longhorn-manager:v1.3.2
-          command: ['sh', '-c', 'while [ $(curl -m 1 -s -o /dev/null -w "%{http_code}" -k https://longhorn-admission-webhook:9443/v1/healthz) != "200" ]; do echo waiting; sleep 2; done']
-      containers:
-        - name: longhorn-manager
-          image: longhornio/longhorn-manager:v1.3.2
-          imagePullPolicy: IfNotPresent
-          securityContext:
-            privileged: true
-          command:
-            - longhorn-manager
-            - -d
-            - daemon
-            - --engine-image
-            - "longhornio/longhorn-engine:v1.3.2"
-            - --instance-manager-image
-            - "longhornio/longhorn-instance-manager:v1_20220808"
-            - --share-manager-image
-            - "longhornio/longhorn-share-manager:v1_20220808"
-            - --backing-image-manager-image
-            - "longhornio/backing-image-manager:v3_20220808"
-            - --manager-image
-            - "longhornio/longhorn-manager:v1.3.2"
-            - --service-account
-            - longhorn-service-account
-          ports:
-            - containerPort: 9500
-              name: manager
-          readinessProbe:
-            tcpSocket:
-              port: 9500
-          volumeMounts:
-            - name: dev
-              mountPath: /host/dev/
-            - name: proc
-              mountPath: /host/proc/
-            - name: longhorn
-              mountPath: /var/lib/longhorn/
-              mountPropagation: Bidirectional
-            - name: longhorn-grpc-tls
-              mountPath: /tls-files/
-          env:
-            - name: POD_NAMESPACE
-              valueFrom:
-                fieldRef:
-                  fieldPath: metadata.namespace
-            - name: POD_IP
-              valueFrom:
-                fieldRef:
-                  fieldPath: status.podIP
-            - name: NODE_NAME
-              valueFrom:
-                fieldRef:
-                  fieldPath: spec.nodeName
-      volumes:
-        - name: dev
-          hostPath:
-            path: /dev/
-        - name: proc
-          hostPath:
-            path: /proc/
-        - name: longhorn
-          hostPath:
-            path: /var/lib/longhorn/
-        - name: longhorn-grpc-tls
-          secret:
-            secretName: longhorn-grpc-tls
-            optional: true
-      serviceAccountName: longhorn-service-account
-  updateStrategy:
-    rollingUpdate:
-      maxUnavailable: "100%"
----
-# Source: longhorn/templates/deployment-driver.yaml
-apiVersion: apps/v1
-kind: Deployment
-metadata:
-  name: longhorn-driver-deployer
-  namespace: longhorn-system
-  labels:
-    app.kubernetes.io/name: longhorn
-    app.kubernetes.io/instance: longhorn
-    app.kubernetes.io/version: v1.3.2
-spec:
-  replicas: 2
-  selector:
-    matchLabels:
-      app: longhorn-driver-deployer
-  template:
-    metadata:
-      labels:
-        app.kubernetes.io/name: longhorn
-        app.kubernetes.io/instance: longhorn
-        app.kubernetes.io/version: v1.3.2
-        app: longhorn-driver-deployer
-    spec:
-      initContainers:
-        - name: wait-longhorn-manager
-          image: longhornio/longhorn-manager:v1.3.2
-          resources:
-            limits:
-              cpu: 250m
-              memory: 256Mi
-            requests:
-              cpu: 100m
-              memory: 128Mi
-          command: ['sh', '-c', 'while [ $(curl -m 1 -s -o /dev/null -w "%{http_code}" http://longhorn-backend:9500/v1) != "200" ]; do echo waiting; sleep 2; done']
-      containers:
-        - name: longhorn-driver-deployer
-          image: longhornio/longhorn-manager:v1.3.2
-          imagePullPolicy: IfNotPresent
-          command:
-            - longhorn-manager
-            - -d
-            - deploy-driver
-            - --manager-image
-            - "longhornio/longhorn-manager:v1.3.2"
-            - --manager-url
-            - http://longhorn-backend:9500/v1
-          env:
-            - name: POD_NAMESPACE
-              valueFrom:
-                fieldRef:
-                  fieldPath: metadata.namespace
-            - name: NODE_NAME
-              valueFrom:
-                fieldRef:
-                  fieldPath: spec.nodeName
-            - name: SERVICE_ACCOUNT
-              valueFrom:
-                fieldRef:
-                  fieldPath: spec.serviceAccountName
-            - name: CSI_ATTACHER_IMAGE
-              value: "longhornio/csi-attacher:v3.4.0"
-            - name: CSI_PROVISIONER_IMAGE
-              value: "longhornio/csi-provisioner:v2.1.2"
-            - name: CSI_NODE_DRIVER_REGISTRAR_IMAGE
-              value: "longhornio/csi-node-driver-registrar:v2.5.0"
-            - name: CSI_RESIZER_IMAGE
-              value: "longhornio/csi-resizer:v1.2.0"
-            - name: CSI_SNAPSHOTTER_IMAGE
-              value: "longhornio/csi-snapshotter:v3.0.3"
-      serviceAccountName: longhorn-service-account
-      securityContext:
-        runAsUser: 0
----
-# Source: longhorn/templates/deployment-ui.yaml
-apiVersion: apps/v1
-kind: Deployment
-metadata:
-  labels:
-    app.kubernetes.io/name: longhorn
-    app.kubernetes.io/instance: longhorn
-    app.kubernetes.io/version: v1.3.2
-    app: longhorn-ui
-  name: longhorn-ui
-  namespace: longhorn-system
-spec:
-  replicas: 2
-  selector:
-    matchLabels:
-      app: longhorn-ui
-  template:
-    metadata:
-      labels:
-        app.kubernetes.io/name: longhorn
-        app.kubernetes.io/instance: longhorn
-        app.kubernetes.io/version: v1.3.2
-        app: longhorn-ui
-    spec:
-      containers:
-        - name: longhorn-ui
-          image: longhornio/longhorn-ui:v1.3.2
-          imagePullPolicy: IfNotPresent
-          volumeMounts:
-            - name: nginx-cache
-              mountPath: /var/cache/nginx/
-            - name: nginx-config
-              mountPath: /var/config/nginx/
-            - name: var-run
-              mountPath: /var/run/
-          ports:
-            - containerPort: 8000
-              name: http
-          resources:
-            limits:
-              cpu: 250m
-              memory: 256Mi
-            requests:
-              cpu: 100m
-              memory: 128Mi
-          env:
-            - name: LONGHORN_MANAGER_IP
-              value: "http://longhorn-backend:9500"
-            - name: LONGHORN_UI_PORT
-              value: "8000"
-      volumes:
-        - emptyDir: {}
-          name: nginx-cache
-        - emptyDir: {}
-          name: nginx-config
-        - emptyDir: {}
-          name: var-run
----
-# Source: longhorn/templates/deployment-webhook.yaml
-apiVersion: apps/v1
-kind: Deployment
-metadata:
-  labels:
-    app.kubernetes.io/name: longhorn
-    app.kubernetes.io/instance: longhorn
-    app.kubernetes.io/version: v1.3.2
-    app: longhorn-conversion-webhook
-  name: longhorn-conversion-webhook
-  namespace: longhorn-system
-spec:
-  replicas: 2
-  selector:
-    matchLabels:
-      app: longhorn-conversion-webhook
-  template:
-    metadata:
-      labels:
-        app.kubernetes.io/name: longhorn
-        app.kubernetes.io/instance: longhorn
-        app.kubernetes.io/version: v1.3.2
-        app: longhorn-conversion-webhook
-    spec:
-      affinity:
-        podAntiAffinity:
-          preferredDuringSchedulingIgnoredDuringExecution:
-            - weight: 1
-              podAffinityTerm:
-                labelSelector:
-                  matchExpressions:
-                    - key: app
-                      operator: In
-                      values:
-                        - longhorn-conversion-webhook
-                topologyKey: kubernetes.io/hostname
-      containers:
-        - name: longhorn-conversion-webhook
-          image: longhornio/longhorn-manager:v1.3.2
-          imagePullPolicy: IfNotPresent
-          securityContext:
-            runAsUser: 2000
-          command:
-            - longhorn-manager
-            - conversion-webhook
-            - --service-account
-            - longhorn-service-account
-          ports:
-            - containerPort: 9443
-              name: conversion-wh
-          readinessProbe:
-            tcpSocket:
-              port: 9443
-          resources:
-            limits:
-              cpu: 250m
-              memory: 256Mi
-            requests:
-              cpu: 100m
-              memory: 128Mi
-          env:
-            - name: POD_NAMESPACE
-              valueFrom:
-                fieldRef:
-                  fieldPath: metadata.namespace
-      serviceAccountName: longhorn-service-account
----
-# Source: longhorn/templates/deployment-webhook.yaml
-apiVersion: apps/v1
-kind: Deployment
-metadata:
-  labels:
-    app.kubernetes.io/name: longhorn
-    app.kubernetes.io/instance: longhorn
-    app.kubernetes.io/version: v1.3.2
-    app: longhorn-admission-webhook
-  name: longhorn-admission-webhook
-  namespace: longhorn-system
-spec:
-  replicas: 2
-  selector:
-    matchLabels:
-      app: longhorn-admission-webhook
-  template:
-    metadata:
-      labels:
-        app.kubernetes.io/name: longhorn
-        app.kubernetes.io/instance: longhorn
-        app.kubernetes.io/version: v1.3.2
-        app: longhorn-admission-webhook
-    spec:
-      affinity:
-        podAntiAffinity:
-          preferredDuringSchedulingIgnoredDuringExecution:
-            - weight: 1
-              podAffinityTerm:
-                labelSelector:
-                  matchExpressions:
-                    - key: app
-                      operator: In
-                      values:
-                        - longhorn-admission-webhook
-                topologyKey: kubernetes.io/hostname
-      initContainers:
-        - name: wait-longhorn-conversion-webhook
-          image: longhornio/longhorn-manager:v1.3.2
-          command: ['sh', '-c', 'while [ $(curl -m 1 -s -o /dev/null -w "%{http_code}" -k https://longhorn-conversion-webhook:9443/v1/healthz) != "200" ]; do echo waiting; sleep 2; done']
-          imagePullPolicy: IfNotPresent
-          securityContext:
-            runAsUser: 2000
-      containers:
-        - name: longhorn-admission-webhook
-          image: longhornio/longhorn-manager:v1.3.2
-          imagePullPolicy: IfNotPresent
-          securityContext:
-            runAsUser: 2000
-          command:
-            - longhorn-manager
-            - admission-webhook
-            - --service-account
-            - longhorn-service-account
-          ports:
-            - containerPort: 9443
-              name: admission-wh
-          readinessProbe:
-            tcpSocket:
-              port: 9443
-          resources:
-            limits:
-              cpu: 250m
-              memory: 256Mi
-            requests:
-              cpu: 100m
-              memory: 128Mi
-          env:
-            - name: POD_NAMESPACE
-              valueFrom:
-                fieldRef:
-                  fieldPath: metadata.namespace
-            - name: NODE_NAME
-              valueFrom:
-                fieldRef:
-                  fieldPath: spec.nodeName
-      serviceAccountName: longhorn-service-account
diff --git a/modules/k8s/env/k3s/longhorn/readme.md b/modules/k8s/env/k3s/longhorn/readme.md
deleted file mode 100644
index 7d01ffe..0000000
--- a/modules/k8s/env/k3s/longhorn/readme.md
+++ /dev/null
@@ -1,35 +0,0 @@
-sudo blkid
-sudo nano /etc/fstab
-sudo mkdir -p /var/lib/longhorn
-UUID=13b897af-e5d1-459a-bcc1-7a51d6f4726d	/var/lib/longhorn	ext4	defaults	0	2
-
-https://raw.githubusercontent.com/longhorn/longhorn/v1.3.1/deploy/longhorn.yaml
-
-
-Volumes distribution:
-
-configurar longhorn (nodos) con los siguientes tags (revisar yaml de los deployment para que el affinity se cumpla)
-
-master0
-	jenkins-data
-	gogs-db
-master1
-	jenkins-data
-	gogs-data
-master2
-	gogs-data
-	gogs-db
-
-
-Settings UI:
-
-Automatically Cleanup System Generated Snapshot - enable
-Orphan Auto-Deletion - enable
-Allow Volume Creation with Degraded Availability - disable
-Replica Node Level Soft Anti-Affinity - enable
-
-https://longhorn.io/kb/troubleshooting-volume-pvc-xxx-not-scheduled/
-
-https://longhorn.io/docs/archives/1.0.2/references/settings/#replica-node-level-soft-anti-affinity
-
-https://longhorn.io/docs/1.3.2/volumes-and-nodes/storage-tags/
\ No newline at end of file
diff --git a/modules/k8s/env/k3s/minio/01-pvc.yaml b/modules/k8s/env/k3s/minio/01-pvc.yaml
deleted file mode 100644
index cfbe1cf..0000000
--- a/modules/k8s/env/k3s/minio/01-pvc.yaml
+++ /dev/null
@@ -1,15 +0,0 @@
-apiVersion: v1
-kind: PersistentVolumeClaim
-metadata:
-  name: minio
-  namespace: minio
-  labels:
-    app: minio
-    env: k3s
-spec:
-  storageClassName: longhorn
-  accessModes:
-    - ReadWriteOnce
-  resources:
-    requests:
-      storage: 2Gi
diff --git a/modules/k8s/env/k3s/minio/02-service-api.yaml b/modules/k8s/env/k3s/minio/02-service-api.yaml
deleted file mode 100644
index cf95ea2..0000000
--- a/modules/k8s/env/k3s/minio/02-service-api.yaml
+++ /dev/null
@@ -1,18 +0,0 @@
-apiVersion: v1
-kind: Service
-metadata:
-  name: minio-api
-  namespace: minio
-  labels:
-    app: minio
-    env: k3s
-spec:
-  ports:
-    - name: api
-      port: 9000
-      protocol: TCP
-      targetPort: 9000
-  selector:
-    app: minio
-    env: k3s
-  type: ClusterIP
diff --git a/modules/k8s/env/k3s/minio/02-service-console.yaml b/modules/k8s/env/k3s/minio/02-service-console.yaml
deleted file mode 100644
index e0636a2..0000000
--- a/modules/k8s/env/k3s/minio/02-service-console.yaml
+++ /dev/null
@@ -1,18 +0,0 @@
-apiVersion: v1
-kind: Service
-metadata:
-  name: minio-console
-  namespace: minio
-  labels:
-    app: minio
-    env: k3s
-spec:
-  ports:
-    - name: console
-      port: 9001
-      protocol: TCP
-      targetPort: 9001
-  selector:
-    app: minio
-    env: k3s
-  type: ClusterIP
diff --git a/modules/k8s/env/k3s/minio/03-ingress-minio.yaml b/modules/k8s/env/k3s/minio/03-ingress-minio.yaml
deleted file mode 100644
index d210d91..0000000
--- a/modules/k8s/env/k3s/minio/03-ingress-minio.yaml
+++ /dev/null
@@ -1,22 +0,0 @@
-apiVersion: networking.k8s.io/v1
-kind: Ingress
-metadata:
-  name: minio-console
-  namespace: minio
-spec:
-  defaultBackend:
-    service:
-      name: minio
-      port:
-        number: 9001
-  rules:
-    - host: minio.domain.com
-      http:
-        paths:
-          - backend:
-              service:
-                name: minio-console
-                port:
-                  number: 9001
-            path: /
-            pathType: Prefix
diff --git a/modules/k8s/env/k3s/minio/03-ingress-s3.yaml b/modules/k8s/env/k3s/minio/03-ingress-s3.yaml
deleted file mode 100644
index 74964e9..0000000
--- a/modules/k8s/env/k3s/minio/03-ingress-s3.yaml
+++ /dev/null
@@ -1,22 +0,0 @@
-apiVersion: networking.k8s.io/v1
-kind: Ingress
-metadata:
-  name: minio-api
-  namespace: minio
-spec:
-  defaultBackend:
-    service:
-      name: minio
-      port:
-        number: 9000
-  rules:
-    - host: s3.domain.com
-      http:
-        paths:
-          - backend:
-              service:
-                name: minio-api
-                port:
-                  number: 9000
-            path: /
-            pathType: Prefix
diff --git a/modules/k8s/env/k3s/minio/04-deployment.yaml b/modules/k8s/env/k3s/minio/04-deployment.yaml
deleted file mode 100644
index 5ac2800..0000000
--- a/modules/k8s/env/k3s/minio/04-deployment.yaml
+++ /dev/null
@@ -1,59 +0,0 @@
-apiVersion: apps/v1
-kind: Deployment
-metadata:
-  name: minio
-  namespace: minio
-spec:
-  selector:
-    matchLabels:
-      app: minio
-      env: k3s
-  template:
-    metadata:
-      labels:
-        app: minio
-        env: k3s
-    spec:
-      affinity: {}
-      containers:
-        - image: minio/minio
-          imagePullPolicy: Always
-          name: minio
-          env:
-            - name: MINIO_ROOT_USER
-              value: asknouser
-            - name: MINIO_ROOT_PASSWORD
-              value: a=aksdjh543=&asdjhIMNRV000
-            - name: CONSOLE_SECURE_TLS_REDIRECT
-              value: "off"
-            - name: MINIO_BROWSER_REDIRECT_URL
-              value: https://minio.domain.com
-          command:
-            - /bin/bash
-            - -c
-          args:
-            - minio server /data --console-address :9001
-          ports:
-            - containerPort: 9000
-              name: api
-              protocol: TCP
-            - containerPort: 9001
-              name: console
-              protocol: TCP
-          resources:
-            limits:
-              cpu: 4000m
-              memory: 4Gi
-            requests:
-              cpu: 500m
-              memory: 128Mi
-          volumeMounts:
-            - mountPath: /data
-              name: minio
-      volumes:
-        - name: minio
-          persistentVolumeClaim:
-            claimName: minio
-        - name: vol-rzxxk
-          persistentVolumeClaim:
-            claimName: minio
diff --git a/modules/k8s/env/k3s/nextcloud/01-frontal.yml b/modules/k8s/env/k3s/nextcloud/01-frontal.yml
deleted file mode 100644
index eb4a33e..0000000
--- a/modules/k8s/env/k3s/nextcloud/01-frontal.yml
+++ /dev/null
@@ -1,57 +0,0 @@
-apiVersion: apps/v1
-kind: StatefulSet
-metadata:
-  name: nc-frontal-fariseos
-  namespace: formacio
-spec:
-  selector:
-    matchLabels:
-      application: nc-frontal-fariseos
-      entorn: formacio
-      tier: frontal
-      tecnologia: nextcloud
-  serviceName: "nc-frontal-fariseos"
-  replicas: 1
-  template:
-    metadata:
-      labels:
-        application: nc-frontal-fariseos
-        entorn: formacio
-        tier: frontal
-        tecnologia: nextcloud
-    spec:
-      terminationGracePeriodSeconds: 10
-      containers:
-        - name: nc-frontal-fariseos
-          image: registreformacio.$domain_intra_ba/nextcloud
-          ports:
-            - containerPort: 80
-              name: web
-          volumeMounts:
-            - name: nc-frontal-fariseos
-              mountPath: /var/www/html
-          resources:
-            limits:
-              cpu: "0.5"
-              memory: "512Mi"
-            requests:
-              cpu: "0.5"
-              memory: "128Mi"
-      affinity:
-        nodeAffinity:
-          requiredDuringSchedulingIgnoredDuringExecution:
-            nodeSelectorTerms:
-              - matchExpressions:
-                  - key: kubernetes.io/hostname
-                    operator: In
-                    values:
-                      - "k8s-formacio-worker0"
-  volumeClaimTemplates:
-    - metadata:
-        name: nc-frontal-fariseos
-      spec:
-        accessModes: ["ReadWriteOnce"]
-        storageClassName: "k8s-formacio-b15390a-contingut"
-        resources:
-          requests:
-            storage: 1Gi
diff --git a/modules/k8s/env/k3s/nextcloud/02-servei-frontal.yml b/modules/k8s/env/k3s/nextcloud/02-servei-frontal.yml
deleted file mode 100644
index 058f1ec..0000000
--- a/modules/k8s/env/k3s/nextcloud/02-servei-frontal.yml
+++ /dev/null
@@ -1,21 +0,0 @@
-apiVersion: v1
-kind: Service
-metadata:
-  name: nc-frontal-fariseos
-  namespace: formacio
-  labels:
-    application: nc-frontal-fariseos
-    entorn: formacio
-    tier: frontal
-    tecnologia: nextcloud
-spec:
-  externalTrafficPolicy: Local
-  ports:
-    - name: http
-      port: 80
-      protocol: TCP
-      targetPort: 80
-  selector:
-    application: nc-frontal-fariseos
-    entorn: formacio
-  type: NodePort
diff --git a/modules/k8s/env/k3s/nextcloud/03-ingress.yml b/modules/k8s/env/k3s/nextcloud/03-ingress.yml
deleted file mode 100644
index 9eecc61..0000000
--- a/modules/k8s/env/k3s/nextcloud/03-ingress.yml
+++ /dev/null
@@ -1,31 +0,0 @@
-apiVersion: networking.k8s.io/v1
-kind: Ingress
-metadata:
-  name: nc-frontal-fariseos
-  namespace: formacio
-  labels:
-    application: nc-frontal-fariseos
-    entorn: formacio
-    tier: frontal
-    tecnologia: k8s
-spec:
-  defaultBackend:
-    service:
-      name: nc-frontal-fariseos
-      port:
-        number: 80
-  rules:
-    - host: nextcloud-fariseos.$domain_intra_ba
-      http:
-        paths:
-          - backend:
-              service:
-                name: nc-frontal-fariseos
-                port:
-                  number: 80
-            path: /
-            pathType: Prefix
-status:
-  loadBalancer:
-    ingress:
-      - ip: 172.16.208.20
diff --git a/modules/k8s/env/k3s/prestashop/01-frontal.yml b/modules/k8s/env/k3s/prestashop/01-frontal.yml
deleted file mode 100644
index 7471b28..0000000
--- a/modules/k8s/env/k3s/prestashop/01-frontal.yml
+++ /dev/null
@@ -1,84 +0,0 @@
-apiVersion: apps/v1
-kind: StatefulSet
-metadata:
-  name: ps-frontal-fariseos
-  namespace: formacio
-spec:
-  selector:
-    matchLabels:
-      application: ps-frontal-fariseos
-      entorn: formacio
-      tier: frontal
-      tecnologia: prestashop
-  serviceName: "ps-frontal-fariseos"
-  replicas: 1
-  template:
-    metadata:
-      labels:
-        application: ps-frontal-fariseos
-        entorn: formacio
-        tier: frontal
-        tecnologia: prestashop
-    spec:
-      terminationGracePeriodSeconds: 10
-      containers:
-        - name: ps-frontal-fariseos
-          image: registreformacio.$domain_intra_ba/prestashop/prestashop:1.7
-          env:
-            - name: DB_SERVER
-              value: ps-bd-fariseos
-            - name: DB_NAME
-              value: prestashop
-            - name: DB_USER
-              value: prestashop
-            - name: DB_PASSWD
-              value: 1nternet!
-            - name: ADMIN_MAIL
-              value: admin@admin.com
-            - name: ADMIN_PASSWD
-              value: adminformacio
-            - name: PS_DOMAIN
-              value: "prestashop-fariseos.$domain_intra_ba"
-            - name: PS_HANDLE_DYNAMIC_DOMAIN
-              value: "1"
-            - name: PS_ENABLE_SSL
-              value: "1"
-            - name: PS_LANGUAGE
-              value: ca
-            - name: PS_COUNTRY
-              value: ES
-            - name: PS_FOLDER_ADMIN
-              value: adminformacio
-            - name: PS_INSTALL_AUTO
-              value: "1"
-          ports:
-            - containerPort: 80
-              name: web
-          volumeMounts:
-            - name: ps-frontal-fariseos
-              mountPath: /var/www/html
-          resources:
-            limits:
-              cpu: "0.5"
-              memory: "512Mi"
-            requests:
-              cpu: "0.5"
-              memory: "128Mi"
-      affinity:
-        nodeAffinity:
-          requiredDuringSchedulingIgnoredDuringExecution:
-            nodeSelectorTerms:
-              - matchExpressions:
-                  - key: kubernetes.io/hostname
-                    operator: In
-                    values:
-                      - "k8s-formacio-worker0"
-  volumeClaimTemplates:
-    - metadata:
-        name: ps-frontal-fariseos
-      spec:
-        accessModes: ["ReadWriteOnce"]
-        storageClassName: "k8s-formacio-b15390a-contingut"
-        resources:
-          requests:
-            storage: 1Gi
diff --git a/modules/k8s/env/k3s/prestashop/02-servei-frontal.yml b/modules/k8s/env/k3s/prestashop/02-servei-frontal.yml
deleted file mode 100644
index 027fe26..0000000
--- a/modules/k8s/env/k3s/prestashop/02-servei-frontal.yml
+++ /dev/null
@@ -1,21 +0,0 @@
-apiVersion: v1
-kind: Service
-metadata:
-  name: ps-frontal-fariseos
-  namespace: formacio
-  labels:
-    application: ps-frontal-fariseos
-    entorn: formacio
-    tier: frontal
-    tecnologia: prestashop
-spec:
-  externalTrafficPolicy: Local
-  ports:
-    - name: http
-      port: 80
-      protocol: TCP
-      targetPort: 80
-  selector:
-    application: ps-frontal-fariseos
-    entorn: formacio
-  type: NodePort
diff --git a/modules/k8s/env/k3s/prestashop/03-base-de-dades.yml b/modules/k8s/env/k3s/prestashop/03-base-de-dades.yml
deleted file mode 100644
index e9e9146..0000000
--- a/modules/k8s/env/k3s/prestashop/03-base-de-dades.yml
+++ /dev/null
@@ -1,66 +0,0 @@
-apiVersion: apps/v1
-kind: StatefulSet
-metadata:
-  name: ps-bd-fariseos
-  namespace: formacio
-spec:
-  selector:
-    matchLabels:
-      application: ps-bd-fariseos
-      entorn: formacio
-      tier: base-de-dades
-      tecnologia: mysql
-  serviceName: "ps-bd-fariseos"
-  replicas: 1
-  template:
-    metadata:
-      labels:
-        application: ps-bd-fariseos
-        entorn: formacio
-        tier: base-de-dades
-        tecnologia: mysql
-    spec:
-      terminationGracePeriodSeconds: 10
-      containers:
-        - name: ps-bd-fariseos
-          image: registreformacio.$domain_intra_ba/mysql:5.7
-          env:
-            - name: MYSQL_ROOT_PASSWORD
-              value: 1nternet!
-            - name: MYSQL_DATABASE
-              value: prestashop
-            - name: MYSQL_USER
-              value: prestashop
-            - name: MYSQL_PASSWORD
-              value: 1nternet!
-          ports:
-            - containerPort: 3306
-              name: bd
-          volumeMounts:
-            - name: ps-bd-fariseos
-              mountPath: /var/lib/mysql
-          resources:
-            limits:
-              cpu: "0.5"
-              memory: "512Mi"
-            requests:
-              cpu: "0.5"
-              memory: "128Mi"
-      affinity:
-        nodeAffinity:
-          requiredDuringSchedulingIgnoredDuringExecution:
-            nodeSelectorTerms:
-              - matchExpressions:
-                  - key: kubernetes.io/hostname
-                    operator: In
-                    values:
-                      - "k8s-formacio-worker0"
-  volumeClaimTemplates:
-    - metadata:
-        name: ps-bd-fariseos
-      spec:
-        accessModes: ["ReadWriteOnce"]
-        storageClassName: "k8s-formacio-b15390a-contingut"
-        resources:
-          requests:
-            storage: 1Gi
diff --git a/modules/k8s/env/k3s/prestashop/04-servei-bd.yml b/modules/k8s/env/k3s/prestashop/04-servei-bd.yml
deleted file mode 100644
index 1403b23..0000000
--- a/modules/k8s/env/k3s/prestashop/04-servei-bd.yml
+++ /dev/null
@@ -1,17 +0,0 @@
-apiVersion: v1
-kind: Service
-metadata:
-  name: ps-bd-fariseos
-  namespace: formacio
-  labels:
-    application: ps-bd-fariseos
-    entorn: formacio
-    tier: base-de-dades
-    tecnologia: wordpress
-spec:
-  ports:
-    - port: 3306
-  selector:
-    application: ps-bd-fariseos
-    entorn: formacio
-  clusterIP: None
diff --git a/modules/k8s/env/k3s/prestashop/05-ingress.yml b/modules/k8s/env/k3s/prestashop/05-ingress.yml
deleted file mode 100644
index dc778dc..0000000
--- a/modules/k8s/env/k3s/prestashop/05-ingress.yml
+++ /dev/null
@@ -1,31 +0,0 @@
-apiVersion: networking.k8s.io/v1
-kind: Ingress
-metadata:
-  name: ps-frontal-fariseos
-  namespace: formacio
-  labels:
-    application: ps-frontal-fariseos
-    entorn: formacio
-    tier: frontal
-    tecnologia: k8s
-spec:
-  defaultBackend:
-    service:
-      name: ps-frontal-fariseos
-      port:
-        number: 80
-  rules:
-    - host: prestashop-fariseos.$domain_intra_ba
-      http:
-        paths:
-          - backend:
-              service:
-                name: ps-frontal-fariseos
-                port:
-                  number: 80
-            path: /
-            pathType: Prefix
-status:
-  loadBalancer:
-    ingress:
-      - ip: 172.16.208.20
diff --git a/modules/k8s/env/k3s/rundeck/crontab-git-secret.yaml b/modules/k8s/env/k3s/rundeck/crontab-git-secret.yaml
deleted file mode 100644
index 9aeb91e..0000000
--- a/modules/k8s/env/k3s/rundeck/crontab-git-secret.yaml
+++ /dev/null
@@ -1,8 +0,0 @@
-apiVersion: v1
-kind: Secret
-metadata:
-  name: crontab-git-gitlab-secret
-  namespace: rundeck
-type: Opaque
-data:
-  password: ZTd5akVTVUUtWGg5RHJlZjROTnoK
diff --git a/modules/k8s/env/k3s/rundeck/crontab-git.yaml b/modules/k8s/env/k3s/rundeck/crontab-git.yaml
deleted file mode 100644
index b31e1dc..0000000
--- a/modules/k8s/env/k3s/rundeck/crontab-git.yaml
+++ /dev/null
@@ -1,56 +0,0 @@
-apiVersion: apps/v1
-kind: Deployment
-metadata:
-  name: rundeck-crontab-git
-  namespace: rundeck
-spec:
-  replicas: 1
-  selector:
-    matchLabels:
-      app: rundeck
-      entorn: pro
-      tier: crontab-git
-      tecnologia: alpine
-  template:
-    metadata:
-      labels:
-        app: rundeck
-        entorn: pro
-        tier: crontab-git
-        tecnologia: alpine
-    spec:
-      containers:
-        - name: rundeck-crontab-git
-          image: registry.$domain_stg_ba/bcnact-images/crontab:git
-          env:
-            - name: USER
-              value: rundeck
-            - name: EMAIL
-              value: sistemes.ssi@$domain_pro_ba
-            - name: GITLAB_TOKEN
-              valueFrom:
-                secretKeyRef:
-                  name: crontab-git-gitlab-secret
-                  key: password
-            - name: GITLAB_PROJECT
-              value: gitlab.$domain_intra_ba/OT-SISCOM/kubernetes/rundeck-scripts.git
-            - name: GITLAB_PROJECT_DEVELOP_BRANCH
-              value: develop
-            - name: GITLAB_PROJECT_RELEASE_BRANCH
-              value: release
-          resources:
-            limits:
-              cpu: "0.5"
-              memory: "512Mi"
-            requests:
-              cpu: "0.5"
-              memory: "128Mi"
-          volumeMounts:
-            #Aquest utilitza el pvc
-            - name: data-rundeck-app
-              mountPath: /home/
-      volumes:
-        #Aquest utilitza el pvc
-        - name: data-rundeck-app
-          persistentVolumeClaim:
-            claimName: data-rundeck-app
diff --git a/modules/k8s/env/k3s/upgrade/plans.yaml b/modules/k8s/env/k3s/upgrade/plans.yaml
deleted file mode 100644
index 9cc0ecb..0000000
--- a/modules/k8s/env/k3s/upgrade/plans.yaml
+++ /dev/null
@@ -1,44 +0,0 @@
-# Server plan
-apiVersion: upgrade.cattle.io/v1
-kind: Plan
-metadata:
-  name: server-plan
-  namespace: system-upgrade
-spec:
-  concurrency: 1
-  cordon: true
-  nodeSelector:
-    matchExpressions:
-      - key: node-role.kubernetes.io/master
-        operator: In
-        values:
-          - "true"
-  serviceAccountName: system-upgrade
-  upgrade:
-    image: rancher/k3s-upgrade
-  version: v1.24.8+k3s1
----
-# Agent plan
-apiVersion: upgrade.cattle.io/v1
-kind: Plan
-metadata:
-  name: agent-plan
-  namespace: system-upgrade
-spec:
-  concurrency: 1
-  cordon: true
-  nodeSelector:
-    matchExpressions:
-      - key: node-role.kubernetes.io/worker
-        operator: In
-        values:
-          - "true"
-  prepare:
-    args:
-      - prepare
-      - server-plan
-    image: rancher/k3s-upgrade
-  serviceAccountName: system-upgrade
-  upgrade:
-    image: rancher/k3s-upgrade
-  version: v1.24.8+k3s1
diff --git a/modules/k8s/env/k3s/upgrade/readme.md b/modules/k8s/env/k3s/upgrade/readme.md
deleted file mode 100644
index e6ace83..0000000
--- a/modules/k8s/env/k3s/upgrade/readme.md
+++ /dev/null
@@ -1,14 +0,0 @@
-https://milindchawre.github.io/site/blog/k3s-upgrade-a-simplified-guide/
-
-kubectl apply -f https://raw.githubusercontent.com/rancher/system-upgrade-controller/master/manifests/system-upgrade-controller.yaml
-
-
-kubectl get all -n system-upgrade
-
-kubectl apply -f plans.yaml
-
-
-kubectl -n system-upgrade get plans -o yaml
-kubectl -n system-upgrade get jobs -o yaml
-
-kubectl get nodes
\ No newline at end of file
diff --git a/modules/k8s/env/k3s/vtiger/01-frontal.yml b/modules/k8s/env/k3s/vtiger/01-frontal.yml
deleted file mode 100644
index b3b899d..0000000
--- a/modules/k8s/env/k3s/vtiger/01-frontal.yml
+++ /dev/null
@@ -1,68 +0,0 @@
-apiVersion: apps/v1
-kind: StatefulSet
-metadata:
-  name: vt-frontal-fariseos
-  namespace: formacio
-spec:
-  selector:
-    matchLabels:
-      application: vt-frontal-fariseos
-      entorn: formacio
-      tier: frontal
-      tecnologia: vtiger
-  serviceName: "vt-frontal-fariseos"
-  replicas: 1
-  template:
-    metadata:
-      labels:
-        application: vt-frontal-fariseos
-        entorn: formacio
-        tier: frontal
-        tecnologia: vtiger
-    spec:
-      terminationGracePeriodSeconds: 10
-      containers:
-        - name: vt-frontal-fariseos
-          image: registreformacio.$domain_intra_ba/fmarsenyach/vtiger7.3
-          env:
-            - name: MYSQL_HOST
-              value: vt-bd-fariseos
-            - name: DB_USERNAME
-              value: vtiger
-            - name: MYSQL_DATABASE
-              value: vtiger
-            - name: MYSQL_ROOT_PASSWORD
-              value: 1nternet!
-            - name: VT_SITE_URL
-              value: https://vtiger-fariseos.$domain_intra_ba
-          ports:
-            - containerPort: 80
-              name: web
-          volumeMounts:
-            - name: vt-frontal-fariseos
-              mountPath: /var/lib/vtiger
-          resources:
-            limits:
-              cpu: "0.5"
-              memory: "512Mi"
-            requests:
-              cpu: "0.5"
-              memory: "128Mi"
-      affinity:
-        nodeAffinity:
-          requiredDuringSchedulingIgnoredDuringExecution:
-            nodeSelectorTerms:
-              - matchExpressions:
-                  - key: kubernetes.io/hostname
-                    operator: In
-                    values:
-                      - "k8s-formacio-worker0"
-  volumeClaimTemplates:
-    - metadata:
-        name: vt-frontal-fariseos
-      spec:
-        accessModes: ["ReadWriteOnce"]
-        storageClassName: "k8s-formacio-b15390a-contingut"
-        resources:
-          requests:
-            storage: 1Gi
diff --git a/modules/k8s/env/k3s/vtiger/02-servei-frontal.yml b/modules/k8s/env/k3s/vtiger/02-servei-frontal.yml
deleted file mode 100644
index a819278..0000000
--- a/modules/k8s/env/k3s/vtiger/02-servei-frontal.yml
+++ /dev/null
@@ -1,21 +0,0 @@
-apiVersion: v1
-kind: Service
-metadata:
-  name: vt-frontal-fariseos
-  namespace: formacio
-  labels:
-    application: vt-frontal-fariseos
-    entorn: formacio
-    tier: frontal
-    tecnologia: prestashop
-spec:
-  externalTrafficPolicy: Local
-  ports:
-    - name: http
-      port: 80
-      protocol: TCP
-      targetPort: 80
-  selector:
-    application: vt-frontal-fariseos
-    entorn: formacio
-  type: NodePort
diff --git a/modules/k8s/env/k3s/vtiger/03-base-de-dades.yml b/modules/k8s/env/k3s/vtiger/03-base-de-dades.yml
deleted file mode 100644
index bae0e17..0000000
--- a/modules/k8s/env/k3s/vtiger/03-base-de-dades.yml
+++ /dev/null
@@ -1,66 +0,0 @@
-apiVersion: apps/v1
-kind: StatefulSet
-metadata:
-  name: vt-bd-fariseos
-  namespace: formacio
-spec:
-  selector:
-    matchLabels:
-      application: vt-bd-fariseos
-      entorn: formacio
-      tier: base-de-dades
-      tecnologia: mysql
-  serviceName: "vt-bd-fariseos"
-  replicas: 1
-  template:
-    metadata:
-      labels:
-        application: vt-bd-fariseos
-        entorn: formacio
-        tier: base-de-dades
-        tecnologia: mysql
-    spec:
-      terminationGracePeriodSeconds: 10
-      containers:
-        - name: vt-bd-fariseos
-          image: registreformacio.$domain_intra_ba/mysql:5.7
-          env:
-            - name: MYSQL_ROOT_PASSWORD
-              value: 1nternet!
-            - name: MYSQL_DATABASE
-              value: vtiger
-            - name: MYSQL_USER
-              value: vtiger
-            - name: MYSQL_PASSWORD
-              value: 1nternet!
-          ports:
-            - containerPort: 3306
-              name: bd
-          volumeMounts:
-            - name: vt-bd-fariseos
-              mountPath: /var/lib/mysql
-          resources:
-            limits:
-              cpu: "0.5"
-              memory: "512Mi"
-            requests:
-              cpu: "0.5"
-              memory: "128Mi"
-      affinity:
-        nodeAffinity:
-          requiredDuringSchedulingIgnoredDuringExecution:
-            nodeSelectorTerms:
-              - matchExpressions:
-                  - key: kubernetes.io/hostname
-                    operator: In
-                    values:
-                      - "k8s-formacio-worker0"
-  volumeClaimTemplates:
-    - metadata:
-        name: vt-bd-fariseos
-      spec:
-        accessModes: ["ReadWriteOnce"]
-        storageClassName: "k8s-formacio-b15390a-contingut"
-        resources:
-          requests:
-            storage: 1Gi
diff --git a/modules/k8s/env/k3s/vtiger/04-servei-bd.yml b/modules/k8s/env/k3s/vtiger/04-servei-bd.yml
deleted file mode 100644
index a91e98a..0000000
--- a/modules/k8s/env/k3s/vtiger/04-servei-bd.yml
+++ /dev/null
@@ -1,17 +0,0 @@
-apiVersion: v1
-kind: Service
-metadata:
-  name: vt-bd-fariseos
-  namespace: formacio
-  labels:
-    application: vt-bd-fariseos
-    entorn: formacio
-    tier: base-de-dades
-    tecnologia: wordpress
-spec:
-  ports:
-    - port: 3306
-  selector:
-    application: vt-bd-fariseos
-    entorn: formacio
-  clusterIP: None
diff --git a/modules/k8s/env/k3s/vtiger/05-ingress.yml b/modules/k8s/env/k3s/vtiger/05-ingress.yml
deleted file mode 100644
index 369419b..0000000
--- a/modules/k8s/env/k3s/vtiger/05-ingress.yml
+++ /dev/null
@@ -1,31 +0,0 @@
-apiVersion: networking.k8s.io/v1
-kind: Ingress
-metadata:
-  name: vt-frontal-fariseos
-  namespace: formacio
-  labels:
-    application: vt-frontal-fariseos
-    entorn: formacio
-    tier: frontal
-    tecnologia: k8s
-spec:
-  defaultBackend:
-    service:
-      name: vt-frontal-fariseos
-      port:
-        number: 80
-  rules:
-    - host: vtiger-fariseos.$domain_intra_ba
-      http:
-        paths:
-          - backend:
-              service:
-                name: vt-frontal-fariseos
-                port:
-                  number: 80
-            path: /
-            pathType: Prefix
-status:
-  loadBalancer:
-    ingress:
-      - ip: 172.16.208.20
diff --git a/modules/k8s/env/k3s/wordpress/01-frontal.yml b/modules/k8s/env/k3s/wordpress/01-frontal.yml
deleted file mode 100644
index b1b526d..0000000
--- a/modules/k8s/env/k3s/wordpress/01-frontal.yml
+++ /dev/null
@@ -1,59 +0,0 @@
-apiVersion: apps/v1
-kind: StatefulSet
-metadata:
-  name: ap000-frontal
-  namespace: proves
-spec:
-  selector:
-    matchLabels:
-      aplicacio: ap000
-      entorn: pro
-      tier: frontal
-      tecnologia: stateful-set
-      cluster: cluster-pro
-  serviceName: "ap000"
-  replicas: 1
-  template:
-    metadata:
-      labels:
-        aplicacio: ap000
-        entorn: pro
-        tier: frontal
-        tecnologia: stateful-set
-        cluster: cluster-pro
-    spec:
-      terminationGracePeriodSeconds: 10
-      containers:
-        - name: ap000
-          image: wordpress
-          env:
-            - name: WORDPRESS_DB_HOST
-              value: ap000
-            - name: WORDPRESS_DB_NAME
-              value: wordpress
-            - name: WORDPRESS_DB_USER
-              value: wordpress
-            - name: WORDPRESS_DB_PASSWORD
-              value: 1nternet!
-          ports:
-            - containerPort: 80
-              name: web
-          volumeMounts:
-            - name: ap000
-              mountPath: /var/www/html
-          resources:
-            limits:
-              cpu: "0.5"
-              memory: "512Mi"
-            requests:
-              cpu: "0.5"
-              memory: "128Mi"
-  volumeClaimTemplates:
-    - metadata:
-        name: ap000
-      spec:
-        accessModes: ["ReadWriteOnce"]
-        storageClassName: "k8s-pro-b15390a-tecnic"
-        resources:
-          requests:
-            storage: 1Gi
diff --git a/modules/k8s/env/k3s/wordpress/02-servei-frontal.yml b/modules/k8s/env/k3s/wordpress/02-servei-frontal.yml
deleted file mode 100644
index 056d6f4..0000000
--- a/modules/k8s/env/k3s/wordpress/02-servei-frontal.yml
+++ /dev/null
@@ -1,24 +0,0 @@
-apiVersion: v1
-kind: Service
-metadata:
-  name: ap000-service
-  namespace: proves
-  labels:
-    aplicacio: ap000
-    entorn: pro
-    tier: wordpress
-    tecnologia: service
-    cluster: cluster-pro
-spec:
-  externalTrafficPolicy: Local
-  ports:
-    - name: http
-      port: 80
-      protocol: TCP
-      targetPort: 80
-  selector:
-    entorn: pro
-    tier: frontal
-    tecnologia: stateful-set
-    cluster: cluster-pro
-  type: NodePort
diff --git a/modules/k8s/env/k3s/wordpress/03-base-de-dades.yml b/modules/k8s/env/k3s/wordpress/03-base-de-dades.yml
deleted file mode 100644
index dc2916c..0000000
--- a/modules/k8s/env/k3s/wordpress/03-base-de-dades.yml
+++ /dev/null
@@ -1,59 +0,0 @@
-apiVersion: apps/v1
-kind: StatefulSet
-metadata:
-  name: ap000-base-de-dades
-  namespace: proves
-spec:
-  selector:
-    matchLabels:
-      aplicacio: ap000
-      entorn: pro
-      tier: base-de-dades
-      tecnologia: stateful-set
-      cluster: cluster-pro
-  serviceName: "ap000"
-  replicas: 1
-  template:
-    metadata:
-      labels:
-        aplicacio: ap000
-        entorn: pro
-        tier: base-de-dades
-        tecnologia: stateful-set
-        cluster: cluster-pro
-    spec:
-      terminationGracePeriodSeconds: 10
-      containers:
-        - name: ap000
-          image: mysql:5.7
-          env:
-            - name: MYSQL_ROOT_PASSWORD
-              value: 1nternet!
-            - name: MYSQL_DATABASE
-              value: wordpress
-            - name: MYSQL_USER
-              value: wordpress
-            - name: MYSQL_PASSWORD
-              value: 1nternet!
-          ports:
-            - containerPort: 3306
-              name: bd
-          volumeMounts:
-            - name: ap000
-              mountPath: /var/lib/mysql
-          resources:
-            limits:
-              cpu: "0.5"
-              memory: "512Mi"
-            requests:
-              cpu: "0.5"
-              memory: "128Mi"
-  volumeClaimTemplates:
-    - metadata:
-        name: ap000
-      spec:
-        accessModes: ["ReadWriteOnce"]
-        storageClassName: "k8s-pro-b15390a-contingut"
-        resources:
-          requests:
-            storage: 1Gi
diff --git a/modules/k8s/env/k3s/wordpress/04-servei-bd.yml b/modules/k8s/env/k3s/wordpress/04-servei-bd.yml
deleted file mode 100644
index 5903610..0000000
--- a/modules/k8s/env/k3s/wordpress/04-servei-bd.yml
+++ /dev/null
@@ -1,17 +0,0 @@
-apiVersion: v1
-kind: Service
-metadata:
-  name: wp-bd-fariseos
-  namespace: proves
-  labels:
-    application: wp-bd-fariseos
-    entorn: pro
-    tier: base-de-dades
-    tecnologia: wordpress
-spec:
-  ports:
-    - port: 3306
-  selector:
-    application: wp-bd-fariseos
-    entorn: pro
-  clusterIP: None
diff --git a/modules/k8s/env/k3s/wordpress/05-ingress.yml b/modules/k8s/env/k3s/wordpress/05-ingress.yml
deleted file mode 100644
index 172433b..0000000
--- a/modules/k8s/env/k3s/wordpress/05-ingress.yml
+++ /dev/null
@@ -1,28 +0,0 @@
-apiVersion: networking.k8s.io/v1
-kind: Ingress
-metadata:
-  name: ap000-ingress
-  namespace: proves
-  labels:
-    aplicacio: ap000
-    entorn: pro
-    tier: frontal
-    tecnologia: ingress
-    cluster: cluster-pro
-spec:
-  defaultBackend:
-    service:
-      name: ap000
-      port:
-        number: 80
-  rules:
-    - host: wordpress-fariseos.$domain_intra_ba
-      http:
-        paths:
-          - backend:
-              service:
-                name: ap000
-                port:
-                  number: 80
-            path: /
-            pathType: Prefix
diff --git a/modules/k8s/env/k3s/wp-cli/00-frontal-pvc.yml b/modules/k8s/env/k3s/wp-cli/00-frontal-pvc.yml
deleted file mode 100644
index 977f241..0000000
--- a/modules/k8s/env/k3s/wp-cli/00-frontal-pvc.yml
+++ /dev/null
@@ -1,17 +0,0 @@
-apiVersion: v1
-kind: PersistentVolumeClaim
-metadata:
-  name: wp-cli-frontal
-  namespace: proves
-  labels:
-    application: wp-cli-frontal
-    entorn: pro
-    tier: frontal
-    tecnologia: wordpress
-spec:
-  storageClassName: k8s-pro-b15390a-contingut
-  accessModes:
-    - ReadWriteOnce
-  resources:
-    requests:
-      storage: 1Gi
diff --git a/modules/k8s/env/k3s/wp-cli/01-frontal.yml b/modules/k8s/env/k3s/wp-cli/01-frontal.yml
deleted file mode 100644
index 606eff1..0000000
--- a/modules/k8s/env/k3s/wp-cli/01-frontal.yml
+++ /dev/null
@@ -1,83 +0,0 @@
-apiVersion: apps/v1
-kind: StatefulSet
-metadata:
-  name: wp-cli-frontal
-  namespace: proves
-spec:
-  selector:
-    matchLabels:
-      application: wp-cli-frontal
-      entorn: pro
-      tier: frontal
-      tecnologia: wordpress
-  serviceName: "wp-cli-frontal"
-  replicas: 1
-  template:
-    metadata:
-      labels:
-        application: wp-cli-frontal
-        entorn: pro
-        tier: frontal
-        tecnologia: wordpress
-    spec:
-      terminationGracePeriodSeconds: 10
-      containers:
-        - name: wp-cli-frontal
-          image: registry.$domain_stg_ba/ap/test/frontal-wp-cli:develop-0.0.0-12382
-          env:
-            - name: APACHE_LogLevel
-              value: warn
-            - name: APACHE_START
-              value: "true"
-            - name: BCNACT_ENTORN
-              value: STG
-            - name: WORDPRESS_ADMIN_EMAIL
-              value: posmaster@$domain_pro_ba
-            - name: WORDPRESS_ADMIN_PASSWORD
-              value: se3GKX9Gzpr15zL8px5TYFC11N3shg3KNav9eRiBmHog3C8uwL9CKp9My5PF
-            - name: WORDPRESS_ADMIN_USER
-              value: supervisor
-            - name: WORDPRESS_DB_HOST
-              value: wp-cli-bd
-            - name: WORDPRESS_DB_NAME
-              value: wordpress
-            - name: WORDPRESS_DB_PASSWORD
-              value: 1nternet!
-            - name: WORDPRESS_DB_USER
-              value: wordpress
-            - name: WORDPRESS_TITLE
-              value: Example
-            - name: WORDPRESS_UPDATE_MAJOR
-              value: "false"
-            - name: WORDPRESS_UPDATE_MINOR
-              value: "false"
-            - name: WORDPRESS_URL
-              value: wp-cli.$domain_intra_ba
-            - name: WORDPRESS_URL_HOME
-              value: https://wp-cli.$domain_intra_ba
-            - name: WORDPRESS_URL_SITEURL
-              value: https://wp-cli.$domain_intra_ba
-            - name: WORDPRES_WWW_HOME
-              value: /var/www/html
-          ports:
-            - containerPort: 80
-              name: web
-          volumeMounts:
-            - name: wp-cli-frontal
-              mountPath: /var/www/html
-          resources:
-            limits:
-              cpu: "0.5"
-              memory: "512Mi"
-            requests:
-              cpu: "0.5"
-              memory: "128Mi"
-  volumeClaimTemplates:
-    - metadata:
-        name: wp-cli-frontal
-      spec:
-        accessModes: ["ReadWriteOnce"]
-        storageClassName: "k8s-pro-b15390a-contingut"
-        resources:
-          requests:
-            storage: 1Gi
diff --git a/modules/k8s/env/k3s/wp-cli/02-servei-frontal.yml b/modules/k8s/env/k3s/wp-cli/02-servei-frontal.yml
deleted file mode 100644
index 2e7a36c..0000000
--- a/modules/k8s/env/k3s/wp-cli/02-servei-frontal.yml
+++ /dev/null
@@ -1,21 +0,0 @@
-apiVersion: v1
-kind: Service
-metadata:
-  name: wp-cli-frontal
-  namespace: proves
-  labels:
-    application: wp-cli-frontal
-    entorn: pro
-    tier: frontal
-    tecnologia: wordpress
-spec:
-  externalTrafficPolicy: Local
-  ports:
-    - name: http
-      port: 80
-      protocol: TCP
-      targetPort: 80
-  selector:
-    application: wp-cli-frontal
-    entorn: pro
-  type: NodePort
diff --git a/modules/k8s/env/k3s/wp-cli/03-base-de-dades.yml b/modules/k8s/env/k3s/wp-cli/03-base-de-dades.yml
deleted file mode 100644
index 255e041..0000000
--- a/modules/k8s/env/k3s/wp-cli/03-base-de-dades.yml
+++ /dev/null
@@ -1,59 +0,0 @@
-apiVersion: apps/v1
-kind: StatefulSet
-metadata:
-  name: wp-cli-bd
-  namespace: proves
-spec:
-  selector:
-    matchLabels:
-      application: wp-cli-bd
-      entorn: pro
-      tier: base-de-dades
-      tecnologia: mariadb
-  serviceName: "wp-cli-bd"
-  replicas: 1
-  template:
-    metadata:
-      labels:
-        application: wp-cli-bd
-        entorn: pro
-        tier: base-de-dades
-        tecnologia: mariadb
-    spec:
-      terminationGracePeriodSeconds: 10
-      containers:
-        - name: wp-cli-bd
-          image: registry.$domain_stg_ba/bcnact-images/mariadb:10.6
-          env:
-            - name: BCNACT_ENTORN
-              value: STG
-            - name: MYSQL_DATABASE
-              value: wordpress
-            - name: MYSQL_PASSWORD
-              value: 1nternet!
-            - name: MYSQL_ROOT_PASSWORD
-              value: 5c2bZS1iKv6aw7Z7H0Z6N3DG6A266wim6MT91xDsSsYg6h2uSn3ux5WWC5sm
-            - name: MYSQL_USER
-              value: wordpress
-          ports:
-            - containerPort: 3306
-              name: wp-cli-bd
-          volumeMounts:
-            - name: wp-cli-bd
-              mountPath: /var/lib/mysql
-          resources:
-            limits:
-              cpu: "0.5"
-              memory: "512Mi"
-            requests:
-              cpu: "0.5"
-              memory: "128Mi"
-  volumeClaimTemplates:
-    - metadata:
-        name: wp-cli-bd
-      spec:
-        accessModes: ["ReadWriteOnce"]
-        storageClassName: "k8s-pro-b15390a-contingut"
-        resources:
-          requests:
-            storage: 1Gi
diff --git a/modules/k8s/env/k3s/wp-cli/04-servei-bd.yml b/modules/k8s/env/k3s/wp-cli/04-servei-bd.yml
deleted file mode 100644
index dfc3172..0000000
--- a/modules/k8s/env/k3s/wp-cli/04-servei-bd.yml
+++ /dev/null
@@ -1,17 +0,0 @@
-apiVersion: v1
-kind: Service
-metadata:
-  name: wp-cli-bd
-  namespace: proves
-  labels:
-    application: wp-cli-bd
-    entorn: pro
-    tier: base-de-dades
-    tecnologia: mariadb
-spec:
-  ports:
-    - port: 3306
-  selector:
-    application: wp-cli-bd
-    entorn: pro
-  clusterIP: None
diff --git a/modules/k8s/env/k3s/wp-cli/05-ingress.yml b/modules/k8s/env/k3s/wp-cli/05-ingress.yml
deleted file mode 100644
index 7d17687..0000000
--- a/modules/k8s/env/k3s/wp-cli/05-ingress.yml
+++ /dev/null
@@ -1,27 +0,0 @@
-apiVersion: networking.k8s.io/v1
-kind: Ingress
-metadata:
-  name: wp-cli-frontal
-  namespace: proves
-  labels:
-    application: wp-cli-frontal
-    entorn: pro
-    tier: frontal
-    tecnologia: wordpress
-spec:
-  defaultBackend:
-    service:
-      name: wp-cli-frontal
-      port:
-        number: 80
-  rules:
-    - host: wp-cli.$domain_intra_ba
-      http:
-        paths:
-          - backend:
-              service:
-                name: wp-cli-frontal
-                port:
-                  number: 80
-            path: /
-            pathType: Prefix
diff --git a/modules/k8s/env/k3s/wp-cli/06-frontal-deployment.yml b/modules/k8s/env/k3s/wp-cli/06-frontal-deployment.yml
deleted file mode 100644
index d93f3a3..0000000
--- a/modules/k8s/env/k3s/wp-cli/06-frontal-deployment.yml
+++ /dev/null
@@ -1,77 +0,0 @@
-apiVersion: apps/v1
-kind: Deployment
-metadata:
-  name: wp-cli-frontal
-  namespace: proves
-spec:
-  replicas: 1
-  selector:
-    matchLabels:
-      application: wp-cli-frontal
-      entorn: pro
-      tier: frontal
-      tecnologia: wordpress
-  template:
-    metadata:
-      labels:
-        application: wp-cli-frontal
-        entorn: pro
-        tier: frontal
-        tecnologia: wordpress
-    spec:
-      containers:
-        - name: wp-cli-frontal
-          image: registry.$domain_stg_ba/ap/test/frontal-wp-cli:develop-0.0.0-12301
-          env:
-            - name: APACHE_LogLevel
-              value: warn
-            - name: APACHE_START
-              value: "true"
-            - name: BCNACT_ENTORN
-              value: STG
-            - name: WORDPRESS_ADMIN_EMAIL
-              value: posmaster@$domain_pro_ba
-            - name: WORDPRESS_ADMIN_PASSWORD
-              value: se3GKX9Gzpr15zL8px5TYFC11N3shg3KNav9eRiBmHog3C8uwL9CKp9My5PF
-            - name: WORDPRESS_ADMIN_USER
-              value: supervisor
-            - name: WORDPRESS_DB_HOST
-              value: wp-cli-bd
-            - name: WORDPRESS_DB_NAME
-              value: wordpress
-            - name: WORDPRESS_DB_PASSWORD
-              value: 1nternet!
-            - name: WORDPRESS_DB_USER
-              value: wordpress
-            - name: WORDPRESS_TITLE
-              value: Example
-            - name: WORDPRESS_UPDATE_MAJOR
-              value: "false"
-            - name: WORDPRESS_UPDATE_MINOR
-              value: "false"
-            - name: WORDPRESS_URL
-              value: wp-cli.$domain_intra_ba
-            - name: WORDPRESS_URL_HOME
-              value: https://wp-cli.$domain_intra_ba
-            - name: WORDPRESS_URL_SITEURL
-              value: https://wp-cli.$domain_intra_ba
-            - name: WORDPRESS_WWW_HOME
-          ports:
-            - containerPort: 80
-              name: web
-          resources:
-            limits:
-              cpu: "0.5"
-              memory: "512Mi"
-            requests:
-              cpu: "0.5"
-              memory: "128Mi"
-          volumeMounts:
-            #Aquest utilitza el pvc
-            - name: wp-cli-frontal
-              mountPath: /var/www/html
-      volumes:
-        #Aquest utilitza el pvc
-        - name: wp-cli-frontal
-          persistentVolumeClaim:
-            claimName: wp-cli-frontal
diff --git a/modules/k8s/menus/_debug/db2u/cronjob-desarollo.yaml b/modules/k8s/menus/_debug/db2u/cronjob-desarollo.yaml
deleted file mode 100644
index b2be060..0000000
--- a/modules/k8s/menus/_debug/db2u/cronjob-desarollo.yaml
+++ /dev/null
@@ -1,53 +0,0 @@
-kind: CronJob
-apiVersion: batch/v1
-metadata:
-  name: maximo-backup-db2u-desarrollo-v1
-  namespace: db2u
-spec:
-  schedule: 0 1 * * *
-  concurrencyPolicy: Forbid
-  suspend: false
-  jobTemplate:
-    metadata:
-      creationTimestamp: null
-    spec:
-      activeDeadlineSeconds: 600
-      backoffLimit: 2
-      template:
-        metadata:
-          creationTimestamp: null
-        spec:
-          containers:
-            - name: db2u-backup
-              image: 'registry.redhat.io/openshift4/ose-cli:v4.12'
-              command:
-                - /bin/bash
-                - '-c'
-                - 'TODAY=$(date +"%Y%m%d"); OBJ_NAME="$CR_NAME-$TODAY"; echo "$DB2U_BACKUP_TEMPLATE" | sed -e "s/{\$CR_NAME}/$OBJ_NAME/" | sed -e "s/{\$NAMESPACE}/$NAMESPACE/" | sed -e "s/{\$DB2UNAME}/$DB2U_DB_NAME/" | sed  -e "s/{\$DB2UZONE}/$DB2U_DB_ZONE/" > /tmp/db2ubackup.yaml; oc create -n $NAMESPACE -f /tmp/db2ubackup.yaml'
-              env:
-                - name: CR_NAME
-                  value: db2u-backup-desarrollo
-                - name: NAMESPACE
-                  value: db2u
-                - name: DB2U_DB_NAME
-                  value: BLUBD
-                - name: DB2U_DB_ZONE
-                  value: maxdb
-                - name: DB2U_BACKUP_TEMPLATE
-                  valueFrom:
-                    configMapKeyRef:
-                      name: backup-db2u-crd-template
-                      key: TEMPLATE
-              resources: {}
-              terminationMessagePath: /dev/termination-log
-              terminationMessagePolicy: File
-              imagePullPolicy: IfNotPresent
-          restartPolicy: Never
-          terminationGracePeriodSeconds: 30
-          dnsPolicy: ClusterFirst
-          serviceAccountName: maximo-backup-db2u
-          serviceAccount: maximo-backup-db2u
-          securityContext: {}
-          schedulerName: default-scheduler
-  successfulJobsHistoryLimit: 1
-  failedJobsHistoryLimit: 1
diff --git a/modules/k8s/menus/_debug/db2u/cronjob-integracion.yaml b/modules/k8s/menus/_debug/db2u/cronjob-integracion.yaml
deleted file mode 100644
index a115b6e..0000000
--- a/modules/k8s/menus/_debug/db2u/cronjob-integracion.yaml
+++ /dev/null
@@ -1,53 +0,0 @@
-kind: CronJob
-apiVersion: batch/v1
-metadata:
-  name: maximo-backup-db2u-integracion-v1
-  namespace: db2u
-spec:
-  schedule: 0 1 * * *
-  concurrencyPolicy: Forbid
-  suspend: false
-  jobTemplate:
-    metadata:
-      creationTimestamp: null
-    spec:
-      activeDeadlineSeconds: 600
-      backoffLimit: 1
-      template:
-        metadata:
-          creationTimestamp: null
-        spec:
-          containers:
-            - name: db2u-backup
-              image: 'registry.redhat.io/openshift4/ose-cli:v4.12'
-              command:
-                - /bin/bash
-                - '-c'
-                - 'TODAY=$(date +"%Y%m%d"); OBJ_NAME="$CR_NAME-$TODAY"; echo "$DB2U_BACKUP_TEMPLATE" | sed -e "s/{\$CR_NAME}/$OBJ_NAME/ | sed -e "s/{\$NAMESPACE}/$NAMESPACE/" | sed -e "s/{\$DB2UNAME}/$DB2U_DB_NAME/" | sed  -e "s/{\$DB2UZONE}/$DB2U_DB_ZONE/"> /tmp/db2ubackup.yaml; oc create -n $NAMESPACE -f /tmp/db2ubackup.yaml'
-              env:
-                - ame: CR_NAME
-                  value: db2u-backup-integracion
-                - name: NAMESPACE
-                  value: db2u
-                - name: DB2U_DB_NAME
-                  value: BLUBD
-                - name: DB2U_DB_ZONE
-                  value: maxdbpre
-                - name: DB2U_BACKUP_TEMPLATE
-                  valueFrom:
-                    configMapKeyRef:
-                      name: backup-db2u-crd-template
-                      key: TEMPLATE
-              resources: {}
-              terminationMessagePath: /dev/termination-log
-              terminationMessagePolicy: File
-              imagePullPolicy: IfNotPresent
-          restartPolicy: Never
-          terminationGracePeriodSeconds: 30
-          dnsPolicy: ClusterFirst
-          serviceAccountName: maximo-backup-db2u
-          serviceAccount: maximo-backup-db2u
-          securityContext: {}
-          schedulerName: default-scheduler
-  successfulJobsHistoryLimit: 1
-  failedJobsHistoryLimit: 1
\ No newline at end of file
diff --git a/modules/k8s/menus/_debug/debug-configmap.yaml b/modules/k8s/menus/_debug/debug-configmap.yaml
deleted file mode 100644
index ff6241a..0000000
--- a/modules/k8s/menus/_debug/debug-configmap.yaml
+++ /dev/null
@@ -1,116 +0,0 @@
-apiVersion: v1
-kind: ConfigMap
-metadata:
-  name: debug-configmap
-  namespace: debug
-data:
-  oc.bash: |
-    #!/bin/bash
-    if kubectl api-resources | grep -q "operator.openshift.io"; then
-        if curl -L -o /debug/oc.tar https://downloads-openshift-console.apps.gmaopro.northeurope.aroapp.io/amd64/linux/oc.tar; then
-            :
-        else
-            curl -L -o /debug/oc.tar https://downloads-openshift-console.apps.gmao.northeurope.aroapp.io/amd64/linux/oc.tar
-        fi
-        tar -xvf /debug/oc.tar -C /debug
-        chmod +x /debug/oc
-        export PATH="$PATH:/debug/"
-    fi
-  system.bash: |
-    #!/bin/bash
-    apt install nano -y;export EDITOR=nano
-    apt install zsh -y
-    apt install cron -y
-    apt install bsdmainutils -y
-    sh -c "$(curl -fsSL https://raw.github.com/ohmyzsh/ohmyzsh/master/tools/install.sh)"
-    /bin/bash -c "$(curl -fsSL https://raw.githubusercontent.com/Homebrew/install/HEAD/install.sh)"
-    echo >> /root/.zshrc
-    echo 'eval "$(/home/linuxbrew/.linuxbrew/bin/brew shellenv)"' >> /root/.zshrc
-    eval "$(/home/linuxbrew/.linuxbrew/bin/brew shellenv)"
-    brew install gcc 
-    brew install shfmt
-  alias.bash: |
-    #!/bin/bash
-    echo "alias cls='clear'" >> /root/.zshrc
-    echo "alias h='history'" >> /root/.zshrc
-    echo "alias nano='nano -l'" >> /root/.zshrc
-    echo "alias oc='./debug/oc'" >> /root/.zshrc
-    echo "alias shfmt='/home/linuxbrew/.linuxbrew/bin/shfmt -w'" >> /root/.zshrc
-    export GREP_COLORS='mt=01;32:sl=01;35' >> /root/.zshrc
-  k8s-containers-not-ready.bash: |
-    #!/bin/bash
-    kubectl get pods -A -o json | jq -r '.items[] | select(.status.containerStatuses[].ready == false) | [.metadata.name, .metadata.namespace, .status.phase, (.status.containerStatuses[] | select(.ready == false) | .ready)] | @tsv' | awk 'BEGIN {printf "%-75s %-40s %-15s %-15s\n", "NAME", "NAMESPACE", "STATUS", "CONTAINERS_READY"} {printf "%-75s %-40s %-15s %-15s\n", $1, $2, $3, $4}'
-  k8s-certificates-issuers.bash: |
-    #!/bin/sh
-    namespaces=$(kubectl get namespaces -o jsonpath='{.items[*].metadata.name}')
-
-    for namespace in $namespaces; do
-        certificates=$(kubectl get certificates -n "$namespace" -o jsonpath='{.items[*].metadata.name}')
-        
-        if [ -z "$certificates" ]; then
-            continue
-        fi
-
-        for cert in $certificates; do
-            if kubectl get certificate "$cert" -n "$namespace" -o jsonpath='{.spec.secretName}' | grep -q "$secret"; then
-                echo "Certificate $cert references Secret $secret in namespace $namespace"
-            fi
-        done
-
-        for cert in $certificates; do
-            issuer=$(kubectl get certificate "$cert" -n "$namespace" -o jsonpath='{.spec.issuerRef.name}')
-            issuerKind=$(kubectl get certificate "$cert" -n "$namespace" -o jsonpath='{.spec.issuerRef.kind}')
-            if [ "$issuerKind" = "ClusterIssuer" ]; then
-                echo "Certificate $cert uses ClusterIssuer $issuer in namespace $namespace"
-            fi
-        done
-    done
-  k8s-certificates-state.bash: |
-    #!/bin/sh
-    file_tls_cert="/tmp/tls.crt"
-    if [ -f "/tmp/tls.crt" ]; then rm /tmp/tls.crt; else touch /tmp/tls.crt;fi
-    namespaces=$(kubectl get namespaces -o jsonpath='{.items[*].metadata.name}')
-    evade_subjects="system:kube-controller-manager system:kube-scheduler system:openshift-aggregator system:serviceaccount:openshift-kube-apiserver:check-endpoints system:masters api.gmaopro.northeurope.aroapp.io api.gmao.northeurope.aroapp.io api-int.gmaopro.northeurope.aroapp.io api-int.gmao.northeurope.aroapp.io kube-master 127.0.0.1 172.30.0.1 openshift-kube-apiserver-operator_aggregator-client-signer@1728462101 openshift-kube-apiserver-operator_aggregator-client-signer@1728471736 kube-csr-signer_@1728591556 kube-csr-signer_@1728601207 system:serviceaccount:openshift-monitoring:prometheus-k8s system:serviceaccount:openshift-oauth-apiserver:openshift-authenticator 'Red Hat, Inc.'"
-
-    for namespace in $namespaces; do
-        secrets=$(kubectl get secrets -n "$namespace" -o jsonpath='{.items[*].metadata.name}')
-        
-        for secret in $secrets; do
-            cert_data=$(kubectl get secret "$secret" -n "$namespace" -o jsonpath='{.data.tls\.crt}')
-            
-            echo "$cert_data" | base64 --decode > $file_tls_cert 2>/dev/null
-            
-            openssl x509 -in $file_tls_cert -text -noout >/dev/null 2>&1
-            if [ $? -ne 0 ]; then continue; fi
-            
-            not_before=$(openssl x509 -in $file_tls_cert -text -noout | grep 'Not Before' | awk -F': ' '{print $2}')
-            not_after=$(openssl x509 -in $file_tls_cert -text -noout | grep 'Not After' | awk -F': ' '{print $2}')
-            subject=$(openssl x509 -in $file_tls_cert -text -noout | grep 'Subject:' | awk -F': ' '{print $2}' | awk -F'=' '{print $2}' | sed 's/, CN//')
-
-            formatted_not_before=$(date -d "$not_before" +"%s" 2>/dev/null)
-            formatted_not_after=$(date -d "$not_after" +"%s" 2>/dev/null)
-            
-            current_date=$(date +"%s")
-            
-            if [ "$current_date" -ge "$formatted_not_after" ]; then
-                echo "[CRITICAL] El certificado '$secret' del namespace '$namespace' está expirado."
-            elif [ $((formatted_not_after - current_date)) -lt $((30*86400)) ]; then
-                time_until_expiration=$((formatted_not_after - current_date))
-                days=$((time_until_expiration / 86400))
-                hours=$(( (time_until_expiration % 86400) / 3600 ))
-                minutes=$(( (time_until_expiration % 3600) / 60 ))
-
-                item_to_check=$(echo "$subject" | sed "s/^ *//;s/ *$//")
-
-                if echo "$evade_subjects" | grep -q -w "$item_to_check"; then
-                    :
-                else
-                    if [ "$time_until_expiration" -ge 3600 ]; then
-                        echo "[WARNING] El certificado '$secret' del namespace '$namespace' va a expirar en $days días, $hours horas y $minutes minutos."
-                        echo $subject
-                    fi
-                fi
-            fi
-        done
-    done
-    rm $file_tls_cert
\ No newline at end of file
diff --git a/modules/k8s/menus/_debug/debug-pod.yaml b/modules/k8s/menus/_debug/debug-pod.yaml
deleted file mode 100644
index 02bda02..0000000
--- a/modules/k8s/menus/_debug/debug-pod.yaml
+++ /dev/null
@@ -1,43 +0,0 @@
-apiVersion: v1
-kind: Pod
-metadata:
-  name: debug
-  namespace: debug
-spec:
-  containers:
-    - name: debug
-      image: portainer/kube-tools:latest
-      #command: ["/bin/bash", "-c", "sh /scripts/oneliner.sh"]
-      command:
-        - /bin/bash
-        - -c
-        - |
-          bash /utils/system.bash
-          bash /utils/alias.bash
-          bash /utils/oc.bash
-          while true; do sleep 30; done
-      volumeMounts:
-        - name: utils
-          mountPath: /utils
-        - name: reports
-          mountPath: /reports
-        - name: writable-volume
-          mountPath: /debug
-      resources:
-        requests:
-          memory: "256Mi"
-          cpu: "500m"
-        limits:
-          memory: "1024Mi"
-          cpu: "1000m"
-  serviceAccountName: debug
-  volumes:
-    - name: utils
-      configMap:
-        name: debug-configmap
-    - name: reports
-      configMap:
-        name: health-check-scripts
-    - name: writable-volume
-      emptyDir: {}
-  restartPolicy: Never
diff --git a/modules/k8s/menus/_debug/debug-serviceaccount.yaml b/modules/k8s/menus/_debug/debug-serviceaccount.yaml
deleted file mode 100644
index 4a71c6a..0000000
--- a/modules/k8s/menus/_debug/debug-serviceaccount.yaml
+++ /dev/null
@@ -1,54 +0,0 @@
-apiVersion: v1
-kind: ServiceAccount
-metadata:
-  name: debug
-  namespace: debug
----
-apiVersion: rbac.authorization.k8s.io/v1
-kind: ClusterRoleBinding
-metadata:
-  name: debug-operator
-subjects:
-  - kind: ServiceAccount
-    name: debug
-    namespace: debug
-  - kind: Group
-    name: debug-users
-    apiGroup: rbac.authorization.k8s.io
-roleRef:
-  kind: ClusterRole
-  name: debug-operator-resource
-  apiGroup: rbac.authorization.k8s.io
----
-apiVersion: rbac.authorization.k8s.io/v1
-kind: ClusterRole
-metadata:
-  name: debug-operator-resource
-rules:
-  - apiGroups: [""]
-    resources: ["pods", "nodes", "persistentvolumeclaims", "persistentvolumes", "events", "secrets", "namespaces"]
-    verbs: ["get", "list", "watch"]
-  - apiGroups: [""]
-    resources: ["events"]
-    verbs: ["get", "list", "watch", "delete"]
-  - apiGroups: ["batch"]
-    resources: ["jobs"]
-    verbs: ["get", "list", "watch"]
-  - apiGroups: ["metrics.k8s.io"]
-    resources: ["nodes", "pods"]
-    verbs: ["get", "list", "watch"]
-  - apiGroups: ["config.openshift.io"]
-    resources: ["clusteroperators"]
-    verbs: ["get", "list"]
-  - apiGroups: ["coordination.k8s.io"]
-    resources: ["leases"]
-    verbs: ["get", "list", "watch"]
-  - apiGroups: ["cert-manager.io"]
-    resources: ["issuers", "clusterissuers", "certificates"]
-    verbs: ["get", "list", "watch"]
-  - apiGroups: ["apiserver.openshift.io"]
-    resources: ["apirequestcounts"]
-    verbs: ["get", "list"]
-  - apiGroups: [""]
-    resources: ["configmaps"]
-    verbs: ["get", "patch"]
\ No newline at end of file
diff --git a/modules/k8s/menus/_debug/report-health-check/README.md b/modules/k8s/menus/_debug/report-health-check/README.md
deleted file mode 100644
index 9e62e1f..0000000
--- a/modules/k8s/menus/_debug/report-health-check/README.md
+++ /dev/null
@@ -1,40 +0,0 @@
-# k8s
-
-Para la creación del configmap se ha modificado de los scripts en "ScriptChequeo" lo siguiente:
-
- - El script stats.sh no pide parámetros. Se construye en un mismo script y la salida de los eventos pasa a ser tratado mediante archivos temporales. 
-
-1. Deploy roles
-
-Depende del entorno (Openshift o AKS) se tiene que desplegar yamls ubicados en la carpeta oc-role o aks-roles.
-
-````
-kubectl apply -f cluster-role.yaml
-kubectl apply -f role-binding.yaml -n debug
-````
-
-2. Create Configmap
-
-NOTA:
-En el script aparece la URL descarga cliente oc, que pertenece a cada entorno, si se realiza deploy en un entorno OC hay que añadir dicha URL para correcto funcionamiento.
-
-Se puede aplicar el manifiesto yaml configmap.yaml o bien si se hacen modificaciones en el script se tiene que generar usando:
-
-
-````
-kubectl create configmap health-check-scripts \
-  --from-file=oneliner.sh \
-  -n debug
-````
-
-Para obtener el yaml del configmap:
-
-````
-kubectl get configmap health-check-scripts -n debug -o yaml > configmap.yaml
-````
-
-3. Apply cronjob
-
-````
-kubectl apply -f cronjob.yaml -n debug
-````
\ No newline at end of file
diff --git a/modules/k8s/menus/_debug/report-health-check/aks-roles/aks-roles.yaml b/modules/k8s/menus/_debug/report-health-check/aks-roles/aks-roles.yaml
deleted file mode 100644
index ad75e79..0000000
--- a/modules/k8s/menus/_debug/report-health-check/aks-roles/aks-roles.yaml
+++ /dev/null
@@ -1,30 +0,0 @@
-apiVersion: v1
-kind: ServiceAccount
-metadata:
-  name: debug-report-health-check
-  namespace: debug
----
-apiVersion: rbac.authorization.k8s.io/v1
-kind: ClusterRole
-metadata:
-  name: debug-report-health-check
-rules:
-- apiGroups: [""]
-  resources: ["pods", "nodes", "persistentvolumeclaims", "persistentvolumes", "events", "secrets", "namespaces"]
-  verbs: ["get", "list", "watch"]
-- apiGroups: ["metrics.k8s.io"]
-  resources: ["nodes"]
-  verbs: ["get", "list", "watch"]
----
-apiVersion: rbac.authorization.k8s.io/v1
-kind: ClusterRoleBinding
-metadata:
-  name: debug-report-health-check-binding
-subjects:
-- kind: ServiceAccount
-  name: debug-report-health-check
-  namespace: debug
-roleRef:
-  kind: ClusterRole
-  name: debug-report-health-check
-  apiGroup: rbac.authorization.k8s.io
\ No newline at end of file
diff --git a/modules/k8s/menus/_debug/report-health-check/configmap.yaml b/modules/k8s/menus/_debug/report-health-check/configmap.yaml
deleted file mode 100644
index 6a4d9e5..0000000
--- a/modules/k8s/menus/_debug/report-health-check/configmap.yaml
+++ /dev/null
@@ -1,268 +0,0 @@
-apiVersion: v1
-data:
-  oneliner.sh: "#!/bin/sh\n##################################################### Parameters
-    #####################################################\nparameter_yq_version=$1\nparameter_oc_client_pre=$2\nparameter_oc_client_pre=$3\nparameter_events_ignore_string=$4\nparameter_certificates_evade_subjects=$5\n#####################################################
-    END Parameters #####################################################\n\n#####################################################
-    Files #####################################################\nfile_checkapihealth=\"/tmp/checkapihealth.txt\"\nif
-    [ -f \"/tmp/checkapihealth.txt\" ]; then rm /tmp/checkapihealth.txt; else touch
-    /tmp/checkapihealth.txt;fi\nfile_checknodes=\"/tmp/checknodes.txt\"\nif [ -f \"/tmp/checknodes.txt\"
-    ]; then rm /tmp/checknodes.txt; else touch /tmp/checknodes.txt;fi\nfile_checkpods=\"/tmp/checkpods.txt\"\nif
-    [ -f \"/tmp/checkpods.txt\" ]; then rm /tmp/checkpods.txt; else touch /tmp/checkpods.txt;fi\nfile_checkpvcs=\"/tmp/checkpvcs.txt\"\nif
-    [ -f \"/tmp/checkpvcs.txt\" ]; then rm /tmp/checkpvcs.txt; else touch /tmp/checkpvcs.txt;fi\nfile_checkevents=\"/tmp/checkevents.txt\"\nif
-    [ -f \"/tmp/checkevents.txt\" ]; then rm /tmp/checkevents.txt; else touch /tmp/checkevents.txt;fi\nfile_checkcertificates=\"/tmp/checkcertificates.txt\"\nif
-    [ -f \"/tmp/checkcertificates.txt\" ]; then rm /tmp/checkcertificates.txt; else
-    touch /tmp/checkcertificates.txt;fi\nfile_tls_cert=\"/tmp/tls.crt\"\nif [ -f \"/tmp/tls.crt\"
-    ]; then rm /tmp/tls.crt; else touch /tmp/tls.crt;fi\n# Specific for oc env\nfile_clusteroperator=\"/tmp/clusteroperator.txt\"\nif
-    [ -f \"/tmp/clusteroperator.txt\" ]; then rm /tmp/clusteroperator.txt; else touch
-    /tmp/clusteroperator.txt;fi\n#####################################################
-    END files #####################################################\n\n#####################################################
-    Functions #####################################################\ncheck_api_health()
-    {\n    local max_attempts=40\n    local attempt=0\n\n    until kubectl get --raw
-    '/livez?verbose' > /dev/null 2>&1; do\n        if [ $attempt -ge $max_attempts
-    ]; then\n            return 1\n        fi\n        sleep 5\n        attempt=$((attempt
-    + 1))\n    done\n}\n##################################################### END
-    functions #####################################################\n\n#####################################################
-    Needed Software #####################################################\ncurl -L
-    -o \"/tmp/yq\" \"https://github.com/mikefarah/yq/releases/download/v4.44.3/yq_linux_amd64\"\nchmod
-    +x /tmp/yq\nexport PATH=\"$PATH:/tmp/\"\n\ncheck_api_health\nif kubectl api-resources
-    | grep -q \"operator.openshift.io\"; then\n    if curl -L -o /tmp/oc.tar $parameter_oc_client_pre;
-    then\n        :\n    else\n        curl -L -o /tmp/oc.tar $parameter_oc_client_pre\n
-    \   fi\n    tar -xvf /tmp/oc.tar -C /tmp\n    chmod +x /tmp/oc\n    export PATH=\"$PATH:/tmp/\"\nfi\n#####################################################
-    END Needed Software #####################################################\n\n#####################################################
-    API #####################################################\necho \"[DEBUG] Inciando
-    comprobación de salud.\"\n\necho \"[DEBUG] Iniciando módulo checkApiHealth.sh.\"\necho
-    \"\"\n# Comprueba los endpoints de salud del apiserver.\ncheck_api_health\nLIVE_CHECK=$(kubectl
-    get --raw '/livez?verbose')\ncheck_api_health\nHEALTH_CHECK=$(kubectl get --raw
-    '/readyz?verbose')\n\nINDIVIDUAL_LIVE_CHECKS=$(printf '%s' \"$LIVE_CHECK\" | grep
-    -E '^\\[\\+\\].+')\nOVERALL_LIVE_CHECK=$(printf '%s' \"$LIVE_CHECK\" | tail -n
-    1)\n\nINDIVIDUAL_HEALTH_CHECKS=$(printf '%s' \"$HEALTH_CHECK\" | grep -E '^\\[\\+\\].+')\nOVERALL_HEALTH_CHECK=$(printf
-    '%s' \"$HEALTH_CHECK\" | tail -n 1)\n\n# comprobación de live check individuales\nwhile
-    read -r live_line\ndo\n  ITEM=$(printf '%s' \"$live_line\" | cut -d \" \" -f 1
-    | cut -d \"]\" -f 2)\n  STATUS=$(printf '%s' \"$live_line\" | cut -d \" \" -f
-    2)\n\n  if test \"$STATUS\" != \"ok\"\n  then\n    echo \"[CRITICAL] Live check
-    de $ITEM en estado $STATUS.\"\n    echo \"[CRITICAL] Live check de $ITEM en estado
-    $STATUS.\" >> $file_checkapihealth\n  fi\ndone <<-EOF\n$INDIVIDUAL_LIVE_CHECKS\nEOF\n\n#
-    comprobación de live check general\nif test \"$OVERALL_LIVE_CHECK\" = \"livez
-    check passed\"\nthen\n  echo \"[INFO] $OVERALL_LIVE_CHECK.\"\n  echo \"[INFO]
-    $OVERALL_LIVE_CHECK.\" >> $file_checkapihealth\nelse\n  echo \"[CRITICAL] $OVERALL_LIVE_CHECK.\"\n
-    \ echo \"[CRITICAL] $OVERALL_LIVE_CHECK.\" >> $file_checkapihealth\nfi\n\n# comprobación
-    de health check individuales\nwhile read -r ready_line\ndo\n  ITEM=$(printf '%s'
-    \"$ready_line\" | cut -d \" \" -f 1 | cut -d \"]\" -f 2)\n  STATUS=$(printf '%s'
-    \"$ready_line\" | cut -d \" \" -f 2)\n\n  if test \"$STATUS\" != \"ok\"\n  then\n
-    \   echo \"[CRITICAL] Ready check de $ITEM en estado $STATUS.\"\n    echo \"[CRITICAL]
-    Ready check de $ITEM en estado $STATUS.\" >> $file_checkapihealth\n  fi\ndone
-    <<-EOF\n$INDIVIDUAL_HEALTH_CHECKS\nEOF\n\n# comprobación de ready check general\nif
-    test \"$OVERALL_HEALTH_CHECK\" = \"readyz check passed\"\nthen\n  echo \"[INFO]
-    $OVERALL_HEALTH_CHECK.\"\n  echo \"[INFO] $OVERALL_HEALTH_CHECK.\" >> $file_checkapihealth\nelse\n
-    \ echo \"[CRITICAL] $OVERALL_HEALTH_CHECK.\"\n  echo \"[CRITICAL] $OVERALL_HEALTH_CHECK.\"
-    >> $file_checkapihealth\nfi\necho \"\"\necho \"\"\necho \"\"\n#####################################################
-    END API #####################################################\n\n#####################################################
-    NODES #####################################################\necho \"[DEBUG] Iniciando
-    módulo checkNodes.sh.\"\necho \"\"\n# Módulo que comprueba la salud de los nodos\n\n#
-    Porcentaje de uso de recursos\nCPU_WARN=80\nCPU_CRIT=90\nMEM_WARN=80\nMEM_CRIT=90\n\ncheck_api_health\nLISTA_NODOS=$(kubectl
-    get nodes -o jsonpath='{.items[*].metadata.name}')\ncheck_api_health\nif kubectl
-    api-resources | grep -q \"operator.openshift.io\"; then\n  # Lista de condiciones
-    y sus expected values en OpenShift\n  CONDITION_LIST=$(cat <<EOF\n  {\n    \"MemoryPressure\"
-    \             : {\"expected\": \"False\", \"severity\": \"CRITICAL\"},\n    \"DiskPressure\"
-    \               : {\"expected\": \"False\", \"severity\": \"CRITICAL\"},\n    \"PIDPressure\"
-    \                : {\"expected\": \"False\", \"severity\": \"WARNING\"},\n    \"Ready\"
-    \                      : {\"expected\": \"True\" , \"severity\": \"CRITICAL\"}\n
-    \ }\nEOF\n  )\nelse\n  # Lista de condiciones y sus expected values\n  CONDITION_LIST=$(cat
-    <<EOF\n  {\n    \"FrequentKubeletRestart\"      : {\"expected\": \"False\", \"severity\":
-    \"CRITICAL\"},\n    \"KernelDeadlock\"              : {\"expected\": \"False\",
-    \"severity\": \"CRITICAL\"},\n    \"ReadonlyFilesystem\"          : {\"expected\":
-    \"False\", \"severity\": \"CRITICAL\"},\n    \"ContainerRuntimeProblem\"     :
-    {\"expected\": \"False\", \"severity\": \"CRITICAL\"},\n    \"FrequentDockerRestart\"
-    \      : {\"expected\": \"False\", \"severity\": \"CRITICAL\"},\n    \"KubeletProblem\"
-    \             : {\"expected\": \"False\", \"severity\": \"CRITICAL\"},\n    \"VMEventScheduled\"
-    \           : {\"expected\": \"False\", \"severity\": \"CRITICAL\"},\n    \"FrequentContainerdRestart\"
-    \  : {\"expected\": \"False\", \"severity\": \"CRITICAL\"},\n    \"FilesystemCorruptionProblem\"
-    : {\"expected\": \"False\", \"severity\": \"CRITICAL\"},\n    \"FrequentUnregisterNetDevice\"
-    : {\"expected\": \"False\", \"severity\": \"CRITICAL\"},\n    \"MemoryPressure\"
-    \             : {\"expected\": \"False\", \"severity\": \"CRITICAL\"},\n    \"DiskPressure\"
-    \               : {\"expected\": \"False\", \"severity\": \"CRITICAL\"},\n    \"PIDPressure\"
-    \                : {\"expected\": \"False\", \"severity\": \"WARNING\"},\n    \"Ready\"
-    \                      : {\"expected\": \"True\" , \"severity\": \"CRITICAL\"}\n
-    \ }\nEOF\n  )\nfi\n# Sirve para detectar si hay o no alertas\nNO_ALERTS=0\n\nfor
-    node in $LISTA_NODOS\ndo\n  # Comprobación de uso de nodos.\n  check_api_health\n
-    \ NODE_STATUS_LINE=\"$(kubectl top nodes \"$node\" --no-headers | tr -s \" \"
-    | tr -d %)\"\n  NODE_CPU_PERCENT=$(printf '%s' \"$NODE_STATUS_LINE\" | cut -d
-    \" \" -f 3)\n  NODE_MEM_PERCENT=$(printf '%s' \"$NODE_STATUS_LINE\" | cut -d \"
-    \" -f 5)\n\n  if test \"$NODE_CPU_PERCENT\" -ge \"$CPU_CRIT\" || test \"$NODE_MEM_PERCENT\"
-    -ge \"$MEM_CRIT\"\n  then\n    echo \"[CRITICAL] Nodo $node CPU: $NODE_CPU_PERCENT,
-    MEM: $NODE_MEM_PERCENT\"\n    echo \"[CRITICAL] Nodo $node CPU: $NODE_CPU_PERCENT,
-    MEM: $NODE_MEM_PERCENT\" >> $file_checknodes\n    NO_ALERTS=1\n  elif test \"$NODE_CPU_PERCENT\"
-    -ge \"$CPU_WARN\" || test \"$NODE_MEM_PERCENT\" -ge \"$MEM_WARN\"\n  then\n    echo
-    \"[WARNING] Nodo $node CPU: $NODE_CPU_PERCENT, MEM: $NODE_MEM_PERCENT\"\n    echo
-    \"[WARNING] Nodo $node CPU: $NODE_CPU_PERCENT, MEM: $NODE_MEM_PERCENT\" >> $file_checknodes\n
-    \   NO_ALERTS=1\n  fi\n\n  # Comprobar conditions del nodo\n  check_api_health\n
-    \ CONDITIONS=$(kubectl get node \"$node\" -o jsonpath='{.status.conditions}')\n\n
-    \ LISTA_COND=$(printf '%s' \"$CONDITION_LIST\" | jq -r 'keys | join(\" \")')\n\n
-    \ for condition in $LISTA_COND\n  do\n    CONDITION_OBJ=$(printf '%s' \"$CONDITIONS\"
-    | jq \".[] | select(.type == \\\"$condition\\\")\")\n    STATUS=$(printf '%s'
-    \"$CONDITION_OBJ\" | jq -r \".status\")\n    EXPECTED=$(printf '%s' \"$CONDITION_LIST\"
-    | jq -r \".[\\\"$condition\\\"].expected\")\n    SEVERITY=$(printf '%s' \"$CONDITION_LIST\"
-    | jq -r \".[\\\"$condition\\\"].severity\")\n\n    if test \"$STATUS\" = \"$EXPECTED\"\n
-    \   then\n      echo \"[INFO] Condición $condition en $node en estado esperado\"\n
-    \     echo \"[INFO] Condición $condition en $node en estado esperado\" >> $file_checknodes\n
-    \   else\n      echo \"[$SEVERITY] Condición $condition en $node en estado $STATUS,
-    comprobar salud del nodo.\"\n      echo \"[$SEVERITY] Condición $condition en
-    $node en estado $STATUS, comprobar salud del nodo.\" >> $file_checknodes\n      NO_ALERTS=1\n
-    \   fi\n\n  done\ndone\n\n# Comprobación de estado de nodos\nif test $NO_ALERTS
-    -eq 0\nthen\n  echo \"[INFO] Los nodos están en estado correcto.\"\nfi\n#####################################################
-    END NODOS #####################################################\n\n#####################################################
-    PODS #####################################################\necho \"\"\necho \"\"\necho
-    \"\"\necho \"[DEBUG] Iniciando módulo checkPods.sh\"\necho \"\"\n\ncheck_api_health\n\nPODS_INFO_PER_LINE=$(kubectl
-    get po -A -o json | jq -j '.items[] | \"[\\(.metadata),\\(.status)]\\n\"')\n\n#
-    Recorrer todos los pods\nwhile read -r pod_line; do\n    NAME=$(printf '%s' \"$pod_line\"
-    | jq -r .[0].name)\n    NAMESPACE=$(printf '%s' \"$pod_line\" | jq -r .[0].namespace)\n
-    \   CONDITIONS=$(printf '%s' \"$pod_line\" | jq -r '.[1].conditions[] | \"\\(.type):\\(.status)\"')\n
-    \   PHASE=$(printf '%s' \"$pod_line\" | jq -r '.[1].phase')\n    HEALTHY=0\n\n
-    \   # Check Phase\n    if test \"$PHASE\" = \"Failed\"; then\n        echo \"[CRITICAL]
-    El pod $NAME del namespace $NAMESPACE está en estado $PHASE.\"\n        echo \"[CRITICAL]
-    El pod $NAME del namespace $NAMESPACE está en estado $PHASE.\" >> $file_checkpods\n
-    \       HEALTHY=1\n    elif test \"$PHASE\" = \"Pending\" || test \"$PHASE\" =
-    \"Unknown\"; then\n        echo \"[WARNING] El pod $NAME del namespace $NAMESPACE
-    está en estado $PHASE.\"\n        echo \"[CRITICAL] El pod $NAME del namespace
-    $NAMESPACE está en estado $PHASE.\" >> $file_checkpods\n        HEALTHY=1\n    elif
-    test \"$PHASE\" = \"Succeeded\" || test \"$PHASE\" = \"Completed\"; then\n        continue\n
-    \   fi\n\n    # Check Conditions\n    for condition in $CONDITIONS; do\n        CONDITION_STATUS=$(printf
-    '%s' \"$condition\" | cut -d \":\" -f 2)\n        CONDITION_NAME=$(printf '%s'
-    \"$condition\" | cut -d \":\" -f 1)\n        if test \"$CONDITION_STATUS\" !=
-    \"True\" && test \"$CONDITION_NAME\" = \"Ready\"; then\n            echo \"[WARNING]
-    El pod $NAME del namespace $NAMESPACE tiene la condición $CONDITION_NAME en estado
-    $CONDITION_STATUS.\"\n            echo \"[WARNING] El pod $NAME del namespace
-    $NAMESPACE tiene la condición $CONDITION_NAME en estado $CONDITION_STATUS.\" >>
-    $file_checkpods\n            HEALTHY=1\n        elif test \"$CONDITION_STATUS\"
-    != \"True\"; then\n            echo \"[CRITICAL] El pod $NAME del namespace $NAMESPACE
-    tiene la condición $CONDITION_NAME en estado $CONDITION_STATUS.\"\n            echo
-    \"[CRITICAL] El pod $NAME del namespace $NAMESPACE tiene la condición $CONDITION_NAME
-    en estado $CONDITION_STATUS.\" >> $file_checkpods\n            HEALTHY=1\n        fi\n
-    \   done\n\n    if test \"$HEALTHY\" -eq 0; then\n        echo \"[INFO] Las condiciones
-    del pod $NAME del namespace $NAMESPACE están correctas.\"\n        echo \"[INFO]
-    Las condiciones del pod $NAME del namespace $NAMESPACE están correctas.\" >> $file_checkpods\n
-    \   fi\ndone <<-EOF\n$PODS_INFO_PER_LINE\nEOF\n#####################################################
-    END PODS #####################################################\n\n#####################################################
-    PVC/PV #####################################################\necho \"\"\necho
-    \"\"\necho \"\"\necho \"[DEBUG] Iniciando módulo checkPvcs.sh\"\necho \"\"\ncheck_api_health\nPVC_PER_LINE=$(kubectl
-    get pvc -A -o json | jq -r '.items[] | \"\\(.)\"')\n\ncheck_api_health\nPV_PER_LINE=$(kubectl
-    get pv -o json | jq -r '.items[] | \"\\(.)\"')\n\n\n\n# Check PVCs\nwhile read
-    -r pvc_line\ndo\n  NAME=$(printf '%s' \"$pvc_line\" | jq -r '.metadata.name')\n
-    \ NAMESPACE=$(printf '%s' \"$pvc_line\" | jq -r '.metadata.namespace')\n  PHASE=$(printf
-    '%s' \"$pvc_line\" | jq -r '.status.phase')\n\n  if test \"$PHASE\" != \"Bound\"
-    && test \"$PHASE\" != \"\"\n  then\n    echo \"[WARNING] PVC $NAME del namespace
-    $NAMESPACE está en estado $PHASE.\"\n    echo \"[WARNING] PVC $NAME del namespace
-    $NAMESPACE está en estado $PHASE.\" >> $file_checkpvcs\n  elif test \"$PHASE\"
-    != \"\"\n  then\n    echo \"[INFO] PVC $NAME del namespace $NAMESPACE está bound.\"\n
-    \   echo \"[INFO] PVC $NAME del namespace $NAMESPACE está bound.\" >> $file_checkpvcs\n
-    \ fi\ndone <<-EOF\n$PVC_PER_LINE\nEOF\n\n\n# Check de PVs\nwhile read -r pv_line\ndo\n
-    \ NAME=$(printf '%s' \"$pv_line\" | jq -r '.metadata.name')\n  PHASE=$(printf
-    '%s' \"$pv_line\" | jq -r '.status.phase')\n\n  IS_HEALTHY=0\n\n  # Phase check\n
-    \ if test \"$PHASE\" = 'Failed'\n  then\n    echo \"[CRITICAL] PV $NAME esta en
-    estado $PHASE.\"\n    echo \"[CRITICAL] PV $NAME esta en estado $PHASE.\" >> $file_checkpvcs\n
-    \   IS_HEALTHY=1\n  elif test \"$PHASE\" = 'Available'\n  then\n    echo \"[NOTICE]
-    PV $NAME no está asociado con ningún Claim, estado $PHASE.\"\n    echo \"[NOTICE]
-    PV $NAME no está asociado con ningún Claim, estado $PHASE.\" >> $file_checkpvcs\n
-    \ fi\n\n\n  if test \"$IS_HEALTHY\" -eq 0\n  then\n    echo \"[INFO] PV $NAME
-    ok.\"\n    echo \"[INFO] PV $NAME ok.\"  >> $file_checkpvcs\n  fi\n\ndone <<-EOF\n$PV_PER_LINE\nEOF\n#####################################################
-    END PVC/PV #####################################################\n\n#####################################################
-    EVENTS #####################################################\necho \"\"\necho
-    \"\"\necho \"\"\necho \"[DEBUG] Iniciando módulo checkEvents.sh\"\necho \"\"\n\n#
-    Chequeo de eventos\ncheck_api_health\n\nkubectl get events -A -o json | /tmp/yq
-    -r '.items[]' | while IFS= read -r event; do\n    NAME=$(echo \"$event\" | /tmp/yq
-    -r '.involvedObject.name')\n    NAMESPACE=$(echo \"$event\" | /tmp/yq -r '.involvedObject.namespace')\n
-    \   REPORTING_COMPONENT=$(echo \"$event\" | /tmp/yq -r '.reportingComponent')\n
-    \   DATE=$(echo \"$event\" | /tmp/yq -r '.firstTimestamp')\n    REASON=$(echo
-    \"$event\" | /tmp/yq -r '.reason')\n    MESSAGE=$(echo \"$event\" | /tmp/yq -r
-    '.message')\n    TYPE=$(echo \"$event\" | /tmp/yq -r '.type')\n    \n    if [
-    \"$TYPE\" != \"Normal\" ]; then\n        echo \"[WARNING] Evento $NAME en namespace
-    $NAMESPACE de $REPORTING_COMPONENT en $DATE. $REASON: $MESSAGE.\"\n        if
-    echo \"$MESSAGE\" | grep -q -E \"$parameter_events_ignore_string\"; then\n                continue\n
-    \       fi\n        echo \"[WARNING] Evento $NAME en namespace $NAMESPACE de $REPORTING_COMPONENT
-    en $DATE. $REASON: $MESSAGE.\" >> $file_checkevents\n    fi\ndone\n#####################################################
-    END EVENTS #####################################################\n\n#####################################################
-    CERTS #####################################################\necho \"\"\necho \"\"\necho
-    \"\"\necho \"[DEBUG] Iniciando módulo checkCertificates.sh\"\necho \"\"\n\n# Get
-    all namespaces\ncheck_api_health\nnamespaces=$(kubectl get namespaces -o jsonpath='{.items[*].metadata.name}')\n\nfor
-    namespace in $namespaces; do\n    check_api_health\n    secrets=$(kubectl get
-    secrets -n \"$namespace\" -o jsonpath='{.items[*].metadata.name}')\n    \n    for
-    secret in $secrets; do\n        check_api_health\n        cert_data=$(kubectl
-    get secret \"$secret\" -n \"$namespace\" -o jsonpath='{.data.tls\\.crt}')\n        \n
-    \       echo \"$cert_data\" | base64 --decode > $file_tls_cert 2>/dev/null\n        \n
-    \       openssl x509 -in $file_tls_cert -text -noout >/dev/null 2>&1\n        if
-    [ $? -ne 0 ]; then continue; fi\n        \n        not_before=$(openssl x509 -in
-    $file_tls_cert -text -noout | grep 'Not Before' | awk -F': ' '{print $2}')\n        not_after=$(openssl
-    x509 -in $file_tls_cert -text -noout | grep 'Not After' | awk -F': ' '{print $2}')\n
-    \       subject=$(openssl x509 -in $file_tls_cert -text -noout | grep 'Subject:'
-    | awk -F': ' '{print $2}' | awk -F'=' '{print $2}' | sed 's/, CN//')\n\n        formatted_not_before=$(date
-    -d \"$not_before\" +\"%s\" 2>/dev/null)\n        formatted_not_after=$(date -d
-    \"$not_after\" +\"%s\" 2>/dev/null)\n        \n        current_date=$(date +\"%s\")\n
-    \       \n        if [ \"$current_date\" -ge \"$formatted_not_after\" ]; then\n
-    \           echo \"[CRITICAL] El certificado '$secret' del namespace '$namespace'
-    está expirado.\"\n            echo \"[CRITICAL] El certificado '$secret' del namespace
-    '$namespace' está expirado.\" >> $file_checkcertificates\n        elif [ $((formatted_not_after
-    - current_date)) -lt $((30*86400)) ]; then\n            time_until_expiration=$((formatted_not_after
-    - current_date))\n            days=$((time_until_expiration / 86400))\n            hours=$((
-    (time_until_expiration % 86400) / 3600 ))\n            minutes=$(( (time_until_expiration
-    % 3600) / 60 ))\n\n            item_to_check=$(echo \"$subject\" | sed \"s/^ *//;s/
-    *$//\")\n\n            match_found=false\n            for evade_subject in $parameter_certificates_evade_subjects;
-    do\n                trimmed_evade_subject=$(echo \"$evade_subject\" | sed \"s/^
-    *//;s/ *$//\")\n                if [ \"$item_to_check\" = \"$trimmed_evade_subject\"
-    ] || [ \"${item_to_check#\"$trimmed_evade_subject\"}\" != \"$item_to_check\" ];
-    then\n                    match_found=true\n                    break\n                fi\n
-    \           done\n\n            if [ \"$match_found\" = true ]; then\n                :\n
-    \           else\n                if [ \"$time_until_expiration\" -ge 86400 ];
-    then\n                    echo \"[WARNING] El certificado '$secret' del namespace
-    '$namespace' va a expirar en $days días, $hours horas y $minutes minutos. Issuer
-    es '$subject'\"\n                    echo \"[WARNING] El certificado '$secret'
-    del namespace '$namespace' va a expirar en $days días, $hours horas y $minutes
-    minutos.\" >> $file_checkcertificates\n                fi\n            fi\n        fi\n
-    \   done\ndone\nrm $file_tls_cert\n#####################################################
-    END CERTS #####################################################\n\n#####################################################
-    CLUSTEROPERATOR #####################################################\ncheck_api_health\nif
-    kubectl api-resources | grep -q \"operator.openshift.io\"; then\n  echo \"\"\n
-    \ echo \"\"\n  echo \"\"\n  echo \"[DEBUG] Iniciando módulo OC\"\n  echo \"\"\n
-    \ oc get clusteroperator > $file_clusteroperator\n  cat $file_clusteroperator\nfi\n\necho
-    \"\"\necho \"\"\necho \"\"\n#####################################################
-    END CLUSTEROPERATOR #####################################################\n\n#####################################################
-    statistics #####################################################\nINFOS=$(grep
-    -o \"\\[INFO\\]\" $file_checkapihealth $file_checknodes $file_checkpods $file_checkpvcs
-    $file_checkevents $file_checkcertificates | wc -l)\nNOTICES=$(grep -o \"\\[NOTICES\\]\"
-    $file_checkapihealth $file_checknodes $file_checkpods $file_checkpvcs $file_checkevents
-    $file_checkcertificates | wc -l)\nWARNINGS=$(grep -o \"\\[WARNING\\]\" $file_checkapihealth
-    $file_checknodes $file_checkpods $file_checkpvcs $file_checkevents $file_checkcertificates
-    | wc -l)\nCRITICALS=$(grep -o \"\\[CRITICAL\\]\" $file_checkapihealth $file_checknodes
-    $file_checkpods $file_checkpvcs $file_checkevents $file_checkcertificates | wc
-    -l)\nprintf '\\n######## RESUMEN ###################\\n'\nprintf '\\e[94m INFOS:
-    \    %s\\e[0m\\n' \"$INFOS\"\nprintf '\\e[96m NOTICES:   %s\\e[0m\\n' \"$NOTICES\"\nprintf
-    '\\e[93m WARNINGS:  %s\\e[0m\\n' \"$WARNINGS\"\nprintf '\\e[91m CRITICALS: %s\\e[0m\\n'
-    \"$CRITICALS\"\nprintf '####################################\\n'\n#####################################################
-    END statistics #####################################################\n\n#####################################################
-    final report #####################################################\necho \"\"\necho
-    \"\"\necho \"\"\necho \"Las alertas a reportar son las que aparecen a continuación:\"\necho
-    \"\"\necho \"\"\necho '######## NOTICES ##################'\nprintf '\\e[96m'\nfor
-    file in \"$file_checkapihealth\" \"$file_checknodes\" \"$file_checkpods\" \"$file_checkpvcs\"
-    \"$file_checkevents\" \"$file_checkcertificates\"; do\n    grep '^\\[NOTICE\\]'
-    \"$file\"\ndone\nprintf '\\e[0m'\necho ''\n\necho '######## WARNINGS ##################'\nprintf
-    '\\e[93m'\nfor file in \"$file_checkapihealth\" \"$file_checknodes\" \"$file_checkpods\"
-    \"$file_checkpvcs\" \"$file_checkevents\" \"$file_checkcertificates\"; do\n    grep
-    '^\\[WARNING\\]' \"$file\" | grep -v 'health-check-cronjob.*namespace debug'\ndone
-    \nprintf '\\e[0m'\n\necho ''\necho '######## CRITICALS #################'\nprintf
-    '\\e[91m'\nfor file in \"$file_checkapihealth\" \"$file_checknodes\" \"$file_checkpods\"
-    \"$file_checkpvcs\" \"$file_checkevents\" \"$file_checkcertificates\"; do\n    grep
-    '^\\[CRITICAL\\]' \"$file\" | grep -v 'health-check-cronjob.*namespace debug'\ndone\nif
-    [ -f \"/tmp/clusteroperator.txt\" ]; then awk 'NR > 1 && $3 != \"True\" {printf
-    \"[CLUSTEROPERATOR] %s %s %s %s %s %s\\n\", $1, $2, $3, $4, $5, $6}' $file_clusteroperator\nprintf
-    '\\e[0m';fi\n\n\nrm \"$file_checkapihealth\" \"$file_checknodes\" \"$file_checkpods\"
-    \"$file_checkpvcs\" \"$file_checkevents\" \"$file_checkcertificates\" \ncheck_api_health\nif
-    kubectl api-resources | grep -q \"operator.openshift.io\"; then\n    rm \"$file_clusteroperator\"\nfi\n#####################################################
-    END final report #####################################################\n\n#####################################################
-    pod exit #####################################################\nif [ \"$WARNINGS\"
-    -ge 1 ] || [ \"$CRITICALS\" -ge 1 ]; then\n    exit 1  # Exit with a non-zero
-    status to crash the pod\nelse\n    echo \"Pod completed successfully.\"\n    exit
-    0  # Exit with zero status to indicate success\nfi\n#####################################################
-    END pod exit #####################################################"
-kind: ConfigMap
-metadata:
-  name: health-check-scripts
-  namespace: debug
diff --git a/modules/k8s/menus/_debug/report-health-check/cronjob.yaml b/modules/k8s/menus/_debug/report-health-check/cronjob.yaml
deleted file mode 100644
index 28e17fe..0000000
--- a/modules/k8s/menus/_debug/report-health-check/cronjob.yaml
+++ /dev/null
@@ -1,51 +0,0 @@
-apiVersion: batch/v1
-kind: CronJob
-metadata:
-  name: health-check-cronjob
-  namespace: debug
-spec:
-  schedule: "*/5 * * * *"
-  #schedule: "1 6 * * 1-5"
-  successfulJobsHistoryLimit: 5
-  failedJobsHistoryLimit: 5
-  concurrencyPolicy: Forbid
-  jobTemplate:
-    spec:
-      activeDeadlineSeconds: 435600
-      backoffLimit: 0
-      template:
-        spec:
-          containers:
-          - name: health-check
-            image: portainer/kube-tools:latest
-            imagePullPolicy: Always
-            command:
-              - /bin/bash
-              - -c
-              - |
-                export parameter_yq_version="v4.44.3"
-                export parameter_oc_client_pre="https://downloads-openshift-console.apps.gmaopro.northeurope.aroapp.io/amd64/linux/oc.tar"
-                export parameter_oc_client_pro="https://downloads-openshift-console.apps.gmao.northeurope.aroapp.io/amd64/linux/oc.tar"
-                export parameter_events_ignore_string="Readiness|Liveness|timeout|healthz|crunchy"
-                export parameter_certificates_evade_subjects="system:kube-controller-manager system:kube-scheduler system:openshift-aggregator system:serviceaccount:openshift-kube-apiserver:check-endpoints system:masters api.gmaopro.northeurope.aroapp.io api.gmao.northeurope.aroapp.io api-int.gmaopro.northeurope.aroapp.io api-int.gmao.northeurope.aroapp.io kube-master 127.0.0.1 172.30.0.1 openshift-kube-apiserver-operator_aggregator-client-signer@ kube-csr-signer_ system:serviceaccount:openshift-monitoring:prometheus-k8s system:serviceaccount:openshift-oauth-apiserver:openshift-authenticator 'Red Hat, Inc.'"
-                sh /scripts/oneliner.sh "$parameter_yq_version" "$parameter_oc_client_pre" "$parameter_oc_client_pro" "$parameter_events_ignore_string" "$parameter_certificates_evade_subjects"
-            volumeMounts:
-            - name: scripts
-              mountPath: /scripts
-            - name: writable-volume
-              mountPath: /tmp
-            resources:
-              requests:
-                memory: "256Mi"
-                cpu: "200m"
-              limits:
-                memory: "512Mi"
-                cpu: "500m"
-          serviceAccountName: debug-report-health-check 
-          restartPolicy: Never
-          volumes:
-          - name: scripts
-            configMap:
-              name: health-check-scripts
-          - name: writable-volume
-            emptyDir: {}
\ No newline at end of file
diff --git a/modules/k8s/menus/_debug/report-health-check/oc-roles/oc-roles.yaml b/modules/k8s/menus/_debug/report-health-check/oc-roles/oc-roles.yaml
deleted file mode 100644
index 7ca2218..0000000
--- a/modules/k8s/menus/_debug/report-health-check/oc-roles/oc-roles.yaml
+++ /dev/null
@@ -1,33 +0,0 @@
-apiVersion: v1
-kind: ServiceAccount
-metadata:
-  name: debug-report-health-check
-  namespace: debug
----
-apiVersion: rbac.authorization.k8s.io/v1
-kind: ClusterRole
-metadata:
-  name: debug-report-health-check
-rules:
-- apiGroups: [""]
-  resources: ["pods", "nodes", "persistentvolumeclaims", "persistentvolumes", "events", "secrets", "namespaces"]
-  verbs: ["get", "list", "watch"]
-- apiGroups: ["metrics.k8s.io"]
-  resources: ["nodes", "pods"]
-  verbs: ["get", "list", "watch"]
-- apiGroups: ["config.openshift.io"]
-  resources: ["clusteroperators"]
-  verbs: ["get", "list"]
----
-apiVersion: rbac.authorization.k8s.io/v1
-kind: ClusterRoleBinding
-metadata:
-  name: debug-report-health-check-binding
-subjects:
-- kind: ServiceAccount
-  name: debug-report-health-check
-  namespace: debug
-roleRef:
-  kind: ClusterRole
-  name: debug-report-health-check
-  apiGroup: rbac.authorization.k8s.io
\ No newline at end of file
diff --git a/modules/k8s/menus/_debug/report-health-check/oneliner.sh b/modules/k8s/menus/_debug/report-health-check/oneliner.sh
deleted file mode 100644
index 23a3d94..0000000
--- a/modules/k8s/menus/_debug/report-health-check/oneliner.sh
+++ /dev/null
@@ -1,532 +0,0 @@
-#!/bin/sh
-##################################################### Parameters #####################################################
-parameter_yq_version=$1
-parameter_oc_client_pre=$2
-parameter_oc_client_pre=$3
-parameter_events_ignore_string=$4
-parameter_certificates_evade_subjects=$5
-##################################################### END Parameters #####################################################
-
-##################################################### Files #####################################################
-file_checkapihealth="/tmp/checkapihealth.txt"
-if [ -f "/tmp/checkapihealth.txt" ]; then rm /tmp/checkapihealth.txt; else touch /tmp/checkapihealth.txt;fi
-file_checknodes="/tmp/checknodes.txt"
-if [ -f "/tmp/checknodes.txt" ]; then rm /tmp/checknodes.txt; else touch /tmp/checknodes.txt;fi
-file_checkpods="/tmp/checkpods.txt"
-if [ -f "/tmp/checkpods.txt" ]; then rm /tmp/checkpods.txt; else touch /tmp/checkpods.txt;fi
-file_checkpvcs="/tmp/checkpvcs.txt"
-if [ -f "/tmp/checkpvcs.txt" ]; then rm /tmp/checkpvcs.txt; else touch /tmp/checkpvcs.txt;fi
-file_checkevents="/tmp/checkevents.txt"
-if [ -f "/tmp/checkevents.txt" ]; then rm /tmp/checkevents.txt; else touch /tmp/checkevents.txt;fi
-file_checkcertificates="/tmp/checkcertificates.txt"
-if [ -f "/tmp/checkcertificates.txt" ]; then rm /tmp/checkcertificates.txt; else touch /tmp/checkcertificates.txt;fi
-file_tls_cert="/tmp/tls.crt"
-if [ -f "/tmp/tls.crt" ]; then rm /tmp/tls.crt; else touch /tmp/tls.crt;fi
-# Specific for oc env
-file_clusteroperator="/tmp/clusteroperator.txt"
-if [ -f "/tmp/clusteroperator.txt" ]; then rm /tmp/clusteroperator.txt; else touch /tmp/clusteroperator.txt;fi
-##################################################### END files #####################################################
-
-##################################################### Functions #####################################################
-check_api_health() {
-    local max_attempts=40
-    local attempt=0
-
-    until kubectl get --raw '/livez?verbose' > /dev/null 2>&1; do
-        if [ $attempt -ge $max_attempts ]; then
-            return 1
-        fi
-        sleep 5
-        attempt=$((attempt + 1))
-    done
-}
-##################################################### END functions #####################################################
-
-##################################################### Needed Software #####################################################
-curl -L -o "/tmp/yq" "https://github.com/mikefarah/yq/releases/download/v4.44.3/yq_linux_amd64"
-chmod +x /tmp/yq
-export PATH="$PATH:/tmp/"
-
-check_api_health
-if kubectl api-resources | grep -q "operator.openshift.io"; then
-    if curl -L -o /tmp/oc.tar $parameter_oc_client_pre; then
-        :
-    else
-        curl -L -o /tmp/oc.tar $parameter_oc_client_pre
-    fi
-    tar -xvf /tmp/oc.tar -C /tmp
-    chmod +x /tmp/oc
-    export PATH="$PATH:/tmp/"
-fi
-##################################################### END Needed Software #####################################################
-
-##################################################### API #####################################################
-echo "[DEBUG] Inciando comprobación de salud."
-
-echo "[DEBUG] Iniciando módulo checkApiHealth.sh."
-echo ""
-# Comprueba los endpoints de salud del apiserver.
-check_api_health
-LIVE_CHECK=$(kubectl get --raw '/livez?verbose')
-check_api_health
-HEALTH_CHECK=$(kubectl get --raw '/readyz?verbose')
-
-INDIVIDUAL_LIVE_CHECKS=$(printf '%s' "$LIVE_CHECK" | grep -E '^\[\+\].+')
-OVERALL_LIVE_CHECK=$(printf '%s' "$LIVE_CHECK" | tail -n 1)
-
-INDIVIDUAL_HEALTH_CHECKS=$(printf '%s' "$HEALTH_CHECK" | grep -E '^\[\+\].+')
-OVERALL_HEALTH_CHECK=$(printf '%s' "$HEALTH_CHECK" | tail -n 1)
-
-# comprobación de live check individuales
-while read -r live_line
-do
-  ITEM=$(printf '%s' "$live_line" | cut -d " " -f 1 | cut -d "]" -f 2)
-  STATUS=$(printf '%s' "$live_line" | cut -d " " -f 2)
-
-  if test "$STATUS" != "ok"
-  then
-    echo "[CRITICAL] Live check de $ITEM en estado $STATUS."
-    echo "[CRITICAL] Live check de $ITEM en estado $STATUS." >> $file_checkapihealth
-  fi
-done <<-EOF
-$INDIVIDUAL_LIVE_CHECKS
-EOF
-
-# comprobación de live check general
-if test "$OVERALL_LIVE_CHECK" = "livez check passed"
-then
-  echo "[INFO] $OVERALL_LIVE_CHECK."
-  echo "[INFO] $OVERALL_LIVE_CHECK." >> $file_checkapihealth
-else
-  echo "[CRITICAL] $OVERALL_LIVE_CHECK."
-  echo "[CRITICAL] $OVERALL_LIVE_CHECK." >> $file_checkapihealth
-fi
-
-# comprobación de health check individuales
-while read -r ready_line
-do
-  ITEM=$(printf '%s' "$ready_line" | cut -d " " -f 1 | cut -d "]" -f 2)
-  STATUS=$(printf '%s' "$ready_line" | cut -d " " -f 2)
-
-  if test "$STATUS" != "ok"
-  then
-    echo "[CRITICAL] Ready check de $ITEM en estado $STATUS."
-    echo "[CRITICAL] Ready check de $ITEM en estado $STATUS." >> $file_checkapihealth
-  fi
-done <<-EOF
-$INDIVIDUAL_HEALTH_CHECKS
-EOF
-
-# comprobación de ready check general
-if test "$OVERALL_HEALTH_CHECK" = "readyz check passed"
-then
-  echo "[INFO] $OVERALL_HEALTH_CHECK."
-  echo "[INFO] $OVERALL_HEALTH_CHECK." >> $file_checkapihealth
-else
-  echo "[CRITICAL] $OVERALL_HEALTH_CHECK."
-  echo "[CRITICAL] $OVERALL_HEALTH_CHECK." >> $file_checkapihealth
-fi
-echo ""
-echo ""
-echo ""
-##################################################### END API #####################################################
-
-##################################################### NODES #####################################################
-echo "[DEBUG] Iniciando módulo checkNodes.sh."
-echo ""
-# Módulo que comprueba la salud de los nodos
-
-# Porcentaje de uso de recursos
-CPU_WARN=80
-CPU_CRIT=90
-MEM_WARN=80
-MEM_CRIT=90
-
-check_api_health
-LISTA_NODOS=$(kubectl get nodes -o jsonpath='{.items[*].metadata.name}')
-check_api_health
-if kubectl api-resources | grep -q "operator.openshift.io"; then
-  # Lista de condiciones y sus expected values en OpenShift
-  CONDITION_LIST=$(cat <<EOF
-  {
-    "MemoryPressure"              : {"expected": "False", "severity": "CRITICAL"},
-    "DiskPressure"                : {"expected": "False", "severity": "CRITICAL"},
-    "PIDPressure"                 : {"expected": "False", "severity": "WARNING"},
-    "Ready"                       : {"expected": "True" , "severity": "CRITICAL"}
-  }
-EOF
-  )
-else
-  # Lista de condiciones y sus expected values
-  CONDITION_LIST=$(cat <<EOF
-  {
-    "FrequentKubeletRestart"      : {"expected": "False", "severity": "CRITICAL"},
-    "KernelDeadlock"              : {"expected": "False", "severity": "CRITICAL"},
-    "ReadonlyFilesystem"          : {"expected": "False", "severity": "CRITICAL"},
-    "ContainerRuntimeProblem"     : {"expected": "False", "severity": "CRITICAL"},
-    "FrequentDockerRestart"       : {"expected": "False", "severity": "CRITICAL"},
-    "KubeletProblem"              : {"expected": "False", "severity": "CRITICAL"},
-    "VMEventScheduled"            : {"expected": "False", "severity": "CRITICAL"},
-    "FrequentContainerdRestart"   : {"expected": "False", "severity": "CRITICAL"},
-    "FilesystemCorruptionProblem" : {"expected": "False", "severity": "CRITICAL"},
-    "FrequentUnregisterNetDevice" : {"expected": "False", "severity": "CRITICAL"},
-    "MemoryPressure"              : {"expected": "False", "severity": "CRITICAL"},
-    "DiskPressure"                : {"expected": "False", "severity": "CRITICAL"},
-    "PIDPressure"                 : {"expected": "False", "severity": "WARNING"},
-    "Ready"                       : {"expected": "True" , "severity": "CRITICAL"}
-  }
-EOF
-  )
-fi
-# Sirve para detectar si hay o no alertas
-NO_ALERTS=0
-
-for node in $LISTA_NODOS
-do
-  # Comprobación de uso de nodos.
-  check_api_health
-  NODE_STATUS_LINE="$(kubectl top nodes "$node" --no-headers | tr -s " " | tr -d %)"
-  NODE_CPU_PERCENT=$(printf '%s' "$NODE_STATUS_LINE" | cut -d " " -f 3)
-  NODE_MEM_PERCENT=$(printf '%s' "$NODE_STATUS_LINE" | cut -d " " -f 5)
-
-  if test "$NODE_CPU_PERCENT" -ge "$CPU_CRIT" || test "$NODE_MEM_PERCENT" -ge "$MEM_CRIT"
-  then
-    echo "[CRITICAL] Nodo $node CPU: $NODE_CPU_PERCENT, MEM: $NODE_MEM_PERCENT"
-    echo "[CRITICAL] Nodo $node CPU: $NODE_CPU_PERCENT, MEM: $NODE_MEM_PERCENT" >> $file_checknodes
-    NO_ALERTS=1
-  elif test "$NODE_CPU_PERCENT" -ge "$CPU_WARN" || test "$NODE_MEM_PERCENT" -ge "$MEM_WARN"
-  then
-    echo "[WARNING] Nodo $node CPU: $NODE_CPU_PERCENT, MEM: $NODE_MEM_PERCENT"
-    echo "[WARNING] Nodo $node CPU: $NODE_CPU_PERCENT, MEM: $NODE_MEM_PERCENT" >> $file_checknodes
-    NO_ALERTS=1
-  fi
-
-  # Comprobar conditions del nodo
-  check_api_health
-  CONDITIONS=$(kubectl get node "$node" -o jsonpath='{.status.conditions}')
-
-  LISTA_COND=$(printf '%s' "$CONDITION_LIST" | jq -r 'keys | join(" ")')
-
-  for condition in $LISTA_COND
-  do
-    CONDITION_OBJ=$(printf '%s' "$CONDITIONS" | jq ".[] | select(.type == \"$condition\")")
-    STATUS=$(printf '%s' "$CONDITION_OBJ" | jq -r ".status")
-    EXPECTED=$(printf '%s' "$CONDITION_LIST" | jq -r ".[\"$condition\"].expected")
-    SEVERITY=$(printf '%s' "$CONDITION_LIST" | jq -r ".[\"$condition\"].severity")
-
-    if test "$STATUS" = "$EXPECTED"
-    then
-      echo "[INFO] Condición $condition en $node en estado esperado"
-      echo "[INFO] Condición $condition en $node en estado esperado" >> $file_checknodes
-    else
-      echo "[$SEVERITY] Condición $condition en $node en estado $STATUS, comprobar salud del nodo."
-      echo "[$SEVERITY] Condición $condition en $node en estado $STATUS, comprobar salud del nodo." >> $file_checknodes
-      NO_ALERTS=1
-    fi
-
-  done
-done
-
-# Comprobación de estado de nodos
-if test $NO_ALERTS -eq 0
-then
-  echo "[INFO] Los nodos están en estado correcto."
-fi
-##################################################### END NODOS #####################################################
-
-##################################################### PODS #####################################################
-echo ""
-echo ""
-echo ""
-echo "[DEBUG] Iniciando módulo checkPods.sh"
-echo ""
-
-check_api_health
-
-PODS_INFO_PER_LINE=$(kubectl get po -A -o json | jq -j '.items[] | "[\(.metadata),\(.status)]\n"')
-
-# Recorrer todos los pods
-while read -r pod_line; do
-    NAME=$(printf '%s' "$pod_line" | jq -r .[0].name)
-    NAMESPACE=$(printf '%s' "$pod_line" | jq -r .[0].namespace)
-    CONDITIONS=$(printf '%s' "$pod_line" | jq -r '.[1].conditions[] | "\(.type):\(.status)"')
-    PHASE=$(printf '%s' "$pod_line" | jq -r '.[1].phase')
-    HEALTHY=0
-
-    # Check Phase
-    if test "$PHASE" = "Failed"; then
-        echo "[CRITICAL] El pod $NAME del namespace $NAMESPACE está en estado $PHASE."
-        echo "[CRITICAL] El pod $NAME del namespace $NAMESPACE está en estado $PHASE." >> $file_checkpods
-        HEALTHY=1
-    elif test "$PHASE" = "Pending" || test "$PHASE" = "Unknown"; then
-        echo "[WARNING] El pod $NAME del namespace $NAMESPACE está en estado $PHASE."
-        echo "[CRITICAL] El pod $NAME del namespace $NAMESPACE está en estado $PHASE." >> $file_checkpods
-        HEALTHY=1
-    elif test "$PHASE" = "Succeeded" || test "$PHASE" = "Completed"; then
-        continue
-    fi
-
-    # Check Conditions
-    for condition in $CONDITIONS; do
-        CONDITION_STATUS=$(printf '%s' "$condition" | cut -d ":" -f 2)
-        CONDITION_NAME=$(printf '%s' "$condition" | cut -d ":" -f 1)
-        if test "$CONDITION_STATUS" != "True" && test "$CONDITION_NAME" = "Ready"; then
-            echo "[WARNING] El pod $NAME del namespace $NAMESPACE tiene la condición $CONDITION_NAME en estado $CONDITION_STATUS."
-            echo "[WARNING] El pod $NAME del namespace $NAMESPACE tiene la condición $CONDITION_NAME en estado $CONDITION_STATUS." >> $file_checkpods
-            HEALTHY=1
-        elif test "$CONDITION_STATUS" != "True"; then
-            echo "[CRITICAL] El pod $NAME del namespace $NAMESPACE tiene la condición $CONDITION_NAME en estado $CONDITION_STATUS."
-            echo "[CRITICAL] El pod $NAME del namespace $NAMESPACE tiene la condición $CONDITION_NAME en estado $CONDITION_STATUS." >> $file_checkpods
-            HEALTHY=1
-        fi
-    done
-
-    if test "$HEALTHY" -eq 0; then
-        echo "[INFO] Las condiciones del pod $NAME del namespace $NAMESPACE están correctas."
-        echo "[INFO] Las condiciones del pod $NAME del namespace $NAMESPACE están correctas." >> $file_checkpods
-    fi
-done <<-EOF
-$PODS_INFO_PER_LINE
-EOF
-##################################################### END PODS #####################################################
-
-##################################################### PVC/PV #####################################################
-echo ""
-echo ""
-echo ""
-echo "[DEBUG] Iniciando módulo checkPvcs.sh"
-echo ""
-check_api_health
-PVC_PER_LINE=$(kubectl get pvc -A -o json | jq -r '.items[] | "\(.)"')
-
-check_api_health
-PV_PER_LINE=$(kubectl get pv -o json | jq -r '.items[] | "\(.)"')
-
-
-
-# Check PVCs
-while read -r pvc_line
-do
-  NAME=$(printf '%s' "$pvc_line" | jq -r '.metadata.name')
-  NAMESPACE=$(printf '%s' "$pvc_line" | jq -r '.metadata.namespace')
-  PHASE=$(printf '%s' "$pvc_line" | jq -r '.status.phase')
-
-  if test "$PHASE" != "Bound" && test "$PHASE" != ""
-  then
-    echo "[WARNING] PVC $NAME del namespace $NAMESPACE está en estado $PHASE."
-    echo "[WARNING] PVC $NAME del namespace $NAMESPACE está en estado $PHASE." >> $file_checkpvcs
-  elif test "$PHASE" != ""
-  then
-    echo "[INFO] PVC $NAME del namespace $NAMESPACE está bound."
-    echo "[INFO] PVC $NAME del namespace $NAMESPACE está bound." >> $file_checkpvcs
-  fi
-done <<-EOF
-$PVC_PER_LINE
-EOF
-
-
-# Check de PVs
-while read -r pv_line
-do
-  NAME=$(printf '%s' "$pv_line" | jq -r '.metadata.name')
-  PHASE=$(printf '%s' "$pv_line" | jq -r '.status.phase')
-
-  IS_HEALTHY=0
-
-  # Phase check
-  if test "$PHASE" = 'Failed'
-  then
-    echo "[CRITICAL] PV $NAME esta en estado $PHASE."
-    echo "[CRITICAL] PV $NAME esta en estado $PHASE." >> $file_checkpvcs
-    IS_HEALTHY=1
-  elif test "$PHASE" = 'Available'
-  then
-    echo "[NOTICE] PV $NAME no está asociado con ningún Claim, estado $PHASE."
-    echo "[NOTICE] PV $NAME no está asociado con ningún Claim, estado $PHASE." >> $file_checkpvcs
-  fi
-
-
-  if test "$IS_HEALTHY" -eq 0
-  then
-    echo "[INFO] PV $NAME ok."
-    echo "[INFO] PV $NAME ok."  >> $file_checkpvcs
-  fi
-
-done <<-EOF
-$PV_PER_LINE
-EOF
-##################################################### END PVC/PV #####################################################
-
-##################################################### EVENTS #####################################################
-echo ""
-echo ""
-echo ""
-echo "[DEBUG] Iniciando módulo checkEvents.sh"
-echo ""
-
-# Chequeo de eventos
-check_api_health
-
-kubectl get events -A -o json | /tmp/yq -r '.items[]' | while IFS= read -r event; do
-    NAME=$(echo "$event" | /tmp/yq -r '.involvedObject.name')
-    NAMESPACE=$(echo "$event" | /tmp/yq -r '.involvedObject.namespace')
-    REPORTING_COMPONENT=$(echo "$event" | /tmp/yq -r '.reportingComponent')
-    DATE=$(echo "$event" | /tmp/yq -r '.firstTimestamp')
-    REASON=$(echo "$event" | /tmp/yq -r '.reason')
-    MESSAGE=$(echo "$event" | /tmp/yq -r '.message')
-    TYPE=$(echo "$event" | /tmp/yq -r '.type')
-    
-    if [ "$TYPE" != "Normal" ]; then
-        echo "[WARNING] Evento $NAME en namespace $NAMESPACE de $REPORTING_COMPONENT en $DATE. $REASON: $MESSAGE."
-        if echo "$MESSAGE" | grep -q -E "$parameter_events_ignore_string"; then
-                continue
-        fi
-        echo "[WARNING] Evento $NAME en namespace $NAMESPACE de $REPORTING_COMPONENT en $DATE. $REASON: $MESSAGE." >> $file_checkevents
-    fi
-done
-##################################################### END EVENTS #####################################################
-
-##################################################### CERTS #####################################################
-echo ""
-echo ""
-echo ""
-echo "[DEBUG] Iniciando módulo checkCertificates.sh"
-echo ""
-
-# Get all namespaces
-check_api_health
-namespaces=$(kubectl get namespaces -o jsonpath='{.items[*].metadata.name}')
-
-for namespace in $namespaces; do
-    check_api_health
-    secrets=$(kubectl get secrets -n "$namespace" -o jsonpath='{.items[*].metadata.name}')
-    
-    for secret in $secrets; do
-        check_api_health
-        cert_data=$(kubectl get secret "$secret" -n "$namespace" -o jsonpath='{.data.tls\.crt}')
-        
-        echo "$cert_data" | base64 --decode > $file_tls_cert 2>/dev/null
-        
-        openssl x509 -in $file_tls_cert -text -noout >/dev/null 2>&1
-        if [ $? -ne 0 ]; then continue; fi
-        
-        not_before=$(openssl x509 -in $file_tls_cert -text -noout | grep 'Not Before' | awk -F': ' '{print $2}')
-        not_after=$(openssl x509 -in $file_tls_cert -text -noout | grep 'Not After' | awk -F': ' '{print $2}')
-        subject=$(openssl x509 -in $file_tls_cert -text -noout | grep 'Subject:' | awk -F': ' '{print $2}' | awk -F'=' '{print $2}' | sed 's/, CN//')
-
-        formatted_not_before=$(date -d "$not_before" +"%s" 2>/dev/null)
-        formatted_not_after=$(date -d "$not_after" +"%s" 2>/dev/null)
-        
-        current_date=$(date +"%s")
-        
-        if [ "$current_date" -ge "$formatted_not_after" ]; then
-            echo "[CRITICAL] El certificado '$secret' del namespace '$namespace' está expirado."
-            echo "[CRITICAL] El certificado '$secret' del namespace '$namespace' está expirado." >> $file_checkcertificates
-        elif [ $((formatted_not_after - current_date)) -lt $((30*86400)) ]; then
-            time_until_expiration=$((formatted_not_after - current_date))
-            days=$((time_until_expiration / 86400))
-            hours=$(( (time_until_expiration % 86400) / 3600 ))
-            minutes=$(( (time_until_expiration % 3600) / 60 ))
-
-            item_to_check=$(echo "$subject" | sed "s/^ *//;s/ *$//")
-
-            match_found=false
-            for evade_subject in $parameter_certificates_evade_subjects; do
-                trimmed_evade_subject=$(echo "$evade_subject" | sed "s/^ *//;s/ *$//")
-                if [ "$item_to_check" = "$trimmed_evade_subject" ] || [ "${item_to_check#"$trimmed_evade_subject"}" != "$item_to_check" ]; then
-                    match_found=true
-                    break
-                fi
-            done
-
-            if [ "$match_found" = true ]; then
-                :
-            else
-                if [ "$time_until_expiration" -ge 86400 ]; then
-                    echo "[WARNING] El certificado '$secret' del namespace '$namespace' va a expirar en $days días, $hours horas y $minutes minutos. Issuer es '$subject'"
-                    echo "[WARNING] El certificado '$secret' del namespace '$namespace' va a expirar en $days días, $hours horas y $minutes minutos." >> $file_checkcertificates
-                fi
-            fi
-        fi
-    done
-done
-rm $file_tls_cert
-##################################################### END CERTS #####################################################
-
-##################################################### CLUSTEROPERATOR #####################################################
-check_api_health
-if kubectl api-resources | grep -q "operator.openshift.io"; then
-  echo ""
-  echo ""
-  echo ""
-  echo "[DEBUG] Iniciando módulo OC"
-  echo ""
-  oc get clusteroperator > $file_clusteroperator
-  cat $file_clusteroperator
-fi
-
-echo ""
-echo ""
-echo ""
-##################################################### END CLUSTEROPERATOR #####################################################
-
-##################################################### statistics #####################################################
-INFOS=$(grep -o "\[INFO\]" $file_checkapihealth $file_checknodes $file_checkpods $file_checkpvcs $file_checkevents $file_checkcertificates | wc -l)
-NOTICES=$(grep -o "\[NOTICES\]" $file_checkapihealth $file_checknodes $file_checkpods $file_checkpvcs $file_checkevents $file_checkcertificates | wc -l)
-WARNINGS=$(grep -o "\[WARNING\]" $file_checkapihealth $file_checknodes $file_checkpods $file_checkpvcs $file_checkevents $file_checkcertificates | wc -l)
-CRITICALS=$(grep -o "\[CRITICAL\]" $file_checkapihealth $file_checknodes $file_checkpods $file_checkpvcs $file_checkevents $file_checkcertificates | wc -l)
-printf '\n######## RESUMEN ###################\n'
-printf '\e[94m INFOS:     %s\e[0m\n' "$INFOS"
-printf '\e[96m NOTICES:   %s\e[0m\n' "$NOTICES"
-printf '\e[93m WARNINGS:  %s\e[0m\n' "$WARNINGS"
-printf '\e[91m CRITICALS: %s\e[0m\n' "$CRITICALS"
-printf '####################################\n'
-##################################################### END statistics #####################################################
-
-##################################################### final report #####################################################
-echo ""
-echo ""
-echo ""
-echo "Las alertas a reportar son las que aparecen a continuación:"
-echo ""
-echo ""
-echo '######## NOTICES ##################'
-printf '\e[96m'
-for file in "$file_checkapihealth" "$file_checknodes" "$file_checkpods" "$file_checkpvcs" "$file_checkevents" "$file_checkcertificates"; do
-    grep '^\[NOTICE\]' "$file"
-done
-printf '\e[0m'
-echo ''
-
-echo '######## WARNINGS ##################'
-printf '\e[93m'
-for file in "$file_checkapihealth" "$file_checknodes" "$file_checkpods" "$file_checkpvcs" "$file_checkevents" "$file_checkcertificates"; do
-    grep '^\[WARNING\]' "$file" | grep -v 'health-check-cronjob.*namespace debug'
-done 
-printf '\e[0m'
-
-echo ''
-echo '######## CRITICALS #################'
-printf '\e[91m'
-for file in "$file_checkapihealth" "$file_checknodes" "$file_checkpods" "$file_checkpvcs" "$file_checkevents" "$file_checkcertificates"; do
-    grep '^\[CRITICAL\]' "$file" | grep -v 'health-check-cronjob.*namespace debug'
-done
-if [ -f "/tmp/clusteroperator.txt" ]; then awk 'NR > 1 && $3 != "True" {printf "[CLUSTEROPERATOR] %s %s %s %s %s %s\n", $1, $2, $3, $4, $5, $6}' $file_clusteroperator
-printf '\e[0m';fi
-
-
-rm "$file_checkapihealth" "$file_checknodes" "$file_checkpods" "$file_checkpvcs" "$file_checkevents" "$file_checkcertificates" 
-check_api_health
-if kubectl api-resources | grep -q "operator.openshift.io"; then
-    rm "$file_clusteroperator"
-fi
-##################################################### END final report #####################################################
-
-##################################################### pod exit #####################################################
-if [ "$WARNINGS" -ge 1 ] || [ "$CRITICALS" -ge 1 ]; then
-    exit 1  # Exit with a non-zero status to crash the pod
-else
-    echo "Pod completed successfully."
-    exit 0  # Exit with zero status to indicate success
-fi
-##################################################### END pod exit #####################################################
\ No newline at end of file
diff --git a/modules/k8s/menus/_debug/report-health-check/pod.yaml b/modules/k8s/menus/_debug/report-health-check/pod.yaml
deleted file mode 100644
index 582b846..0000000
--- a/modules/k8s/menus/_debug/report-health-check/pod.yaml
+++ /dev/null
@@ -1,42 +0,0 @@
-apiVersion: v1
-kind: Pod
-metadata:
-  name: debug
-  namespace: debug
-spec:
-  containers:
-  - name: debug
-    image: portainer/kube-tools:latest
-    #command: ["/bin/bash", "-c", "while true; do sleep 30; done"]
-    #command: ["/bin/bash", "-c", "sh /scripts/oneliner.sh"]
-    command:
-      - /bin/bash
-      - -c
-      - |
-        parameter_yq_version="v4.44.3"
-        parameter_oc_client_pre="https://downloads-openshift-console.apps.gmaopro.northeurope.aroapp.io/amd64/linux/oc.tar"
-        parameter_oc_client_pro="https://downloads-openshift-console.apps.gmao.northeurope.aroapp.io/amd64/linux/oc.tar"
-        parameter_events_ignore_string="Readiness|Liveness|timeout|healthz|crunchy"
-        parameter_certificates_evade_subjects="system:kube-controller-manager system:kube-scheduler system:openshift-aggregator system:serviceaccount:openshift-kube-apiserver:check-endpoints system:masters api.gmaopro.northeurope.aroapp.io api.gmao.northeurope.aroapp.io api-int.gmaopro.northeurope.aroapp.io api-int.gmao.northeurope.aroapp.io kube-master 127.0.0.1 172.30.0.1 openshift-kube-apiserver-operator_aggregator-client-signer@ kube-csr-signer_ system:serviceaccount:openshift-monitoring:prometheus-k8s system:serviceaccount:openshift-oauth-apiserver:openshift-authenticator 'Red Hat, Inc.'"
-        sh /scripts/oneliner.sh "$parameter_yq_version" "$parameter_oc_client_pre" "$parameter_oc_client_pro" "$parameter_events_ignore_string" "$parameter_certificates_evade_subjects"
-        while true; do sleep 30; done
-    volumeMounts:
-    - name: scripts
-      mountPath: /scripts
-    - name: writable-volume
-      mountPath: /tmp
-    resources:
-      requests:
-        memory: "256Mi"
-        cpu: "500m"
-      limits:
-        memory: "512Mi"
-        cpu: "500m"
-  serviceAccountName: debug-report-health-check
-  volumes:
-  - name: scripts
-    configMap:
-      name: health-check-scripts
-  - name: writable-volume
-    emptyDir: {}
-  restartPolicy: Never
\ No newline at end of file
diff --git a/modules/k8s/menus/_debug/upgrade-oc-roles/oc-roles.yml b/modules/k8s/menus/_debug/upgrade-oc-roles/oc-roles.yml
deleted file mode 100644
index a84442d..0000000
--- a/modules/k8s/menus/_debug/upgrade-oc-roles/oc-roles.yml
+++ /dev/null
@@ -1,30 +0,0 @@
-apiVersion: v1
-kind: ServiceAccount
-metadata:
-  name: debug-upgrade-oc
-  namespace: debug
----
-apiVersion: rbac.authorization.k8s.io/v1
-kind: ClusterRole
-metadata:
-  name: debug-upgrade-oc
-rules:
-- apiGroups: ["apiserver.openshift.io"]
-  resources: ["apirequestcounts"]
-  verbs: ["get", "list"]
-- apiGroups: [""]
-  resources: ["configmaps"]
-  verbs: ["get", "patch"]
----
-apiVersion: rbac.authorization.k8s.io/v1
-kind: ClusterRoleBinding
-metadata:
-  name: debug-upgrade-oc-binding
-subjects:
-- kind: ServiceAccount
-  name: debug-upgrade-oc
-  namespace: debug
-roleRef:
-  kind: ClusterRole
-  name: debug-upgrade-oc
-  apiGroup: rbac.authorization.k8s.io
\ No newline at end of file
diff --git a/modules/k8s/menus/api/api.bash b/modules/k8s/menus/api/api.bash
deleted file mode 100644
index 7865222..0000000
--- a/modules/k8s/menus/api/api.bash
+++ /dev/null
@@ -1,10 +0,0 @@
-#!/bin/bash
-script_path=$(dirname $0)
-source "$script_path/functions.bash"
-#Main
-echo "Quin entorn vols?"
-ls $k8s_env_path
-read env
-export env
-#clear
-api $1
diff --git a/modules/k8s/menus/api/functions.bash b/modules/k8s/menus/api/functions.bash
deleted file mode 100644
index 9594a69..0000000
--- a/modules/k8s/menus/api/functions.bash
+++ /dev/null
@@ -1,21 +0,0 @@
-#!/bin/bash
-api() {
-	TOKEN=$(kubectl --kubeconfig "$HOME"/.kube/$env describe secret -n kube-system $(kubectl --kubeconfig "$HOME"/.kube/$env get secrets -n kube-system | grep default | cut -f1 -d ' ') | grep -E '^token' | cut -f2 -d':' | tr -d '\t' | tr -d " ")
-	APISERVER=$(kubectl --kubeconfig "$HOME"/.kube/$env config view | grep https | cut -f 2- -d ":" | tr -d " ")
-	cat ~/.kube/"$env" | yq .clusters[0].cluster.certificate-authority-data | base64 -d - >~/.kube/"$env"-encoded-ca
-	cat ~/.kube/"$env" | yq .users[0].user.client-certificate-data | base64 -d - >~/.kube/"$env"-encoded-cert
-	cat ~/.kube/"$env" | yq .users[0].user.client-key-data | base64 -d - >~/.kube/"$env"-encoded-key
-	curl "$APISERVER""$1" --cert ~/.kube/"$env"-encoded-cert --key ~/.kube/"$env"-encoded-key --cacert ~/.kube/"$env"-encoded-ca
-}
-export api
-#api /healthz;api /livez;api /readyz
-#api /apis/apps/v1/
-#api /apis/apps/v1/deployments
-#Core group (/api/v1)
-# Named group - /apis/$NAME/$VERSION
-# $VERSION :
-# Alpha level - it may be dropped at any point in time, without notice. For example, /apis/batch/v2alpha1.
-# Beta level - it is well-tested, but the semantics of objects may change in incompatible ways in a subsequent beta or stable release. For example, /apis/certificates.k8s.io/v1beta1.
-# Stable level - appears in released software for many subsequent versions. For example, /apis/networking.k8s.io/v1.
-
-# System-wide - This group consists of system-wide API endpoints, like /healthz, /logs, /metrics, /ui, etc.
diff --git a/modules/k8s/menus/checks_k8s/checks_k8s.bash b/modules/k8s/menus/checks_k8s/checks_k8s.bash
deleted file mode 100644
index 39e718b..0000000
--- a/modules/k8s/menus/checks_k8s/checks_k8s.bash
+++ /dev/null
@@ -1,10 +0,0 @@
-#!/bin/bash
-script_path=$(dirname $0)
-source ""$script_path"/functions.bash"
-#Main
-echo "Quin entorn vols?"
-ls $k8s_env_path
-read env
-export env
-clear
-checks
diff --git a/modules/k8s/menus/checks_k8s/functions.bash b/modules/k8s/menus/checks_k8s/functions.bash
deleted file mode 100644
index c1f182b..0000000
--- a/modules/k8s/menus/checks_k8s/functions.bash
+++ /dev/null
@@ -1,23 +0,0 @@
-#!/bin/bash
-checks() {
-	echo -e "config \n"
-	kubectl --kubeconfig "$HOME"/.kube/$env config view
-	echo -e "\n\n"
-	echo -e "API call \n"
-	kubectl --kubeconfig "$HOME"/.kube/$env get pods -v8
-	echo -e "\n\n"
-	TOKEN=$(kubectl --kubeconfig "$HOME"/.kube/$env describe secret -n kube-system $(kubectl --kubeconfig "$HOME"/.kube/$env get secrets -n kube-system | grep default | cut -f1 -d ' ') | grep -E '^token' | cut -f2 -d':' | tr -d '\t' | tr -d " ")
-	APISERVER=$(kubectl --kubeconfig "$HOME"/.kube/$env config view | grep https | cut -f 2- -d ":" | tr -d " ")
-	cat ~/.kube/"$env" | yq .clusters[0].cluster.certificate-authority-data | base64 -d - >~/.kube/"$env"-encoded-ca
-	cat ~/.kube/"$env" | yq .users[0].user.client-certificate-data | base64 -d - >~/.kube/"$env"-encoded-cert
-	cat ~/.kube/"$env" | yq .users[0].user.client-key-data | base64 -d - >~/.kube/"$env"-encoded-key
-	echo -e "\nhealthz status"
-	curl "$APISERVER"/healthz --cert ~/.kube/"$env"-encoded-cert --key ~/.kube/"$env"-encoded-key --cacert ~/.kube/"$env"-encoded-ca
-	echo -e "\nlivez status"
-	curl "$APISERVER"/livez --cert ~/.kube/"$env"-encoded-cert --key ~/.kube/"$env"-encoded-key --cacert ~/.kube/"$env"-encoded-ca
-	echo -e "\nreadyz status"
-	curl "$APISERVER"/readyz --cert ~/.kube/"$env"-encoded-cert --key ~/.kube/"$env"-encoded-key --cacert ~/.kube/"$env"-encoded-ca
-	echo -e "\n\nversion"
-	kubectl --kubeconfig "$HOME"/.kube/$env version --short
-}
-export checks
diff --git a/modules/k8s/menus/pod_actions/copy_from.bash b/modules/k8s/menus/pod_actions/copy_from.bash
deleted file mode 100644
index b37ed87..0000000
--- a/modules/k8s/menus/pod_actions/copy_from.bash
+++ /dev/null
@@ -1,10 +0,0 @@
-#!/bin/bash
-script_path=$(dirname $0)
-source ""$script_path"/functions.bash"
-#Main
-echo "Quin entorn vols?"
-ls $k8s_env_path
-read env
-export env
-clear
-copy_from
diff --git a/modules/k8s/menus/pod_actions/describe.bash b/modules/k8s/menus/pod_actions/describe.bash
deleted file mode 100644
index 6d21684..0000000
--- a/modules/k8s/menus/pod_actions/describe.bash
+++ /dev/null
@@ -1,10 +0,0 @@
-#!/bin/bash
-script_path=$(dirname $0)
-source ""$script_path"/functions.bash"
-#Main
-echo "Quin entorn vols?"
-ls $k8s_env_path
-read env
-export env
-clear
-describe
diff --git a/modules/k8s/menus/pod_actions/exec.bash b/modules/k8s/menus/pod_actions/exec.bash
deleted file mode 100644
index 0efa2f3..0000000
--- a/modules/k8s/menus/pod_actions/exec.bash
+++ /dev/null
@@ -1,10 +0,0 @@
-#!/bin/bash
-script_path=$(dirname $0)
-source ""$script_path"/functions.bash"
-#Main
-echo "Quin entorn vols?"
-ls $k8s_env_path
-read env
-export env
-clear
-exe
diff --git a/modules/k8s/menus/pod_actions/functions.bash b/modules/k8s/menus/pod_actions/functions.bash
deleted file mode 100644
index 3871bba..0000000
--- a/modules/k8s/menus/pod_actions/functions.bash
+++ /dev/null
@@ -1,43 +0,0 @@
-#!/bin/bash
-exe() {
-	echo "Quin namespace?"
-	kubectl --kubeconfig "$HOME"/.kube/$env get namespaces
-	read namespace
-	echo "On vols l'exe?"
-	kubectl --kubeconfig "$HOME"/.kube/$env get pods -n $namespace
-	read deployment
-	kubectl --kubeconfig "$HOME"/.kube/$env exec -it -n $namespace $deployment -- /bin/sh
-}
-logs() {
-	echo "Quin namespace?"
-	kubectl --kubeconfig "$HOME"/.kube/$env get namespaces
-	read namespace
-	echo "De quin pod vols veure logs?"
-	kubectl --kubeconfig "$HOME"/.kube/$env get pods -n $namespace
-	read deployment
-	kubectl --kubeconfig "$HOME"/.kube/$env logs -f -n $namespace $deployment
-}
-copy_from() {
-	echo "Quin namespace?"
-	kubectl --kubeconfig "$HOME"/.kube/$env get namespaces
-	read namespace
-	echo "De quin pod vols agafar arxiu?"
-	kubectl --kubeconfig "$HOME"/.kube/$env get pods -n $namespace
-	read deployment
-	echo "Quin arxiu/path?"
-	read arxiu
-	kubectl --kubeconfig "$HOME"/.kube/$env cp -n $namespace $deployment:$arxiu /tmp/$arxiu
-}
-describe() {
-	echo "Quin namespace?"
-	kubectl --kubeconfig "$HOME"/.kube/$env get namespaces
-	read namespace
-	echo "Quin pod vols descriure?"
-	kubectl --kubeconfig "$HOME"/.kube/$env get pods -n $namespace
-	read deployment
-	kubectl --kubeconfig "$HOME"/.kube/$env describe pods -n $namespace $deployment
-}
-export exe
-export logs
-export copy_from
-export describe
diff --git a/modules/k8s/menus/pod_actions/labels.bash b/modules/k8s/menus/pod_actions/labels.bash
deleted file mode 100644
index f909b86..0000000
--- a/modules/k8s/menus/pod_actions/labels.bash
+++ /dev/null
@@ -1,6 +0,0 @@
-#!/bin/bash
-script_path=$(dirname $0)
-source ""$script_path"/functions.bash"
-#Main
-echo "kubectl --kubeconfig "$HOME"/.kube/$env get pod -L app,tier -A"
-echo "kubectl --kubeconfig "$HOME"/.kube/$env get pod -l tier=frontal -A"
diff --git a/modules/k8s/menus/pod_actions/logs.bash b/modules/k8s/menus/pod_actions/logs.bash
deleted file mode 100644
index 5b14d56..0000000
--- a/modules/k8s/menus/pod_actions/logs.bash
+++ /dev/null
@@ -1,10 +0,0 @@
-#!/bin/bash
-script_path=$(dirname $0)
-source ""$script_path"/functions.bash"
-#Main
-echo "Quin entorn vols?"
-ls $k8s_env_path
-read env
-export env
-clear
-logs
diff --git a/modules/k8s/menus/pod_state/functions.bash b/modules/k8s/menus/pod_state/functions.bash
deleted file mode 100644
index 6233b13..0000000
--- a/modules/k8s/menus/pod_state/functions.bash
+++ /dev/null
@@ -1,53 +0,0 @@
-#!/bin/bash
-#Funcions
-aplica_yml() {
-	echo "Aplicant yml de $app"
-	#Recorre directori per extreure "namespaces" i assignar a variable
-	ymls=$(ls "$k8s_env_path"/"$env"/"$app"/)
-	#Iniciem bucle per recorrer contingut arxiu entrada per entrada
-	for yml in $ymls; do
-		check_file=$(echo "${yml:0-4}")
-		if [ "$check_file" = "yaml" ]; then
-			echo "Aplicant: "$k8s_env_path"/"$env"/"$app"/$yml"
-			kubectl --kubeconfig "$HOME"/.kube/$env apply -f $k8s_env_path/$env/$app/$yml
-		else
-			echo "No yaml"
-			exit
-		fi
-	done
-}
-elimina_yml() {
-	echo "Eliminant yml de $app"
-	#Recorre directori per extreure "namespaces" i assignar a variable
-	ymls=$(ls "$k8s_env_path"/"$env"/"$app"/)
-	#Iniciem bucle per recorrer contingut arxiu entrada per entrada
-	for yml in $ymls; do
-		check_file=$(echo "${yml:0-4}")
-		if [ "$check_file" = "yaml" ]; then
-			echo "Aplicant: "$k8s_env_path"/"$env"/"$app"/$yml"
-			kubectl --kubeconfig "$HOME"/.kube/$env delete -f $k8s_env_path/$env/$app/$yml
-		else
-			echo "No yaml"
-			exit
-		fi
-	done
-}
-atura_yml() {
-	echo "Aplicant yml de $app"
-	#Recorre directori per extreure "namespaces" i assignar a variable
-	ymls=$(ls "$k8s_env_path"/"$env"/"$app"/)
-	#Iniciem bucle per recorrer contingut arxiu entrada per entrada
-	for yml in $ymls; do
-		check_file=$(echo "${yml:0-4}")
-		if [ "$check_file" = "yaml" ]; then
-			echo "Aturant: "$k8s_env_path"/"$env"/"$app"/$yml"
-			kubectl --kubeconfig "$HOME"/.kube/$env scale -f $k8s_env_path/$env/$app/$yml --replicas=0
-		else
-			echo "No yaml"
-			exit
-		fi
-	done
-}
-export aplica_yml
-export elimina_yml
-export atura_yml
diff --git a/modules/k8s/menus/pod_state/ymls.bash b/modules/k8s/menus/pod_state/ymls.bash
deleted file mode 100644
index 764c7d6..0000000
--- a/modules/k8s/menus/pod_state/ymls.bash
+++ /dev/null
@@ -1,32 +0,0 @@
-#!/bin/bash
-script_path=$(dirname $0)
-source ""$script_path"/functions.bash"
-#Main
-echo "Quin entorn vols?"
-ls $k8s_env_path
-read env
-export env
-#clear
-echo "Quina app vols?"
-ls "$k8s_env_path"/"$env"/
-echo ""
-echo $app
-read app
-clear
-echo "Aquests son els yaml's d'aquesta app"
-ls "$k8s_env_path"/"$env"/"$app"/
-echo ""
-echo "Accions a realitzar"
-echo "apply/delete/atura"
-read accio
-case $accio in
-apply)
-	aplica_yml
-	;;
-delete)
-	elimina_yml
-	;;
-atura)
-	atura_yml
-	;;
-esac
diff --git a/modules/k8s/menus/rbac-oldapi/crea_claus.bash b/modules/k8s/menus/rbac-oldapi/crea_claus.bash
deleted file mode 100644
index 3f64194..0000000
--- a/modules/k8s/menus/rbac-oldapi/crea_claus.bash
+++ /dev/null
@@ -1,89 +0,0 @@
-#!/bin/bash
-source "$mod_colors"
-echo "Quin entorn vols?"
-ls $k8s_env_path
-read env
-## Aquest script crea user, namespace i claus per user que ho treu d'un llistat .txt
-## dona acces total al seu namespace.
-## Necessari per executar aquest script:
-## · Tenir aquest script en qualsevol "pwd"
-## · En el mateix path s'ha de tenir un file amb el nom "users.txt"
-##     · El format per a cada user ha de ser "nom-cognom" o "nomcognom"
-#
-#
-#Crear directory per emmagatzemar les claus
-mkdir -p "$project_path"/modules/k8s/env/"$env"/rbac/rbac-users
-directory="$project_path"/modules/k8s/env/"$env"/rbac/rbac-users
-if [ -e "$project_path"/modules/k8s/menus/rbac/users.txt ]; then
-	#Inicialitzem variable file amb users.txt
-	#I variable users amb el contingut del .txt
-	file=""$project_path"/modules/k8s/menus/rbac/users.txt"
-	users=$(cat $file)
-	#Iniciem bucle per recorrer contingut file entrada per entrada
-	for user in $users; do
-		#Creació directory per user
-		echo "Configuració de" $user
-		echo "$user"
-		mkdir -p $directory/$user
-		#Creacio clau per user
-		openssl req -new -newkey rsa:4096 -nodes \
-			-keyout $directory/$user/"$user.key" \
-			-out $directory/$user/"$user.csr" \
-			-subj "/CN=$user/O=$env"
-		#Creacio yml que conte la clau user
-		user_request=$(cat $directory/$user/"$user.csr" | base64 | tr -d '\n')
-		touch $directory/$user/"$user-csr.yaml"
-		echo "apiVersion: certificates.k8s.io/v1beta1" >>$directory/$user/"$user-csr.yaml"
-		echo "kind: CertificateSigningRequest" >>$directory/$user/"$user-csr.yaml"
-		echo "metadata:" >>$directory/$user/"$user-csr.yaml"
-		echo "  name: $user" >>$directory/$user/"$user-csr.yaml"
-		echo "spec:" >>$directory/$user/"$user-csr.yaml"
-		echo "  groups:" >>$directory/$user/"$user-csr.yaml"
-		echo "  - system:authenticated" >>$directory/$user/"$user-csr.yaml"
-		echo "  request: $user_request" >>$directory/$user/"$user-csr.yaml"
-		echo "  usages:" >>$directory/$user/"$user-csr.yaml"
-		echo "  - client auth" >>$directory/$user/"$user-csr.yaml"
-		kubectl --kubeconfig "$HOME"/.kube/$env apply -f $directory/$user/"$user-csr.yaml"
-		#Output dels csr de k8s
-		kubectl --kubeconfig "$HOME"/.kube/$env get csr | grep $user
-		#Aprovació accés a user
-		kubectl --kubeconfig "$HOME"/.kube/$env certificate approve "$user"
-		#Output dels csr de k8s
-		kubectl --kubeconfig "$HOME"/.kube/$env get csr | grep $user
-		#Clau user en format base64
-		kubectl --kubeconfig "$HOME"/.kube/$env get csr "$user" \
-			-o jsonpath='{.status.certificate}' | base64 --decode >$directory/$user/"$user.crt"
-		#Clau publica servidor en format base64
-		kubectl --kubeconfig "$HOME"/.kube/$env config view \
-			-o jsonpath='{.clusters[0].cluster.certificate-authority-data}' \
-			--raw | base64 --decode - >$directory/$env.crt
-		#Creació kubeconfig user
-		kubectl --kubeconfig "$HOME"/.kube/$env config set-cluster $(kubectl --kubeconfig "$HOME"/.kube/$env config view -o jsonpath='{.clusters[0].name}') \
-			--server=$(kubectl --kubeconfig "$HOME"/.kube/$env config view -o jsonpath='{.clusters[0].cluster.server}') \
-			--certificate-authority=$directory/$env.crt \
-			--kubeconfig=$directory/$user/"$user-config" --embed-certs
-		#Creació credencials user en K8S
-		kubectl --kubeconfig "$HOME"/.kube/$env config set-credentials $user \
-			--client-certificate=$directory/$user/"$user.crt" \
-			--client-key=$directory/$user/"$user.key" \
-			--embed-certs --kubeconfig=$directory/$user/"$user-config"
-		#Creació context
-		kubectl --kubeconfig "$HOME"/.kube/$env config set-context $user \
-			--cluster=$(kubectl --kubeconfig "$HOME"/.kube/$env config view -o jsonpath='{.clusters[0].name}') \
-			--namespace=$user \
-			--user=$user \
-			--kubeconfig=$directory/$user/"$user-config"
-		#Creació namespace
-		kubectl --kubeconfig "$HOME"/.kube/$env create ns $user
-		#Creacio rol tipus admin per al user al seu namespace
-		kubectl --kubeconfig "$HOME"/.kube/$env create rolebinding $user --namespace=$user --clusterrole=admin --user=$user
-	done
-	echo "El que cal fer ara en el user-config generat es:"
-	echo "  · Modificar entrada server per entrada dns API"
-	echo "  · Establir current context amb el nom del user"
-	echo "cat $directory/$user/$user-config"
-else
-	red
-	echo "File "$project_path"/modules/k8s/menus/rbac/users.txt not found"
-	nocolor
-fi
diff --git a/modules/k8s/menus/rbac-oldapi/elimina_claus.bash b/modules/k8s/menus/rbac-oldapi/elimina_claus.bash
deleted file mode 100644
index 634f37f..0000000
--- a/modules/k8s/menus/rbac-oldapi/elimina_claus.bash
+++ /dev/null
@@ -1,17 +0,0 @@
-#!/bin/bash
-echo "Quin entorn vols?"
-ls $k8s_env_path
-read env
-echo "Nom user a eliminar"
-read user
-directory="$project_path"/modules/k8s/env/"$env"/rbac-users
-echo "Eliminar role user"
-kubectl --kubeconfig "$HOME"/.kube/$env delete rolebinding $user --namespace $user
-#echo "Revocat certificat user"
-kubectl --kubeconfig "$HOME"/.kube/$env delete csr $user
-echo "Eliminar NS"
-kubectl --kubeconfig "$HOME"/.kube/$env delete namespace $user
-echo "Eliminar directori i claus user"
-rm -rf $directory/$user/
-##
-##
diff --git a/modules/k8s/menus/rbac-oldapi/users.txt b/modules/k8s/menus/rbac-oldapi/users.txt
deleted file mode 100644
index 8ecd994..0000000
--- a/modules/k8s/menus/rbac-oldapi/users.txt
+++ /dev/null
@@ -1 +0,0 @@
-rekt
\ No newline at end of file
diff --git a/modules/k8s/menus/rbac/crea_claus.bash b/modules/k8s/menus/rbac/crea_claus.bash
deleted file mode 100644
index 9979657..0000000
--- a/modules/k8s/menus/rbac/crea_claus.bash
+++ /dev/null
@@ -1,89 +0,0 @@
-#!/bin/bash
-source "$mod_colors"
-echo "Quin entorn vols?"
-ls $k8s_env_path
-read env
-## Aquest script crea user, namespace i claus per user que ho treu d'un llistat .txt
-## dona acces total al seu namespace.
-## Necessari per executar aquest script:
-## · Tenir aquest script en qualsevol "pwd"
-## · En el mateix path s'ha de tenir un file amb el nom "users.txt"
-##     · El format per a cada user ha de ser "nom-cognom" o "nomcognom"
-#
-#
-#Crear directory per emmagatzemar les claus
-mkdir -p "$project_path"/modules/k8s/env/"$env"/rbac/rbac-users
-directory="$project_path"/modules/k8s/env/"$env"/rbac/rbac-users
-if [ -e "$project_path"/modules/k8s/menus/rbac/users.txt ]; then
-	#Inicialitzem variable file amb users.txt
-	#I variable users amb el contingut del .txt
-	file=""$project_path"/modules/k8s/menus/rbac/users.txt"
-	users=$(cat $file)
-	#Iniciem bucle per recorrer contingut file entrada per entrada
-	for user in $users; do
-		#Creació directory per user
-		echo "Configuració de" $user
-		echo "$user"
-		mkdir -p $directory/$user
-		#Creacio clau per user
-		openssl req -new -newkey rsa:4096 -nodes \
-			-keyout $directory/$user/"$user.key" \
-			-out $directory/$user/"$user.csr" \
-			-subj "/CN=$user/O=$env"
-		#Creacio yml que conte la clau user
-		user_request=$(cat $directory/$user/"$user.csr" | base64 | tr -d '\n')
-		touch $directory/$user/"$user-csr.yaml"
-		echo "apiVersion: certificates.k8s.io/v1" >>$directory/$user/"$user-csr.yaml"
-		echo "kind: CertificateSigningRequest" >>$directory/$user/"$user-csr.yaml"
-		echo "metadata:" >>$directory/$user/"$user-csr.yaml"
-		echo "  name: $user" >>$directory/$user/"$user-csr.yaml"
-		echo "spec:" >>$directory/$user/"$user-csr.yaml"
-		echo "  groups:" >>$directory/$user/"$user-csr.yaml"
-		echo "  - system:authenticated" >>$directory/$user/"$user-csr.yaml"
-		echo "  request: $user_request" >>$directory/$user/"$user-csr.yaml"
-		echo "  usages:" >>$directory/$user/"$user-csr.yaml"
-		echo "  - client auth" >>$directory/$user/"$user-csr.yaml"
-		kubectl --kubeconfig "$HOME"/.kube/$env apply -f $directory/$user/"$user-csr.yaml"
-		#Output dels csr de k8s
-		kubectl --kubeconfig "$HOME"/.kube/$env get csr | grep $user
-		#Aprovació accés a user
-		kubectl --kubeconfig "$HOME"/.kube/$env certificate approve "$user"
-		#Output dels csr de k8s
-		kubectl --kubeconfig "$HOME"/.kube/$env get csr | grep $user
-		#Clau user en format base64
-		kubectl --kubeconfig "$HOME"/.kube/$env get csr "$user" \
-			-o jsonpath='{.status.certificate}' | base64 --decode >$directory/$user/"$user.crt"
-		#Clau publica servidor en format base64
-		kubectl --kubeconfig "$HOME"/.kube/$env config view \
-			-o jsonpath='{.clusters[0].cluster.certificate-authority-data}' \
-			--raw | base64 --decode - >$directory/$env.crt
-		#Creació kubeconfig user
-		kubectl --kubeconfig "$HOME"/.kube/$env config set-cluster $(kubectl --kubeconfig "$HOME"/.kube/$env config view -o jsonpath='{.clusters[0].name}') \
-			--server=$(kubectl --kubeconfig "$HOME"/.kube/$env config view -o jsonpath='{.clusters[0].cluster.server}') \
-			--certificate-authority=$directory/$env.crt \
-			--kubeconfig=$directory/$user/"$user-config" --embed-certs
-		#Creació credencials user en K8S
-		kubectl --kubeconfig "$HOME"/.kube/$env config set-credentials $user \
-			--client-certificate=$directory/$user/"$user.crt" \
-			--client-key=$directory/$user/"$user.key" \
-			--embed-certs --kubeconfig=$directory/$user/"$user-config"
-		#Creació context
-		kubectl --kubeconfig "$HOME"/.kube/$env config set-context $user \
-			--cluster=$(kubectl --kubeconfig "$HOME"/.kube/$env config view -o jsonpath='{.clusters[0].name}') \
-			--namespace=$user \
-			--user=$user \
-			--kubeconfig=$directory/$user/"$user-config"
-		#Creació namespace
-		kubectl --kubeconfig "$HOME"/.kube/$env create ns $user
-		#Creacio rol tipus admin per al user al seu namespace
-		kubectl --kubeconfig "$HOME"/.kube/$env create rolebinding $user --namespace=$user --clusterrole=admin --user=$user
-	done
-	echo "El que cal fer ara en el user-config generat es:"
-	echo "  · Modificar entrada server per entrada dns API"
-	echo "  · Establir current context amb el nom del user"
-	echo "cat $directory/$user/$user-config"
-else
-	red
-	echo "File "$project_path"/modules/k8s/menus/rbac/users.txt not found"
-	nocolor
-fi
diff --git a/modules/k8s/menus/rbac/elimina_claus.bash b/modules/k8s/menus/rbac/elimina_claus.bash
deleted file mode 100644
index 634f37f..0000000
--- a/modules/k8s/menus/rbac/elimina_claus.bash
+++ /dev/null
@@ -1,17 +0,0 @@
-#!/bin/bash
-echo "Quin entorn vols?"
-ls $k8s_env_path
-read env
-echo "Nom user a eliminar"
-read user
-directory="$project_path"/modules/k8s/env/"$env"/rbac-users
-echo "Eliminar role user"
-kubectl --kubeconfig "$HOME"/.kube/$env delete rolebinding $user --namespace $user
-#echo "Revocat certificat user"
-kubectl --kubeconfig "$HOME"/.kube/$env delete csr $user
-echo "Eliminar NS"
-kubectl --kubeconfig "$HOME"/.kube/$env delete namespace $user
-echo "Eliminar directori i claus user"
-rm -rf $directory/$user/
-##
-##
diff --git a/modules/k8s/menus/secrets/secrets.bash b/modules/k8s/menus/secrets/secrets.bash
deleted file mode 100644
index a98b97d..0000000
--- a/modules/k8s/menus/secrets/secrets.bash
+++ /dev/null
@@ -1,6 +0,0 @@
-#!/bin/bash
-password=$($genera_password)
-echo -e "Password:\n"$password" \n"
-echo "Base64:"
-echo "$password" | base64
-password=""
diff --git a/modules/k8s/menus/storage/functions_pv.bash b/modules/k8s/menus/storage/functions_pv.bash
deleted file mode 100644
index 849b6d9..0000000
--- a/modules/k8s/menus/storage/functions_pv.bash
+++ /dev/null
@@ -1,34 +0,0 @@
-#!/bin/bash
-pv_released() {
-	echo "Quin namespace?"
-	kubectl --kubeconfig "$HOME"/.kube/$env get namespaces
-	read namespace
-	echo "Aquests son els pv del namespace $namespace que estan 'Released'"
-	kubectl --kubeconfig "$HOME"/.kube/$env get pv -n $namespace -o custom-columns=NAME:.metadata.name,CLAIM:.spec.claimRef.name,STATUS:.status.phase | grep Released
-	echo "Eliminar? y/n"
-	read pv_released
-	if [ "$pv_released" = "y" ]; then
-		kubectl --kubeconfig "$HOME"/.kube/$env get pv -n $namespace -o custom-columns=NAME:.metadata.name,CLAIM:.spec.claimRef.name,STATUS:.status.phase | grep Released >released.txt
-		releaseds=$(awk '{print $1}' released.txt)
-		for released in $releaseds; do
-			echo "Eliminat $released"
-			kubectl --kubeconfig "$HOME"/.kube/$env delete pv -n $namespace $released
-		done
-	else
-		echo "Passi-ho bé."
-	fi
-}
-pv_elimina() {
-	echo "Quin namespace?"
-	kubectl --kubeconfig "$HOME"/.kube/$env get namespaces
-	read namespace
-	echo "Aquests son els pvc del namespace $namespace i el seu estat"
-	kubectl --kubeconfig "$HOME"/.kube/$env get pv -n $namespace
-	echo "Introdueix pvc que vols eliminar"
-	read pv_elimina
-	kubectl --kubeconfig "$HOME"/.kube/$env patch pv $pv_elimina -p '{"metadata":{"finalizers":null}}'
-	kubectl --kubeconfig "$HOME"/.kube/$env delete pv -n $namespace $pv_elimina
-}
-#
-export pv_released
-export pv_elimina
diff --git a/modules/k8s/menus/storage/functions_pvc.bash b/modules/k8s/menus/storage/functions_pvc.bash
deleted file mode 100644
index c6e9da7..0000000
--- a/modules/k8s/menus/storage/functions_pvc.bash
+++ /dev/null
@@ -1,32 +0,0 @@
-#!/bin/bash
-pvc() {
-	echo "Quin namespace?"
-	kubectl --kubeconfig "$HOME"/.kube/$env get namespaces
-	read namespace
-	echo "Aquests son els pvc del namespace $namespace i el seu estat"
-	kubectl --kubeconfig "$HOME"/.kube/$env get pvc -n $namespace
-	echo "Selecciona un per tal de tenir més informació"
-	read pvc
-	kubectl --kubeconfig "$HOME"/.kube/$env describe pvc -n $namespace $pvc
-}
-pvc_elimina() {
-	echo "Quin namespace?"
-	kubectl --kubeconfig "$HOME"/.kube/$env get namespaces
-	read namespace
-	echo "Aquests son els pvc del namespace $namespace i el seu estat"
-	kubectl --kubeconfig "$HOME"/.kube/$env get pvc -n $namespace
-	echo "Introdueix pvc que vols eliminar"
-	read pvc_elimina
-	k3stegit=$(kubectl --kubeconfig config_k3s describe pvc -n $namespace $pvc_elimina | grep Finalizers)
-	if [ "kubectl --kubeconfig "$HOME"/.kube/$envtegit" = "Finalizers:    [kubernetes.io/pvc-k3stection]" ]; then
-		echo "k3stegit"
-		kubectl --kubeconfig config_k3s patch pvc -n $namespace $pvc_elimina -p '{"metadata":{"finalizers": []}}' --type=merge
-		kubectl --kubeconfig "$HOME"/.kube/$env delete pvc -n $namespace $pvc_elimina
-	else
-		echo "No k3stegit"
-		kubectl --kubeconfig "$HOME"/.kube/$env delete pvc -n $namespace $pvc_elimina
-	fi
-}
-#
-export pvc
-export pvc_elimina
diff --git a/modules/k8s/menus/storage/pv_elimina.bash b/modules/k8s/menus/storage/pv_elimina.bash
deleted file mode 100644
index 09f1aac..0000000
--- a/modules/k8s/menus/storage/pv_elimina.bash
+++ /dev/null
@@ -1,10 +0,0 @@
-#!/bin/bash
-script_path=$(dirname $0)
-source ""$script_path"/functions_pv.bash"
-#Main
-echo "Quin entorn vols?"
-ls $k8s_env_path
-read env
-export env
-clear
-pv_elimina
diff --git a/modules/k8s/menus/storage/pv_released.bash b/modules/k8s/menus/storage/pv_released.bash
deleted file mode 100644
index b27cf03..0000000
--- a/modules/k8s/menus/storage/pv_released.bash
+++ /dev/null
@@ -1,10 +0,0 @@
-#!/bin/bash
-script_path=$(dirname $0)
-source ""$script_path"/functions_pv.bash"
-#Main
-echo "Quin entorn vols?"
-ls $k8s_env_path
-read env
-export env
-clear
-pv_released
diff --git a/modules/k8s/menus/storage/pvc.bash b/modules/k8s/menus/storage/pvc.bash
deleted file mode 100644
index e421203..0000000
--- a/modules/k8s/menus/storage/pvc.bash
+++ /dev/null
@@ -1,10 +0,0 @@
-#!/bin/bash
-script_path=$(dirname $0)
-source ""$script_path"/functions_pvc.bash"
-#Main
-echo "Quin entorn vols?"
-ls $k8s_env_path
-read env
-export env
-clear
-pvc
diff --git a/modules/k8s/menus/storage/pvc_elimina.bash b/modules/k8s/menus/storage/pvc_elimina.bash
deleted file mode 100644
index 87bc121..0000000
--- a/modules/k8s/menus/storage/pvc_elimina.bash
+++ /dev/null
@@ -1,10 +0,0 @@
-#!/bin/bash
-script_path=$(dirname $0)
-source ""$script_path"/functions_pvc.bash"
-#Main
-echo "Quin entorn vols?"
-ls $k8s_env_path
-read env
-export env
-clear
-pvc_elimina
diff --git a/modules/k8s/menus/utils/delete-namespace.sh b/modules/k8s/menus/utils/delete-namespace.sh
deleted file mode 100755
index 44f018c..0000000
--- a/modules/k8s/menus/utils/delete-namespace.sh
+++ /dev/null
@@ -1,70 +0,0 @@
-#!/usr/bin/bash
-set -euo pipefail
-
-# Ensure kubectl works in scripts (adjust if needed)
-# export KUBECONFIG=${KUBECONFIG:-/etc/rancher/rke2/rke2.yaml}
-# export PATH=/var/lib/rancher/rke2/bin:$PATH
-
-read -rp "Namespace to force-delete: " NS
-if [[ -z "${NS}" ]]; then
-  echo "No namespace provided." >&2; exit 1
-fi
-
-# Safety guard
-case "$NS" in
-  kube-system|kube-public|kube-node-lease|default)
-    echo "Refusing to delete protected namespace: $NS" >&2
-    exit 1
-  ;;
-esac
-
-# Must exist
-if ! kubectl get ns "$NS" >/dev/null 2>&1; then
-  echo "Namespace '$NS' not found (nothing to do)."
-  exit 0
-fi
-
-echo "== Deleting namespaced resources in '$NS' (best effort)..."
-# Delete everything we can (ignores kinds not present)
-while read -r r; do
-  echo "  - deleting all: ${r}"
-  kubectl -n "$NS" delete "$r" --all --ignore-not-found --timeout=30s || true
-done < <(kubectl api-resources --verbs=list --namespaced -o name | tr -d '\r')
-
-echo "== Removing finalizers from any remaining objects..."
-while read -r r; do
-  # list remaining objects of this kind
-  while read -r o; do
-    [[ -z "$o" ]] && continue
-    echo "  - patch finalizers: ${o}"
-    kubectl -n "$NS" patch "$o" --type=json -p='[{"op":"remove","path":"/metadata/finalizers"}]' 2>/dev/null || true
-  done < <(kubectl -n "$NS" get "$r" -o name 2>/dev/null || true)
-done < <(kubectl api-resources --verbs=list --namespaced -o name | tr -d '\r')
-
-echo "== Requesting namespace deletion..."
-kubectl delete ns "$NS" --timeout=30s || true
-
-# If it's stuck Terminating, force-finalize via the /finalize endpoint
-if kubectl get ns "$NS" >/dev/null 2>&1; then
-  echo "== Forcing namespace finalization (clearing finalizers)..."
-  kubectl replace --raw "/api/v1/namespaces/${NS}/finalize" -f <(cat <<JSON
-{"apiVersion":"v1","kind":"Namespace","metadata":{"name":"${NS}"},"spec":{"finalizers":[]}}
-JSON
-) >/dev/null || {
-    # Fallback via proxy+curl if replace --raw fails
-    kubectl proxy --port=8001 >/dev/null 2>&1 & PROXY_PID=$!
-    sleep 1
-    curl -s -X PUT -H 'Content-Type: application/json' \
-      --data-binary "{\"apiVersion\":\"v1\",\"kind\":\"Namespace\",\"metadata\":{\"name\":\"${NS}\"},\"spec\":{\"finalizers\":[]}}" \
-      "http://127.0.0.1:8001/api/v1/namespaces/${NS}/finalize" >/dev/null || true
-    kill "$PROXY_PID" >/dev/null 2>&1 || true
-  }
-fi
-
-echo "== Verifying..."
-if kubectl get ns "$NS" >/dev/null 2>&1; then
-  PHASE=$(kubectl get ns "$NS" -o jsonpath='{.status.phase}')
-  echo "Namespace '$NS' still present (phase: $PHASE). Re-run the script if needed."
-else
-  echo "Namespace '$NS' deleted."
-fi
\ No newline at end of file
diff --git a/modules/minikube/apps/minio/minio.yaml b/modules/minikube/apps/minio/minio.yaml
deleted file mode 100644
index 4dadb8d..0000000
--- a/modules/minikube/apps/minio/minio.yaml
+++ /dev/null
@@ -1,40 +0,0 @@
-apiVersion: apps/v1 #  for k8s versions before 1.9.0 use apps/v1beta2  and before 1.8.0 use extensions/v1beta1
-kind: Deployment
-metadata:
-  # This name uniquely identifies the Deployment
-  name: minio-deployment
-spec:
-  selector:
-    matchLabels:
-      app: minio
-  strategy:
-    type: Recreate
-  template:
-    metadata:
-      labels:
-        # Label is used as selector in the service.
-        app: minio
-    spec:
-      # Refer to the PVC created earlier
-      volumes:
-        - name: storage
-          persistentVolumeClaim:
-            # Name of the PVC created earlier
-            claimName: minio-pv-claim
-      containers:
-        - name: minio
-          # Pulls the default Minio image from Docker Hub
-          image: minio/minio:latest
-          env:
-            # Minio access key and secret key
-            - name: MINIO_ACCESS_KEY
-              value: "minio"
-            - name: MINIO_SECRET_KEY
-              value: "minio123"
-          ports:
-            - containerPort: 9000
-              hostPort: 9000
-          # Mount the volume into the pod
-          volumeMounts:
-            - name: storage # must match the volume name, above
-              mountPath: "/storage"
diff --git a/modules/minikube/apps/minio/pvc.yaml b/modules/minikube/apps/minio/pvc.yaml
deleted file mode 100644
index 8619b7e..0000000
--- a/modules/minikube/apps/minio/pvc.yaml
+++ /dev/null
@@ -1,11 +0,0 @@
-apiVersion: v1
-kind: PersistentVolumeClaim
-metadata:
-  name: minio-pv-claim
-spec:
-  storageClassName: standard
-  accessModes:
-    - ReadWriteOnce
-  resources:
-    requests:
-      storage: 2Gi
diff --git a/modules/minikube/menu.bash b/modules/minikube/menu.bash
deleted file mode 100644
index 6ac55aa..0000000
--- a/modules/minikube/menu.bash
+++ /dev/null
@@ -1,15 +0,0 @@
-#!/bin/bash
-PS3="Select the operation: "
-select opt in dev quit; do
-	case $opt in
-	dev)
-		"$project_path"/modules/minikube/profiles/dev.bash
-		;;
-	quit)
-		break
-		;;
-	*)
-		echo "Invalid option $REPLY"
-		;;
-	esac
-done
diff --git a/modules/minikube/profiles/dev.bash b/modules/minikube/profiles/dev.bash
deleted file mode 100644
index 9b09781..0000000
--- a/modules/minikube/profiles/dev.bash
+++ /dev/null
@@ -1,11 +0,0 @@
-#!/bin/bash
-minikube -p dev delete
-minikube start --addons=metrics-server,ingress,dashboard --apiserver-port=8443 --cni=calico --container-runtime=containerd --cpus=3 --memory=4g --driver=docker --kubernetes-version=v1.24.7 --profile dev
-minikube profile list
-minikube -p dev dashboard --url &
-sleep 1
-kubectl config use-context dev
-#
-minikube -p dev kubectl -- create -f $project_path/modules/minikube/apps/minio/pvc.yaml
-minikube -p dev kubectl -- create -f $project_path/modules/minikube/apps/minio/minio.yaml
-minikube -p dev kubectl -- get pods -A
diff --git a/modules/ssh/crea/crea_users.bash b/modules/ssh/crea/crea_users.bash
deleted file mode 100644
index 28a3613..0000000
--- a/modules/ssh/crea/crea_users.bash
+++ /dev/null
@@ -1,19 +0,0 @@
-#!/bin/bash
-#NOTE: before run script you need .pub files under path!!!!
-if [ -e "$HOME"users_ssh.txt ]; then
-	#Inicialitzem variable file amb users.txt
-	#I variable users amb el contingut del .txt
-	path_pub_file="$HOME"
-	file=""$HOME"users_ssh.txt"
-	users=$(cat $file)
-	#Iniciem bucle per recorrer contingut file entrada per entrada
-	for username in $users; do
-		sudo useradd -m -s /bin/bash -G sudo "$username"
-		sudo mkdir /home/"$username"/.ssh
-		sudo mv "$path_pub_file""$username".pub /home/"$username"/.ssh/authorized_keys
-		sudo chown "$username":"$username" /home/"$username"/.ssh/authorized_keys
-	done
-	rm -rf "$path_pub_file"*".pub"
-else
-	echo "File not found: "$HOME"users_ssh.txt"
-fi
diff --git a/modules/ssh/crea/users_ssh.txt b/modules/ssh/crea/users_ssh.txt
deleted file mode 100644
index e69de29..0000000
diff --git a/modules/ssh/ssh_create/keys.bash b/modules/ssh/ssh_create/keys.bash
deleted file mode 100644
index eb42736..0000000
--- a/modules/ssh/ssh_create/keys.bash
+++ /dev/null
@@ -1,8 +0,0 @@
-#!/bin/bash
-#client
-echo -e "Requirements: user on remote and ssh access, dns\n"
-echo -e "Insert a name to identify remote host:\n"
-read remote
-ssh-keygen -f ~/.ssh/$remote -t rsa -b 4096
-chmod o-rwx ~/.ssh/$remote
-ssh-copy-id $USER@$remote
diff --git a/modules/ssh/ssh_create/readme.md b/modules/ssh/ssh_create/readme.md
deleted file mode 100644
index f6589da..0000000
--- a/modules/ssh/ssh_create/readme.md
+++ /dev/null
@@ -1,9 +0,0 @@
-#### /etc/ssh/sshd_config
-
-    RSAAuthentication yes
-    PubkeyAuthentication yes
-    AuthorizedKeysFile .ssh/authorized_keys
-    PasswordAuthentication no
-    ChallengeResponseAuthentication no
-    UsePAM no
-    PermitRootLogin no
\ No newline at end of file
diff --git a/tests/validate.bash b/tests/validate.bash
new file mode 100755
index 0000000..c73e588
--- /dev/null
+++ b/tests/validate.bash
@@ -0,0 +1,85 @@
+#!/bin/bash
+# myshell validation gate — run from anywhere: bash tests/validate.bash
+# Checks: shell syntax, shellcheck, .bashrc loader integrity, alias->module integrity,
+# myshell func_files consistency, docker compose configs, myshell smoke test.
+set -u
+cd "$(dirname "$0")/.." || exit 1
+root=$PWD
+fails=0
+fail() { printf 'FAIL: %s\n' "$1"; fails=$((fails + 1)); }
+
+# ── 1. bash -n on every shell file (vendor payloads under */Docker/ excluded) ──
+while IFS= read -r f; do
+    bash -n "$f" 2>/dev/null || fail "syntax: $f"
+done < <(find core modules tests -type f \( -name '*.bash' -o -name '*.sh' \) ! -path '*/Docker/*')
+for f in core/shells/bash/.bashrc core/shells/bash/aliases/.aliases core/shells/bash/profiles/.*; do
+    [ -f "$f" ] || continue
+    bash -n "$f" 2>/dev/null || fail "syntax: $f"
+done
+echo "[1/6] syntax scan done"
+
+# ── 2. shellcheck on core functions (repo .shellcheckrc applies) ──
+if command -v shellcheck >/dev/null 2>&1; then
+    shellcheck -S warning core/shells/bash/functions/*.bash || fail "shellcheck: core functions"
+    echo "[2/6] shellcheck done"
+else
+    echo "[2/6] WARN: shellcheck not installed, skipped"
+fi
+
+# ── 3. .bashrc loader integrity: every $project_path file it references exists ──
+while IFS= read -r rel; do
+    [ -e "$rel" ] || fail "loader target missing: $rel (referenced in .bashrc)"
+done < <(grep -oE '\$project_path"?/[[:alnum:]._/-]+' core/shells/bash/.bashrc | sed 's|^\$project_path"\?/||' | sort -u)
+echo "[3/6] loader integrity done"
+
+# ── 4. alias integrity: every alias pointing into modules/ has an existing target ──
+for af in core/shells/bash/aliases/.aliases core/shells/bash/aliases/.*.sh; do
+    [ -f "$af" ] || continue
+    while read -r name rel; do
+        [ -z "${rel:-}" ] && continue
+        [ -f "$rel" ] || fail "alias '$name' -> $rel: target missing (in $af)"
+    done < <(grep -E 'alias [A-Za-z_0-9]+=.*modules/' "$af" \
+             | sed 's/.*alias \([A-Za-z_0-9]*\)=.*modules\//\1 modules\//; s/["'"'"'].*//')
+done
+echo "[4/6] alias integrity done"
+
+# ── 5. myshell func_files list matches reality and its printed total ──
+func_line=$(grep -m1 'local func_files=' core/shells/bash/functions/myshell.bash | sed 's/.*="//; s/".*//')
+n_listed=0
+for fn in $func_line; do
+    n_listed=$((n_listed + 1))
+    [ -f "core/shells/bash/functions/${fn}.bash" ] || fail "func_files entry '$fn' has no file"
+done
+n_printed=$(grep -oE 'Total: %d/[0-9]+' core/shells/bash/functions/myshell.bash | grep -oE '[0-9]+$')
+[ "$n_listed" = "${n_printed:-}" ] || fail "func_files count ($n_listed) != printed total (${n_printed:-none}) in myshell.bash"
+echo "[5/6] func_files consistency done"
+
+# ── 6. docker compose config + myshell smoke ──
+if docker compose version >/dev/null 2>&1; then
+    for d in modules/docker/*/; do
+        compose=$(ls "$d"docker-compose.y*ml 2>/dev/null | head -1) || true
+        [ -n "${compose:-}" ] || continue
+        (cd "$d" && docker compose config --quiet) || fail "compose config: $d"
+    done
+else
+    echo "WARN: docker compose unavailable, compose configs skipped"
+fi
+smoke=$(
+    export project_path="$root" MY_SHELL_ENV_DIR="$(mktemp -d)"
+    # shellcheck source=core/shells/bash/functions/myshell.bash
+    source core/shells/bash/functions/myshell.bash
+    myshell list
+) || fail "myshell list crashed"
+echo "$smoke" | grep -q "MODULE COMMANDS" || fail "myshell list: header missing"
+n_cmds=$(echo "$smoke" | grep -c "\->") || true
+[ "${n_cmds:-0}" -gt 0 ] || fail "myshell list: no commands listed"
+echo "[6/6] compose + smoke done ($n_cmds commands listed)"
+
+# ── verdict ──
+if [ "$fails" -eq 0 ]; then
+    echo "VALIDATION PASSED"
+    exit 0
+else
+    echo "VALIDATION FAILED: $fails problem(s)"
+    exit 1
+fi