Initial commit 🚀

2024-11-02 01:16:28 +00:00
1 parent e55ae1a1f5
commit 5a14609b2d
@@ -0,0 +1,20 @@
+---
+apiVersion: networking.k8s.io/v1
+kind: Ingress
+metadata:
+  name: flux-webhook
+  annotations:
+    external-dns.alpha.kubernetes.io/target: "external.${SECRET_DOMAIN}"
+spec:
+  ingressClassName: external
+  rules:
+    - host: "flux-webhook.${SECRET_DOMAIN}"
+      http:
+        paths:
+          - path: /hook/
+            pathType: Prefix
+            backend:
+              service:
+                name: webhook-receiver
+                port:
+                  number: 80
@@ -0,0 +1,7 @@
+---
+apiVersion: kustomize.config.k8s.io/v1beta1
+kind: Kustomization
+resources:
+  - ./secret.sops.yaml
+  - ./ingress.yaml
+  - ./receiver.yaml
@@ -0,0 +1,25 @@
+---
+apiVersion: notification.toolkit.fluxcd.io/v1
+kind: Receiver
+metadata:
+  name: github-receiver
+spec:
+  type: github
+  events:
+    - ping
+    - push
+  secretRef:
+    name: github-webhook-token-secret
+  resources:
+    - apiVersion: source.toolkit.fluxcd.io/v1
+      kind: GitRepository
+      name: home-kubernetes
+      namespace: flux-system
+    - apiVersion: kustomize.toolkit.fluxcd.io/v1
+      kind: Kustomization
+      name: cluster
+      namespace: flux-system
+    - apiVersion: kustomize.toolkit.fluxcd.io/v1
+      kind: Kustomization
+      name: cluster-apps
+      namespace: flux-system
@@ -0,0 +1,26 @@
+apiVersion: v1
+kind: Secret
+metadata:
+    name: github-webhook-token-secret
+stringData:
+    token: ENC[AES256_GCM,data:U/ZY1G05LNRgjvcm7W09MbOKSa19y6QVnDAH8Q3gvVg=,iv:93NPOSdyeX3Ht3RejvgEQ0iS1qd4HeqnYoJSPLIePC8=,tag:1jkvZ0ERFgA0votQRUMFrg==,type:str]
+sops:
+    kms: []
+    gcp_kms: []
+    azure_kv: []
+    hc_vault: []
+    age:
+        - recipient: age1mhnje42sefcfpvgpeppch84g6vgptmd4gukgvr3gueuxy6ph05xqx45jty
+          enc: |
+            -----BEGIN AGE ENCRYPTED FILE-----
+            YWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IFgyNTUxOSBIS1FVc3pMd3VxeTlmZG41
+            M3R4WU9CbTcwYWlvbm9nZXIyQTZoV05iL3dFCk1ud3pjU1I3bit4ZGR4N0lGQTFN
+            WkNwL0MyaVVmeWRlMzd6OEJjWFNsVVEKLS0tIGY2NzhnNzBQTDk4cTBiUEZtVVFQ
+            Z2x5S3ZoR1dXL1ZBa1JhN0xHa1hIMk0K28FbOIsvRMJ5IJFxV6HR91FRZcoANfHe
+            R/l66doejLjWITI/E3O0Vo7iVRnNeXfYLAwfee6LUjNo3+i4aDixyw==
+            -----END AGE ENCRYPTED FILE-----
+    lastmodified: "2024-11-02T01:13:55Z"
+    mac: ENC[AES256_GCM,data:da0qO3fyzsfJqVMM8CXV5JBzFyHOXeFW8De+6f2FabP9P4VJPJuNxCAMAA1Ou8t8SkxD9C+xrCXiLVg7/FW2mPYHhhSGtCkj64z/c1swUT0Qsv5KUFCiF7VViTuPEJRTi3tN80rlt5tFGP+OIscRQPtTHfW9MBWxDF3eHmNbwCs=,iv:AY5JaXxT9heroi6tA+3XVrKIULu7Ey9Hqv9UCNquTtc=,tag:V8WdfWj7FJh82QLWbxVONQ==,type:str]
+    pgp: []
+    encrypted_regex: ^(data|stringData)$
+    version: 3.9.1
@@ -0,0 +1,5 @@
+---
+apiVersion: kustomize.config.k8s.io/v1beta1
+kind: Kustomization
+resources:
+  - ./github
@@ -0,0 +1,19 @@
+---
+apiVersion: kustomize.toolkit.fluxcd.io/v1
+kind: Kustomization
+metadata:
+  name: &app flux-webhooks
+  namespace: flux-system
+spec:
+  targetNamespace: flux-system
+  commonMetadata:
+    labels:
+      app.kubernetes.io/name: *app
+  path: ./kubernetes/apps/flux-system/webhooks/app
+  prune: true
+  sourceRef:
+    kind: GitRepository
+    name: home-kubernetes
+  wait: true
+  interval: 30m
+  timeout: 5m