Devin Buhl
df642e5425
* feat: update jinja delimiters back to default Signed-off-by: Devin Buhl <devin@buhl.casa> * feat: remove cert-manager promrules Signed-off-by: Devin Buhl <devin@buhl.casa> * fix: update talos csr approver Signed-off-by: Devin Buhl <devin@buhl.casa> --------- Signed-off-by: Devin Buhl <devin@buhl.casa>
45 lines
909 B
YAML
45 lines
909 B
YAML
---
|
|
apiVersion: source.toolkit.fluxcd.io/v1
|
|
kind: GitRepository
|
|
metadata:
|
|
name: home-kubernetes
|
|
namespace: flux-system
|
|
spec:
|
|
interval: 30m
|
|
url: "{{ flux.github.address }}"
|
|
{% if flux.github.address.startswith('ssh://') %}
|
|
secretRef:
|
|
name: github-deploy-key
|
|
{% endif %}
|
|
ref:
|
|
branch: "{{ flux.github.branch|default('main', true) }}"
|
|
ignore: |
|
|
# exclude all
|
|
/*
|
|
# include kubernetes directory
|
|
!/kubernetes
|
|
---
|
|
apiVersion: kustomize.toolkit.fluxcd.io/v1
|
|
kind: Kustomization
|
|
metadata:
|
|
name: cluster
|
|
namespace: flux-system
|
|
spec:
|
|
interval: 30m
|
|
path: ./kubernetes/flux
|
|
prune: true
|
|
wait: false
|
|
sourceRef:
|
|
kind: GitRepository
|
|
name: home-kubernetes
|
|
decryption:
|
|
provider: sops
|
|
secretRef:
|
|
name: sops-age
|
|
postBuild:
|
|
substituteFrom:
|
|
- kind: ConfigMap
|
|
name: cluster-settings
|
|
- kind: Secret
|
|
name: cluster-secrets
|