ce7cb702218693d08ea6d83464d2457c9250027c

vendor/infrastructure/flux-core/flux-instance.yaml

@@ -0,0 +1,84 @@
+apiVersion: fluxcd.controlplane.io/v1
+kind: FluxInstance
+metadata:
+  name: flux
+  namespace: flux-system
+  annotations:
+    fluxcd.controlplane.io/reconcileEvery: 1h
+    fluxcd.controlplane.io/reconcileTimeout: 5m
+spec:
+  distribution:
+    version: 2.10.0
+    registry: ghcr.io/fluxcd
+  components:
+    - source-controller
+    - kustomize-controller
+    - helm-controller
+    - notification-controller
+  cluster:
+    type: kubernetes
+    size: small
+    multitenant: false
+    networkPolicy: true
+    domain: cluster.local
+  kustomize:
+    patches:
+      - target:
+          kind: Deployment
+          name: helm-controller
+        patch: |
+          - op: replace
+            path: /spec/template/spec/containers/0/image
+            value: ghcr.io/fluxcd/helm-controller:v1.7.1@sha256:54526cc6ed1202d71d44c310676448065664f3255ad671d9a69ac26f904e617a
+          - op: replace
+            path: /spec/replicas
+            value: 2
+          - op: replace
+            path: /spec/template/spec/containers/0/resources/requests/cpu
+            value: 25m
+      - target:
+          kind: Deployment
+          name: kustomize-controller
+        patch: |
+          - op: replace
+            path: /spec/template/spec/containers/0/image
+            value: ghcr.io/fluxcd/kustomize-controller:v1.10.1@sha256:37db29b25dae35b881a5e064acedb0cc954442da453a39eaa0eab7a90dbecc4e
+          - op: replace
+            path: /spec/replicas
+            value: 2
+      - target:
+          kind: Deployment
+          name: notification-controller
+        patch: |
+          - op: replace
+            path: /spec/template/spec/containers/0/image
+            value: ghcr.io/fluxcd/notification-controller:v1.10.0@sha256:9f58b9532ec9d3ccf539cd3ccdf283477a5dcb7777b922db5477d8bbd4d3767c
+          - op: replace
+            path: /spec/replicas
+            value: 2
+          - op: replace
+            path: /spec/template/spec/containers/0/resources/requests/cpu
+            value: 10m
+      - target:
+          kind: Deployment
+          name: source-controller
+        patch: |
+          - op: replace
+            path: /spec/template/spec/containers/0/image
+            value: ghcr.io/fluxcd/source-controller:v1.10.1@sha256:611b6bca3eae95bcff471414d1fb14a4ab83d7f14e609cccef2bd389c121f37e
+      - target:
+          kind: ClusterRole
+          name: crd-controller-flux-system
+        patch: |
+          - op: test
+            path: /rules/11
+            value: {apiGroups: [authorization.k8s.io], resources: [subjectaccessreviews], verbs: [create]}
+          - op: remove
+            path: /rules/11
+  sync:
+    kind: GitRepository
+    url: ssh://[email protected]/quorate/cluster.git
+    ref: refs/heads/master
+    path: clusters/main
+    pullSecret: git-ssh-auth
+    interval: 1m

vendor/infrastructure/flux-core/helm-release.yaml

@@ -0,0 +1,68 @@
+apiVersion: source.toolkit.fluxcd.io/v1
+kind: OCIRepository
+metadata:
+  name: flux-operator
+  namespace: flux-system
+spec:
+  interval: 1h
+  url: oci://ghcr.io/controlplaneio-fluxcd/charts/flux-operator
+  ref:
+    digest: sha256:35f074fba9be748dd9f6439a7f2495a10ec6b753550b950e8be68affc5c7457d
+  layerSelector:
+    mediaType: application/vnd.cncf.helm.chart.content.v1.tar+gzip
+    operation: copy
+---
+apiVersion: helm.toolkit.fluxcd.io/v2
+kind: HelmRelease
+metadata:
+  name: flux-operator
+  namespace: flux-system
+spec:
+  interval: 30m
+  timeout: 5m
+  releaseName: flux-operator
+  serviceAccountName: flux-operator
+  chartRef:
+    kind: OCIRepository
+    name: flux-operator
+  install:
+    remediation:
+      retries: 3
+  upgrade:
+    strategy:
+      name: RetryOnFailure
+    remediation:
+      retries: 3
+  driftDetection:
+    mode: enabled
+  postRenderers:
+    - kustomize:
+        patches:
+          - target:
+              kind: Deployment
+              name: flux-operator
+            patch: |
+              apiVersion: apps/v1
+              kind: Deployment
+              metadata:
+                name: flux-operator
+              spec:
+                replicas: 2
+                template:
+                  spec:
+                    affinity:
+                      podAntiAffinity:
+                        requiredDuringSchedulingIgnoredDuringExecution:
+                          - labelSelector:
+                              matchLabels:
+                                app.kubernetes.io/instance: flux-operator
+                                app.kubernetes.io/name: flux-operator
+                            topologyKey: kubernetes.io/hostname
+  values:
+    resources:
+      limits:
+        cpu: 2000m
+        memory: 1Gi
+      requests:
+        cpu: 15m
+        memory: 336Mi

vendor/infrastructure/flux-core/kustomization.yaml

@@ -0,0 +1,6 @@
+apiVersion: kustomize.config.k8s.io/v1beta1
+kind: Kustomization
+resources:
+  - flux-instance.yaml
+  - helm-release.yaml
+  - pdb.yaml

vendor/infrastructure/flux-core/pdb.yaml

@@ -0,0 +1,11 @@
+apiVersion: policy/v1
+kind: PodDisruptionBudget
+metadata:
+  name: flux-operator
+  namespace: flux-system
+spec:
+  minAvailable: 1
+  selector:
+    matchLabels:
+      app.kubernetes.io/instance: flux-operator
+      app.kubernetes.io/name: flux-operator