apiVersion: fluxcd.controlplane.io/v1
kind: FluxInstance
metadata:
  name: flux
  namespace: flux-system
  annotations:
    fluxcd.controlplane.io/reconcileEvery: 1h
    fluxcd.controlplane.io/reconcileTimeout: 5m
spec:
  distribution:
    version: 2.10.0
    registry: ghcr.io/fluxcd
  components:
    - source-controller
    - kustomize-controller
    - helm-controller
    - notification-controller
  cluster:
    type: kubernetes
    size: small
    multitenant: false
    networkPolicy: true
    domain: cluster.local
  kustomize:
    patches:
      - target:
          kind: Deployment
          name: helm-controller
        patch: |
          - op: replace
            path: /spec/template/spec/containers/0/image
            value: ghcr.io/fluxcd/helm-controller:v1.7.1@sha256:54526cc6ed1202d71d44c310676448065664f3255ad671d9a69ac26f904e617a
          - op: replace
            path: /spec/replicas
            value: 2
          - op: replace
            path: /spec/template/spec/containers/0/resources/requests/cpu
            value: 25m
      - target:
          kind: Deployment
          name: kustomize-controller
        patch: |
          - op: replace
            path: /spec/template/spec/containers/0/image
            value: ghcr.io/fluxcd/kustomize-controller:v1.10.1@sha256:37db29b25dae35b881a5e064acedb0cc954442da453a39eaa0eab7a90dbecc4e
          - op: replace
            path: /spec/replicas
            value: 2
      - target:
          kind: Deployment
          name: notification-controller
        patch: |
          - op: replace
            path: /spec/template/spec/containers/0/image
            value: ghcr.io/fluxcd/notification-controller:v1.10.0@sha256:9f58b9532ec9d3ccf539cd3ccdf283477a5dcb7777b922db5477d8bbd4d3767c
          - op: replace
            path: /spec/replicas
            value: 2
          - op: replace
            path: /spec/template/spec/containers/0/resources/requests/cpu
            value: 10m
      - target:
          kind: Deployment
          name: source-controller
        patch: |
          - op: replace
            path: /spec/template/spec/containers/0/image
            value: ghcr.io/fluxcd/source-controller:v1.10.1@sha256:611b6bca3eae95bcff471414d1fb14a4ab83d7f14e609cccef2bd389c121f37e
      - target:
          kind: ClusterRole
          name: crd-controller-flux-system
        patch: |
          - op: test
            path: /rules/11
            value: {apiGroups: [authorization.k8s.io], resources: [subjectaccessreviews], verbs: [create]}
          - op: remove
            path: /rules/11
  sync:
    kind: GitRepository
    url: ssh://git@forgejo-ssh.forgejo.svc.cluster.local/quorate/cluster.git
    ref: refs/heads/master
    path: clusters/main
    pullSecret: git-ssh-auth
    interval: 1m