apiVersion: helm.toolkit.fluxcd.io/v2
kind: HelmRelease
metadata:
  name: reflector
  namespace: reflector
spec:
  interval: 15m
  releaseName: reflector
  targetNamespace: reflector
  chart:
    spec:
      chart: reflector
      version: 10.0.69
      sourceRef:
        kind: HelmRepository
        name: emberstack
        namespace: flux-system
  install:
    remediation:
      retries: 3
  upgrade:
    remediation:
      retries: 3
  values:
    replicaCount: 2
    image:
      repository: docker.io/emberstack/kubernetes-reflector
      tag: 10.0.69@sha256:b689b19ed36a5843648ad07446fc3468bd1f33327ef57eb3883519eadca4a58d
    securityContext:
      allowPrivilegeEscalation: false
      capabilities:
        drop:
          - ALL
      readOnlyRootFilesystem: true
      runAsNonRoot: true
      runAsUser: 1000
    resources:
      requests:
        cpu: 25m
        memory: 128Mi
      limits:
        memory: 256Mi
    topologySpreadConstraints:
      - labelSelector:
          matchLabels:
            app.kubernetes.io/instance: reflector
            app.kubernetes.io/name: reflector
        maxSkew: 1
        topologyKey: kubernetes.io/hostname
        whenUnsatisfiable: ScheduleAnyway