refactor: Add external-secrets ocirepositories

szinn · Mar 4, 2025 · d1a474e · d1a474e
1 parent 307e560
commit d1a474e
Show file tree

Hide file tree

Showing 4 changed files with 28 additions and 20 deletions.
diff --git a/kubernetes/main/apps/external-secrets/external-secrets/app/helmrelease.yaml b/kubernetes/main/apps/external-secrets/external-secrets/app/helmrelease.yaml
@@ -5,16 +5,11 @@ kind: HelmRelease
 metadata:
   name: external-secrets
 spec:
-  interval: 15m
-  chart:
-    spec:
-      chart: external-secrets
-      version: 0.14.3
-      sourceRef:
-        kind: HelmRepository
-        name: external-secrets-charts
-        namespace: flux-system
-      interval: 15m
+  interval: 1h
+  chartRef:
+    kind: OCIRepository
+    name: external-secrets
+    namespace: flux-system
   maxHistory: 3
   install:
     createNamespace: true

diff --git a/kubernetes/repositories/oci/external-secrets.yaml b/kubernetes/repositories/oci/external-secrets.yaml
@@ -0,0 +1,17 @@
+---
+# yaml-language-server: $schema=https://kubernetes-schemas.pages.dev/source.toolkit.fluxcd.io/ocirepository_v1beta2.json
+apiVersion: source.toolkit.fluxcd.io/v1beta2
+kind: OCIRepository
+metadata:
+  name: external-secrets
+  namespace: flux-system
+spec:
+  interval: 1h
+  layerSelector:
+    mediaType: application/vnd.cncf.helm.chart.content.v1.tar+gzip
+    operation: copy
+  ref:
+    tag: 0.14.3
+  url: oci://ghcr.io/external-secrets/charts/external-secrets
+  verify:
+    provider: cosign
diff --git a/kubernetes/repositories/oci/kustomization.yaml b/kubernetes/repositories/oci/kustomization.yaml
@@ -5,6 +5,7 @@ kind: Kustomization
 resources:
   - app-template.yaml
   - coredns.yaml
+  - external-secrets.yaml
   - flux-instance.yaml
   - flux-operator.yaml
   - k8s-ycl.yaml
diff --git a/kubernetes/staging/apps/external-secrets/external-secrets/app/helmrelease.yaml b/kubernetes/staging/apps/external-secrets/external-secrets/app/helmrelease.yaml
@@ -5,16 +5,11 @@ kind: HelmRelease
 metadata:
   name: external-secrets
 spec:
-  interval: 15m
-  chart:
-    spec:
-      chart: external-secrets
-      version: 0.14.3
-      sourceRef:
-        kind: HelmRepository
-        name: external-secrets-charts
-        namespace: flux-system
-      interval: 15m
+  interval: 1h
+  chartRef:
+    kind: OCIRepository
+    name: external-secrets
+    namespace: flux-system
   maxHistory: 3
   install:
     createNamespace: true