cluster

commit 2b1f8e4b2f928f450d210a2461e1f283b2db3928
parent 7e1ab21ae9f9c9c7d4d35a130691156259dcc726
Author: MTRNord <MTRNord@users.noreply.github.com>
Date:   Mon,  4 Aug 2025 11:47:45 +0200

Migrate flagger

Diffstat:
A
apps/talos_cluster/flagger/kustomization.yaml
 | 
6
++++++
A
apps/talos_cluster/flagger/release.yaml
 | 
45
+++++++++++++++++++++++++++++++++++++++++++++
A
apps/talos_cluster/flagger/repository.yaml
 | 
22
++++++++++++++++++++++
M
apps/talos_cluster/kustomization.yaml
 | 
1
+
A
apps/talos_cluster/namespaces/flagger.yaml
 | 
4
++++
M
apps/talos_cluster/namespaces/kustomization.yaml
 | 
1
+

6 files changed, 79 insertions(+), 0 deletions(-)
diff --git a/apps/talos_cluster/flagger/kustomization.yaml b/apps/talos_cluster/flagger/kustomization.yaml
@@ -0,0 +1,6 @@
+apiVersion: kustomize.config.k8s.io/v1beta1
+kind: Kustomization
+namespace: flagger-system
+resources:
+    - repository.yaml
+    - release.yaml
diff --git a/apps/talos_cluster/flagger/release.yaml b/apps/talos_cluster/flagger/release.yaml
@@ -0,0 +1,45 @@
+apiVersion: helm.toolkit.fluxcd.io/v2beta1
+kind: HelmRelease
+metadata:
+    name: flagger
+    namespace: flagger-system
+spec:
+    interval: 1h
+    releaseName: flagger
+    install: # override existing Flagger CRDs
+        crds: CreateReplace
+    upgrade: # update Flagger CRDs
+        crds: CreateReplace
+    chart:
+        spec:
+            chart: flagger
+            version: 1.x # update Flagger to the latest minor version
+            interval: 6h # scan for new versions every six hours
+            sourceRef:
+                kind: HelmRepository
+                name: flagger
+            verify: # verify the chart signature with Cosign keyless
+                provider: cosign
+    values:
+        nodeSelector:
+            kubernetes.io/os: linux
+        metricsServer: "http://vmselect-vm-victoria-metrics-k8s-stack.monitoring.svc:8481/select/0/prometheus"
+        serviceMonitor:
+            enabled: true
+        meshProvider: "gatewayapi:v1"
+---
+apiVersion: kustomize.toolkit.fluxcd.io/v1beta2
+kind: Kustomization
+metadata:
+    name: flagger-loadtester
+    namespace: flagger-system
+spec:
+    interval: 6h
+    wait: true
+    timeout: 5m
+    prune: true
+    sourceRef:
+        kind: OCIRepository
+        name: flagger-loadtester
+    path: ./tester
+    targetNamespace: flagger-system
diff --git a/apps/talos_cluster/flagger/repository.yaml b/apps/talos_cluster/flagger/repository.yaml
@@ -0,0 +1,22 @@
+apiVersion: source.toolkit.fluxcd.io/v1beta2
+kind: HelmRepository
+metadata:
+    name: flagger
+    namespace: flagger-system
+spec:
+    interval: 1h
+    url: oci://ghcr.io/fluxcd/charts
+    type: oci
+---
+apiVersion: source.toolkit.fluxcd.io/v1beta2
+kind: OCIRepository
+metadata:
+    name: flagger-loadtester
+    namespace: flagger-system
+spec:
+    interval: 6h # scan for new versions every six hours
+    url: oci://ghcr.io/fluxcd/flagger-manifests
+    ref:
+        semver: 1.x # update to the latest version
+    verify: # verify the artifact signature with Cosign keyless
+        provider: cosign
diff --git a/apps/talos_cluster/kustomization.yaml b/apps/talos_cluster/kustomization.yaml
@@ -10,3 +10,4 @@ resources:
     - ./vaultwarden
     - ./actualbudget-server
     - ./collabora
+    - ./flagger
diff --git a/apps/talos_cluster/namespaces/flagger.yaml b/apps/talos_cluster/namespaces/flagger.yaml
@@ -0,0 +1,4 @@
+apiVersion: v1
+kind: Namespace
+metadata:
+    name: flagger-system
diff --git a/apps/talos_cluster/namespaces/kustomization.yaml b/apps/talos_cluster/namespaces/kustomization.yaml
@@ -8,3 +8,4 @@ resources:
     - vaultwarden.yaml
     - actualbudget-server.yaml
     - collabora.yaml
+    - flagger.yaml