panxiao81andClaude Opus 5.5
7f5bef829f
yaml / yaml (pull_request) Successful in 23s
Install image-reflector and image-automation controllers, track the digest behind backstage:latest, and let flux-bot commit digest updates to main. Co-Authored-By: Claude Opus 5.5 <[email protected]>
20 lines
570 B
YAML
20 lines
570 B
YAML
# Gitea token of the private `flux-bot` user: collaborator with write on
|
|
# homelab-infra only, token scoped to write:repository. Stored in OpenBao as
|
|
# username/password because that is the basic-auth Secret shape Flux reads.
|
|
apiVersion: external-secrets.io/v1
|
|
kind: ExternalSecret
|
|
metadata:
|
|
name: homelab-infra-write
|
|
namespace: flux-system
|
|
spec:
|
|
refreshInterval: 1h
|
|
secretStoreRef:
|
|
kind: ClusterSecretStore
|
|
name: openbao
|
|
target:
|
|
creationPolicy: Owner
|
|
name: homelab-infra-write
|
|
dataFrom:
|
|
- extract:
|
|
key: k8s/flux-image-automation
|