k8s-cluster/flux/clusters/flux-system/receiver.yaml

50 lines
1.3 KiB
YAML
Raw Normal View History

2024-10-23 08:23:13 +00:00
# https://kubernetes.io/docs/concepts/services-networking/ingress
2024-10-23 07:41:01 +00:00
apiVersion: networking.k8s.io/v1
kind: Ingress
metadata:
name: webhook-flux-receiver
namespace: flux-system
annotations:
# https://cert-manager.io/docs/usage/ingress/#supported-annotations
# https://github.com/cert-manager/cert-manager/issues/2239
cert-manager.io/cluster-issuer: letsencrypt-http
cert-manager.io/private-key-algorithm: ECDSA
cert-manager.io/private-key-size: 384
kubernetes.io/ingress.class: traefik
traefik.ingress.kubernetes.io/router.entrypoints: websecure
2024-10-23 07:41:01 +00:00
spec:
2024-10-23 08:23:13 +00:00
tls:
- hosts:
- flux.k8s.forgejo.org
secretName: tls-forgejo-flux-ingress-http
2024-10-23 07:41:01 +00:00
rules:
- host: flux.k8s.forgejo.org
http:
paths:
- pathType: Prefix
path: /
backend:
service:
2024-10-23 08:59:11 +00:00
# pre-defined by flux
name: webhook-receiver
2024-10-23 07:41:01 +00:00
port:
name: http
---
apiVersion: notification.toolkit.fluxcd.io/v1
kind: Receiver
metadata:
2024-10-23 08:23:13 +00:00
name: forgejo-flux-receiver
2024-10-23 07:41:01 +00:00
namespace: flux-system
spec:
type: github
events:
- "ping"
- "push"
secretRef:
name: webhook-flux-token
resources:
- apiVersion: source.toolkit.fluxcd.io/v1
kind: GitRepository
# matching the GitRepository in gotk-sync.yaml
name: flux-system