From 8c2df876b2e8390187927a80f1f090bfbefbc2d2 Mon Sep 17 00:00:00 2001
From: Earl Warren <contact@earl-warren.org>
Date: Wed, 23 Oct 2024 09:41:01 +0200
Subject: [PATCH] flux-system: add receiver

---
 flux/clusters/flux-system/kustomization.yaml |  1 +
 flux/clusters/flux-system/receiver.yaml      | 43 ++++++++++++++++++++
 2 files changed, 44 insertions(+)
 create mode 100644 flux/clusters/flux-system/receiver.yaml

diff --git a/flux/clusters/flux-system/kustomization.yaml b/flux/clusters/flux-system/kustomization.yaml
index 152bb92..dc60cf6 100644
--- a/flux/clusters/flux-system/kustomization.yaml
+++ b/flux/clusters/flux-system/kustomization.yaml
@@ -3,3 +3,4 @@ kind: Kustomization
 resources:
   - gotk-components.yaml
   - gotk-sync.yaml
+  - receiver.yaml
diff --git a/flux/clusters/flux-system/receiver.yaml b/flux/clusters/flux-system/receiver.yaml
new file mode 100644
index 0000000..fae6a56
--- /dev/null
+++ b/flux/clusters/flux-system/receiver.yaml
@@ -0,0 +1,43 @@
+apiVersion: networking.k8s.io/v1
+kind: Ingress
+annotations:
+  # https://cert-manager.io/docs/usage/ingress/#supported-annotations
+  # https://github.com/cert-manager/cert-manager/issues/2239
+  cert-manager.io/cluster-issuer: letsencrypt-http
+  cert-manager.io/private-key-algorithm: ECDSA
+  cert-manager.io/private-key-size: 384
+  kubernetes.io/ingress.class: traefik
+  traefik.ingress.kubernetes.io/router.entrypoints: websecure
+metadata:
+  name: webhook-flux-receiver
+  namespace: flux-system
+spec:
+  rules:
+  - host: flux.k8s.forgejo.org
+    http:
+      paths:
+      - pathType: Prefix
+        path: /
+        backend:
+          service:
+            name: webhook-flux-receiver
+            port:
+              name: http
+---
+apiVersion: notification.toolkit.fluxcd.io/v1
+kind: Receiver
+metadata:
+  name: forgejo-receiver
+  namespace: flux-system
+spec:
+  type: github
+  events:
+    - "ping"
+    - "push"
+  secretRef:
+    name: webhook-flux-token
+  resources:
+    - apiVersion: source.toolkit.fluxcd.io/v1
+      kind: GitRepository
+      # matching the GitRepository in gotk-sync.yaml
+      name: flux-system