Merge pull request 'flux: define repos' (#8) from earl-warren/k8s-cluster:wip-infrastructure into main

Reviewed-on: https://code.forgejo.org/infrastructure/k8s-cluster/pulls/8
Reviewed-by: Michael Kriese <michael.kriese@gmx.de>

flux/clusters/infrastructure.yaml

@@ -0,0 +1,21 @@
+---
+apiVersion: kustomize.toolkit.fluxcd.io/v1
+kind: Kustomization
+metadata:
+  name: infra-repos
+  namespace: flux-system
+spec:
+# for later usage
+#  decryption:
+#   provider: sops
+#    secretRef:
+#      name: sops-age
+  interval: 1h
+  retryInterval: 1m
+  timeout: 5m
+  sourceRef:
+    kind: GitRepository
+    name: flux-system
+  path: ./flux/infrastructure/repos
+  prune: true
+  wait: true

flux/infrastructure/repos/bitnami-charts.yaml

@@ -0,0 +1,8 @@
+apiVersion: source.toolkit.fluxcd.io/v1
+kind: HelmRepository
+metadata:
+  name: bitnami-charts
+  namespace: flux-system # needed for renovate
+spec:
+  type: oci
+  url: oci://registry-1.docker.io/bitnamicharts

flux/infrastructure/repos/forgejo-charts.yaml

@@ -0,0 +1,9 @@
+# https://fluxcd.io/flux/components/source/helmrepositories/#helm-oci-repository
+apiVersion: source.toolkit.fluxcd.io/v1
+kind: HelmRepository
+metadata:
+  name: forgejo
+  namespace: flux-system # needed for renovate
+spec:
+  type: oci
+  url: oci://code.forgejo.org/forgejo-helm

flux/infrastructure/repos/kustomization.yaml

@@ -0,0 +1,10 @@
+apiVersion: kustomize.config.k8s.io/v1beta1
+kind: Kustomization
+
+namespace: flux-system
+
+resources:
+  - bitnami-charts.yaml
+  - metallb.yaml
+  - traefik-charts.yaml
+  - forgejo-charts.yaml

flux/infrastructure/repos/metallb.yaml

@@ -0,0 +1,8 @@
+apiVersion: source.toolkit.fluxcd.io/v1
+kind: HelmRepository
+metadata:
+  name: metallb
+  namespace: flux-system # needed for renovate
+spec:
+  interval: 3h # fetch index file every 3 hours
+  url: https://metallb.github.io/metallb

flux/infrastructure/repos/traefik-charts.yaml

@@ -0,0 +1,8 @@
+apiVersion: source.toolkit.fluxcd.io/v1
+kind: HelmRepository
+metadata:
+  name: traefik-charts
+  namespace: flux-system # needed for renovate
+spec:
+  type: oci
+  url: oci://ghcr.io/traefik/helm