refactor: oci repo

kubernetes/apps/actions-runner-system/kustomization.yaml

@@ -1,9 +0,0 @@
----
-# yaml-language-server: $schema=https://raw.githubusercontent.com/SchemaStore/schemastore/master/src/schemas/json/kustomization.json
-apiVersion: kustomize.config.k8s.io/v1beta1
-kind: Kustomization
-namespace: actions-runner-system
-components:
-  - ../../components/common
-resources:
-  - ./actions-runner-controller/ks.yaml

kubernetes/apps/database/crunchy-postgres-operator/operator/helmrelease.yaml

@@ -1,24 +1,35 @@
 ---
+# yaml-language-server: $schema=https://kubernetes-schemas.pages.dev/source.toolkit.fluxcd.io/ocirepository_v1.json
+apiVersion: source.toolkit.fluxcd.io/v1
+kind: OCIRepository
+metadata:
+  name: pgo
+spec:
+  interval: 5m
+  layerSelector:
+    mediaType: application/vnd.cncf.helm.chart.content.v1.tar+gzip
+    operation: copy
+  ref:
+    tag: 5.8.2
+  url: oci://registry.developers.crunchydata.com/crunchydata/pgo
+---
 # yaml-language-server: $schema=https://raw.githubusercontent.com/fluxcd-community/flux2-schemas/main/helmrelease-helm-v2.json
 apiVersion: helm.toolkit.fluxcd.io/v2
 kind: HelmRelease
 metadata:
   name: crunchy-postgres-operator
 spec:
-  interval: 30m
-  chart:
-    spec:
-      chart: pgo
-      version: 5.8.2
-      sourceRef:
-        kind: HelmRepository
-        name: crunchydata
-        namespace: flux-system
-      interval: 5m
+  interval: 1h
+  chartRef:
+    kind: OCIRepository
+    name: pgo
   install:
-    crds: CreateReplace
+    remediation:
+      retries: -1
   upgrade:
-    crds: CreateReplace
+    cleanupOnFail: true
+    remediation:
+      retries: 3
   dependsOn:
     - name: openebs
       namespace: openebs-system

kubernetes/apps/flux-system/repositories/helm/actions-runner-controller.yaml

@@ -1,11 +0,0 @@
----
-# yaml-language-server: $schema=https://kubernetes-schemas.pages.dev/source.toolkit.fluxcd.io/helmrepository_v1.json
-apiVersion: source.toolkit.fluxcd.io/v1
-kind: HelmRepository
-metadata:
-  name: actions-runner-controller
-  namespace: flux-system
-spec:
-  type: oci
-  interval: 5m
-  url: oci://ghcr.io/actions/actions-runner-controller-charts

kubernetes/apps/flux-system/repositories/helm/aqua.yaml

@@ -1,10 +0,0 @@
----
-# yaml-language-server: $schema=https://kubernetes-schemas.pages.dev/source.toolkit.fluxcd.io/helmrepository_v1.json
-apiVersion: source.toolkit.fluxcd.io/v1
-kind: HelmRepository
-metadata:
-  name: aqua
-  namespace: flux-system
-spec:
-  interval: 2h
-  url: https://aquasecurity.github.io/helm-charts/

kubernetes/apps/flux-system/repositories/helm/backube.yaml

@@ -1,10 +0,0 @@
----
-# yaml-language-server: $schema=https://kubernetes-schemas.pages.dev/source.toolkit.fluxcd.io/helmrepository_v1.json
-apiVersion: source.toolkit.fluxcd.io/v1
-kind: HelmRepository
-metadata:
-  name: backube
-  namespace: flux-system
-spec:
-  interval: 2h
-  url: https://backube.github.io/helm-charts/

kubernetes/apps/flux-system/repositories/helm/cloudnative-pg.yaml

@@ -1,10 +0,0 @@
----
-# yaml-language-server: $schema=https://kubernetes-schemas.pages.dev/source.toolkit.fluxcd.io/helmrepository_v1.json
-apiVersion: source.toolkit.fluxcd.io/v1
-kind: HelmRepository
-metadata:
-  name: cloudnative-pg
-  namespace: flux-system
-spec:
-  interval: 2h
-  url: https://cloudnative-pg.github.io/charts

kubernetes/apps/flux-system/repositories/helm/crowdsec.yaml

@@ -1,10 +0,0 @@
----
-# yaml-language-server: $schema=https://kubernetes-schemas.pages.dev/source.toolkit.fluxcd.io/helmrepository_v1.json
-apiVersion: source.toolkit.fluxcd.io/v1
-kind: HelmRepository
-metadata:
-  name: crowdsec
-  namespace: flux-system
-spec:
-  interval: 2h
-  url: https://crowdsecurity.github.io/helm-charts

kubernetes/apps/flux-system/repositories/helm/crunchydata.yaml

@@ -1,12 +0,0 @@
----
-# yaml-language-server: $schema=https://kubernetes-schemas.pages.dev/source.toolkit.fluxcd.io/helmrepository_v1.json
-apiVersion: source.toolkit.fluxcd.io/v1
-kind: HelmRepository
-metadata:
-  name: crunchydata
-  namespace: flux-system
-spec:
-  type: oci
-  interval: 30m
-  url: oci://registry.developers.crunchydata.com/crunchydata
-  timeout: 3m

kubernetes/apps/flux-system/repositories/helm/dysnix.yaml

@@ -1,10 +0,0 @@
----
-# yaml-language-server: $schema=https://kubernetes-schemas.pages.dev/source.toolkit.fluxcd.io/helmrepository_v1.json
-apiVersion: source.toolkit.fluxcd.io/v1
-kind: HelmRepository
-metadata:
-  name: dysnix
-  namespace: flux-system
-spec:
-  interval: 2h
-  url: https://dysnix.github.io/charts

kubernetes/apps/flux-system/repositories/helm/kustomization.yaml

@@ -3,14 +3,7 @@
 apiVersion: kustomize.config.k8s.io/v1beta1
 kind: Kustomization
 resources:
-  - ./actions-runner-controller.yaml
-  - ./aqua.yaml
-  - ./backube.yaml
   - ./cert-manager-webhook-ovh.yaml
-  - ./cloudnative-pg.yaml
-  - ./crunchydata.yaml
-  - ./crowdsec.yaml
-  - ./dysnix.yaml
   - ./emxq.yaml
   - ./external-dns.yaml
   - ./external-secrets.yaml
@@ -21,7 +14,6 @@ resources:
   - ./k8s-gateway.yaml
   - ./kyverno.yaml
   - ./openebs.yaml
-  - ./piraeus.yaml
   - ./postfinance.yaml
   - ./prometheus-community.yaml
   - ./rook-ceph.yaml

kubernetes/apps/flux-system/repositories/helm/piraeus.yaml

@@ -1,10 +0,0 @@
----
-# yaml-language-server: $schema=https://kubernetes-schemas.pages.dev/source.toolkit.fluxcd.io/helmrepository_v1.json
-apiVersion: source.toolkit.fluxcd.io/v1
-kind: HelmRepository
-metadata:
-  name: piraeus
-  namespace: flux-system
-spec:
-  interval: 2h
-  url: https://piraeus.io/helm-charts/

kubernetes/apps/volsync/volsync/app/helmrelease.yaml

@@ -1,28 +1,41 @@
 ---
+# yaml-language-server: $schema=https://kubernetes-schemas.pages.dev/source.toolkit.fluxcd.io/ocirepository_v1.json
+apiVersion: source.toolkit.fluxcd.io/v1
+kind: OCIRepository
+metadata:
+  name: volsync
+spec:
+  interval: 5m
+  layerSelector:
+    mediaType: application/vnd.cncf.helm.chart.content.v1.tar+gzip
+    operation: copy
+  ref:
+    tag: 0.12.1
+  url: oci://ghcr.io/home-operations/charts-mirror/volsync
+---
 # yaml-language-server: $schema=https://kubernetes-schemas.pages.dev/helm.toolkit.fluxcd.io/helmrelease_v2.json
 apiVersion: helm.toolkit.fluxcd.io/v2
 kind: HelmRelease
 metadata:
   name: volsync
-  namespace: volsync
 spec:
-  interval: 30m
-  chart:
-    spec:
-      chart: volsync
-      version: 0.12.1
-      sourceRef:
-        kind: HelmRepository
-        name: backube
-        namespace: flux-system
+  interval: 1h
+  chartRef:
+    kind: OCIRepository
+    name: volsync
   install:
-    createNamespace: true
     remediation:
-      retries: 3
+      retries: -1
   upgrade:
+    cleanupOnFail: true
     remediation:
       retries: 3
   values:
     manageCRDs: true
+    replicaCount: 2
     metrics:
       disableAuth: true
+    podSecurityContext:
+      runAsNonRoot: true
+      runAsUser: 1000
+      runAsGroup: 1000