ci

flux/examples/helmrelease.yaml

@@ -0,0 +1,55 @@
+# Exemple Flux — à intégrer dans le dépôt cluster (adapter namespaces / secrets).
+# Chart poussé par la CI : helm push talks-slides-chart-<version>.tgz oci://git.specificat.io/specificat.io
+---
+apiVersion: source.toolkit.fluxcd.io/v1
+kind: OCIRepository
+metadata:
+  name: talks-slides-chart
+  namespace: flux-system
+spec:
+  interval: 10m
+  url: oci://git.specificat.io/specificat.io/talks-slides-chart
+  secretRef:
+    name: gitea-registry-oci
+  ref:
+    semver: ">=0.0.1"
+---
+apiVersion: helm.toolkit.fluxcd.io/v2
+kind: HelmRelease
+metadata:
+  name: talks-slides
+  namespace: product
+spec:
+  interval: 10m
+  targetNamespace: product
+  chartRef:
+    kind: OCIRepository
+    name: talks-slides-chart
+    namespace: flux-system
+  install:
+    remediation:
+      retries: 3
+  upgrade:
+    remediation:
+      retries: 3
+  values:
+    slides:
+      image:
+        repository: git.specificat.io/specificat.io/talks-slides
+        tag: latest # {"$imagepolicy": "product:talks-slides"}
+      imagePullSecrets:
+        - name: prd-gitea-registry-secret
+      ingress:
+        enabled: true
+        className: nginx
+        hosts:
+          - host: slides.specificat.io
+            paths:
+              - path: /
+                pathType: Prefix
+        # TLS via cert-manager (annotation + bloc tls pour le secret à créer)
+        certManager:
+          enabled: true
+          clusterIssuer: letsencrypt-prod
+        tls:
+          secretName: ""