# Exemple Flux — à intégrer dans le dépôt cluster (adapter namespaces / secrets).
# Chart poussé par la CI : helm push talks-slides-chart-<version>.tgz oci://git.specificat.io/specificat.io
---
apiVersion: source.toolkit.fluxcd.io/v1
kind: OCIRepository
metadata:
  name: talks-slides-chart
  namespace: flux-system
spec:
  interval: 10m
  url: oci://git.specificat.io/specificat.io/talks-slides-chart
  secretRef:
    name: gitea-registry-oci
  ref:
    semver: ">=0.0.1"
---
apiVersion: helm.toolkit.fluxcd.io/v2
kind: HelmRelease
metadata:
  name: talks-slides
  namespace: product
spec:
  interval: 10m
  targetNamespace: product
  chartRef:
    kind: OCIRepository
    name: talks-slides-chart
    namespace: flux-system
  install:
    remediation:
      retries: 3
  upgrade:
    remediation:
      retries: 3
  values:
    slides:
      image:
        repository: git.specificat.io/specificat.io/talks-slides
        tag: latest # {"$imagepolicy": "product:talks-slides"}
      imagePullSecrets:
        - name: prd-gitea-registry-secret
      ingress:
        enabled: true
        className: nginx
        hosts:
          - host: slides.specificat.io
            paths:
              - path: /
                pathType: Prefix
        # TLS via cert-manager (annotation + bloc tls pour le secret à créer)
        certManager:
          enabled: true
          clusterIssuer: letsencrypt-prod
        tls:
          secretName: ""