---
apiVersion: v1
kind: Namespace
metadata:
  name: infra <1>
---
apiVersion: v1
kind: Secret <2>
metadata:
  name: infra-secret
  namespace: infra <1>
data:
  masterPassword: MASTER_PASSWORD_FOR_GENERATE_EVERY_A_NEW_ONE
---
apiVersion: source.toolkit.fluxcd.io/v1
kind: GitRepository
metadata:
  name: wrenix-flux-charts <3>
  namespace: flux-system
spec:
  url: https://codeberg.org/wrenix/flux-charts.git
  ref:
    branch: main
  interval: 10m
  # for more info about verification take an look here:
  #   - https://fluxcd.io/flux/components/source/gitrepositories/#verification
  #   - https://wrenix.codeberg.page/docs/wrenix-flux/latest/#_secure_with_verify
  # later replaced with oci and cosign
  # verify:
  #   mode: HEAD
  #   secretRef:
  #     name: gpg-publickey
---
apiVersion: helm.toolkit.fluxcd.io/v2beta1
kind: HelmRelease
metadata:
  name: infra <4>
  namespace: infra <1>
spec:
  chart:
    spec:
      sourceRef:
        kind: GitRepository
        name: wrenix-flux-charts <3>
        namespace: flux-system
      chart: "./base"
      reconcileStrategy: "Revision"
      valuesFiles:
        - "./base/values.yaml"
        - "./base-values/commons.yaml" <5>
        - "./base-values/infra.yaml" <6>
  interval: 10m
  values:
    ##
    # Commons
    ##
    commons:

      helm:
        chart:
          sourceRef: <3>
            kind: GitRepository
            name: wrenix-flux-charts
            namespace: flux-system

      ingress:
        domain: "my-infra.eu" <7>

    componentCommons:
      helm:
        release:
          valuesFrom:
            - kind: Secret <2>
              name: infra-secret
              valuesKey: masterPassword
              targetPath: commons.masterPassword
    ##
    # Compoments
    ##
    components: <8>
      infra-certificates:
        values:
          email: host.acme@wrenix.eu
      infra-monitoring:
        values:
          prometheus:
            exporter:
              blackbox:
                enabled: true