feat: add flux webhook to utility

kubernetes/utility/apps/flux-system/flux-operator/instance/kustomization.yaml

@@ -5,6 +5,7 @@ kind: Kustomization
 resources:
   - ./helmrelease.yaml
   - ./prometheusrule.yaml
+  - ./webhook
 configMapGenerator:
   - name: flux-instance-helm-values
     files:

kubernetes/utility/apps/flux-system/flux-operator/instance/webhook/externalsecret.yaml

@@ -0,0 +1,18 @@
+---
+# yaml-language-server: $schema=https://kube-schemas.pages.dev/external-secrets.io/externalsecret_v1beta1.json
+apiVersion: external-secrets.io/v1beta1
+kind: ExternalSecret
+metadata:
+  name: &name github-webhook-token
+spec:
+  secretStoreRef:
+    kind: ClusterSecretStore
+    name: onepassword
+  target:
+    name: *name
+    template:
+      data:
+        token: "{{ .FLUX_UTILITY_GITHUB_WEBHOOK_TOKEN }}"
+  dataFrom:
+    - extract:
+        key: flux

kubernetes/utility/apps/flux-system/flux-operator/instance/webhook/ingress.yaml

@@ -0,0 +1,18 @@
+---
+apiVersion: networking.k8s.io/v1
+kind: Ingress
+metadata:
+  name: webhook-receiver
+spec:
+  ingressClassName: external
+  rules:
+    - host: flux-webhook-utility.jory.dev
+      http:
+        paths:
+          - path: /hook/
+            pathType: Prefix
+            backend:
+              service:
+                name: webhook-receiver
+                port:
+                  number: 80

kubernetes/utility/apps/flux-system/flux-operator/instance/webhook/kustomization.yaml

@@ -0,0 +1,8 @@
+---
+# yaml-language-server: $schema=https://json.schemastore.org/kustomization
+apiVersion: kustomize.config.k8s.io/v1beta1
+kind: Kustomization
+resources:
+  - ./externalsecret.yaml
+  - ./ingress.yaml
+  - ./receiver.yaml

kubernetes/utility/apps/flux-system/flux-operator/instance/webhook/receiver.yaml

@@ -0,0 +1,22 @@
+---
+# yaml-language-server: $schema=https://kube-schemas.pages.dev/notification.toolkit.fluxcd.io/receiver_v1.json
+apiVersion: notification.toolkit.fluxcd.io/v1
+kind: Receiver
+metadata:
+  name: home-ops
+spec:
+  type: github
+  events:
+    - ping
+    - push
+  secretRef:
+    name: github-webhook-token
+  resources:
+    - apiVersion: source.toolkit.fluxcd.io/v1
+      kind: GitRepository
+      name: flux-system
+      namespace: flux-system
+    - apiVersion: kustomize.toolkit.fluxcd.io/v1
+      kind: Kustomization
+      name: flux-system
+      namespace: flux-system