feat(external-secrets): clusterstore into main HR

Signed-off-by: Devin Buhl <[email protected]>

kubernetes/apps/external-secrets/external-secrets/app/helm-values.yaml

@@ -0,0 +1,18 @@
+---
+# yaml-language-server: $schema=https://kubernetes-schemas.pages.dev/external-secrets.io/clustersecretstore_v1beta1.json
+apiVersion: external-secrets.io/v1beta1
+kind: ClusterSecretStore
+metadata:
+  name: onepassword-connect
+spec:
+  provider:
+    onepassword:
+      connectHost: http://onepassword-connect.external-secrets.svc.cluster.local
+      vaults:
+        Kubernetes: 1
+      auth:
+        secretRef:
+          connectTokenSecretRef:
+            name: onepassword-connect-secret
+            key: token
+            namespace: external-secrets

kubernetes/apps/external-secrets/external-secrets/app/helmrelease.yaml

@@ -25,6 +25,11 @@ spec:
   dependsOn:
     - name: onepassword-connect
       namespace: external-secrets
+  valuesFrom:
+    - kind: ConfigMap
+      name: external-secrets-helm-values
+      valuesKey: values.yaml
+      targetPath: extraObjects[0]
   values:
     installCRDs: true
     replicaCount: 1
@@ -46,3 +51,4 @@ spec:
     serviceMonitor:
       enabled: true
       interval: 1m
+

kubernetes/apps/external-secrets/external-secrets/app/kustomization.yaml

@@ -4,3 +4,9 @@ apiVersion: kustomize.config.k8s.io/v1beta1
 kind: Kustomization
 resources:
   - ./helmrelease.yaml
+configMapGenerator:
+  - name: external-secrets-helm-values
+    files:
+      - values.yaml=./helm-values.yaml
+configurations:
+  - kustomizeconfig.yaml

kubernetes/apps/external-secrets/external-secrets/app/kustomizeconfig.yaml

@@ -0,0 +1,7 @@
+---
+nameReference:
+  - kind: ConfigMap
+    version: v1
+    fieldSpecs:
+      - path: spec/valuesFrom/name
+        kind: HelmRelease

kubernetes/apps/flux-system/flux-operator/instance/helmrelease.yaml

@@ -22,6 +22,9 @@ spec:
     remediation:
       strategy: rollback
       retries: 3
+  dependsOn:
+    - name: flux-operator
+      namespace: flux-system
   valuesFrom:
     - kind: ConfigMap
       name: flux-instance-helm-values

kubernetes/apps/flux-system/flux-operator/ks.yaml

@@ -30,8 +30,6 @@ spec:
   commonMetadata:
     labels:
       app.kubernetes.io/name: *app
-  dependsOn:
-    - name: flux-operator
   path: ./kubernetes/apps/flux-system/flux-operator/instance
   prune: false # never should be deleted
   sourceRef: