# This manifest was generated by flux. DO NOT EDIT.
---
apiVersion: source.toolkit.fluxcd.io/v1beta2
kind: GitRepository
metadata:
  name: flux-system
  namespace: flux-system
spec:
  interval: 60m
  ref:
    branch: master
  secretRef:
    name: flux-system
  url: ssh://git@github.com/pingcap-inc/sre

---

apiVersion: bitnami.com/v1alpha1
kind: SealedSecret
metadata:
  creationTimestamp: null
  name: webhook-token
  namespace: flux-system
spec:
  encryptedData:
    token: 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
  template:
    data: null
    metadata:
      creationTimestamp: null
      name: webhook-token
      namespace: flux-system
    type: Opaque

---

apiVersion: notification.toolkit.fluxcd.io/v1beta1
kind: Receiver
metadata:
  name: flux-system
  namespace: flux-system
spec:
  type: github
  events:
    - "ping"
    - "push"
  secretRef:
    name: webhook-token
  resources:
    - kind: GitRepository
      name: flux-system

---

apiVersion: v1
data:
  tls.crt: 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
  tls.key: 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
kind: Secret
metadata:
  name: star-tidb-net-2024-tls
  namespace: flux-system
type: kubernetes.io/tls

---

apiVersion: networking.k8s.io/v1
kind: Ingress
metadata:
  namespace: flux-system
  name: fluxcd-webhook-receiver-ingress
  annotations:
    nginx.ingress.kubernetes.io/rewrite-target: /$1
spec:
  ingressClassName: nginx
  tls:
    - hosts:
        - tidb.net
      secretName: star-tidb-net-2025-tls
  rules:
    - host: tidb.net
      http:
        paths:
          - path: /fluxcd/(.*)
            pathType: Prefix
            backend:
              service:
                name: webhook-receiver
                port:
                  number: 80

---

apiVersion: kustomize.toolkit.fluxcd.io/v1beta2
kind: Kustomization
metadata:
  name: flux-system
  namespace: flux-system
spec:
  interval: 10m0s
  path: ./uk8s/fluxcd/clusters/production
  prune: true
  sourceRef:
    kind: GitRepository
    name: flux-system