apiVersion: bitnami.com/v1alpha1
kind: SealedSecret
metadata:
  creationTimestamp: null
  name: image-updater-secrets-v2
  namespace: flux-system
spec:
  encryptedData:
    ASKTUG_API_PROXY_TOKEN: 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
    COMMUNITY_BLOG_TOKEN: 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
    COMMUNITY_PREVIEW_TOKEN: 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
    COMMUNITY_WEBSITE_TOKEN: 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
    GITHUB_TOKEN: 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
  template:
    data: null
    metadata:
      creationTimestamp: null
      name: image-updater-secrets-v2
      namespace: flux-system
    type: Opaque

---

apiVersion: apps/v1
kind: Deployment
metadata:
  namespace: flux-system
  name: image-updater
spec:
  replicas: 1
  selector:
    matchLabels:
      app: image-updater
  template:
    metadata:
      labels:
        app: image-updater
    spec:
      containers:
      - name: flask
        image: registry.cn-hangzhou.aliyuncs.com/pingcap-ee/fluxcd-image-updater:v2023-03-27-16-15-48
        envFrom:
        - secretRef:
            name: image-updater-secrets-v2
        livenessProbe:
          httpGet:
            path: /healthz
            port: 5050
          initialDelaySeconds: 6
          periodSeconds: 10
          successThreshold: 1
          failureThreshold: 3
          timeoutSeconds: 5
        ports:
        - containerPort: 5050
        resources:
          limits:
            cpu: "1"
            memory: 1Gi
          requests:
            cpu: "0.1"
            memory: 125Mi
      imagePullSecrets:
      - name: aliyun-hangzhou-registry

---

apiVersion: v1
kind: Service
metadata:
  namespace: flux-system
  name: image-updater
spec:
  selector:
    app: image-updater
  ports:
    - port: 80
      targetPort: 5050

---

apiVersion: networking.k8s.io/v1
kind: Ingress
metadata:
  namespace: flux-system
  name: imgae-updater-ingress
  annotations:
    nginx.ingress.kubernetes.io/whitelist-source-range: 10.9.0.0/16, 172.16.0.0/16
spec:
  ingressClassName: nginx
  tls:
    - hosts:
        - uk8s-image-updater.tidb.net
      # defined in flux-system gotk-sync.yaml
      secretName: star-tidb-net-2025-tls
  rules:
    - host: uk8s-image-updater.tidb.net
      http:
        paths:
          - path: /
            pathType: Prefix
            backend:
              service:
                name: image-updater
                port:
                  number: 80