flux: shuffle image update automation to proper namespaces

cluster/base/flux-system/image-update-automation/image-update-automation.yaml

@@ -2,13 +2,12 @@ apiVersion: image.toolkit.fluxcd.io/v1beta1
 kind: ImageUpdateAutomation
 metadata:
   name: flux-system
-  namespace: presidential-paradise
+  namespace: flux-system
 spec:
   interval: 1m0s
   sourceRef:
     kind: GitRepository
     name: flux-system
-    namespace: flux-system
   git:
     checkout:
       ref:
@@ -21,5 +20,5 @@ spec:
     push:
       branch: main
   update:
-    path: ./cluster/apps/presidential-paradise
+    path: ./cluster/
     strategy: Setters

cluster/base/flux-system/image-update-automation/kustomization.yaml

@@ -0,0 +1,5 @@
+apiVersion: kustomize.config.k8s.io/v1beta1
+kind: Kustomization
+resources:
+- image-update-automation.yaml
+- zookeeper.yaml

cluster/base/flux-system/image-update-automation/zookeeper.yaml

@@ -0,0 +1,22 @@
+apiVersion: image.toolkit.fluxcd.io/v1beta1
+kind: ImageRepository
+metadata:
+  name: zookeeper
+  namespace: flux-system
+spec:
+  image: registry.xirion.net/library/zookeeper
+  interval: 1m0s
+  secretRef:
+    name: xirion-registry-creds
+---
+apiVersion: image.toolkit.fluxcd.io/v1beta1
+kind: ImagePolicy
+metadata:
+  name: zookeeper
+  namespace: flux-system
+spec:
+  imageRepositoryRef:
+    name: zookeeper
+  policy:
+    semver:
+      range: "*"

cluster/base/flux-system/kustomization.yaml

@@ -3,5 +3,6 @@ kind: Kustomization
 resources:
 - gotk-components.yaml
 - gotk-sync.yaml
-- image-update-automation.yaml
+- xirion-registry-creds.yaml
+- image-update-automation
 - charts

cluster/base/flux-system/xirion-registry-creds.yaml

@@ -0,0 +1,19 @@
+apiVersion: external-secrets.io/v1alpha1
+kind: ExternalSecret
+metadata:
+  name: xirion-registry-creds
+  namespace: flux-system
+spec:
+  refreshInterval: "5m"
+  secretStoreRef:
+    name: vault
+    kind: ClusterSecretStore
+  target:
+    name: xirion-registry-creds
+    template:
+      type: kubernetes.io/dockerconfigjson
+  data:
+    - secretKey: .dockerconfigjson
+      remoteRef:
+        key: xirion-registry-creds
+        property: dockerconfigjson