flux: prepare for renovate

flux/cluster/apps/gitops/kustomization.yaml

@@ -0,0 +1,4 @@
+apiVersion: kustomize.config.k8s.io/v1beta1
+kind: Kustomization
+resources:
+  - renovate

flux/cluster/apps/gitops/renovate/external-secret.yaml

@@ -0,0 +1,17 @@
+apiVersion: external-secrets.io/v1beta1
+kind: ExternalSecret
+metadata:
+  name: authentik
+  namespace: gitops
+spec:
+  refreshInterval: "5m"
+  secretStoreRef:
+    name: vault
+    kind: ClusterSecretStore
+  target:
+    name: authentik
+  data:
+  - secretKey: RENOVATE_TOKEN
+    remoteRef:
+      key: gitops/renovate
+      property: gitea_token

flux/cluster/apps/gitops/renovate/kustomization.yaml

@@ -0,0 +1,4 @@
+apiVersion: kustomize.config.k8s.io/v1beta1
+kind: Kustomization
+resources:
+  - external-secret.yaml

flux/cluster/apps/kustomization.yaml

@@ -3,4 +3,5 @@ kind: Kustomization
 resources:
   - networking
   - presidential-paradise
-  - authentik
+  - authentik
+  - gitops

flux/cluster/core/namespaces/gitops.yaml

@@ -0,0 +1,5 @@
+---
+apiVersion: v1
+kind: Namespace
+metadata:
+  name: gitops

flux/cluster/core/namespaces/kustomization.yaml

@@ -5,4 +5,5 @@ resources:
   - networking.yaml
   - external-secrets.yaml
   - authentik.yaml
+  - gitops.yaml