feat(flux): flux

flux/clusters/base/apps.yaml

@@ -12,6 +12,6 @@ spec:
   path: ./flux/apps
   prune: true
   dependsOn:
-    - name: infra-data
+    - name: infra-data-post
     - name: infra-net
     - name: infra-gitops

flux/clusters/base/infra-data.yaml

@@ -15,3 +15,22 @@ spec:
   wait: true
   dependsOn:
     - name: infra-devops
+
+---
+apiVersion: kustomize.toolkit.fluxcd.io/v1
+kind: Kustomization
+metadata:
+  name: infra-data-post
+  namespace: infra-gitops
+spec:
+  interval: 30m
+  retryInterval: 1m
+  sourceRef:
+    kind: GitRepository
+    name: flux
+  path: ./flux/infrastructure/infra-data/post
+  prune: true
+  force: true
+  wait: true
+  dependsOn:
+    - name: infra-data

flux/clusters/base/infra-devops.yaml

@@ -14,6 +14,7 @@ spec:
   wait: true
   dependsOn:
     - name: sources
+    - name: secrets
 
 ---
 apiVersion: kustomize.toolkit.fluxcd.io/v1

flux/clusters/base/infra-gitops.yaml

@@ -13,5 +13,5 @@ spec:
   prune: true
   wait: true
   dependsOn:
-    - name: infra-data
+    - name: infra-data-post
     - name: infra-monitor

flux/clusters/base/infra-monitor.yaml

@@ -14,4 +14,4 @@ spec:
   force: true
   wait: true
   dependsOn:
-    - name: infra-data
+    - name: infra-data-post

flux/clusters/base/kustomization.yaml

@@ -2,6 +2,7 @@ apiVersion: kustomize.config.k8s.io/v1beta1
 kind: Kustomization
 resources:
   - sources.yaml
+  - secrets.yaml
   - kube-system.yaml
   - infra-devops.yaml
   - infra-data.yaml

flux/clusters/base/secrets.yaml

@@ -0,0 +1,22 @@
+# 密钥管理层 - 通过postBuild从flux-env Secret注入变量
+# 所有环境流程一致: kubectl create secret generic flux-env -n infra-gitops --from-env-file=.env
+apiVersion: kustomize.toolkit.fluxcd.io/v1
+kind: Kustomization
+metadata:
+  name: secrets
+  namespace: infra-gitops
+spec:
+  interval: 30m
+  retryInterval: 1m
+  sourceRef:
+    kind: GitRepository
+    name: flux
+  path: ./flux/infrastructure/secrets
+  prune: false
+  wait: true
+  dependsOn:
+    - name: sources
+  postBuild:
+    substituteFrom:
+      - kind: Secret
+        name: flux-env