From f4a771fc93101469d1313e012b36cdcdbd0aa227 Mon Sep 17 00:00:00 2001
From: devcm <admin@dev.cm>
Date: Sat, 18 Apr 2026 13:13:23 +0000
Subject: [PATCH] =?UTF-8?q?feat:=20=E6=B7=BB=E5=8A=A0=E5=9F=BA=E7=A1=80?=
 =?UTF-8?q?=E8=AE=BE=E6=96=BD=E6=81=A2=E5=A4=8D=E7=9A=84=20Kustomization?=
 =?UTF-8?q?=20=E9=85=8D=E7=BD=AE=E6=96=87=E4=BB=B6?=
MIME-Version: 1.0
Content-Type: text/plain; charset=UTF-8
Content-Transfer-Encoding: 8bit

---
 flux/clusters/restore/infra-devops.yaml | 17 +++++++++++++++++
 flux/clusters/restore/secrets.yaml      | 22 ++++++++++++++++++++++
 flux/clusters/restore/sources.yaml      | 14 ++++++++++++++
 3 files changed, 53 insertions(+)
 create mode 100644 flux/clusters/restore/infra-devops.yaml
 create mode 100644 flux/clusters/restore/secrets.yaml
 create mode 100644 flux/clusters/restore/sources.yaml

diff --git a/flux/clusters/restore/infra-devops.yaml b/flux/clusters/restore/infra-devops.yaml
new file mode 100644
index 0000000..3e60eeb
--- /dev/null
+++ b/flux/clusters/restore/infra-devops.yaml
@@ -0,0 +1,17 @@
+apiVersion: kustomize.toolkit.fluxcd.io/v1
+kind: Kustomization
+metadata:
+  name: infra-devops
+  namespace: infra-gitops
+spec:
+  interval: 30m
+  retryInterval: 1m
+  sourceRef:
+    kind: GitRepository
+    name: flux
+  path: ./flux/infrastructure/infra-devops
+  prune: true
+  wait: true
+  dependsOn:
+    - name: sources
+    - name: secrets
diff --git a/flux/clusters/restore/secrets.yaml b/flux/clusters/restore/secrets.yaml
new file mode 100644
index 0000000..e30274c
--- /dev/null
+++ b/flux/clusters/restore/secrets.yaml
@@ -0,0 +1,22 @@
+# 密钥管理层 - 通过postBuild从flux-env Secret注入变量
+# 所有环境流程一致: kubectl create secret generic flux-env -n infra-gitops --from-env-file=.env
+apiVersion: kustomize.toolkit.fluxcd.io/v1
+kind: Kustomization
+metadata:
+  name: secrets
+  namespace: infra-gitops
+spec:
+  interval: 30m
+  retryInterval: 1m
+  sourceRef:
+    kind: GitRepository
+    name: flux
+  path: ./flux/infrastructure/secrets
+  prune: false
+  wait: true
+  dependsOn:
+    - name: sources
+  postBuild:
+    substituteFrom:
+      - kind: Secret
+        name: flux-env
diff --git a/flux/clusters/restore/sources.yaml b/flux/clusters/restore/sources.yaml
new file mode 100644
index 0000000..01f8d4d
--- /dev/null
+++ b/flux/clusters/restore/sources.yaml
@@ -0,0 +1,14 @@
+apiVersion: kustomize.toolkit.fluxcd.io/v1
+kind: Kustomization
+metadata:
+  name: sources
+  namespace: infra-gitops
+spec:
+  interval: 30m
+  retryInterval: 1m
+  sourceRef:
+    kind: GitRepository
+    name: flux
+  path: ./flux/infrastructure/sources
+  prune: true
+  wait: true