From d1e1fe8e165afd12eac0850824d9c6a5a7330d9b Mon Sep 17 00:00:00 2001
From: Flux <>
Date: Wed, 18 Sep 2024 17:15:53 +0000
Subject: [PATCH] Add Flux sync manifests

---
 .../mycluster-0/flux-system/gotk-sync.yaml    | 27 +++++++++++++++++++
 .../flux-system/kustomization.yaml            |  5 ++++
 .../cert-manager/vault-clusterissuer.yaml     |  2 +-
 ...rnalsecret-sqlinstance-masterpassword.yaml |  1 +
 4 files changed, 34 insertions(+), 1 deletion(-)
 create mode 100644 clusters/mycluster-0/flux-system/gotk-sync.yaml
 create mode 100644 clusters/mycluster-0/flux-system/kustomization.yaml

diff --git a/clusters/mycluster-0/flux-system/gotk-sync.yaml b/clusters/mycluster-0/flux-system/gotk-sync.yaml
new file mode 100644
index 00000000..832168c8
--- /dev/null
+++ b/clusters/mycluster-0/flux-system/gotk-sync.yaml
@@ -0,0 +1,27 @@
+# This manifest was generated by flux. DO NOT EDIT.
+---
+apiVersion: source.toolkit.fluxcd.io/v1
+kind: GitRepository
+metadata:
+  name: flux-system
+  namespace: flux-system
+spec:
+  interval: 1m0s
+  ref:
+    branch: feat_zitadel
+  secretRef:
+    name: flux-system
+  url: https://github.com/Smana/cloud-native-ref.git
+---
+apiVersion: kustomize.toolkit.fluxcd.io/v1
+kind: Kustomization
+metadata:
+  name: flux-system
+  namespace: flux-system
+spec:
+  interval: 10m0s
+  path: ./clusters/mycluster-0
+  prune: true
+  sourceRef:
+    kind: GitRepository
+    name: flux-system
diff --git a/clusters/mycluster-0/flux-system/kustomization.yaml b/clusters/mycluster-0/flux-system/kustomization.yaml
new file mode 100644
index 00000000..3842229e
--- /dev/null
+++ b/clusters/mycluster-0/flux-system/kustomization.yaml
@@ -0,0 +1,5 @@
+apiVersion: kustomize.config.k8s.io/v1beta1
+kind: Kustomization
+resources:
+- gotk-components.yaml
+- gotk-sync.yaml
diff --git a/security/base/cert-manager/vault-clusterissuer.yaml b/security/base/cert-manager/vault-clusterissuer.yaml
index 101a5d3c..fec2e2f4 100644
--- a/security/base/cert-manager/vault-clusterissuer.yaml
+++ b/security/base/cert-manager/vault-clusterissuer.yaml
@@ -11,7 +11,7 @@ spec:
     auth:
       appRole:
         path: approle
-        roleId: ed0bc8bd-79ef-d06a-48da-744e9dd754c2 # !! This value changes each time I recreate the whole platform
+        roleId: 2bea8f5a-f9aa-b09e-c5b8-5bcd98c8fa22 # !! This value changes each time I recreate the whole platform
         secretRef:
           name: cert-manager-vault-approle
           key: secret_id
diff --git a/security/base/zitadel/externalsecret-sqlinstance-masterpassword.yaml b/security/base/zitadel/externalsecret-sqlinstance-masterpassword.yaml
index 22ab1bc3..b233058a 100644
--- a/security/base/zitadel/externalsecret-sqlinstance-masterpassword.yaml
+++ b/security/base/zitadel/externalsecret-sqlinstance-masterpassword.yaml
@@ -13,6 +13,7 @@ spec:
     name: clustersecretstore
   target:
     template:
+      engineVersion: v2
       data:
         password: "{{ .ZITADEL_DATABASE_POSTGRES_ADMIN_PASSWORD }}"
     creationPolicy: Owner