tofu-controller

cluster/flux-system/helm-repos/tofu-controller.yaml

@@ -0,0 +1,10 @@
+---
+apiVersion: source.toolkit.fluxcd.io/v1
+kind: HelmRepository
+metadata:
+  name: tofu-controller
+  namespace: flux-system
+spec:
+  interval: 1h0s
+  type: oci
+  url: oci://ghcr.io/flux-iac/charts

cluster/flux-system/kustomization.yaml

@@ -2,5 +2,6 @@ apiVersion: kustomize.config.k8s.io/v1beta1
 kind: Kustomization
 namespace: flux-system
 resources:
-- root.yaml
-- webhook-ingress.yaml
+  - root.yaml
+  - webhook-ingress.yaml
+  - tofu-controller.yaml

cluster/flux-system/tofu-controller.yaml

@@ -0,0 +1,37 @@
+---
+apiVersion: helm.toolkit.fluxcd.io/v2
+kind: HelmRelease
+metadata:
+  name: tofu-controller
+  namespace: flux-system
+spec:
+  chart:
+    spec:
+      chart: tf-controller
+      sourceRef:
+        kind: HelmRepository
+        name: tofu-controller
+      version: '0.16.0-rc.4'
+  interval: 1h0s
+  targetNamespace: flux-system
+  install:
+    crds: Create
+    remediation:
+      retries: -1
+  upgrade:
+    crds: CreateReplace
+    remediation:
+      retries: -1
+  values:
+    # https://github.com/flux-iac/tofu-controller/blob/main/charts/tofu-controller/values.yaml
+    replicaCount: 2
+    concurrency: 4
+    caCertValidityDuration: 24h
+    certRotationCheckFrequency: 30m
+    image:
+      tag: v0.16.0-rc.4
+    runner:
+      image:
+        tag: v0.16.0-rc.4
+      grpc:
+        maxMessageSize: 30