From 636311d75b48857fd3abf2f9832e6bad32054915 Mon Sep 17 00:00:00 2001
From: Sam Day <me@samcday.com>
Date: Wed, 26 Jun 2024 16:00:00 +0200
Subject: [PATCH] tofu-controller

---
 .../helm-repos/tofu-controller.yaml           | 10 +++++
 cluster/flux-system/kustomization.yaml        |  5 ++-
 cluster/flux-system/tofu-controller.yaml      | 37 +++++++++++++++++++
 3 files changed, 50 insertions(+), 2 deletions(-)
 create mode 100644 cluster/flux-system/helm-repos/tofu-controller.yaml
 create mode 100644 cluster/flux-system/tofu-controller.yaml

diff --git a/cluster/flux-system/helm-repos/tofu-controller.yaml b/cluster/flux-system/helm-repos/tofu-controller.yaml
new file mode 100644
index 00000000..90dce5d4
--- /dev/null
+++ b/cluster/flux-system/helm-repos/tofu-controller.yaml
@@ -0,0 +1,10 @@
+---
+apiVersion: source.toolkit.fluxcd.io/v1
+kind: HelmRepository
+metadata:
+  name: tofu-controller
+  namespace: flux-system
+spec:
+  interval: 1h0s
+  type: oci
+  url: oci://ghcr.io/flux-iac/charts
diff --git a/cluster/flux-system/kustomization.yaml b/cluster/flux-system/kustomization.yaml
index 4e9c5821..de4705e5 100644
--- a/cluster/flux-system/kustomization.yaml
+++ b/cluster/flux-system/kustomization.yaml
@@ -2,5 +2,6 @@ apiVersion: kustomize.config.k8s.io/v1beta1
 kind: Kustomization
 namespace: flux-system
 resources:
-- root.yaml
-- webhook-ingress.yaml
+  - root.yaml
+  - webhook-ingress.yaml
+  - tofu-controller.yaml
diff --git a/cluster/flux-system/tofu-controller.yaml b/cluster/flux-system/tofu-controller.yaml
new file mode 100644
index 00000000..55870efb
--- /dev/null
+++ b/cluster/flux-system/tofu-controller.yaml
@@ -0,0 +1,37 @@
+---
+apiVersion: helm.toolkit.fluxcd.io/v2
+kind: HelmRelease
+metadata:
+  name: tofu-controller
+  namespace: flux-system
+spec:
+  chart:
+    spec:
+      chart: tf-controller
+      sourceRef:
+        kind: HelmRepository
+        name: tofu-controller
+      version: '0.16.0-rc.4'
+  interval: 1h0s
+  targetNamespace: flux-system
+  install:
+    crds: Create
+    remediation:
+      retries: -1
+  upgrade:
+    crds: CreateReplace
+    remediation:
+      retries: -1
+  values:
+    # https://github.com/flux-iac/tofu-controller/blob/main/charts/tofu-controller/values.yaml
+    replicaCount: 2
+    concurrency: 4
+    caCertValidityDuration: 24h
+    certRotationCheckFrequency: 30m
+    image:
+      tag: v0.16.0-rc.4
+    runner:
+      image:
+        tag: v0.16.0-rc.4
+      grpc:
+        maxMessageSize: 30