From 4edc3041d821c1d0a78c2e241067694e632f4e10 Mon Sep 17 00:00:00 2001
From: Ryan Cavicchioni <ryan@cavi.cc>
Date: Thu, 23 Jan 2025 14:44:01 -0600
Subject: [PATCH] add kubelet-csr-approver

---
 .../kubelet-csr-approver/kustomization.yaml   |  7 +++++++
 .../kubelet-csr-approver/release.yaml         | 20 +++++++++++++++++++
 .../kubelet-csr-approver/repository.yaml      |  9 +++++++++
 3 files changed, 36 insertions(+)
 create mode 100644 infrastructure/controllers/kubelet-csr-approver/kustomization.yaml
 create mode 100644 infrastructure/controllers/kubelet-csr-approver/release.yaml
 create mode 100644 infrastructure/controllers/kubelet-csr-approver/repository.yaml

diff --git a/infrastructure/controllers/kubelet-csr-approver/kustomization.yaml b/infrastructure/controllers/kubelet-csr-approver/kustomization.yaml
new file mode 100644
index 0000000..795945b
--- /dev/null
+++ b/infrastructure/controllers/kubelet-csr-approver/kustomization.yaml
@@ -0,0 +1,7 @@
+---
+apiVersion: kustomize.config.k8s.io/v1beta1
+kind: Kustomization
+namespace: kube-system
+resources:
+  - repository.yaml
+  - release.yaml
diff --git a/infrastructure/controllers/kubelet-csr-approver/release.yaml b/infrastructure/controllers/kubelet-csr-approver/release.yaml
new file mode 100644
index 0000000..7923cb7
--- /dev/null
+++ b/infrastructure/controllers/kubelet-csr-approver/release.yaml
@@ -0,0 +1,20 @@
+---
+apiVersion: helm.toolkit.fluxcd.io/v2
+kind: HelmRelease
+metadata:
+  name: kubelet-csr-approver
+  namespace: kube-system
+spec:
+  releaseName: kubelet-csr-approver
+  chart:
+    spec:
+      chart: kubelet-csr-approver
+      sourceRef:
+        kind: HelmRepository
+        name: kubelet-csr-approver
+  values:
+    providerRegex: ^(?:(?:kube|k[038]s))\d+$
+    providerIpPrefixes: 10.100.100.0/24
+    maxExpirationSeconds: 86400
+    bypassDnsResolution: false
+  interval: 1m
diff --git a/infrastructure/controllers/kubelet-csr-approver/repository.yaml b/infrastructure/controllers/kubelet-csr-approver/repository.yaml
new file mode 100644
index 0000000..809a18c
--- /dev/null
+++ b/infrastructure/controllers/kubelet-csr-approver/repository.yaml
@@ -0,0 +1,9 @@
+---
+apiVersion: source.toolkit.fluxcd.io/v1
+kind: HelmRepository
+metadata:
+  name: kubelet-csr-approver
+  namespace: kube-system
+spec:
+  interval: 5m
+  url: https://postfinance.github.io/kubelet-csr-approver