From 608855b997a3b361a1043be2ecbc00df103bfc9a Mon Sep 17 00:00:00 2001
From: Ryan Cavicchioni <ryan@cavi.cc>
Date: Thu, 23 Jan 2025 14:44:01 -0600
Subject: [PATCH] add kubelet-csr-approver

---
 .../kubelet-csr-approver/kustomization.yaml   |  6 ++++++
 .../kubelet-csr-approver/release.yaml         | 19 +++++++++++++++++++
 .../kubelet-csr-approver/repository.yaml      |  8 ++++++++
 3 files changed, 33 insertions(+)
 create mode 100644 infrastructure/controllers/kubelet-csr-approver/kustomization.yaml
 create mode 100644 infrastructure/controllers/kubelet-csr-approver/release.yaml
 create mode 100644 infrastructure/controllers/kubelet-csr-approver/repository.yaml

diff --git a/infrastructure/controllers/kubelet-csr-approver/kustomization.yaml b/infrastructure/controllers/kubelet-csr-approver/kustomization.yaml
new file mode 100644
index 0000000..4a8c5bd
--- /dev/null
+++ b/infrastructure/controllers/kubelet-csr-approver/kustomization.yaml
@@ -0,0 +1,6 @@
+---
+apiVersion: kustomize.config.k8s.io/v1beta1
+kind: Kustomization
+resources:
+  - repository.yaml
+  - release.yaml
diff --git a/infrastructure/controllers/kubelet-csr-approver/release.yaml b/infrastructure/controllers/kubelet-csr-approver/release.yaml
new file mode 100644
index 0000000..8dad866
--- /dev/null
+++ b/infrastructure/controllers/kubelet-csr-approver/release.yaml
@@ -0,0 +1,19 @@
+---
+apiVersion: helm.toolkit.fluxcd.io/v2
+kind: HelmRelease
+metadata:
+  name: kubelet-csr-approver
+spec:
+  releaseName: kubelet-csr-approver
+  chart:
+    spec:
+      chart: kubelet-csr-approver
+      sourceRef:
+        kind: HelmRepository
+        name: kubelet-csr-approver
+  values:
+    providerRegex: ^(?:(?:kube|k[038]s))\d+$
+    providerIpPrefixes: 10.100.100.0/24
+    maxExpirationSeconds: 86400
+    bypassDnsResolution: false
+  interval: 1m
diff --git a/infrastructure/controllers/kubelet-csr-approver/repository.yaml b/infrastructure/controllers/kubelet-csr-approver/repository.yaml
new file mode 100644
index 0000000..71651a2
--- /dev/null
+++ b/infrastructure/controllers/kubelet-csr-approver/repository.yaml
@@ -0,0 +1,8 @@
+---
+apiVersion: source.toolkit.fluxcd.io/v1
+kind: HelmRepository
+metadata:
+  name: kubelet-csr-approver
+spec:
+  interval: 5m
+  url: https://postfinance.github.io/kubelet-csr-approver