From a2776515bf2221e5a698d9db948e22267e60a95d Mon Sep 17 00:00:00 2001
From: Luke Ashe-Browne <xactly@gmail.com>
Date: Sat, 19 Jun 2021 14:00:57 +0100
Subject: [PATCH] add sealed secrets component

---
 .../sealedsecrets/bitnami-helmrepo.yaml       | 10 +++++++
 components/sealedsecrets/namespace.yaml       |  4 +++
 .../sealedsecrets-helmrelease.yaml            | 28 +++++++++++++++++++
 3 files changed, 42 insertions(+)
 create mode 100644 components/sealedsecrets/bitnami-helmrepo.yaml
 create mode 100644 components/sealedsecrets/namespace.yaml
 create mode 100644 components/sealedsecrets/sealedsecrets-helmrelease.yaml

diff --git a/components/sealedsecrets/bitnami-helmrepo.yaml b/components/sealedsecrets/bitnami-helmrepo.yaml
new file mode 100644
index 0000000..48ea74b
--- /dev/null
+++ b/components/sealedsecrets/bitnami-helmrepo.yaml
@@ -0,0 +1,10 @@
+---
+apiVersion: source.toolkit.fluxcd.io/v1beta1
+kind: HelmRepository
+metadata:
+  name: bitnami-labs-sealed-secrets
+  namespace: sealedsecrets-system
+spec:
+  interval: 1h0m0s
+  url: https://bitnami-labs.github.io/sealed-secrets
+
diff --git a/components/sealedsecrets/namespace.yaml b/components/sealedsecrets/namespace.yaml
new file mode 100644
index 0000000..59fe3e3
--- /dev/null
+++ b/components/sealedsecrets/namespace.yaml
@@ -0,0 +1,4 @@
+apiVersion: v1
+kind: Namespace
+metadata:
+  name: sealedsecrets-system
diff --git a/components/sealedsecrets/sealedsecrets-helmrelease.yaml b/components/sealedsecrets/sealedsecrets-helmrelease.yaml
new file mode 100644
index 0000000..d64d70c
--- /dev/null
+++ b/components/sealedsecrets/sealedsecrets-helmrelease.yaml
@@ -0,0 +1,28 @@
+---
+apiVersion: helm.toolkit.fluxcd.io/v2beta1
+kind: HelmRelease
+metadata:
+  name: sealed-secrets
+  namespace: sealedsecrets-system
+spec:
+  chart:
+    spec:
+      chart: sealed-secrets
+      sourceRef:
+        kind: HelmRepository
+        name: bitnami-labs-sealed-secrets
+      version: ">=1.16.0-0"
+  interval: 1h0m0s
+  releaseName: sealed-secrets
+  targetNamespace: sealed-secrets
+  install:
+    crds: Create
+  upgrade:
+    crds: CreateReplace
+values:
+  dashboards: 
+    create: true
+    labels:
+      grafana_dashboard: "1"
+  # secretName: "sealed-secrets-key"
+  # uncomment this when generated key is offloaded and pre-configured