apiVersion: source.toolkit.fluxcd.io/v1
kind: HelmRepository
metadata:
  name: sealed-secrets
  namespace: security
spec:
  interval: 1h
  url: https://bitnami-labs.github.io/sealed-secrets
---
apiVersion: helm.toolkit.fluxcd.io/v2
kind: HelmRelease
metadata:
  name: sealed-secrets
  namespace: security
spec:
  serviceAccountName: flux
  interval: 15m
  timeout: 1h
  chart:
    spec:
      chart: sealed-secrets
      version: "2.17.3" # {"$imagepolicy": "flux-system:sealed-secrets:tag"}
      sourceRef:
        kind: HelmRepository
        name: sealed-secrets
      interval: 5m
  install:
    crds: Create
    timeout: 9m
    remediation:
      retries: 3
  upgrade:
    crds: CreateReplace
    timeout: 9m
    remediation:
      retries: 3
  values:
    secretName: sealed-secrets-key