feat: add Flux ImageRepository and ImagePolicy resources to Talos repo #18
Reference in New Issue
Block a user
Delete Branch "%!s()"
Deleting a branch is permanent. Although the deleted branch may continue to exist for a short time before it actually gets removed, it CANNOT be undone in most cases. Continue?
Description
The ROADMAP.md (Phase 3.2) specifies that the container image tag should be picked up automatically by Flux image automation via
$imagepolicyannotations. This requires dedicated Flux CRD resources in the Talos repo that are distinct from the core Kubernetes manifests tracked in #8.What to Do
In the Talos repo at
testing1/first-cluster/apps/gitea-mobile/(alongside the manifests from #8), create:imagerepository.yaml—ImageRepositoryCRD pointing togitea.leeworks.dev/0xwheatyz/gitea-mobileimagepolicy.yaml—ImagePolicyCRD selecting the latest image by timestamp-based semver or alphabetical tag filterdeployment.yamlto include the# {"$imagepolicy": "flux-system:gitea-mobile"}annotation comment on the image field so Flux can perform automated image tag updateskustomization.yamlto include the new resourcesAcceptance Criteria
imagerepository.yamlcreated with correct registry URL and pull secret (if needed)imagepolicy.yamlcreated with tag filter matching timestamp+SHA pattern (e.g.semveroralphabetical)deployment.yamlimage field annotated with$imagepolicymarkerkustomization.yamlupdated to include both new filesflux reconcile image repository gitea-mobileruns without error after mergedeployment.yamlcommit by Flux image-automation-controllerRoadmap ref: Phase 3.2 — Container Registry / Flux image automation
Depends on: leeworks-agents/gitea-mobile#8
Triage Report
Priority: P3
Complexity: Small
Dependencies: Blocked on #8 (K8s manifests must be created first).
Assigned agent role: @devops
Rationale: This issue creates Flux ImageRepository and ImagePolicy CRDs in the Talos repo and annotates the deployment with imagepolicy markers. This is FluxCD operations work.
Status: BLOCKED -- waiting for #8 to be completed before delegating.
Status Update
PR created on Talos repo: leeworks-agents/Talos#74
Changes:
testing1/first-cluster/cluster/flux/gitea-mobile-image-automation.yamlwith:ImageRepositoryscanninggitea.leeworks.dev/0xwheatyz/gitea-mobileevery 1 minuteImagePolicyselecting latestYYYYMMDDHHMMSS-{hash}tagImageUpdateAutomationauto-committing tag updates to the Talos repo$imagepolicyannotation to deployment.yaml image fieldkustomization.yamlresource listNote: This PR includes a cherry-pick of #73 (K8s manifests). Once #73 is merged, the base commit in this PR becomes a no-op.
Ready for review and merge.
Sprint planning update (2026-03-26): This issue depends on #8 (K8s manifests) being merged first, since the
deployment.yamlfrom #8 needs to exist before it can be annotated with the$imagepolicymarker. Addedblockedlabel until #8 is done.Repo Manager Update (2026-03-26):
Talos PR #74 is open and mergeable with no reviews yet. Posted a review request for the architect. This PR depends on Talos PR #73 (issue #8) being merged first.
Current state: Work is complete, awaiting architect review. Blocked on PR #73 merge order.