kured.yaml

apiVersion: source.toolkit.fluxcd.io/v1beta2
kind: HelmRepository
metadata:
  name: kured
  namespace: system-upgrade
spec:
  interval: 30m
  url: https://kubereboot.github.io/charts
---
apiVersion: helm.toolkit.fluxcd.io/v2beta2
kind: HelmRelease
metadata:
  name: kured
  namespace: system-upgrade
spec:
  releaseName: kured
  chart:
    spec:
      chart: kured
      sourceRef:
        kind: HelmRepository
        name: kured
        namespace: system-upgrade
      version: 5.4.3
  interval: 5m
  valuesFrom:
    - kind: ConfigMap
      name: kured-base-values
      valuesKey: values.yaml
    - kind: Secret
      name: kured-override-values
      valuesKey: values-overrides.yaml
      optional: true
---
apiVersion: v1
kind: ConfigMap
metadata:
  name: kured-base-values
  namespace: system-upgrade
data:
  values.yaml: |
    configuration:
      annotateNodes: true
      preferNoScheduleTaint: weave.works/kured-node-reboot
      blockingPodSelector:
        - upgrade.cattle.io/plan
    hostNetwork: false
    metrics:
      create: true
    resources:
      requests:
        memory: 64Mi
        cpu: 10m
      limits:
        memory: 256Mi
        cpu: "1"
---
apiVersion: networking.k8s.io/v1
kind: NetworkPolicy
metadata:
  name: allow-from-monitoring-to-kured
  namespace: system-upgrade
spec:
  policyTypes:
  - Ingress
  ingress:
  - from:
    - namespaceSelector:
        matchLabels:
          monitoring.shivering-isles.com/network-access-required: "true"