feat: Added flux status to gitea commits

clusters/testing/kustomization.yaml

@@ -13,5 +13,6 @@ resources:
   - ../../configs/artifacts.yaml
   - ../../configs/letsencrypt/letsencrypt.yaml
   - ../../configs/certificates/certificates.yaml
-  - ../../configs/telegram-alerts/telegram-alerts.yaml
+  - ../../configs/alerts/telegram/alerts-telegram.yaml
+  - ../../configs/alerts/telegram/alerts-repo.yaml
   - ../../configs/longhorn-jobs/longhorn-jobs.yaml

configs/alerts/repo/alert.yaml

@@ -0,0 +1,12 @@
+apiVersion: notification.toolkit.fluxcd.io/v1beta3
+kind: Alert
+metadata:
+  name: repo
+  namespace: flux-system
+spec:
+  providerRef:
+    name: repo
+  eventSeverity: error
+  eventSources:
+    - kind: Kustomization
+      name: "*"

configs/alerts/repo/alerts-repo.yaml

@@ -1,7 +1,7 @@
 apiVersion: kustomize.toolkit.fluxcd.io/v1
 kind: Kustomization
 metadata:
-  name: telegram-alerts
+  name: alerts-repo
   namespace: flux-system
 spec:
   interval: 1h
@@ -9,7 +9,7 @@ spec:
   timeout: 5m
   sourceRef:
     kind: ExternalArtifact
-    name: telegram-alerts
+    name: alerts-repo
   decryption:
     provider: sops
     secretRef:

configs/alerts/repo/kustomization.yaml

@@ -1,6 +1,6 @@
 apiVersion: kustomize.config.k8s.io/v1beta1
 kind: Kustomization
 resources:
-  - secret-telegram.yaml
+  - secret-repo.enc.yaml
   - provider.yaml
   - alert.yaml

configs/alerts/repo/provider.yaml

@@ -0,0 +1,10 @@
+apiVersion: notification.toolkit.fluxcd.io/v1beta3
+kind: Provider
+metadata:
+  name: repo
+  namespace: flux-system
+spec:
+  type: gitea
+  address: https://git.huizinga.dev/infra/foundation
+  secretRef:
+    name: repo

configs/alerts/repo/secret-repo.enc.yaml

@@ -1,9 +1,9 @@
 apiVersion: v1
 stringData:
-    token: ENC[AES256_GCM,data:azBE1dVSbYNZzpagsQrmEoYGIGFn/URQ3VrksQRhUKuJyCrc6o6360u/k38NKg==,iv:iYpqz6Ndh5QESa8yGPU1nKD8/sb3dgloNLa3HFDihnU=,tag:2w0eslkZQOIb+qPYgNmHIQ==,type:str]
+    token: ENC[AES256_GCM,data:RZLFgmuin4hjJ1gSOFZLFeLpF/KjIr6vBGgovhyfLD9PQKSQq6eg5g==,iv:VUTnjgcoqfVcZrDM1S2VqBdSCYXC6hj4lHx/mI8bw8s=,tag:QSj3c5OX6JqJxt6WnglAIw==,type:str]
 kind: Secret
 metadata:
-    name: telegram
+    name: repo
     namespace: flux-system
 sops:
     age:
@@ -25,8 +25,8 @@ sops:
             RE5SSzI4MmdOWGhBTGNzR2NPeHArSHcK8sOiSL6tfAT6KFLkFy0NpRuiVbFayJPR
             vtki2eku7b0MKsQKCv/JPwSdOa7q/8Mxngiajxqwae0nObETSR+2TA==
             -----END AGE ENCRYPTED FILE-----
-    lastmodified: "2025-12-09T02:34:49Z"
-    mac: ENC[AES256_GCM,data:dwt7iU5FQjd3Hn/ynE+hAv6L6/EwGgJ9KR/98RsGL+ZoDOXrcnPu8I1Zp4HIuwxzLQetYPeeZy0qGl452eWnbI8kJ2MySGGpqdYeJVWplyfx3pSMT5ms7gbHYTAS7Kp8VLPtzynyKA14fJZNiECd/onVJehxE5bEtKEuiE7ZRvE=,iv:nc59zZeHLtwjsrCOI/WgQc7ZXKXI+5/Q2QcIdBVI+RQ=,tag:xdrCwPDVA1im+cNwPgU6Lg==,type:str]
+    lastmodified: "2025-12-15T00:11:25Z"
+    mac: ENC[AES256_GCM,data:xXPnZ5DP90FtT7yDUOPAMHl7vXgFM8JEnm/mpozB5/I4f3xxGP9b3RVfK3zESgqHREVUoD/hIQaTCwYHeqqWKwB7yQxc4ZuMKlTJ11iw0R8vsbj0Lk/a8v0kzCx5CDoTcvZE78go8LtIfYVxBKvcwP9ZN0Q9RuR235RVMW5Rz5M=,iv:oS9OUiyhliHzl1NEgfFr+eEfmgXlMX7VeeOcE382p1k=,tag:w6t9lNHqUYAFcEI3E4UBcQ==,type:str]
     pgp:
         - created_at: "2025-12-09T02:34:13Z"
           enc: |-

configs/alerts/telegram/alerts-telegram.yaml

@@ -0,0 +1,19 @@
+apiVersion: kustomize.toolkit.fluxcd.io/v1
+kind: Kustomization
+metadata:
+  name: alerts-telegram
+  namespace: flux-system
+spec:
+  interval: 1h
+  retryInterval: 2m
+  timeout: 5m
+  sourceRef:
+    kind: ExternalArtifact
+    name: alerts-telegram
+  decryption:
+    provider: sops
+    secretRef:
+      name: sops-gpg
+  path: ./
+  prune: true
+  wait: true

configs/alerts/telegram/kustomization.yaml

@@ -0,0 +1,6 @@
+apiVersion: kustomize.config.k8s.io/v1beta1
+kind: Kustomization
+resources:
+  - secret-telegram.enc.yaml
+  - provider.yaml
+  - alert.yaml

configs/artifacts.yaml

@@ -19,10 +19,15 @@ spec:
       copy:
         - from: "@foundation/configs/certificates/**"
           to: "@artifact/"
-    - name: telegram-alerts
+    - name: alerts-telegram
       originRevision: "@foundation"
       copy:
-        - from: "@foundation/configs/telegram-alerts/**"
+        - from: "@foundation/configs/alerts/telegram/**"
+          to: "@artifact/"
+    - name: alerts-repo
+      originRevision: "@foundation"
+      copy:
+        - from: "@foundation/configs/alerts/repo/**"
           to: "@artifact/"
     - name: longhorn-jobs
       originRevision: "@foundation"