feat(terraform): Use OCI repo

kubernetes/clusters/cluster-0/infrastructure/terraform/cloudflare.yaml

@@ -1,17 +1,14 @@
 ---
-apiVersion: source.toolkit.fluxcd.io/v1beta1
-kind: GitRepository
+apiVersion: source.toolkit.fluxcd.io/v1beta2
+kind: OCIRepository
 metadata:
-  name: home-ops-tf-cloudflare
+  name: oci-terraform-cloudflare
   namespace: infrastructure
 spec:
-  interval: 30m
+  interval: 1m
+  url: oci://ghcr.io/bjw-s/terraform-cloudflare
   ref:
-    branch: main
-  url: https://github.com/bjw-s/home-ops.git
-  ignore: |
-    /*
-    !/infrastructure/terraform/cloudflare
+    tag: main
 ---
 apiVersion: infra.contrib.fluxcd.io/v1alpha1
 kind: Terraform
@@ -27,8 +24,8 @@ spec:
     name: tfe-cli-config
   path: "./infrastructure/terraform/cloudflare"
   sourceRef:
-    kind: GitRepository
-    name: home-ops-tf-cloudflare
+    kind: OCIRepository
+    name: oci-terraform-cloudflare
     namespace: infrastructure
   runnerPodTemplate:
     spec:

kubernetes/clusters/cluster-0/infrastructure/terraform/github.yaml

@@ -1,17 +1,14 @@
 ---
-apiVersion: source.toolkit.fluxcd.io/v1beta1
-kind: GitRepository
+apiVersion: source.toolkit.fluxcd.io/v1beta2
+kind: OCIRepository
 metadata:
-  name: home-ops-tf-github
+  name: oci-terraform-github
   namespace: infrastructure
 spec:
-  interval: 30m
+  interval: 1m
+  url: oci://ghcr.io/bjw-s/terraform-github
   ref:
-    branch: main
-  url: https://github.com/bjw-s/home-ops.git
-  ignore: |
-    /*
-    !/infrastructure/terraform/github
+    tag: main
 ---
 apiVersion: infra.contrib.fluxcd.io/v1alpha1
 kind: Terraform
@@ -27,8 +24,8 @@ spec:
     name: tfe-cli-config
   path: "./infrastructure/terraform/github"
   sourceRef:
-    kind: GitRepository
-    name: home-ops-tf-github
+    kind: OCIRepository
+    name: oci-terraform-github
     namespace: infrastructure
   runnerPodTemplate:
     spec:

kubernetes/clusters/cluster-0/infrastructure/terraform/s3.yaml

@@ -0,0 +1,39 @@
+---
+apiVersion: source.toolkit.fluxcd.io/v1beta2
+kind: OCIRepository
+metadata:
+  name: oci-terraform-s3
+  namespace: infrastructure
+spec:
+  interval: 1m
+  url: oci://ghcr.io/bjw-s/terraform-s3
+  ref:
+    tag: main
+---
+apiVersion: infra.contrib.fluxcd.io/v1alpha1
+kind: Terraform
+metadata:
+  name: s3
+  namespace: infrastructure
+spec:
+  interval: 30m
+  approvePlan: "auto"
+  backendConfig:
+    disable: true
+  cliConfigSecretRef:
+    name: tfe-cli-config
+  path: "./infrastructure/terraform/s3"
+  sourceRef:
+    kind: OCIRepository
+    name: oci-terraform-s3
+    namespace: infrastructure
+  runnerPodTemplate:
+    spec:
+      volumeMounts:
+        - name: tf-controller-sops-key
+          mountPath: /home/runner/.config/sops/age/keys.txt
+          subPath: keys.txt
+      volumes:
+        - name: tf-controller-sops-key
+          secret:
+            secretName: tf-controller-sops-key

kubernetes/clusters/cluster-0/infrastructure/terraform/unifi.yaml

@@ -1,17 +1,14 @@
 ---
-apiVersion: source.toolkit.fluxcd.io/v1beta1
-kind: GitRepository
+apiVersion: source.toolkit.fluxcd.io/v1beta2
+kind: OCIRepository
 metadata:
-  name: home-ops-tf-unifi
+  name: oci-terraform-unifi
   namespace: infrastructure
 spec:
-  interval: 30m
+  interval: 1m
+  url: oci://ghcr.io/bjw-s/terraform-unifi
   ref:
-    branch: main
-  url: https://github.com/bjw-s/home-ops.git
-  ignore: |
-    /*
-    !/infrastructure/terraform/unifi
+    tag: main
 ---
 apiVersion: infra.contrib.fluxcd.io/v1alpha1
 kind: Terraform
@@ -27,8 +24,8 @@ spec:
     name: tfe-cli-config
   path: "./infrastructure/terraform/unifi"
   sourceRef:
-    kind: GitRepository
-    name: home-ops-tf-unifi
+    kind: OCIRepository
+    name: oci-terraform-unifi
     namespace: infrastructure
   runnerPodTemplate:
     spec: