HetznerTerra/infrastructure/addons/external-secrets/helmrelease-external-secrets.yaml

apiVersion: helm.toolkit.fluxcd.io/v2
kind: HelmRelease
metadata:
  name: external-secrets
  namespace: flux-system
spec:
  interval: 10m
  targetNamespace: external-secrets
  chartRef:
    kind: OCIRepository
    name: external-secrets
    namespace: flux-system
  install:
    createNamespace: true
    remediation:
      retries: 3
  upgrade:
    remediation:
      retries: 3
  values:
    installCRDs: true
    nodeSelector:
      kubernetes.io/hostname: k8s-cluster-cp-1
    webhook:
      failurePolicy: Ignore
      nodeSelector:
        kubernetes.io/hostname: k8s-cluster-cp-1
    certController:
      nodeSelector:
        kubernetes.io/hostname: k8s-cluster-cp-1
    serviceMonitor:
      enabled: false