---
# GitRepository — the single source of truth Flux reconciles from (R-GITOPS-01).
# Phase 0 STUB: not applied until Flux is bootstrapped in Phase 1 (WS-INFRA).
#
# Bootstrapping sequence (spec docs/05 "Source-of-truth", CONTRIBUTING.md):
#   1. Initially points at the BOOTSTRAP SOURCE (this local repo / out-of-band).
#   2. Gitea is onboarded early (roadmap Phase 6).
#   3. TODO(WS-GITOPS, Phase 6): repoint spec.url -> https://gitea.home.keithjackson.dev/<org>/home-network-k3s-impl
#      and keep an off-cluster mirror so a source-of-truth outlives the cluster.
apiVersion: source.toolkit.fluxcd.io/v1
kind: GitRepository
metadata:
  name: flux-system
  namespace: flux-system
spec:
  interval: 1m
  # TODO(WS-INFRA/WS-GITOPS): set to the bootstrap source URL at Phase-1 bootstrap.
  url: https://REPLACE-ME.invalid/home-network-k3s-impl.git
  ref:
    # Reconcile the tracked branch. Overlay may patch this if dev/prod track different branches;
    # the default model tracks a single branch and differentiates by clusters/<env> path.
    branch: main
  # TODO(WS-SEC, Phase 1): reference the SOPS/age or deploy-key secret BY NAME only (no plaintext).
  # secretRef:
  #   name: flux-system   # created by `flux bootstrap`