flux: add image update automation

deploy/app/image-policy.yaml

@@ -0,0 +1,13 @@
+apiVersion: image.toolkit.fluxcd.io/v1
+kind: ImagePolicy
+metadata:
+  name: eclipse-mosquitto
+spec:
+  imageRepositoryRef:
+    name: eclipse-mosquitto
+  filterTags:
+    pattern: '^latest$'
+  policy:
+    alphabetical: {}
+  digestReflectionPolicy: Always
+  interval: 24h

deploy/app/image-repo.yaml

@@ -0,0 +1,7 @@
+apiVersion: image.toolkit.fluxcd.io/v1
+kind: ImageRepository
+metadata:
+  name: eclipse-mosquitto
+spec:
+  image: eclipse-mosquitto
+  interval: 72h

deploy/app/image-update-automation.yaml

@@ -0,0 +1,24 @@
+apiVersion: image.toolkit.fluxcd.io/v1
+kind: ImageUpdateAutomation
+metadata:
+  name: lms
+spec:
+  interval: 30m
+  sourceRef:
+    kind: GitRepository
+    name: mosquitto
+  git:
+    checkout:
+      ref:
+        branch: master
+    commit:
+      author:
+        name: FluxCD
+        email: flux@local
+      messageTemplate: |
+        Update mosquitto image.
+    push:
+      branch: master
+  update:
+    path: ./deploy/app/statefulset.yaml
+    strategy: Setters

deploy/app/kustomization.yaml

@@ -5,3 +5,6 @@ resources:
   - statefulset.yaml
   - pvc.yaml
   - secret.yaml
+  - image-policy.yaml
+  - image-repo.yaml
+  - image-update-automation.yaml

deploy/app/statefulset.yaml

@@ -19,7 +19,9 @@ spec:
           hostNetwork: true
           containers:
             - name: mosquitto
-              image: eclipse-mosquitto:latest
+              ### Maintained by flux - Image Update Automation
+              image: eclipse-mosquitto:latest # {"$imagepolicy": "mqtt:eclipse-mosquitto"}
+              ###
               imagePullPolicy: Always
               command: ["/usr/sbin/mosquitto"]
               args: ["-c", "/etc/mosquitto/mosquitto.conf"]