flux: add weave gitops ui

NOTES.md

@@ -0,0 +1,3 @@
+# Rotation reminders (temporary secrets set by automation)
+
+- Weave GitOps UI (`cd.bstein.dev`) admin: `admin` / `G1tOps!2025` — rotate immediately after first login.

infrastructure/sources/helm/kustomization.yaml

@@ -8,4 +8,3 @@ resources:
   - mailu.yaml
   - prometheus.yaml
   - victoria-metrics.yaml
-  - weave-gitops.yaml

infrastructure/sources/helm/weave-gitops.yaml

@@ -1,9 +0,0 @@
-# infrastructure/sources/helm/weave-gitops.yaml
-apiVersion: source.toolkit.fluxcd.io/v1
-kind: HelmRepository
-metadata:
-  name: weave-gitops
-  namespace: flux-system
-spec:
-  interval: 1h
-  url: https://charts.gitops.weave.works

services/gitops-ui/helmrelease.yaml

@@ -8,12 +8,12 @@ spec:
   interval: 30m
   chart:
     spec:
-      chart: weave-gitops
+      chart: ./charts/gitops-server
-      version: 4.0.36
       sourceRef:
-        kind: HelmRepository
+        kind: GitRepository
-        name: weave-gitops
+        name: weave-gitops-upstream
         namespace: flux-system
+      # track upstream tag; see source object for version pin
   install:
     remediation:
       retries: 3

services/gitops-ui/kustomization.yaml

@@ -3,4 +3,5 @@ apiVersion: kustomize.config.k8s.io/v1beta1
 kind: Kustomization
 namespace: flux-system
 resources:
+  - source.yaml
   - helmrelease.yaml

services/gitops-ui/source.yaml

@@ -0,0 +1,11 @@
+# services/gitops-ui/source.yaml
+apiVersion: source.toolkit.fluxcd.io/v1
+kind: GitRepository
+metadata:
+  name: weave-gitops-upstream
+  namespace: flux-system
+spec:
+  interval: 1h
+  url: https://github.com/weaveworks/weave-gitops.git
+  ref:
+    tag: v0.38.0