From b6f775fd2b279e948456af3b03af34850cc5d929 Mon Sep 17 00:00:00 2001
From: Jan Novak <jan.novak@livesport.eu>
Date: Wed, 7 Jan 2026 19:52:16 +0100
Subject: [PATCH] gitops/external-secrets: deploy CRDs first in another
 kustomization

---
 ...elmrelease-external-secrets-crds-only.yaml | 27 +++++++++++++++++++
 .../flux-system/extra-kustomizations.yaml     | 15 +++++++++++
 2 files changed, 42 insertions(+)
 create mode 100644 gitops/home-kubernetes/00-crds/helmrelease-external-secrets-crds-only.yaml

diff --git a/gitops/home-kubernetes/00-crds/helmrelease-external-secrets-crds-only.yaml b/gitops/home-kubernetes/00-crds/helmrelease-external-secrets-crds-only.yaml
new file mode 100644
index 0000000..ded7eba
--- /dev/null
+++ b/gitops/home-kubernetes/00-crds/helmrelease-external-secrets-crds-only.yaml
@@ -0,0 +1,27 @@
+apiVersion: helm.toolkit.fluxcd.io/v2
+kind: HelmRelease
+metadata:
+  name: external-secrets-crds
+  namespace: external-secrets
+spec:
+  interval: 1h
+  chart:
+    spec:
+      chart: external-secrets
+      sourceRef:
+        kind: HelmRepository
+        name: external-secrets
+      version: "1.2.1"
+  values:
+    installCRDs: true
+    webhook:
+      create: false
+    certController:
+      create: false
+    serviceAccount:
+      create: false
+    resources: {}
+    crds:
+      createClusterExternalSecret: true
+      createClusterSecretStore: true
+      createPushSecret: true
\ No newline at end of file
diff --git a/gitops/home-kubernetes/flux-system/extra-kustomizations.yaml b/gitops/home-kubernetes/flux-system/extra-kustomizations.yaml
index 709821a..fe4c326 100644
--- a/gitops/home-kubernetes/flux-system/extra-kustomizations.yaml
+++ b/gitops/home-kubernetes/flux-system/extra-kustomizations.yaml
@@ -1,6 +1,19 @@
 ---
 apiVersion: kustomize.toolkit.fluxcd.io/v1
 kind: Kustomization
+metadata:
+  name: 00-crds
+  namespace: flux-system
+spec:
+  interval: 10m0s
+  path: ./gitops/home-kubernetes/00-crds
+  prune: true
+  sourceRef:
+    kind: GitRepository
+    name: flux-system
+---
+apiVersion: kustomize.toolkit.fluxcd.io/v1
+kind: Kustomization
 metadata:
   name: cilium
   namespace: flux-system
@@ -37,6 +50,8 @@ spec:
   sourceRef:
     kind: GitRepository
     name: flux-system
+  dependsOn:
+    - name: 00-crds
 ---
 apiVersion: kustomize.toolkit.fluxcd.io/v1
 kind: Kustomization