helmrelease.yaml

apiVersion: helm.toolkit.fluxcd.io/v2
kind: HelmRelease
metadata:
  name: reflector
  namespace: reflector
spec:
  interval: 1h
  driftDetection:
    mode: enabled
  chart:
    spec:
      chart: reflector
      version: 7.1.288
      sourceRef:
        kind: HelmRepository
        namespace: reflector
        name: reflector
      interval: 1h
  values:
    priorityClassName: system-cluster-critical

    podLabels:
      policy.gabe565.com/egress-kubeapi: "true"

    securityContext:
      readOnlyRootFilesystem: true

  postRenderers:
    - kustomize:
        patches:
          - target:
              kind: Deployment
              name: reflector
            # language=yaml
            patch: |
              - op: add
                path: /spec/template/spec/volumes
                value:
                  - name: tmp
                    emptyDir: {}
              - op: add
                path: /spec/template/spec/containers/0/volumeMounts
                value:
                  - name: tmp
                    mountPath: /tmp