devantler-tech · botantler · May 27, 2026 · May 26, 2026 · May 26, 2026
@@ -6,5 +6,4 @@ resources:
   - rolebinding.yaml
   - serviceaccount.yaml
   - sync.yaml
-  - image-policy.yaml
   - networkpolicy.yaml
@@ -8,7 +8,7 @@ metadata:
 spec:
   interval: 1m
   ref:
-    tag: 1.1.0 # {"$imagepolicy": "ascoachingogvaner:ascoachingogvaner:tag"}
+    semver: ">=1.0.0"
   url: oci://ghcr.io/devantler-tech/ascoachingogvaner/manifests
   secretRef:
     name: ghcr-auth

@@ -7,5 +7,4 @@ resources:
   - serviceaccount.yaml
   - sops-age-secret.enc.yaml
   - sync.yaml
-  - image-policy.yaml
   - networkpolicy.yaml
@@ -8,7 +8,7 @@ metadata:
 spec:
   interval: 1m
   ref:
-    tag: 1.5.9 # {"$imagepolicy": "wedding-app:wedding-app:tag"}
+    semver: ">=1.0.0"
   url: oci://ghcr.io/devantler-tech/wedding-app/manifests
   secretRef:
     name: ghcr-auth

@@ -3,7 +3,6 @@ apiVersion: kustomize.config.k8s.io/v1beta1
 kind: Kustomization
 resources:
   - ../../../bases/apps/
-  - image-automation/
 patches:
   - target:
       group: kustomize.toolkit.fluxcd.io

@@ -1,8 +1,10 @@
-# Extends the KSail-bootstrapped FluxInstance to include image automation
-# controllers (image-reflector-controller + image-automation-controller).
-# KSail creates the initial FluxInstance during `ksail cluster create`;
-# this resource is reconciled by the infrastructure-controllers Flux
-# Kustomization post-bootstrap in the Hetzner (prod) environment only.
+# Overrides the KSail-bootstrapped FluxInstance to pin the distribution and
+# tune the controllers. KSail creates the initial FluxInstance during
+# `ksail cluster create`; this resource is reconciled by the
+# infrastructure-controllers Flux Kustomization post-bootstrap in the Hetzner
+# (prod) environment only. Tenant apps update via native OCIRepository semver
+# selection, so the image-reflector/image-automation controllers are not
+# installed.
 ---
 apiVersion: fluxcd.controlplane.io/v1
 kind: FluxInstance
@@ -18,8 +20,6 @@ spec:
     - kustomize-controller
     - helm-controller
     - notification-controller
-    - image-reflector-controller
-    - image-automation-controller
   cluster:
     type: kubernetes
     multitenant: false

@@ -3,5 +3,3 @@ apiVersion: kustomize.config.k8s.io/v1beta1
 kind: Kustomization
 resources:
   - seed-hcloud.yaml
-  - git-key-secret.enc.yaml
-  - seed-image-automation-git.yaml