From 451893371b4cfd95b3e6382186db350c2887c335 Mon Sep 17 00:00:00 2001
From: Michael Thomson <me@michaelthomson.dev>
Date: Thu, 7 May 2026 13:55:23 -0400
Subject: [PATCH] netbird operator

---
 .../netbird/netbird-mgmt-api-key.yaml         | 22 +++++++++++++++++++
 .../controllers/netbird/release.yaml          | 20 +++++++++++++++++
 .../controllers/netbird/repository.yaml       |  8 +++++++
 .../namespaces/namespace-netbird.yaml         |  4 ++++
 4 files changed, 54 insertions(+)
 create mode 100644 infrastructure/controllers/netbird/netbird-mgmt-api-key.yaml
 create mode 100644 infrastructure/controllers/netbird/release.yaml
 create mode 100644 infrastructure/controllers/netbird/repository.yaml
 create mode 100644 infrastructure/namespaces/namespace-netbird.yaml

diff --git a/infrastructure/controllers/netbird/netbird-mgmt-api-key.yaml b/infrastructure/controllers/netbird/netbird-mgmt-api-key.yaml
new file mode 100644
index 0000000..93b09dc
--- /dev/null
+++ b/infrastructure/controllers/netbird/netbird-mgmt-api-key.yaml
@@ -0,0 +1,22 @@
+apiVersion: v1
+data:
+    NB_API_KEY: ENC[AES256_GCM,data:bO72vA7WNMrb2baStVlDUbjRdwNaWswP5eGfXEBAPepjYIMmBJnCV81d8bEWClFcGw2MwDO2ulQ=,iv:x/swnBZgPhoz2lGjImqEvPPa8wNWTZJlCWo96hV63X8=,tag:T6yhV0to68Ybe5gcxsYedQ==,type:str]
+kind: Secret
+metadata:
+    name: netbird-mgmt-api-key
+    namespace: netbird
+sops:
+    age:
+        - recipient: age1s0206tnfaaw849x5xmt95axgu8qhxzlu5ywrwz09tpt8lwpx858q089nq9
+          enc: |
+            -----BEGIN AGE ENCRYPTED FILE-----
+            YWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IFgyNTUxOSBId2tXZ2krZFhiendhN3c2
+            OUN1V3RmRHBVQ1Z0T2FJTnU1WE9mRHp4QkNVCkpGOForQWFWN2FjdWppNG9hMFFK
+            d1N6ckMxdjFhT3NnRmVReG9jdXpMcFEKLS0tIFJ0RXJHQ2E2S08xUU9mdlFPTEd2
+            Rms3V1grTyt5L1pockJxNFRVUDFLMGsKLOj+Sxw/mzdmhdAp7G/NoVJixuL14we2
+            hwEank8H1TnOb/VynHUCYQrYaPXE+FkSYumhLo3IJC1ZMKzQUFp9dw==
+            -----END AGE ENCRYPTED FILE-----
+    lastmodified: "2026-05-07T17:46:40Z"
+    mac: ENC[AES256_GCM,data:RC07/U3NbwI5wU/ZbG+0A7nnDVlhBmcZsUevSmk9hqftFCCa4Q9R8q40XGFKod2pFl0SQzg8FXJPQABG6T9jYAKngD68zKD0wG2eHbXSxJiGT92nq2pkReOHZL/WFH6fGBse3RkXCjirwcIs27sLbXgdCCGmy36UU4CrnT3Nt5c=,iv:sQlS1M/58akJ1QdPGzpEZQaIxYk2QMwhdY3clIWnBCE=,tag:k95JRSlRzbMMbBNCCyB/8w==,type:str]
+    encrypted_regex: ^(data|stringData)$
+    version: 3.12.2
diff --git a/infrastructure/controllers/netbird/release.yaml b/infrastructure/controllers/netbird/release.yaml
new file mode 100644
index 0000000..9d1f3d6
--- /dev/null
+++ b/infrastructure/controllers/netbird/release.yaml
@@ -0,0 +1,20 @@
+apiVersion: helm.toolkit.fluxcd.io/v2
+kind: HelmRelease
+metadata:
+  name: netbird-operator
+  namespace: netbird
+spec:
+  chart:
+    spec:
+      chart: netbird-operator
+      sourceRef:
+        kind: HelmRepository
+        name: netbirdio
+  interval: 15m
+  releaseName: netbird-operator
+  values:
+    managementURL: "https://netbird.michaelthomson.dev:443"
+    netbirdAPI:
+      keyFromSecret:
+        name: "netbird-mgmt-api-key"
+        key: "NB_API_KEY"
diff --git a/infrastructure/controllers/netbird/repository.yaml b/infrastructure/controllers/netbird/repository.yaml
new file mode 100644
index 0000000..661d211
--- /dev/null
+++ b/infrastructure/controllers/netbird/repository.yaml
@@ -0,0 +1,8 @@
+apiVersion: source.toolkit.fluxcd.io/v1
+kind: HelmRepository
+metadata:
+  name: netbirdio
+  namespace: netbird
+spec:
+  interval: 15m
+  url: https://netbirdio.github.io/helms
diff --git a/infrastructure/namespaces/namespace-netbird.yaml b/infrastructure/namespaces/namespace-netbird.yaml
new file mode 100644
index 0000000..db05a13
--- /dev/null
+++ b/infrastructure/namespaces/namespace-netbird.yaml
@@ -0,0 +1,4 @@
+apiVersion: v1
+kind: Namespace
+metadata:
+  name: netbird