# HTTPS with no credentials, unlike the platform repos which use SSH and a
# deploy key from Vault. Deliberate: this repo is already anonymously readable over
# HTTPS on gitea, so a deploy key would guard nothing while adding a Vault entry
# and a gitea key to create by hand before anything deploys. TLS still gives
# integrity and authenticity of the source.
#
# If the gitea repos are ever made private, this becomes an SSH sourceRef with
# an ExternalSecret holding the deploy key — the pattern the platform repos use.
apiVersion: source.toolkit.fluxcd.io/v1
kind: GitRepository
metadata:
  name: catalog-agent
  namespace: agents
spec:
  interval: 5m
  url: https://gitea.sttlab.eu/stt/classic-models-agent-catalogue.git
  ref:
    branch: main