feat: deploy silence-operator #7

	---
	# yaml-language-server: $schema=https://json.schemastore.org/github-workflow.json
	name: "Flux Kustomization Sync"

	on:
	push:
	branches: ["main"]
	paths: ["kubernetes/utility/**"]

	jobs:
	sync:
	name: Flux Kustomization Sync
	runs-on: ["gha-runner-scale-set"]
	strategy:
	matrix:
	cluster: ["utility"]
	steps:
	- name: Configure 1password
	uses: 1password/load-secrets-action/configure@v2
	with:
	service-account-token: ${{ secrets.ONEPASS_SA_TOKEN }}

	- name: Get Secrets
	uses: 1password/load-secrets-action@v2
	with:
	export-env: true
	env:
	BOT_APP_ID: op://Kubernetes/github-bot/BOT_APP_ID
	BOT_APP_PRIVATE_KEY: op://Kubernetes/github-bot/BOT_APP_PRIVATE_KEY
	KUBECONFIG: op://Kubernetes/kubernetes/KUBECONFIG_BASE64

	- name: Generate Token
	uses: actions/create-github-app-token@v1
	id: app-token
	with:
	app-id: ${{ env.BOT_APP_ID }}
	private-key: ${{ env.BOT_APP_PRIVATE_KEY }}

	- name: Checkout
	uses: actions/checkout@v4
	with:
	token: ${{ steps.app-token.outputs.token }}
	fetch-depth: 0

	- name: Setup mise
	uses: jdx/mise-action@v2
	with:
	mise_toml: \|
	[tools]
	"aqua:fluxcd/flux2" = "latest"
	"aqua:mikefarah/yq" = "latest"

	- name: Write kubeconfig
	id: kubeconfig
	uses: timheuer/base64-to-file@v1
	with:
	encodedString: ${{ env.KUBECONFIG }}
	fileName: kubeconfig

	- name: Sync Kustomization
	env:
	KUBECONFIG: ${{ steps.kubeconfig.outputs.filePath }}
	shell: bash
	run: \|
	flux \
	--context ${{ matrix.cluster }} \
	--namespace flux-system \
	reconcile ks cluster \
	--with-source

Provide feedback