105 lines
2.7 KiB
YAML
105 lines
2.7 KiB
YAML
{{- define "argocd-values" }}
|
|
|
|
argo-cd:
|
|
{{- with index .Values "argocd" "configs" }}
|
|
configs:
|
|
{{- toYaml . | nindent 4 }}
|
|
{{- end }}
|
|
|
|
controller:
|
|
metrics:
|
|
enabled: {{ .Values.metrics.enabled }}
|
|
repoServer:
|
|
metrics:
|
|
enabled: {{ .Values.metrics.enabled }}
|
|
server:
|
|
metrics:
|
|
enabled: {{ .Values.metrics.enabled }}
|
|
|
|
argocd-apps:
|
|
projects:
|
|
- name: kubezero
|
|
namespace: argocd
|
|
description: KubeZero - ZeroDownTime Kubernetes Platform
|
|
sourceRepos:
|
|
- {{ .Values.kubezero.repoURL }}
|
|
{{- with .Values.kubezero.gitSync.repoURL }}
|
|
- {{ . }}
|
|
{{- end }}
|
|
destinations:
|
|
- namespace: '*'
|
|
server: https://kubernetes.default.svc
|
|
clusterResourceWhitelist:
|
|
- group: '*'
|
|
kind: '*'
|
|
applications:
|
|
- name: kubezero-git-sync
|
|
namespace: argocd
|
|
project: kubezero
|
|
source:
|
|
repoURL: {{ .Values.kubezero.gitSync.repoURL }}
|
|
targetRevision: {{ .Values.kubezero.gitSync.targetRevision }}
|
|
path: {{ .Values.kubezero.gitSync.path }}
|
|
|
|
directory:
|
|
recurse: true
|
|
|
|
destination:
|
|
server: https://kubernetes.default.svc
|
|
namespace: argocd
|
|
|
|
{{- with .Values.kubezero.syncPolicy }}
|
|
syncPolicy:
|
|
{{- toYaml . | nindent 8 }}
|
|
{{- end }}
|
|
|
|
argocd-image-updater:
|
|
enabled: {{ default "false" (index .Values "argocd" "argocd-image-updater" "enabled") }}
|
|
|
|
{{- with omit (index .Values "argocd" "argocd-image-updater") "enabled" }}
|
|
{{- toYaml . | nindent 2 }}
|
|
{{- end }}
|
|
|
|
{{- if .Values.global.aws }}
|
|
extraEnv:
|
|
- name: AWS_ROLE_ARN
|
|
value: "arn:aws:iam::{{ .Values.global.aws.accountId }}:role/{{ .Values.global.aws.region }}.{{ .Values.global.clusterName }}.argocd-image-updater"
|
|
- name: AWS_WEB_IDENTITY_TOKEN_FILE
|
|
value: "/var/run/secrets/sts.amazonaws.com/serviceaccount/token"
|
|
- name: AWS_STS_REGIONAL_ENDPOINTS
|
|
value: "regional"
|
|
- name: METADATA_TRIES
|
|
value: "0"
|
|
- name: AWS_REGION
|
|
value: {{ .Values.global.aws.region }}
|
|
volumes:
|
|
- name: aws-token
|
|
projected:
|
|
sources:
|
|
- serviceAccountToken:
|
|
path: token
|
|
expirationSeconds: 86400
|
|
audience: "sts.amazonaws.com"
|
|
volumeMounts:
|
|
- name: aws-token
|
|
mountPath: "/var/run/secrets/sts.amazonaws.com/serviceaccount/"
|
|
readOnly: true
|
|
{{- end }}
|
|
|
|
metrics:
|
|
enabled: {{ .Values.metrics.enabled }}
|
|
|
|
{{- if and ( index .Values "argocd" "istio" "enabled" ) .Values.istio.enabled }}
|
|
istio:
|
|
{{- with index .Values "argocd" "istio" }}
|
|
{{- toYaml . | nindent 2 }}
|
|
{{- end }}
|
|
{{- end }}
|
|
|
|
{{- end }}
|
|
|
|
{{- define "argocd-argo" }}
|
|
{{- end }}
|
|
|
|
{{ include "kubezero-app.app" . }}
|