105 lines
3.3 KiB
YAML
105 lines
3.3 KiB
YAML
kubezero:
|
|
global:
|
|
# kubezero.global.defaultDestination -- Destination cluster
|
|
defaultDestination:
|
|
server: https://kubernetes.default.svc
|
|
|
|
# This repoURL is used a base for all the repoURLs applications
|
|
# Setting this to a eg. private git repo incl. the use of pathPrefix allows kubezero to be
|
|
# integrated into any repository as a git subtree if for example public internet access is unavailable
|
|
defaultSource:
|
|
# kubezero.global.defaultSource.repoURL -- default repository for argocd applications
|
|
repoURL: https://github.com/zero-down-time/kubezero
|
|
# kubezero.global.defaultSource.targetRevision -- default tracking of repoURL
|
|
targetRevision: HEAD
|
|
# kubezero.global.defaultSource.pathPrefix -- optional path prefix within repoURL to support eg. remote subtrees
|
|
pathPrefix: ''
|
|
|
|
argo-cd:
|
|
installCRDs: false
|
|
|
|
#configs:
|
|
# secret:
|
|
# `htpasswd -nbBC 10 "" $ARGO_PWD | tr -d ':\n' | sed 's/$2y/$2a/'`
|
|
# argocdServerAdminPassword: "$2a$10$ivKzaXVxMqdeDSfS3nqi1Od3iDbnL7oXrixzDfZFRHlXHnAG6LydG"
|
|
# argocdServerAdminPasswordMtime: "2020-04-24T15:33:09BST"
|
|
|
|
# Run Argo on the controllers
|
|
controller:
|
|
args:
|
|
statusProcessors: "2"
|
|
operationProcessors: "1"
|
|
appResyncPeriod: "300"
|
|
|
|
nodeSelector:
|
|
node-role.kubernetes.io/master: ""
|
|
tolerations:
|
|
- key: node-role.kubernetes.io/master
|
|
effect: NoSchedule
|
|
|
|
repoServer:
|
|
nodeSelector:
|
|
node-role.kubernetes.io/master: ""
|
|
tolerations:
|
|
- key: node-role.kubernetes.io/master
|
|
effect: NoSchedule
|
|
|
|
server:
|
|
config:
|
|
# argo-cd.server.config.url -- ArgoCD hostname to be exposed via Istio
|
|
url: argocd.example.com
|
|
|
|
resource.customizations: |
|
|
cert-manager.io/Certificate:
|
|
# Lua script for customizing the health status assessment
|
|
health.lua: |
|
|
hs = {}
|
|
if obj.status ~= nil then
|
|
if obj.status.conditions ~= nil then
|
|
for i, condition in ipairs(obj.status.conditions) do
|
|
if condition.type == "Ready" and condition.status == "False" then
|
|
hs.status = "Degraded"
|
|
hs.message = condition.message
|
|
return hs
|
|
end
|
|
if condition.type == "Ready" and condition.status == "True" then
|
|
hs.status = "Healthy"
|
|
hs.message = condition.message
|
|
return hs
|
|
end
|
|
end
|
|
end
|
|
end
|
|
hs.status = "Progressing"
|
|
hs.message = "Waiting for certificate"
|
|
return hs
|
|
|
|
# Rename former https port to grpc, works with istio + insecure
|
|
service:
|
|
servicePortHttpsName: grpc
|
|
|
|
extraArgs:
|
|
- --insecure
|
|
nodeSelector:
|
|
node-role.kubernetes.io/master: ""
|
|
tolerations:
|
|
- key: node-role.kubernetes.io/master
|
|
effect: NoSchedule
|
|
|
|
redis:
|
|
nodeSelector:
|
|
node-role.kubernetes.io/master: ""
|
|
tolerations:
|
|
- key: node-role.kubernetes.io/master
|
|
effect: NoSchedule
|
|
|
|
dex:
|
|
enabled: false
|
|
|
|
istio:
|
|
# argo-cd.istio.enabled -- Deploy Istio VirtualService to expose ArgoCD
|
|
enabled: false
|
|
# argo-cd.istio.gateway -- Name of the Istio gateway to add the VirtualService to
|
|
gateway: istio-system/ingressgateway
|
|
ipBlocks: []
|