150 lines
5.1 KiB
Cheetah
150 lines
5.1 KiB
Cheetah
- name: argo-cd
|
|
namespace: cicd
|
|
create_namespace: true
|
|
chart_ref: kube-forge/argo-cd
|
|
chart_version: 6.7.12
|
|
{{- if .Modules.Cicd.Enabled }}
|
|
release_state: "present"
|
|
{{- else }}
|
|
release_state: "absent"
|
|
{{- end }}
|
|
values:
|
|
crds:
|
|
install: true
|
|
|
|
server:
|
|
certificateSecret:
|
|
enabled: false
|
|
{{- if eq .Modules.Cicd.ArgoCd.Expose.Type "NodePort" }}
|
|
service:
|
|
type: "NodePort"
|
|
nodePortHttp: {{ .Modules.Cicd.ArgoCd.Expose.NodePortHttp }}
|
|
nodePortHttps: {{ .Modules.Cicd.ArgoCd.Expose.NodePortHttps }}
|
|
{{- end }}
|
|
{{- if .Modules.Cicd.ArgoCd.Ha.Enabled }}
|
|
{{- if .Modules.Cicd.ArgoCd.Ha.Autoscaling }}
|
|
autoscaling:
|
|
enabled: true
|
|
minReplicas: 2
|
|
{{- else }}
|
|
replicas: 2
|
|
{{- end }}
|
|
{{- end }}
|
|
|
|
metrics:
|
|
enabled: {{ and .Modules.Observability.Enabled .Modules.Observability.Monitoring.Enabled }}
|
|
serviceMonitor:
|
|
enabled: {{ and .Modules.Observability.Enabled .Modules.Observability.Monitoring.Enabled }}
|
|
|
|
redis:
|
|
metrics:
|
|
enabled: {{ and .Modules.Observability.Enabled .Modules.Observability.Monitoring.Enabled }}
|
|
serviceMonitor:
|
|
enabled: {{ and .Modules.Observability.Enabled .Modules.Observability.Monitoring.Enabled }}
|
|
|
|
controller:
|
|
replicas: 1
|
|
metrics:
|
|
enabled: {{ and .Modules.Observability.Enabled .Modules.Observability.Monitoring.Enabled }}
|
|
serviceMonitor:
|
|
enabled: {{ and .Modules.Observability.Enabled .Modules.Observability.Monitoring.Enabled }}
|
|
|
|
applicationSet:
|
|
{{- if .Modules.Cicd.ArgoCd.Ha.Enabled }}
|
|
replicas: 2
|
|
{{- end }}
|
|
metrics:
|
|
enabled: {{ and .Modules.Observability.Enabled .Modules.Observability.Monitoring.Enabled }}
|
|
serviceMonitor:
|
|
enabled: {{ and .Modules.Observability.Enabled .Modules.Observability.Monitoring.Enabled }}
|
|
|
|
dex:
|
|
metrics:
|
|
enabled: {{ and .Modules.Observability.Enabled .Modules.Observability.Monitoring.Enabled }}
|
|
## check later
|
|
serviceMonitor:
|
|
enabled: false
|
|
|
|
repoServer:
|
|
{{- if .Modules.Cicd.ArgoCd.Ha.Enabled }}
|
|
{{- if .Modules.Cicd.ArgoCd.Ha.Autoscaling }}
|
|
autoscaling:
|
|
enabled: true
|
|
minReplicas: 2
|
|
{{- else }}
|
|
replicas: 2
|
|
{{- end }}
|
|
{{- end }}
|
|
|
|
metrics:
|
|
enabled: {{ and .Modules.Observability.Enabled .Modules.Observability.Monitoring.Enabled }}
|
|
serviceMonitor:
|
|
enabled: {{ and .Modules.Observability.Enabled .Modules.Observability.Monitoring.Enabled }}
|
|
|
|
notifications:
|
|
metrics:
|
|
enabled: {{ and .Modules.Observability.Enabled .Modules.Observability.Monitoring.Enabled }}
|
|
serviceMonitor:
|
|
enabled: {{ and .Modules.Observability.Enabled .Modules.Observability.Monitoring.Enabled }}
|
|
|
|
configs:
|
|
params:
|
|
server.insecure: true
|
|
|
|
secret:
|
|
argocdServerAdminPassword: {{ .Modules.Cicd.ArgoCd.AdminPassword }}
|
|
|
|
repositories:
|
|
# add default helm-repository from harbor
|
|
{{- .Modules.Cicd.ArgoCd.Repositories | toYaml | nindent 8 }}
|
|
|
|
cm:
|
|
create: true
|
|
url: "{{ if .Modules.Cicd.ArgoCd.Expose.Tls.Enabled }}https{{ else }}http{{ end }}://{{ .Modules.Cicd.ArgoCd.Expose.Domain }}"
|
|
|
|
accounts.developer: login
|
|
accounts.guest: login
|
|
|
|
# oidc.config: ""
|
|
|
|
rbac:
|
|
create: true
|
|
policy.csv: |
|
|
p, role:admin, applications, create, */*, allow
|
|
p, role:admin, applications, update, */*, allow
|
|
p, role:admin, applications, delete, */*, allow
|
|
p, role:admin, applications, sync, */*, allow
|
|
p, role:admin, applications, override, */*, allow
|
|
p, role:admin, applications, action/*, */*, allow
|
|
p, role:admin, applicationsets, get, */*, allow
|
|
p, role:admin, applicationsets, create, */*, allow
|
|
p, role:admin, applicationsets, update, */*, allow
|
|
p, role:admin, applicationsets, delete, */*, allow
|
|
p, role:admin, certificates, create, *, allow
|
|
p, role:admin, certificates, update, *, allow
|
|
p, role:admin, certificates, delete, *, allow
|
|
p, role:admin, clusters, create, *, allow
|
|
p, role:admin, clusters, update, *, allow
|
|
p, role:admin, clusters, delete, *, allow
|
|
p, role:admin, repositories, create, *, allow
|
|
p, role:admin, repositories, update, *, allow
|
|
p, role:admin, repositories, delete, *, allow
|
|
p, role:admin, projects, create, *, allow
|
|
p, role:admin, projects, update, *, allow
|
|
p, role:admin, projects, delete, *, allow
|
|
p, role:admin, accounts, update, *, allow
|
|
p, role:admin, gpgkeys, create, *, allow
|
|
p, role:admin, gpgkeys, delete, *, allow
|
|
p, role:admin, exec, create, */*, allow
|
|
|
|
{{- .Modules.Cicd.ArgoCd.Rbac.AdditionalPolicies }}
|
|
|
|
|
|
policy.default: role:''
|
|
# scopes: "[roles,email,groups]"
|
|
|
|
{{- if .Modules.Cicd.ArgoCd.Ha.Enabled }}
|
|
redis-ha:
|
|
enabled: true
|
|
{{- end }}
|