remote rollout

manifest/overlays/production/argo-rollouts/argo-rollout-notifications-secret.sealed.secret.yaml

@@ -1,16 +0,0 @@
----
-apiVersion: bitnami.com/v1alpha1
-kind: SealedSecret
-metadata:
-  name: argo-rollouts-notification-secret
-  namespace: argo-rollouts
-spec:
-  encryptedData:
-    gitea-token: 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
-  template:
-    metadata:
-      annotations:
-        kustomize.config.k8s.io/behavior: merge
-      name: argo-rollouts-notification-secret
-      namespace: argo-rollouts
-    type: Opaque

manifest/overlays/production/argo-rollouts/demo-rollout.yaml

@@ -1,38 +0,0 @@
-# This example demonstrates a Rollout using the canary update strategy with a customized rollout
-# plan. The prescribed steps initially sets a canary weight of 20%, then pauses indefinitely. Once
-# resumed, the rollout performs a gradual, automated 20% weight increase until it reaches 100%.
-apiVersion: argoproj.io/v1alpha1
-kind: Rollout
-metadata:
-  name: rollout-canary
-  namespace: argo-rollouts
-spec:
-  replicas: 5
-  revisionHistoryLimit: 2
-  selector:
-    matchLabels:
-      app: rollout-canary
-  template:
-    metadata:
-      labels:
-        app: rollout-canary
-    spec:
-      containers:
-      - name: rollouts-demo
-        image: argoproj/rollouts-demo:blue
-        imagePullPolicy: Always
-        ports:
-        - containerPort: 8080
-  strategy:
-    canary:
-      steps:
-      - setWeight: 20
-      # The following pause step will pause the rollout indefinitely until manually resumed.
-      # Rollouts can be manually resumed by running `kubectl argo rollouts promote ROLLOUT`
-      - pause: {}
-      - setWeight: 40
-      - pause: {duration: 40s}
-      - setWeight: 60
-      - pause: {duration: 20s}
-      - setWeight: 80
-      - pause: {duration: 20s}

manifest/overlays/production/argo-rollouts/ingressroute.yaml

@@ -1,16 +0,0 @@
-apiVersion: traefik.io/v1alpha1
-kind: IngressRoute
-metadata:
-  name: argo-rollouts-dashboard
-  namespace: argo-rollouts
-spec:
-  entryPoints:
-    - websecure
-  routes:
-    - kind: Rule
-      match: Host(`argo-rollout.olb42.com`)
-      services:
-        - name: argo-rollouts-dashboard
-          port: 3100
-  tls:
-    secretName: olb42-wildcard-tls

manifest/overlays/production/argo-rollouts/kustomization.yaml

@@ -1,11 +0,0 @@
-apiVersion: kustomize.config.k8s.io/v1beta1
-kind: Kustomization
-
-namespace: argo-rollouts
-
-resources:
-  - namespace.yaml
-  - ingressroute.yaml
-  - argo-rollout-notifications-secret.sealed.secret.yaml
-  - https://github.com/argoproj/argo-rollouts/releases/download/v1.9.0/install.yaml
-  - https://github.com/argoproj/argo-rollouts/releases/download/v1.9.0/dashboard-install.yaml

manifest/overlays/production/argo-rollouts/namespace.yaml

@@ -1,4 +0,0 @@
-apiVersion: v1
-kind: Namespace
-metadata:
-  name: argo-rollouts

manifest/overlays/production/argocd-cm-patch.yaml

@@ -8,6 +8,7 @@ data:
   accounts.mcpserver: apiKey
   accounts.anonymous.enabled: "true"
   statusbadge.enabled: "true"
+
   exec.enabled: "true"
   kustomize.buildOptions: --enable-helm
   ui.bannercontent: "Homepage"
@@ -45,6 +46,18 @@ data:
       - '.metadata.annotations."autoscaling.alpha.kubernetes.io/conditions"'
       - '.metadata.annotations."autoscaling.alpha.kubernetes.io/metrics"'
       - '.metadata.annotations."autoscaling.alpha.kubernetes.io/current-metrics"'
+  extension.config.metrics: |
+    services:
+      - '.url."http://argoplane-metrics-backend.argocd.svc:8080"'
+  extension.config.networking: |
+    services:
+      - '.url."http://argoplane-networking-backend.argocd.svc:8082"'
+  extension.config.logs: |
+    services:
+      - '.url."http://argoplane-logs-backend.argocd.svc:8083"'
+  extension.config.events: |
+    services:
+      - '.url."http://argoplane-events-backend.argocd.svc:8085"'
   resource.customizations.ignoreResourceUpdates.discovery.k8s.io_EndpointSlice: |
     jsonPointers:
       - /metadata

manifest/overlays/production/argocd-cmd-params-cm-patch.yaml

@@ -7,3 +7,4 @@ data:
   redis.server: shared-redis.data:6379
   server.insecure: "true"
   server.disable.auth: "true"
+  server.enable.proxy.extension: "true"

manifest/overlays/production/argocd-rbac-cm-patch.yaml

@@ -12,5 +12,12 @@ data:
     g, mcpserver, role:admin
     g, homepage, role:readonly
     g, role:admin, role:readonly
+    p, role:admin, extensions, invoke, metrics, allow
+    p, role:admin, extensions, invoke, backups, allow
+    p, role:admin, extensions, invoke, networking, allow
+    p, role:admin, extensions, invoke, logs, allow
+    p, role:admin, extensions, invoke, vulnerabilities, allow
+    p, role:admin, extensions, invoke, events, allow
+    
   policy.default: role:readonly