add helm to server

manifest/overlays/production/argocd-server-patch.yaml

@@ -22,6 +22,39 @@ spec:
           securityContext:
             runAsUser: 1000
             allowPrivilegeEscalation: false
+        - name: ghcr-auth
+          image: quay.io/argoproj/argocd:v3.4.3
+          securityContext:
+            allowPrivilegeEscalation: false
+            capabilities:
+              drop:
+                - ALL
+            readOnlyRootFilesystem: true
+            runAsNonRoot: true
+            seccompProfile:
+              type: RuntimeDefault
+          env:
+            - name: HELM_CONFIG_HOME
+              value: /helm-working-dir
+            - name: HELM_REGISTRY_CONFIG
+              value: /helm-working-dir/config.json
+            - name: GITEA_USERNAME
+              valueFrom:
+                secretKeyRef:
+                  name: gitea-basic-authregcred
+                  key: username
+            - name: GITEA_PASSWORD
+              valueFrom:
+                secretKeyRef:
+                  name: gitea-basic-authregcred
+                  key: password
+          volumeMounts:
+            - name: registry-auth-dir
+              mountPath: /helm-working-dir
+          command:
+            - /bin/bash
+            - -exc
+            - 'echo -n $GITEA_PASSWORD | helm registry login https://git.olb42.com/api/packages/olb42/helm/ --username $GITEA_USERNAME --password-stdin -'
         # ArgoPlane UI extension bundles. Copies only the enabled bundles into
         # the shared /tmp/extensions volume. "argoplane" is the required shell
         # bundle that renders the feature views (Metrics/Networking/Logs/Events)
@@ -43,6 +76,13 @@ spec:
           volumeMounts:
             - name: extensions
               mountPath: /tmp/extensions/
+            - name: registry-auth-dir
+              mountPath: /helm-working-dir
+          env:
+            - name: HELM_REGISTRY_CONFIG
+              value: /helm-working-dir/config.json
       volumes:
         - name: extensions
           emptyDir: {}
+        - name: registry-auth-dir
+          emptyDir: {}