olb42/argocd
5
0
Fork 0
Code Issues Pull Requests Actions Packages Projects Releases Wiki Activity

Compare commits

base: olb42/argocd:4b19b9036fba9edb338cccd11bdc2a964ca3aa2c
Branches Tags
olb42/argocd:main
..
compare: olb42/argocd:main
Branches Tags
olb42/argocd:main
33 Commits
4b19b9036f .. main
Author SHA1 Message Date
olb042 7f9b79d1fe update irnote statefulsets replicas
olb42/scoped_workflows: Validate GitOps repo (scoped) / validate (push) Successful in 2s
Details
Validate manifests / validate (push) Successful in 6s
Details
2026-09-28 02:43:10 +01:00
olb042 a0903f38ee change cache
Validate manifests / validate (push) Successful in 6s
Details
2026-08-27 13:33:34 +01:00
olb042 253337cd25 remove glance-k8s
Validate manifests / validate (push) Successful in 6s
Details
2026-08-25 13:04:28 +01:00
olb042 adfdf1a556 fixed typo
Validate manifests / validate (push) Successful in 6s
Details
2026-08-25 00:05:19 +01:00
olb042 ba407279f8 update helm login
Validate manifests / validate (push) Successful in 6s
Details
2026-08-25 00:04:04 +01:00
olb042 91f29715e7 update argo
Validate manifests / validate (push) Successful in 6s
Details
2026-08-24 23:56:42 +01:00
olb042 fc7e8bd45f update image-updater
Validate manifests / validate (push) Successful in 5s
Details
2026-08-24 22:09:05 +01:00
olb042 a26305fe5b namepattern
Validate manifests / validate (push) Successful in 6s
Details
2026-08-24 20:12:34 +01:00
olb042 c9a94a7b78 add glance-k8s
Validate manifests / validate (push) Successful in 6s
Details
2026-08-24 20:11:51 +01:00
olb042 f4dfb9402c add overall image updater
Validate manifests / validate (push) Waiting to run
Details
2026-08-24 19:42:16 +01:00
olb042 a8b9685c10 update typos
Validate manifests / validate (push) Successful in 5s
Details
2026-08-22 14:59:35 +01:00
olb042 93aa549a90 update secrets note
Validate manifests / validate (push) Successful in 7s
Details
2026-08-12 13:23:59 +01:00
olb042 e1813e1d81 update secrets
Validate manifests / validate (push) Successful in 7s
Details
2026-08-12 13:22:26 +01:00
olb042 3c9412c48a update ignore replicas
Validate manifests / validate (push) Successful in 7s
Details
2026-08-07 14:30:46 +01:00
olb042 1919c019b6 update scm secret
Validate manifests / validate (push) Successful in 7s
Details
2026-07-24 02:17:46 +01:00
olb042 90c6c67a53 add scm secret
Validate manifests / validate (push) Successful in 7s
Details
2026-07-23 16:56:39 +01:00
olb042 90d14aea92 update internal
Validate manifests / validate (push) Successful in 7s
Details
2026-07-08 00:57:12 +01:00
olb042 b2e769313e change update interval
Validate manifests / validate (push) Successful in 9s
Details
2026-07-08 00:50:50 +01:00
olb042 7fd830cb2b add glance
Validate manifests / validate (push) Successful in 18s
Details
2026-07-05 00:07:13 +01:00
olb042 cb37401250 remote helm auth
Validate manifests / validate (push) Successful in 6s
Details
2026-06-16 17:18:54 +01:00
olb042 fdd4f24e87 add helm to server
Validate manifests / validate (push) Successful in 5s
Details
2026-06-16 17:14:21 +01:00
olb042 f20efb08dd update repo location
Validate manifests / validate (push) Successful in 6s
Details
2026-06-16 17:02:37 +01:00
olb042 302cbe348f update volumemount
Validate manifests / validate (push) Successful in 6s
Details
2026-06-16 16:53:50 +01:00
olb042 e40b191d67 change to helm-working-dir
Validate manifests / validate (push) Successful in 6s
Details
2026-06-16 16:52:54 +01:00
olb042 26d31a3779 update repo to mount helm-auth
Validate manifests / validate (push) Successful in 7s
Details
2026-06-16 16:45:47 +01:00
olb042 9641cb8ea9 remove volume mount
Validate manifests / validate (push) Successful in 7s
Details
2026-06-16 16:36:09 +01:00
olb042 e1ecbbfa62 remove wrong command
Validate manifests / validate (push) Successful in 5s
Details
2026-06-16 16:35:27 +01:00
olb042 e9d6fd4a17 update helm-auth
Validate manifests / validate (push) Successful in 6s
Details
2026-06-16 16:33:58 +01:00
olb042 e4434ed046 update readme
Validate manifests / validate (push) Successful in 7s
Details
2026-06-14 03:25:43 +01:00
olb042 aa13430d24 remove rollout
Validate manifests / validate (push) Successful in 6s
Details
2026-06-12 17:24:37 +01:00
olb042 e39e790ff7 update kustomization.yaml
Validate manifests / validate (push) Successful in 5s
Details
2026-06-09 15:07:23 +01:00
olb042 c0a5211a74 add argo-cmp-cp
Validate manifests / validate (push) Successful in 6s
Details
2026-06-09 15:05:14 +01:00
olb042 9a14f7cffa update sealed-secret-repo
Validate manifests / validate (push) Successful in 34s
Details
2026-06-09 00:59:51 +01:00
21 changed files with 206 additions and 62 deletions
Expand all files Collapse all files
README.md
+23 -5
View File
@@ -10,16 +10,34 @@ Argo CD and intentionally uses a conservative sync policy.
- Target namespace: `argocd`
- Render path: `manifest/overlays/production`
- Repo URL used by Argo CD: `http://gitea-ha-http.apps:3000/olb42/argocd.git`
- Config management plugin: `ksops`
- Live state observed via `document_state` on 2026-06-14: `Synced` and `Healthy`
- Live revision: `aa13430d2464162e4f4f7e68ee99deef02234a80`
- Config management: native Kustomize overlay with
`kustomize.buildOptions: --enable-helm`; Lovely CMP sidecar is installed on
the repo-server
## Runtime
The base installs upstream Argo CD `v3.3.6` from the official install manifest.
The production overlay adds the Traefik route for `argocd.olb42.com`, KSOPS CMP
configuration, repo credentials, notifications, Redis credentials, and patches
for Argo CD config, RBAC, command parameters, repo-server behavior, and bundled
The base installs upstream Argo CD `v3.4.3` from the official install manifest.
The production overlay adds the Traefik route for `argocd.olb42.com`, repo
credentials, notifications, Redis credentials, Image Updater `v1.2.0`, the
Lovely `v1.2.4` CMP sidecar, ArgoPlane UI extension loaders, and patches for
Argo CD config, RBAC, command parameters, repo-server behavior, and bundled
Redis disablement.
The live `argocd` namespace currently has the core Argo CD workloads ready:
`argocd-application-controller` StatefulSet `1/1`, plus
`argocd-applicationset-controller`, `argocd-dex-server`,
`argocd-notifications-controller`, `argocd-repo-server`, and `argocd-server`
Deployments all `1/1`. `argocd-redis` is intentionally scaled to `0/0` because
the bundled Redis is disabled. Extension workloads such as
`argocd-extension-pod-files` and the ArgoPlane backend Deployments are managed
as separate Argo CD applications in the same namespace.
Secrets for the Argo CD control plane and Gitea repository credentials are
tracked as `SealedSecret` resources. The application resource tree shows those
SealedSecrets healthy and owning the generated Kubernetes `Secret` objects.
## Sync policy
Automated sync is disabled for the Argo CD application itself. Prune and
manifest/base/kustomization.yaml
+1 -1
View File
@@ -7,4 +7,4 @@ commonAnnotations:
glance/parent: argocd
resources:
- https://raw.githubusercontent.com/argoproj/argo-cd/v3.4.3/manifests/install.yaml
- https://raw.githubusercontent.com/argoproj/argo-cd/v3.5.1/manifests/install.yaml
manifest/overlays/production/argocd-cm-patch.yaml
+6 -1
View File
@@ -23,6 +23,12 @@ data:
jsonPointers:
- /metadata
- /subsets
resource.customizations.ignoreDifferences.apps_Deployment: |
jsonPointers:
- /spec/replicas
resource.customizations.ignoreDifferences.apps_StatefulSets: |
jsonPointers:
- /spec/replicas
resource.customizations.ignoreResourceUpdates.all: |
jsonPointers:
- /status
@@ -61,7 +67,6 @@ data:
extension.config.pod-files: |
services:
- url: http://argocd-extension-pod-files.argocd
resource.customizations.ignoreResourceUpdates.discovery.k8s.io_EndpointSlice: |
jsonPointers:
- /metadata
manifest/overlays/production/argocd-cmd-params-cm-patch.yaml
+1 -1
View File
@@ -4,7 +4,7 @@ metadata:
name: argocd-cmd-params-cm
namespace: argocd
data:
redis.server: shared-redis.data:6379
redis.server: valkey-primary.data.svc.cluster.local:6379
server.insecure: "true"
# Keep auth ENABLED so Keycloak SSO + local admin login work. (Was set to
# "true" in e712652 for the Headlamp argocd plugin, which disabled login for
manifest/overlays/production/argocd-cmp-cm.yaml
+1 -15
View File
@@ -3,18 +3,4 @@ kind: ConfigMap
metadata:
name: argocd-cmp-cm
namespace: argocd
data:
ksops.yaml: |
apiVersion: argoproj.io/v1alpha1
kind: ConfigManagementPlugin
metadata:
name: ksops
spec:
generate:
command: ["sh", "-c"]
args:
- |
kustomize build --enable-alpha-plugins --enable-exec .
discover:
find:
glob: "**/kustomization.yaml"
data: {}
manifest/overlays/production/argocd-headlamp-clusterrole.yaml
+12
View File
@@ -0,0 +1,12 @@
apiVersion: rbac.authorization.k8s.io/v1
kind: ClusterRole
metadata:
name: argocd-headlamp-plugin
rules:
- apiGroups: ["argoproj.io"]
resources: ["applications"]
verbs: ["get", "list", "watch", "patch"]
- apiGroups: [""]
resources: ["configmaps"]
resourceNames: ["argocd-cm"]
verbs: ["get"]
manifest/overlays/production/argocd-headlamp-clusterrolebinding.yaml
+11
View File
@@ -0,0 +1,11 @@
apiVersion: rbac.authorization.k8s.io/v1
kind: ClusterRoleBinding
metadata:
name: remote-admin-argocd-plugin
roleRef:
apiGroup: rbac.authorization.k8s.io
kind: ClusterRole
name: argocd-headlamp-plugin
subjects:
- kind: User
name: remote-admin
manifest/overlays/production/argocd-image-updater/config/conf.env
+1
View File
@@ -0,0 +1 @@
interval=240m
manifest/overlays/production/argocd-image-updater/kustomization.yaml
+11 -1
View File
@@ -2,8 +2,18 @@ apiVersion: kustomize.config.k8s.io/v1alpha1
kind: Component
resources:
- https://raw.githubusercontent.com/argoproj-labs/argocd-image-updater/v1.2.0/config/install.yaml
- https://raw.githubusercontent.com/argoproj-labs/argocd-image-updater/v1.3.0/config/install.yaml
- regcred.sealed.secret.yaml
- overall-image-updater.yaml
commonAnnotations:
glance/parent: argocd
generatorOptions:
disableNameSuffixHash: true
configMapGenerator:
- name: argocd-image-updater-config
behavior: merge
envs:
- ./config/conf.env
manifest/overlays/production/argocd-image-updater/overall-image-updater.yaml
+49
View File
@@ -0,0 +1,49 @@
apiVersion: argocd-image-updater.argoproj.io/v1alpha1
kind: ImageUpdater
metadata:
name: argocd-overall-production-updater
namespace: argocd
spec:
commonUpdateSettings:
updateStrategy: semver
forceUpdate: true
applicationRefs:
- namePattern: traefik-production
writeBackConfig:
method: git
gitConfig:
writeBackTarget: "kustomization:."
images:
- alias: traefik
imageName: docker.io/traefik
manifestTargets:
kustomize:
name: docker.io/traefik
- alias: traefik-manager
imageName: ghcr.io/chr0nzz/traefik-manager
manifestTargets:
kustomize:
name: ghcr.io/chr0nzz/traefik-manager
- namePattern: headlamp-production
writeBackConfig:
method: git
gitConfig:
writeBackTarget: "helmvalues:.manifests/overlay/production/helm-values/values.yaml"
images:
- alias: headlamp
imageName: ghcr.io/headlamp-k8s/headlamp
manifestTargets:
helm:
name: "image.repository"
tag: "image.tag"
- namePattern: glance-production
writeBackConfig:
method: git
gitConfig:
writeBackTarget: "kustomization:."
images:
- alias: glance
imageName: glanceapp/glance
manifestTargets:
kustomize:
name: glanceapp/glance
manifest/overlays/production/argocd-notifications-secret.sealed.secret.yaml
+3 -2
View File
@@ -6,12 +6,13 @@ metadata:
namespace: argocd
spec:
encryptedData:
gitea-token: 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
gitea-token: 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
template:
metadata:
annotations:
kustomize.config.k8s.io/behavior: merge
argocd.argoproj.io/tracking-id: argocd-production:/Secret:argocd/argocd-notifications-secret
glance/parent: argocd
kustomize.config.k8s.io/behavior: merge
labels:
app.kubernetes.io/component: notifications-controller
app.kubernetes.io/name: argocd-notifications-controller
manifest/overlays/production/argocd-rbac-cm-patch.yaml
-1
View File
@@ -18,4 +18,3 @@ data:
p, role:admin, extensions, invoke, events, allow
p, role:admin, extensions, invoke, pod-files, allow
policy.default: role:readonly
manifest/overlays/production/argocd-secret.sealed.secret.yaml
+5 -5
View File
@@ -6,15 +6,15 @@ metadata:
namespace: argocd
spec:
encryptedData:
admin.password: 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
accounts.mcpserver.tokens: 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
oidc.auth.clientSecret: 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
server.secretkey: AgBQSgd6B35KLuAYQwz0awzOi5YeFTuhpgEB8aUcC6jHBBnxu0pktEnDOZhTt+6oTdOnh+NwCYP+5NexkEPwe8fs+POXgfy4cXeGt05M5P4T+P9gyrQEdiStK+jXv/Pu0msMgjK3GNYiB1nOf7rSHWRgWb/SE/nJEEvnPgUZ02TRJCyQ6x3Zp/8urYKudwYgGCDJsu9QxDJFrwSREI6CAdTVZCjTGk9JZS63U+h/4jsbey5Eb0zkzLz76mFd0jmTDKDC9WOWV3tBXYa4I69bBSAIt7a/ikqTgjsbcSCd4T8GMHSr/jXXarzYrtbVkCRWMnf8NDoUxj2Vm4k4i30f2vlp1qFJeT+ixwDcavlgmOgwsoNhbwGIsx3ssdsGtAm2Li32u9CUauHMSebpHuCthqFRoWIsKVRrNPdbSpfgQKop5Cx9ITk74ENNcvgC7gfgfk290xtpoVga82RceutlTPLzfwh+a8hjQDj/pLEejG+JeqV/gSDw+tWTQoGmyGt6fA1roWeTSj9v0hHypS87LxYNMyK7tJBQyoq7VIrkIjS8PQ0B/zBlJqiGMWuaPAijVymr8h6FRMftJXFZibQ4n2NednEZEiNAtQhXmMbR1IxtJmDXMyhIgj0YkzoV5Nj8Q7BEp45JuI6jRwKPjIlgEGLxBoHFp4fCsr7edrrbDMiw7tbtudUkMvkFcuNSezixlPfMJBD4Hw2IYQEgIKzou7ECiEh+sq1fKHl2eqgJddTS7HuQxkUEeIiHDq1H1w==
admin.password: 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
oidc.auth.clientSecret: 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
server.secretkey: AgCo1O0X3rHMTmmKzQsWBNjYkUApsC/MmPVJJwPscoG/yQsdWYIcjoFv9klKLXT+knNw09+IzpfWzACUAsl0GBT9G9akUrEhxAm+vgLJ6zhTFxPW5CmfgrSxodMO2uZgxjjzGzOKqp97+2P3ELC/BpgiiVGdO6OWpVzxxREH4U+DbtZ6ZHJWz1YcNMLsOZbvv28/ZsUJ/0iY/HKcGkD61LpVTj7i/+QcT5p+YqKupdVVMmXHQLkYVbd9o1CzV4cR1J4hN2WI0VWxgZzshlYYgshL6OEjnrH65le4lbjgMKNh91O7HeuIDQPaQy0eeB/tZj/53ltQnDu6J1LilBN3sSdj3277rgrP+XY6OaaVB5vThe0S4WVykIuMczLk6rvqQMQuAwNfAvGZBlvuXHPiPECFZL1PU8xfOgajf4HwrAoHDLS8xqSzskUU7qdqStE1UJg08JcLg4bG6XbOVh1izqDnLUGk2QF+kQVzayEW9v6i30sbnRpLjRBnk/nJ0wlJMzIPCZaSH8lFBrDWjVh+a1cY5ZvWmEipXMr4tSGdmrKR94S8dCGHp7QGcjiiNI6iEP2FaAOHuN9ohfyPMZ1TQ7CdY3T4dHIrg2vZvS+arc+XXOZ0ISleychG3hN27UEZm0CJS3+6H7+Qn6ir+BmDjPGKXwy3r7U312NZuHWePR2+epiSgnben5KljImObU+bw/BHXL7guVVllfsrLL4D+YeI5kM2hTtOHLZeUA21aA7hw8spdP98NxzefvO6Zg==
template:
metadata:
annotations:
kustomize.config.k8s.io/behavior: merge
argocd.argoproj.io/tracking-id: argocd-production:/Secret:argocd/argocd-secret
glance/parent: argocd
kustomize.config.k8s.io/behavior: merge
labels:
app.kubernetes.io/name: argocd-secret
app.kubernetes.io/part-of: argocd
manifest/overlays/production/argocd-server-patch.yaml
+2 -13
View File
@@ -11,19 +11,8 @@ spec:
template:
spec:
initContainers:
- name: rollout-extension
image: quay.io/argoprojlabs/argocd-extension-installer:v0.0.8
env:
- name: EXTENSION_URL
value: https://github.com/argoproj-labs/rollout-extension/releases/download/v0.3.7/extension.tar
volumeMounts:
- name: extensions
mountPath: /tmp/extensions/
securityContext:
runAsUser: 1000
allowPrivilegeEscalation: false
- name: extension-pod-files
image: quay.io/argoprojlabs/argocd-extension-installer:v0.0.8
image: quay.io/argoprojlabs/argocd-extension-installer:v1.0.1
env:
- name: EXTENSION_URL
value: http://argocd-extension-pod-files.argocd/ui/extension.tar.gz
@@ -40,7 +29,7 @@ spec:
# window event that nothing consumes, so no tabs appear. Keep the
# feature names in sync with the enabled backends in apps/argoplane.
- name: argoplane-extensions
image: ghcr.io/natrontech/argoplane-ui-extensions:1.4.1
image: ghcr.io/natrontech/argoplane-ui-extensions:1.5.1
env:
- name: ENABLED_EXTENSIONS
value: "argoplane,metrics,networking,logs,events"
manifest/overlays/production/kustomization.yaml
+2
View File
@@ -7,6 +7,7 @@ resources:
# - argocd-image-updater
- argocd-application-controller-headless-service.yaml
- ingressroute.yaml
- argocd-cmp-cm.yaml
- argocd-gitea-token.sealed.secret.yaml
- argocd-notifications-secret.sealed.secret.yaml
- argocd-redis.sealed.secret.yaml
@@ -14,6 +15,7 @@ resources:
- repo-creds-external.sealed.secret.yaml
- repo-creds-internal.sealed.secret.yaml
- repo-creds-helm-external.sealed.secret.yaml
- scm-creds-internal.sealed.secret.yaml
# - argocd-age-key.sealed.secret.yaml
# - ksops-cmp-config.yaml
manifest/overlays/production/repo-creds-helm-external.sealed.secret.yaml
+5 -5
View File
@@ -6,11 +6,11 @@ metadata:
namespace: argocd
spec:
encryptedData:
name: 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
password: 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
type: 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
url: AgC4xlyLZ5+v+BmwyNUFTcp7+GiOcTx0W+Ak25fct/tXPPGBGgQDRHiokEfB3IUYhK8L7oYlckwKrt/2gKNZoZS3k+rDux5CVeTw9La+mDgyOueA8/bo/4bMi0Z3t/P7dUohdEP5wBsC3SBuBTOBVC4FFD8NWIDTBXZHvQI4Op4AlUUroWddxyjzH1/TbFHs9W0p6b/bIXZrfS3jZuyTyV777Zya9DuxiAGn5EFtIgY3hKJ/fV4NQtXb9//tjos52T3x1GpjfM0KF9SadYd0byMWIud6Q+byDNXLejOI39DcILaVUuoTDREdkV6FloNZjAG0tJaBI9C0Qe8del3085uhkaaLfUJfkysMwXFx4xQ9lNYT8vOo0oey+SwGSet2yji4S9Z082oW05MJR3QOIth9zkn0tDLhkLTkAgYtETdj3gUIKVmyeWxMR2dWHHcn61fhq8+m2NpElZ7V0IrsO8IxhC60/E8juTL9BdFUpyf+N7iiTydDqqfmFKCS+R1Bilwz3/la5NWh0xLqM9VHWHr1E6gm8fQWaTzodS3ncJB6RHioWc9WWbtvu/c1XzL+S20StGPq0f4JfsZmryqOWhelEpLCIt1MFgVqNEcYfnB2V+tVvDUL/nnnfFprlDIvNPS4hXRWLz8Vmw+zDFQTc4EJTBJp18oCvRbiqBs1f/Vc4JHG2kRcKVcvySCRk9DD4Qkp4GJlH15k5b+ighW/YgtttLlBKQJXVjzzKK5lk/RAXCd040BJEGv4rYjnqI0=
username: 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
name: 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
password: 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
type: AgCiTGkd+0JE8KKPtxC5vRP5yDIQgB0GFe+hs1+N93AprRAHxPdEN3/j8ilOkPTk9zdbptIBJTRiEofvyZRMDpaKUAeGIVvu9Nuk+sFRqbdCH0GNxxdePt8qoe6oJBkjeyWxtTmAc6hBiU8lgZGundoGy8QQZKQ7Fz6NbArGDnZ7FAqrsL2ZomZz0aKNzbqsBFv3lO5SjcpgmuXd6lFE5dOf+FzaWpc1RBTfV+IgveCcGDKTpvYWOtDRWIxRQEInPOcVoqyU+mBAlRjwHucF5/XPfw0+zXLxjVgLhQ6wzUoqCmuC2mGO2J1SAK9eIEloOge3YVMo+YXJRlOCvAOX+6oMNAQLYeRNu9BgvK7vmZv74u1ku2BjML46hkOCj5TRDDo1KZtT2z548sNoKmIvz4vIV26IiyLSoaMrZr7v/Vi3xk+8CKryaDPp5ytDx0l/G5+gYBYtQYgePGnKo5hSzNLmQE0t3fUkr4nbOetdPeUABGnvarasjVb1HCYYdRNCnPgDOmMkxi2hw9Hj7YonXzMds1/npuDPSOOW5nexz6zTcBib2rLWZgldUzz7udL/p3pcCsS4jPBxuLIBfDDSKjF8frQ13ZvkLdJFxqr0bDknjbbDyAxfLmCucoBlRJ8Bk8xP89jtbKUk1aI0FqVHJkm/ma7emqn9KJsTiGdcNX4wMPSElIcDZeJROwEp7hPP5+C49TwW
url: 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
username: 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
template:
metadata:
labels:
manifest/overlays/production/repo-creds-internal.sealed.secret.yaml
+4 -4
View File
@@ -6,10 +6,10 @@ metadata:
namespace: argocd
spec:
encryptedData:
password: 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
type: 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
url: AgCCzBlfjQs4CbGYj7R35Gb997homqFGc/f5CILQYgA+ogGC4aIv11iq7c9OlJyJ0t+8VNoZOnaJ4sBHG6SbqtGc3U0ugqwca1zYWB2ZfwzagZeCVOCfcHWcQXK1UuJ7z4PNiFll0NMjs12+mwEFovGNYRJ4Jyh93Wx5muGjn4YLe5zDp5DVRme9E58PrIJJgW2KBEAAPPAy8EDoGgPA3VvULUCs1MSUiAos0SvHYKa8sZ77wNWkxl82wvYi9tBEGO0CxWnKJm+UspFBkhLX7UKcXAQ8yAdb05DaNKaQYTHZCkDuba2rMev4gJFEt4/OKu3Kl3PNvOTPonh8OgfA+/k04C4PVBCOBcFXCL2oYt8K+1iulpbmv6iIcwPg2Ek9HoXD7HJcodcrRNsErTO5qNympWefGMzbGLoM+Ya7Zbz7UbFpsX9kEWl2lH/AFVOJ7cu1kJMqrtPyPF633h6dBhBzjbdY9RVl8hAqjosae1HkFtiLCjwNYXS6/Fck3vbg5BQYIwWre0Zqq2MujvnpcngOgah5weoMLx8jDWiIgYRP4glChpKwRWs7XBjEq3/6aZjWUcmNp23+uFbTGc85wUxe5C7Iye1SeFIr9+vR/Z57I7pY08kIPOQXznBb/GCwTyhK06MujGvganU6K2mOJX6fpi56IkN5jdSSKVyFsOJ084BVx9H04pLY6HB5gl5pTLrRylhJdHjL8fbQMoiAKWIs1ej5nr5HQOUgX4AqsMTBEtWrdEc=
username: AgBfdvyg4zvYcqInD5ZV5mjkeE6OmYE507YFyYaL8gGwuoKjY/S2spLMHPhGOalbIMzFPL4jIiR7sOdbbR+9ytCZ20GvJGIMtFUZa9EV/4/9b3y2TaSqahENpBh9b+HyN6rkCXE3Tm6uArjHTs0+Ky1J+xfvqkSaCi9G3npJgRxGCrvtPCb4Bvy4fvq0byeu4/oAvCSgHj1Rwmnbi/U9JpqHlRpV1QNqA79PvKKEuM9Hr1/8qHsqjgV9djoe7O0wNlrgvBpkBrk+GHN9g1bfVpQcUTOYgjMN09iBVPYDuDZ8sY3gGaw9OSVYxczSZvBM8Retinwlcqc6AxrZ4VhP1vfaSjMWX/moszeFq5dXcW7AUwDhJCV8ppodi93Iag/oYAX+8Gg8OHrrzu55epjA9G1Kht95v5tV6ROo3fafQFizg+jmafruRl7r5VPIjn/PYBY2m3ETkxY5AFI8x/xHjw7WL/Ehjbk0isCqsLs0tP86Nl8bOOBWckCiM4jcBzFN+KpkP3kwlcgpGNbY+o1I0sW4eydjl2GOXYRqmoMmwyXMaVNzMRQca4MKf+jXDeT6PdP/vB/zgds165OB2X1eeKVfgeU6mLBjSW7ZBLf4kJu2afMoPUW+MhOghCd6h274v4uqdjMySt9lvUVNs8Vit10++nOpd9p60whfPhEC7U8LNHXiY0kj3STglFcsMHZ2uavFG4KJ8yI=
password: AgAMeg7zlP8816g4mBzjE5Cz58f246hT4lzjbRiJj2uXsVw3wy30d9trbp4+xbdf3c6DTwY7087qCPc279BWcqvpGEdFeibzkTHZgjUkOt5WHvlzeDlJauNA+MF2YaYYa06kaKpRmsgKI7qulVfz/AHlIdpykQq4UaBY9NKSeKqI3S/jDpgqTY8lyM+K0cOTk6oQU+LzPlJ/9HTuySKPnKaINRuyFnqcmJRLZx+znPAWr0W8CJvJVr/aJtl5GfmRCbYipaBUL+1777LW5R7PgCpwBUc7ubwMofftSHPzE7BqB/ZNS5XykSM1ub2O1jCO5ZgZVuygWyrii6JXuoZLqOuQ6LCJ6CFSfoBknU/BNy0FRtfLRRZe73dIhgP1JFo/NecqACjXSr4HJs5OZA2eoDDpv1oow8o3kTKvPGpUc6yC3dqHyKSHXK4oEgaA++ec7ggVL8qmS1cjLnkmB/uoB0X+wgtT7VLUPLIw9kmtuHb7CeWVnW9WCIJwDZKpZvHlMBZK1FzTrU3P0Wcy/NvbfICuGQF+Ol3r3oiuQChaevL18NsygIuJeHylxJERx9O+TXA3udhP2ErsaPHoM0Q/KDg97x2dPIHK8fVx/yUNVaSz2V0PWRt2UIqHZnc0QCx6/r6b8xdAIFlGuOEgqj7u89eCUsx6XEF+6Rmaqe48OxTq+Fw/w/My58rwZhaHu8eyZ7AYKMAmXAIhhM8saEPGzmfAeSLp8koJ6qhIWxcHDAXqxFepi2ajiHiM
type: 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
url: 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
username: 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
template:
metadata:
labels:
manifest/overlays/production/repo-server-patch.yaml
+43 -1
View File
@@ -13,7 +13,7 @@ spec:
spec:
initContainers:
- name: copyutil
image: quay.io/argoproj/argocd:v3.4.3
image: quay.io/argoproj/argocd:v3.5.1
command:
- sh
- -c
@@ -31,6 +31,39 @@ spec:
volumeMounts:
- mountPath: /var/run/argocd
name: var-files
- name: ghcr-auth
image: quay.io/argoproj/argocd:v3.5.1
securityContext:
allowPrivilegeEscalation: false
capabilities:
drop:
- ALL
readOnlyRootFilesystem: true
runAsNonRoot: true
seccompProfile:
type: RuntimeDefault
env:
- name: HELM_CONFIG_HOME
value: /helm-working-dir
- name: HELM_REGISTRY_CONFIG
value: /helm-working-dir/config.json
- name: GITEA_USERNAME
valueFrom:
secretKeyRef:
name: gitea-basic-authregcred
key: username
- name: GITEA_PASSWORD
valueFrom:
secretKeyRef:
name: gitea-basic-authregcred
key: password
volumeMounts:
- name: registry-auth-dir
mountPath: /helm-working-dir
command:
- /bin/bash
- -exc
- 'echo -n $GITEA_PASSWORD | helm registry login git.olb42.com --username $GITEA_USERNAME --password-stdin -'
containers:
- name: argocd-lovely-plugin
image: ghcr.io/crumbhole/lovely:1.2.4
@@ -52,6 +85,15 @@ spec:
name: plugins
- mountPath: /tmp
name: lovely-tmp
- name: argocd-repo-server
env:
- name: HELM_REGISTRY_CONFIG
value: /helm-working-dir/config.json
volumeMounts:
- name: registry-auth-dir
mountPath: /helm-working-dir
volumes:
- name: lovely-tmp
emptyDir: {}
- name: registry-auth-dir
emptyDir: {}
manifest/overlays/production/scm-creds-internal.sealed.secret.yaml
+19
View File
@@ -0,0 +1,19 @@
---
apiVersion: bitnami.com/v1alpha1
kind: SealedSecret
metadata:
name: scm-creds-gitea-olb42
namespace: argocd
spec:
encryptedData:
password: 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
type: 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
url: AgCNeLbF5wJdcKJwty+DXxM4IfupsKpr/9+s5q0+S0909be15vtMH8xZMe2CB0QYN6ZRGTIVGrZDWRWmTGqakeuEZ1IHjYjxIvMpenx+ahYwVNR9uTWsGLwEEbR3D3gFOH2rHkiIY2HA6+Trw+97r7MvXsNO60Tk8G+/NF9TDQ302O9BF+5+/ol1UgUNDzKXK84YwN0Jbd0fGUcNuCRlkvtGFpZKnLMTJmMLV1PDyNK4hyFZlNXaKZp19z0VbbgvIokiyrv/kLQD41R+/EvtjePAuPRhtoqe501unktNkEakxPM2G/XdPLExeWJG/7MZRYMmsw2XV9GTTZJffPLDyNDIeCYJRIRpzxYNIeMdob1Lld6F47osoD27NAzXLgkxs/A/OAI57NxacV6sXE+wTWVyPztsIB94cOPV3yfjsms3OC/gFG6+g3e5iOWjfzWTEClZuyamGW3PyA4W4Ewkrr+BKd9FtYH9YOvT5tGNZvmYpr/kZUxXZal4qQ0kAkoH4DDFkKnDJh1tjqb2pllGBAO/2SEvUavCeQ/UTs3HHtHGoUl3RU6oTys7aAILG0kNIizsqUgftyTuFbmrWSgaj/xOmRsXyzzNPqdqB7EfBX+oU48JZQaGOTqgPc/RR2Jj4UGr9/UzApdoj1zK4+K9qQUF+Ynv+lakFml2FIj2diP98+XoEdli9CFozlFFZz+EwzwiRS+dUFAsRZapU5aSgVO5Cr322vWXs8unIY7HW5+yNfz0R5w=
username: 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
template:
metadata:
labels:
argocd.argoproj.io/secret-type: scm-creds
name: scm-creds-gitea-olb42
namespace: argocd
type: Opaque