Files
argocd/manifest/overlays/production/argocd-cm-patch.yaml
T
2026-05-29 12:16:24 +01:00

126 lines
4.0 KiB
YAML

apiVersion: v1
kind: ConfigMap
metadata:
name: argocd-cm
namespace: argocd
data:
accounts.homepage: apiKey
accounts.mcpserver: apiKey
accounts.anonymous.enabled: "true"
statusbadge.enabled: "true"
exec.enabled: "true"
kustomize.buildOptions: --enable-helm
ui.bannercontent: "Homepage"
ui.bannerurl: "https://home.olb42.com"
ui.bannerpermanent: "true"
ui.bannerposition: "top"
resource.customizations.ignoreResourceUpdates.ConfigMap: |
jqPathExpressions:
- '.metadata.annotations."cluster-autoscaler.kubernetes.io/last-updated"'
- '.metadata.annotations."control-plane.alpha.kubernetes.io/leader"'
resource.customizations.ignoreResourceUpdates.Endpoints: |
jsonPointers:
- /metadata
- /subsets
resource.customizations.ignoreResourceUpdates.all: |
jsonPointers:
- /status
resource.customizations.ignoreResourceUpdates.apps_ReplicaSet: |
jqPathExpressions:
- '.metadata.annotations."deployment.kubernetes.io/desired-replicas"'
- '.metadata.annotations."deployment.kubernetes.io/max-replicas"'
- '.metadata.annotations."rollout.argoproj.io/desired-replicas"'
resource.customizations.ignoreResourceUpdates.argoproj.io_Application: |
jqPathExpressions:
- '.metadata.annotations."notified.notifications.argoproj.io"'
- '.metadata.annotations."argocd.argoproj.io/refresh"'
- '.metadata.annotations."argocd.argoproj.io/hydrate"'
- '.operation'
resource.customizations.ignoreResourceUpdates.argoproj.io_Rollout: |
jqPathExpressions:
- '.metadata.annotations."notified.notifications.argoproj.io"'
resource.customizations.ignoreResourceUpdates.autoscaling_HorizontalPodAutoscaler: |
jqPathExpressions:
- '.metadata.annotations."autoscaling.alpha.kubernetes.io/behavior"'
- '.metadata.annotations."autoscaling.alpha.kubernetes.io/conditions"'
- '.metadata.annotations."autoscaling.alpha.kubernetes.io/metrics"'
- '.metadata.annotations."autoscaling.alpha.kubernetes.io/current-metrics"'
extension.config.metrics: |
services:
- url: http://argoplane-metrics-backend.argocd.svc:8080
extension.config.networking: |
services:
- url: http://argoplane-networking-backend.argocd.svc:8082
extension.config.logs: |
services:
- url: http://argoplane-logs-backend.argocd.svc:8083
extension.config.events: |
services:
- url: http://argoplane-events-backend.argocd.svc:8085
resource.customizations.ignoreResourceUpdates.discovery.k8s.io_EndpointSlice: |
jsonPointers:
- /metadata
- /endpoints
- /ports
resource.exclusions: |
- apiGroups:
- ''
- discovery.k8s.io
kinds:
- Endpoints
- EndpointSlice
- apiGroups:
- coordination.k8s.io
kinds:
- Lease
- apiGroups:
- authentication.k8s.io
- authorization.k8s.io
kinds:
- SelfSubjectReview
- TokenReview
- LocalSubjectAccessReview
- SelfSubjectAccessReview
- SelfSubjectRulesReview
- SubjectAccessReview
- apiGroups:
- certificates.k8s.io
kinds:
- CertificateSigningRequest
- apiGroups:
- cert-manager.io
kinds:
- CertificateRequest
- apiGroups:
- cilium.io
kinds:
- CiliumIdentity
- CiliumEndpoint
- CiliumEndpointSlice
- apiGroups:
- kyverno.io
- reports.kyverno.io
- wgpolicyk8s.io
kinds:
- PolicyReport
- ClusterPolicyReport
- EphemeralReport
- ClusterEphemeralReport
- AdmissionReport
- ClusterAdmissionReport
- BackgroundScanReport
- ClusterBackgroundScanReport
- UpdateRequest
url: https://argocd.olb42.com
oidc.config: |
name: Keycloak
issuer: https://cloak.olb42.com/realms/home-lab
clientID: argocd
enablePKCEAuthentication: true
refreshTokenThreshold: 2m
requestedScopes: ["openid", "profile", "email", "groups"]
# requestedIDTokenClaims: {"groups": {"essential": true}}
# enablePKCEAuthentication: true
# logoutURL: https://auth.olb42.com/oidc/v1/end_session