olb042
e712652ef5
Validate manifests / validate (push) Successful in 6s
- Removes https:443 port from argocd-server service (redundant in insecure mode) so K8s API proxy can resolve service endpoint without ambiguity - Adds server.disable.auth=true to allow headlamp plugin unauthenticated API access (external access protected by Traefik OIDC)
35 lines
1019 B
YAML
35 lines
1019 B
YAML
apiVersion: kustomize.config.k8s.io/v1beta1
|
|
kind: Kustomization
|
|
|
|
resources:
|
|
- ../../base
|
|
- argocd-image-updater
|
|
- argocd-cmp-cm.yaml
|
|
- ingressroute.yaml
|
|
- argocd-gitea-token.sealed.secret.yaml
|
|
- argocd-notifications-secret.sealed.secret.yaml
|
|
- argocd-redis.sealed.secret.yaml
|
|
- argocd-secret.sealed.secret.yaml
|
|
- repo-creds-external.sealed.secret.yaml
|
|
- repo-creds-internal.sealed.secret.yaml
|
|
- argocd-age-key.sealed.secret.yaml
|
|
- ksops-cmp-config.yaml
|
|
|
|
patches:
|
|
- path: argocd-cm-patch.yaml
|
|
- path: argocd-server-patch.yaml
|
|
- path: argocd-cmd-params-cm-patch.yaml
|
|
- path: argocd-rbac-cm-patch.yaml
|
|
- path: argocd-notifications-cm-patch.yaml
|
|
- path: repo-server-patch.yaml
|
|
- path: disable-bundled-redis-patch.yaml
|
|
- path: argocd-server-service-patch.yaml
|
|
target:
|
|
kind: Service
|
|
name: argocd-server
|
|
|
|
# # KSOPS decrypts secret.enc.yaml at render time.
|
|
# # The presence of ksops-generator.yaml activates the KSOPS CMP plugin.
|
|
# generators:
|
|
# - ksops-generator.yaml
|