From be9d485bfea51985d958708f6de854cb972566eb Mon Sep 17 00:00:00 2001
From: Ben Vincent <ben@unkin.net>
Date: Mon, 2 Mar 2026 23:07:47 +1100
Subject: [PATCH] feat: testing jfrog-container-registry (#11)

- trialing jfrog container registry

Reviewed-on: https://git.unkin.net/unkin/argocd-apps/pulls/11
---
 apps/base/jfrog/kustomization.yaml            |  6 ++
 apps/base/jfrog/namespace.yaml                |  5 ++
 .../overlays/au-syd1/jfrog/kustomization.yaml | 14 +++++
 apps/overlays/au-syd1/jfrog/values.yaml       | 63 +++++++++++++++++++
 argocd/applicationsets/platform.yaml          |  1 +
 argocd/projects/platform.yaml                 |  2 +
 6 files changed, 91 insertions(+)
 create mode 100644 apps/base/jfrog/kustomization.yaml
 create mode 100644 apps/base/jfrog/namespace.yaml
 create mode 100644 apps/overlays/au-syd1/jfrog/kustomization.yaml
 create mode 100644 apps/overlays/au-syd1/jfrog/values.yaml

diff --git a/apps/base/jfrog/kustomization.yaml b/apps/base/jfrog/kustomization.yaml
new file mode 100644
index 0000000..5122f9e
--- /dev/null
+++ b/apps/base/jfrog/kustomization.yaml
@@ -0,0 +1,6 @@
+---
+apiVersion: kustomize.config.k8s.io/v1beta1
+kind: Kustomization
+
+resources:
+  - namespace.yaml
diff --git a/apps/base/jfrog/namespace.yaml b/apps/base/jfrog/namespace.yaml
new file mode 100644
index 0000000..77be95c
--- /dev/null
+++ b/apps/base/jfrog/namespace.yaml
@@ -0,0 +1,5 @@
+---
+apiVersion: v1
+kind: Namespace
+metadata:
+  name: jfrog
diff --git a/apps/overlays/au-syd1/jfrog/kustomization.yaml b/apps/overlays/au-syd1/jfrog/kustomization.yaml
new file mode 100644
index 0000000..b94092b
--- /dev/null
+++ b/apps/overlays/au-syd1/jfrog/kustomization.yaml
@@ -0,0 +1,14 @@
+---
+apiVersion: kustomize.config.k8s.io/v1beta1
+kind: Kustomization
+
+resources:
+  - ../../../base/jfrog
+
+helmCharts:
+  - name: artifactory-jcr
+    repo: https://charts.jfrog.io
+    version: "107.133.10"
+    releaseName: artifactory-jcr
+    namespace: jfrog
+    valuesFile: values.yaml
diff --git a/apps/overlays/au-syd1/jfrog/values.yaml b/apps/overlays/au-syd1/jfrog/values.yaml
new file mode 100644
index 0000000..16f6a91
--- /dev/null
+++ b/apps/overlays/au-syd1/jfrog/values.yaml
@@ -0,0 +1,63 @@
+---
+artifactory:
+  ## Artifactory
+  ## See full list of supported Artifactory options and documentation in artifactory chart: https://github.com/jfrog/charts/tree/master/stable/artifactory
+  artifactory:
+    ## Default tag is from the artifactory sub-chart in the requirements.yaml
+    image:
+      registry: releases-docker.jfrog.io
+      repository: jfrog/artifactory-jcr
+    resources: {}
+    #  requests:
+    #    memory: "1Gi"
+    #    cpu: "500m"
+    #  limits:
+    #    memory: "4Gi"
+    #    cpu: "1"
+    ## The following Java options are passed to the java process running Artifactory.
+    ## You should set them according to the resources set above.
+    ## IMPORTANT: Make sure resources.limits.memory is at least 1G more than Xmx.
+    javaOpts: {}
+    # xms: "1g"
+    # xmx: "3g"
+    # other: ""
+  installer:
+    platform: jcr-helm
+  ## Nginx
+  ## See full list of supported Nginx options and documentation in artifactory chart: https://github.com/jfrog/charts/tree/master/stable/artifactory
+  nginx:
+    enabled: true
+    tlsSecretName: ""
+    service:
+      type: LoadBalancer
+  ## Ingress
+  ## See full list of supported Ingress options and documentation in artifactory chart: https://github.com/jfrog/charts/tree/master/stable/artifactory
+  ingress:
+    enabled: false
+    tls:
+  ## PostgreSQL
+  ## See list of supported postgresql options and documentation in artifactory chart: https://github.com/jfrog/charts/tree/master/stable/artifactory
+  ## Configuration values for the PostgreSQL dependency sub-chart
+  ## ref: https://github.com/bitnami/charts/blob/master/bitnami/postgresql/README.md
+  postgresql:
+    enabled: true
+  ## This key is required for upgrades to protect old PostgreSQL chart's breaking changes.
+  databaseUpgradeReady: "yes"
+  ## If NOT using the PostgreSQL in this chart (artifactory.postgresql.enabled=false),
+  ## specify custom database details here or leave empty and Artifactory will use embedded derby.
+  ## See full list of database options and documentation in artifactory chart: https://github.com/jfrog/charts/tree/master/stable/artifactory
+  # database:
+  jfconnect:
+    enabled: false
+  rtfs:
+    enabled: false
+  onemodel:
+    enabled: false
+  evidence:
+    enabled: false
+  apptrust:
+    enabled: false
+  unifiedpolicy:
+    enabled: false
+  platformfederation:
+    enabled: false
diff --git a/argocd/applicationsets/platform.yaml b/argocd/applicationsets/platform.yaml
index dc21411..c99eee7 100644
--- a/argocd/applicationsets/platform.yaml
+++ b/argocd/applicationsets/platform.yaml
@@ -12,6 +12,7 @@ spec:
       directories:
       - path: apps/overlays/*/reflector-system
       - path: apps/overlays/*/reloader-system
+      - path: apps/overlays/*/jfrog
   template:
     metadata:
       name: 'platform-{{path[3]}}'  # cluster-app format (e.g., platform-reflector-system)
diff --git a/argocd/projects/platform.yaml b/argocd/projects/platform.yaml
index f4c69e7..2ec90e2 100644
--- a/argocd/projects/platform.yaml
+++ b/argocd/projects/platform.yaml
@@ -12,6 +12,8 @@ spec:
   destinations:
     - namespace: '*-system'
       server: https://kubernetes.default.svc
+    - namespace: 'jfrog'
+      server: https://kubernetes.default.svc
   clusterResourceWhitelist:
     - group: ''
       kind: Namespace