feat: change argocd crds source to artifactapi

- migrate argocd crds to come from the artifactapi service

apps/base/argocd-image-updater/kustomization.yaml

@@ -1,8 +0,0 @@
----
-apiVersion: kustomize.config.k8s.io/v1beta1
-kind: Kustomization
-
-resources:
-  - namespace.yaml
-  - vaultauth.yaml
-  - vaultstaticsecret.yaml

apps/base/argocd-image-updater/namespace.yaml

@@ -1,5 +0,0 @@
----
-apiVersion: v1
-kind: Namespace
-metadata:
-  name: argocd-image-updater

apps/base/argocd-image-updater/vaultauth.yaml

@@ -1,18 +0,0 @@
----
-apiVersion: secrets.hashicorp.com/v1beta1
-kind: VaultAuth
-metadata:
-  name: default
-  namespace: argocd-image-updater
-spec:
-  allowedNamespaces:
-    - argocd-image-updater
-  kubernetes:
-    audiences:
-      - vault
-    role: argocd-image-updater
-    serviceAccount: argocd-image-updater
-    tokenExpirationSeconds: 600
-  method: kubernetes
-  mount: k8s/au/syd1
-  vaultConnectionRef: vso-system/default

apps/base/argocd-image-updater/vaultstaticsecret.yaml

@@ -1,40 +0,0 @@
----
-# Credentials for polling the git.unkin.net container registry.
-# Vault KV path: kv/service/argocd-image-updater/registry-creds
-# Required key: creds — value format: "<username>:<token>"
-apiVersion: secrets.hashicorp.com/v1beta1
-kind: VaultStaticSecret
-metadata:
-  name: registry-creds
-  namespace: argocd-image-updater
-spec:
-  destination:
-    create: true
-    name: registry-creds
-    overwrite: true
-  hmacSecretData: true
-  mount: kv
-  path: service/argocd-image-updater/registry-creds
-  refreshAfter: 5m
-  type: kv-v2
-  vaultAuthRef: default
----
-# ArgoCD API token for image updater to discover and update Applications.
-# Vault KV path: kv/service/argocd-image-updater/argocd-token
-# Required key: token — generate via: argocd account generate-token --account image-updater
-apiVersion: secrets.hashicorp.com/v1beta1
-kind: VaultStaticSecret
-metadata:
-  name: argocd-token
-  namespace: argocd-image-updater
-spec:
-  destination:
-    create: true
-    name: argocd-token
-    overwrite: true
-  hmacSecretData: true
-  mount: kv
-  path: service/argocd-image-updater/argocd-token
-  refreshAfter: 5m
-  type: kv-v2
-  vaultAuthRef: default

apps/base/artifactapi/resources/conf.d/remote-helm.yaml

@@ -130,14 +130,3 @@ remotes:
     cache:
       immutable_ttl: 0
       mutable_ttl: 3600
-
-  argo-helm:
-    base_url: "https://argoproj.github.io/argo-helm"
-    package: "helm"
-    description: "Argo Project Helm charts (ArgoCD, Image Updater, Rollouts, etc.)"
-    check_mutable_updates: true
-    immutable_patterns:
-      - "\\.tgz$"
-    cache:
-      immutable_ttl: 0
-      mutable_ttl: 3600

apps/base/artifactapi/resources/conf.d/virtual-helm.yaml

@@ -15,4 +15,3 @@ virtuals:
       - stakater
       - traefik
       - victoriametrics
-      - argo-helm

apps/overlays/au-syd1/argocd-image-updater/kustomization.yaml

@@ -1,14 +0,0 @@
----
-apiVersion: kustomize.config.k8s.io/v1beta1
-kind: Kustomization
-
-resources:
-  - ../../../base/argocd-image-updater
-
-helmCharts:
-  - name: argocd-image-updater
-    repo: https://artifactapi.k8s.syd1.au.unkin.net/api/v1/virtual/helm
-    version: "0.10.3"
-    releaseName: argocd-image-updater
-    namespace: argocd-image-updater
-    valuesFile: values.yaml

apps/overlays/au-syd1/argocd-image-updater/values.yaml

@@ -1,33 +0,0 @@
-config:
-  argocd:
-    grpcWeb: false
-    serverAddress: argocd-server.argocd
-    insecure: true
-    plaintext: false
-
-  registries:
-    - name: git.unkin.net
-      api_url: https://git.unkin.net
-      prefix: git.unkin.net
-      credentials: secret:argocd-image-updater/registry-creds#creds
-      insecure: false
-
-authScripts:
-  enabled: false
-
-extraEnv:
-  - name: ARGOCD_TOKEN
-    valueFrom:
-      secretKeyRef:
-        name: argocd-token
-        key: token
-
-gitCommitUser: "ArgoCD Image Updater"
-gitCommitEmail: "argocd-image-updater@unkin.net"
-
-rbac:
-  enabled: true
-
-serviceAccount:
-  create: true
-  name: argocd-image-updater

argocd/applicationsets/imageupdater.yaml

@@ -1,36 +0,0 @@
----
-apiVersion: argoproj.io/v1alpha1
-kind: ApplicationSet
-metadata:
-  name: image-updater-apps
-  namespace: argocd
-spec:
-  generators:
-  - git:
-      repoURL: https://git.unkin.net/unkin/argocd-apps
-      revision: HEAD
-      directories:
-      - path: apps/overlays/*/artifactapi
-  template:
-    metadata:
-      name: 'platform-{{path[3]}}'
-      annotations:
-        argocd-image-updater.argoproj.io/image-list: "artifactapi=git.unkin.net/unkin/artifactapi"
-        argocd-image-updater.argoproj.io/artifactapi.update-strategy: semver
-        argocd-image-updater.argoproj.io/write-back-method: git
-        argocd-image-updater.argoproj.io/git-branch: main
-    spec:
-      project: platform
-      source:
-        repoURL: https://git.unkin.net/unkin/argocd-apps
-        targetRevision: HEAD
-        path: '{{path}}'
-      destination:
-        server: https://kubernetes.default.svc
-        namespace: '{{path[3]}}'
-      syncPolicy:
-        automated:
-          prune: true
-          selfHeal: true
-        syncOptions:
-        - ServerSideApply=true

argocd/applicationsets/kustomization.yaml

@@ -4,7 +4,6 @@ kind: Kustomization
 
 resources:
   - aitooling.yaml
-  - imageupdater.yaml
   - observability.yaml
   - platform.yaml
   - storage.yaml

argocd/applicationsets/platform.yaml

@@ -10,7 +10,7 @@ spec:
       repoURL: https://git.unkin.net/unkin/argocd-apps
       revision: HEAD
       directories:
-      - path: apps/overlays/*/argocd-image-updater
+      - path: apps/overlays/*/artifactapi
       - path: apps/overlays/*/cattle-system
       - path: apps/overlays/*/cert-manager
       - path: apps/overlays/*/certificates

clusters/au-syd1/bootstrap/kustomization.yaml

@@ -4,7 +4,6 @@ kind: Kustomization
 
 resources:
   - https://artifactapi.k8s.syd1.au.unkin.net/api/v1/remote/github_user/argoproj/argo-cd/refs/tags/v3.3.2/manifests/ha/install.yaml
-  - https://artifactapi.k8s.syd1.au.unkin.net/api/v1/remote/github/kubernetes-sigs/gateway-api/releases/download/v1.5.1/standard-install.yaml
   - au-syd1-apps.yaml
   - argocd-self-app.yaml