Compare commits
1 Commits
| Author | SHA1 | Date | |
|---|---|---|---|
| b1f853aa7a |
@@ -1,8 +0,0 @@
|
|||||||
---
|
|
||||||
apiVersion: kustomize.config.k8s.io/v1beta1
|
|
||||||
kind: Kustomization
|
|
||||||
|
|
||||||
resources:
|
|
||||||
- namespace.yaml
|
|
||||||
- vaultauth.yaml
|
|
||||||
- vaultstaticsecret.yaml
|
|
||||||
@@ -1,5 +0,0 @@
|
|||||||
---
|
|
||||||
apiVersion: v1
|
|
||||||
kind: Namespace
|
|
||||||
metadata:
|
|
||||||
name: argocd-image-updater
|
|
||||||
@@ -1,18 +0,0 @@
|
|||||||
---
|
|
||||||
apiVersion: secrets.hashicorp.com/v1beta1
|
|
||||||
kind: VaultAuth
|
|
||||||
metadata:
|
|
||||||
name: default
|
|
||||||
namespace: argocd-image-updater
|
|
||||||
spec:
|
|
||||||
allowedNamespaces:
|
|
||||||
- argocd-image-updater
|
|
||||||
kubernetes:
|
|
||||||
audiences:
|
|
||||||
- vault
|
|
||||||
role: argocd-image-updater
|
|
||||||
serviceAccount: argocd-image-updater
|
|
||||||
tokenExpirationSeconds: 600
|
|
||||||
method: kubernetes
|
|
||||||
mount: k8s/au/syd1
|
|
||||||
vaultConnectionRef: vso-system/default
|
|
||||||
@@ -1,40 +0,0 @@
|
|||||||
---
|
|
||||||
# Credentials for polling the git.unkin.net container registry.
|
|
||||||
# Vault KV path: kv/service/argocd-image-updater/registry-creds
|
|
||||||
# Required key: creds — value format: "<username>:<token>"
|
|
||||||
apiVersion: secrets.hashicorp.com/v1beta1
|
|
||||||
kind: VaultStaticSecret
|
|
||||||
metadata:
|
|
||||||
name: registry-creds
|
|
||||||
namespace: argocd-image-updater
|
|
||||||
spec:
|
|
||||||
destination:
|
|
||||||
create: true
|
|
||||||
name: registry-creds
|
|
||||||
overwrite: true
|
|
||||||
hmacSecretData: true
|
|
||||||
mount: kv
|
|
||||||
path: service/argocd-image-updater/registry-creds
|
|
||||||
refreshAfter: 5m
|
|
||||||
type: kv-v2
|
|
||||||
vaultAuthRef: default
|
|
||||||
---
|
|
||||||
# ArgoCD API token for image updater to discover and update Applications.
|
|
||||||
# Vault KV path: kv/service/argocd-image-updater/argocd-token
|
|
||||||
# Required key: token — generate via: argocd account generate-token --account image-updater
|
|
||||||
apiVersion: secrets.hashicorp.com/v1beta1
|
|
||||||
kind: VaultStaticSecret
|
|
||||||
metadata:
|
|
||||||
name: argocd-token
|
|
||||||
namespace: argocd-image-updater
|
|
||||||
spec:
|
|
||||||
destination:
|
|
||||||
create: true
|
|
||||||
name: argocd-token
|
|
||||||
overwrite: true
|
|
||||||
hmacSecretData: true
|
|
||||||
mount: kv
|
|
||||||
path: service/argocd-image-updater/argocd-token
|
|
||||||
refreshAfter: 5m
|
|
||||||
type: kv-v2
|
|
||||||
vaultAuthRef: default
|
|
||||||
@@ -30,7 +30,6 @@ remotes:
|
|||||||
- "^hashicorp/vault-secrets-operator"
|
- "^hashicorp/vault-secrets-operator"
|
||||||
- "^jfrog/"
|
- "^jfrog/"
|
||||||
- "^rancher/"
|
- "^rancher/"
|
||||||
- "^traefik/"
|
|
||||||
- "^ubi9/ubi-minimal"
|
- "^ubi9/ubi-minimal"
|
||||||
- "^victoriametrics/"
|
- "^victoriametrics/"
|
||||||
- "^woodpeckerci/"
|
- "^woodpeckerci/"
|
||||||
|
|||||||
@@ -26,7 +26,6 @@ remotes:
|
|||||||
- "helmfile/helmfile/.*/helmfile_.*_linux_amd64.tar.gz$"
|
- "helmfile/helmfile/.*/helmfile_.*_linux_amd64.tar.gz$"
|
||||||
- "helmfile/vals/.*/vals_.*_linux_amd64.tar.gz$"
|
- "helmfile/vals/.*/vals_.*_linux_amd64.tar.gz$"
|
||||||
- "jesseduffield/lazydocker/.*/lazydocker_.*_Linux_x86_64.tar.gz$"
|
- "jesseduffield/lazydocker/.*/lazydocker_.*_Linux_x86_64.tar.gz$"
|
||||||
- "kubernetes-sigs/gateway-api/.*/standard-install.yaml$"
|
|
||||||
- "lxc/incus/.*.tar.gz$"
|
- "lxc/incus/.*.tar.gz$"
|
||||||
- "mikefarah/yq/.*/yq_linux_amd64$"
|
- "mikefarah/yq/.*/yq_linux_amd64$"
|
||||||
- "neovim/neovim-releases/.*/nvim-linux-x86_64.tar.gz$"
|
- "neovim/neovim-releases/.*/nvim-linux-x86_64.tar.gz$"
|
||||||
|
|||||||
@@ -109,17 +109,6 @@ remotes:
|
|||||||
immutable_ttl: 0
|
immutable_ttl: 0
|
||||||
mutable_ttl: 3600
|
mutable_ttl: 3600
|
||||||
|
|
||||||
traefik:
|
|
||||||
base_url: "https://traefik.github.io/charts"
|
|
||||||
package: "helm"
|
|
||||||
description: "Traefik Helm charts"
|
|
||||||
check_mutable_updates: true
|
|
||||||
immutable_patterns:
|
|
||||||
- "\\.tgz$"
|
|
||||||
cache:
|
|
||||||
immutable_ttl: 0
|
|
||||||
mutable_ttl: 3600
|
|
||||||
|
|
||||||
victoriametrics:
|
victoriametrics:
|
||||||
base_url: "https://victoriametrics.github.io/helm-charts/"
|
base_url: "https://victoriametrics.github.io/helm-charts/"
|
||||||
package: "helm"
|
package: "helm"
|
||||||
@@ -130,14 +119,3 @@ remotes:
|
|||||||
cache:
|
cache:
|
||||||
immutable_ttl: 0
|
immutable_ttl: 0
|
||||||
mutable_ttl: 3600
|
mutable_ttl: 3600
|
||||||
|
|
||||||
argo-helm:
|
|
||||||
base_url: "https://argoproj.github.io/argo-helm"
|
|
||||||
package: "helm"
|
|
||||||
description: "Argo Project Helm charts (ArgoCD, Image Updater, Rollouts, etc.)"
|
|
||||||
check_mutable_updates: true
|
|
||||||
immutable_patterns:
|
|
||||||
- "\\.tgz$"
|
|
||||||
cache:
|
|
||||||
immutable_ttl: 0
|
|
||||||
mutable_ttl: 3600
|
|
||||||
|
|||||||
@@ -13,6 +13,4 @@ virtuals:
|
|||||||
- purelb
|
- purelb
|
||||||
- rancher-stable
|
- rancher-stable
|
||||||
- stakater
|
- stakater
|
||||||
- traefik
|
|
||||||
- victoriametrics
|
- victoriametrics
|
||||||
- argo-helm
|
|
||||||
|
|||||||
@@ -1,14 +0,0 @@
|
|||||||
---
|
|
||||||
apiVersion: kustomize.config.k8s.io/v1beta1
|
|
||||||
kind: Kustomization
|
|
||||||
|
|
||||||
resources:
|
|
||||||
- ../../../base/argocd-image-updater
|
|
||||||
|
|
||||||
helmCharts:
|
|
||||||
- name: argocd-image-updater
|
|
||||||
repo: https://artifactapi.k8s.syd1.au.unkin.net/api/v1/virtual/helm
|
|
||||||
version: "0.10.3"
|
|
||||||
releaseName: argocd-image-updater
|
|
||||||
namespace: argocd-image-updater
|
|
||||||
valuesFile: values.yaml
|
|
||||||
@@ -1,33 +0,0 @@
|
|||||||
config:
|
|
||||||
argocd:
|
|
||||||
grpcWeb: false
|
|
||||||
serverAddress: argocd-server.argocd
|
|
||||||
insecure: true
|
|
||||||
plaintext: false
|
|
||||||
|
|
||||||
registries:
|
|
||||||
- name: git.unkin.net
|
|
||||||
api_url: https://git.unkin.net
|
|
||||||
prefix: git.unkin.net
|
|
||||||
credentials: secret:argocd-image-updater/registry-creds#creds
|
|
||||||
insecure: false
|
|
||||||
|
|
||||||
authScripts:
|
|
||||||
enabled: false
|
|
||||||
|
|
||||||
extraEnv:
|
|
||||||
- name: ARGOCD_TOKEN
|
|
||||||
valueFrom:
|
|
||||||
secretKeyRef:
|
|
||||||
name: argocd-token
|
|
||||||
key: token
|
|
||||||
|
|
||||||
gitCommitUser: "ArgoCD Image Updater"
|
|
||||||
gitCommitEmail: "argocd-image-updater@unkin.net"
|
|
||||||
|
|
||||||
rbac:
|
|
||||||
enabled: true
|
|
||||||
|
|
||||||
serviceAccount:
|
|
||||||
create: true
|
|
||||||
name: argocd-image-updater
|
|
||||||
@@ -1,36 +0,0 @@
|
|||||||
---
|
|
||||||
apiVersion: argoproj.io/v1alpha1
|
|
||||||
kind: ApplicationSet
|
|
||||||
metadata:
|
|
||||||
name: image-updater-apps
|
|
||||||
namespace: argocd
|
|
||||||
spec:
|
|
||||||
generators:
|
|
||||||
- git:
|
|
||||||
repoURL: https://git.unkin.net/unkin/argocd-apps
|
|
||||||
revision: HEAD
|
|
||||||
directories:
|
|
||||||
- path: apps/overlays/*/artifactapi
|
|
||||||
template:
|
|
||||||
metadata:
|
|
||||||
name: 'platform-{{path[3]}}'
|
|
||||||
annotations:
|
|
||||||
argocd-image-updater.argoproj.io/image-list: "artifactapi=git.unkin.net/unkin/artifactapi"
|
|
||||||
argocd-image-updater.argoproj.io/artifactapi.update-strategy: semver
|
|
||||||
argocd-image-updater.argoproj.io/write-back-method: git
|
|
||||||
argocd-image-updater.argoproj.io/git-branch: main
|
|
||||||
spec:
|
|
||||||
project: platform
|
|
||||||
source:
|
|
||||||
repoURL: https://git.unkin.net/unkin/argocd-apps
|
|
||||||
targetRevision: HEAD
|
|
||||||
path: '{{path}}'
|
|
||||||
destination:
|
|
||||||
server: https://kubernetes.default.svc
|
|
||||||
namespace: '{{path[3]}}'
|
|
||||||
syncPolicy:
|
|
||||||
automated:
|
|
||||||
prune: true
|
|
||||||
selfHeal: true
|
|
||||||
syncOptions:
|
|
||||||
- ServerSideApply=true
|
|
||||||
@@ -4,7 +4,6 @@ kind: Kustomization
|
|||||||
|
|
||||||
resources:
|
resources:
|
||||||
- aitooling.yaml
|
- aitooling.yaml
|
||||||
- imageupdater.yaml
|
|
||||||
- observability.yaml
|
- observability.yaml
|
||||||
- platform.yaml
|
- platform.yaml
|
||||||
- storage.yaml
|
- storage.yaml
|
||||||
|
|||||||
@@ -10,7 +10,7 @@ spec:
|
|||||||
repoURL: https://git.unkin.net/unkin/argocd-apps
|
repoURL: https://git.unkin.net/unkin/argocd-apps
|
||||||
revision: HEAD
|
revision: HEAD
|
||||||
directories:
|
directories:
|
||||||
- path: apps/overlays/*/argocd-image-updater
|
- path: apps/overlays/*/artifactapi
|
||||||
- path: apps/overlays/*/cattle-system
|
- path: apps/overlays/*/cattle-system
|
||||||
- path: apps/overlays/*/cert-manager
|
- path: apps/overlays/*/cert-manager
|
||||||
- path: apps/overlays/*/certificates
|
- path: apps/overlays/*/certificates
|
||||||
|
|||||||
@@ -3,8 +3,7 @@ apiVersion: kustomize.config.k8s.io/v1beta1
|
|||||||
kind: Kustomization
|
kind: Kustomization
|
||||||
|
|
||||||
resources:
|
resources:
|
||||||
- https://artifactapi.k8s.syd1.au.unkin.net/api/v1/remote/github_user/argoproj/argo-cd/refs/tags/v3.3.2/manifests/ha/install.yaml
|
- https://raw.githubusercontent.com/argoproj/argo-cd/refs/tags/v3.3.2/manifests/ha/install.yaml
|
||||||
- https://artifactapi.k8s.syd1.au.unkin.net/api/v1/remote/github/kubernetes-sigs/gateway-api/releases/download/v1.5.1/standard-install.yaml
|
|
||||||
- au-syd1-apps.yaml
|
- au-syd1-apps.yaml
|
||||||
- argocd-self-app.yaml
|
- argocd-self-app.yaml
|
||||||
|
|
||||||
|
|||||||
Reference in New Issue
Block a user