unkinben
f03eb6f651
Deploys ArgoCD Image Updater into the argocd-image-updater namespace. Vault-managed secrets provide registry credentials for git.unkin.net and an ArgoCD API token. Prerequisites before syncing: - Create Vault role argocd-image-updater in k8s/au/syd1 - Populate kv/service/argocd-image-updater/registry-creds (key: creds, value: <user>:<token>) - Create ArgoCD local user image-updater and store token at kv/service/argocd-image-updater/argocd-token
34 lines
631 B
YAML
34 lines
631 B
YAML
config:
|
|
argocd:
|
|
grpcWeb: false
|
|
serverAddress: argocd-server.argocd
|
|
insecure: true
|
|
plaintext: false
|
|
|
|
registries:
|
|
- name: git.unkin.net
|
|
api_url: https://git.unkin.net
|
|
prefix: git.unkin.net
|
|
credentials: secret:argocd-image-updater/registry-creds#creds
|
|
insecure: false
|
|
|
|
authScripts:
|
|
enabled: false
|
|
|
|
extraEnv:
|
|
- name: ARGOCD_TOKEN
|
|
valueFrom:
|
|
secretKeyRef:
|
|
name: argocd-token
|
|
key: token
|
|
|
|
gitCommitUser: "ArgoCD Image Updater"
|
|
gitCommitEmail: "argocd-image-updater@unkin.net"
|
|
|
|
rbac:
|
|
enabled: true
|
|
|
|
serviceAccount:
|
|
create: true
|
|
name: argocd-image-updater
|