move resources

2024-06-28 21:37:27 -05:00
parent ca84c476d8
commit 78ba7d62ec
9 changed files with 8 additions and 2 deletions
--- a/clusters/cl01tl/deployment/argo-rollouts/Chart.yaml
+++ b/clusters/cl01tl/deployment/argo-rollouts/Chart.yaml
@@ -1,20 +0,0 @@
-apiVersion: v2
-name: argo-rollouts
-version: 1.0.0
-description: Argo Rollouts
-keywords:
-  - argo-rollouts
-  - delivery
-  - deployment
-home: ""
-sources:
-  - https://github.com/argoproj/argo-rollouts
-  - https://github.com/argoproj/argo-helm/tree/main/charts
-maintainers:
-  - name: alexlebens
-dependencies:
-  - name: argo-rollouts
-    version: 2.36.1
-    repository: https://argoproj.github.io/argo-helm
-icon: https://raw.githubusercontent.com/walkxcode/dashboard-icons/main/png/argocd.png
-appVersion: v1.7.0
--- a/clusters/cl01tl/deployment/argo-rollouts/values.yaml
+++ b/clusters/cl01tl/deployment/argo-rollouts/values.yaml
@@ -1,45 +0,0 @@
-argo-rollouts:
-  controller:
-    metrics:
-      enabled: true
-      serviceMonitor:
-        enabled: true
-        namespace: argocd
-  dashboard:
-    enabled: true
-    ingress:
-      enabled: true
-      annotations:
-        traefik.ingress.kubernetes.io/router.entrypoints: websecure
-        traefik.ingress.kubernetes.io/router.tls: "true"
-        cert-manager.io/cluster-issuer: letsencrypt-issuer
-      ingressClassName: traefik
-      hosts:
-        - argo-rollouts.alexlebens.net
-      tls:
-        - secretName: argo-rollouts-secret-tls
-          hosts:
-            - argo-rollouts.alexlebens.net
-
-  notifications:
-    notifiers: {}
-      # service.slack: |
-      #   token: $slack-token
-
-    # -- Notification templates
-    templates: {}
-      # template.my-purple-template: |
-      #   message: |
-      #     Rollout {{.rollout.metadata.name}} has purple image
-      #   slack:
-      #       attachments: |
-      #           [{
-      #             "title": "{{ .rollout.metadata.name}}",
-      #             "color": "#800080"
-      #           }]
-
-    # -- The trigger defines the condition when the notification should be sent
-    triggers: {}
-      # trigger.on-purple: |
-      #   - send: [my-purple-template]
-      #     when: rollout.spec.template.spec.containers[0].image == 'argoproj/rollouts-demo:purple'
--- a/clusters/cl01tl/deployment/argo-workflows/Chart.yaml
+++ b/clusters/cl01tl/deployment/argo-workflows/Chart.yaml
@@ -1,31 +0,0 @@
-apiVersion: v2
-name: argo-workflows
-version: 1.0.0
-description: Argo Workflows
-keywords:
-  - argo-workflows
-  - argo-events
-  - workflows
-  - events
-home: ""
-sources:
-  - https://github.com/argoproj/argo-workflows
-  - https://github.com/argoproj/argo-events
-  - https://github.com/cloudnative-pg/cloudnative-pg
-  - https://github.com/argoproj/argo-helm/tree/main/charts
-  - https://github.com/alexlebens/helm-charts/charts/postgres-cluster
-maintainers:
-  - name: alexlebens
-dependencies:
-  - name: argo-workflows
-    version: 0.41.11
-    repository: https://argoproj.github.io/argo-helm
-  - name: argo-events
-    version: 2.4.6
-    repository: https://argoproj.github.io/argo-helm
-  - name: postgres-cluster
-    alias: postgres-16-cluster
-    version: 3.6.0
-    repository: http://alexlebens.github.io/helm-charts
-icon: https://raw.githubusercontent.com/walkxcode/dashboard-icons/main/png/argocd.png
-appVersion: v3.5.8
--- a/clusters/cl01tl/deployment/argo-workflows/templates/external-secret.yaml
+++ b/clusters/cl01tl/deployment/argo-workflows/templates/external-secret.yaml
@@ -1,62 +0,0 @@
-apiVersion: external-secrets.io/v1beta1
-kind: ExternalSecret
-metadata:
-  name: argo-workflows-oidc-secret
-  namespace: {{ .Release.Namespace }}
-  labels:
-    app.kubernetes.io/name: argo-workflows-oidc-secret
-    app.kubernetes.io/instance: {{ .Release.Name }}
-    app.kubernetes.io/version: {{ .Chart.AppVersion }}
-    app.kubernetes.io/component: web
-    app.kubernetes.io/part-of: {{ .Release.Name }}
-spec:
-  secretStoreRef:
-    kind: ClusterSecretStore
-    name: vault
-  data:
-    - secretKey: secret
-      remoteRef:
-        conversionStrategy: Default
-        decodingStrategy: None
-        key: /authentik/oidc/argo-workflows
-        metadataPolicy: None
-        property: secret
-    - secretKey: client
-      remoteRef:
-        conversionStrategy: Default
-        decodingStrategy: None
-        key: /authentik/oidc/argo-workflows
-        metadataPolicy: None
-        property: client
-
---
-apiVersion: external-secrets.io/v1beta1
-kind: ExternalSecret
-metadata:
-  name: argo-workflows-postgresql-16-cluster-backup-secret
-  namespace: {{ .Release.Namespace }}
-  labels:
-    app.kubernetes.io/name: argo-workflows-postgresql-16-cluster-backup-secret
-    app.kubernetes.io/instance: {{ .Release.Name }}
-    app.kubernetes.io/version: {{ .Chart.AppVersion }}
-    app.kubernetes.io/component: database
-    app.kubernetes.io/part-of: {{ .Release.Name }}
-spec:
-  secretStoreRef:
-    kind: ClusterSecretStore
-    name: vault
-  data:
-    - secretKey: ACCESS_KEY_ID
-      remoteRef:
-        conversionStrategy: Default
-        decodingStrategy: None
-        key: /aws/keys/cl01tl-argo-workflows-postgresql
-        metadataPolicy: None
-        property: access_key
-    - secretKey: ACCESS_SECRET_KEY
-      remoteRef:
-        conversionStrategy: Default
-        decodingStrategy: None
-        key: /aws/keys/cl01tl-argo-workflows-postgresql
-        metadataPolicy: None
-        property: secret_key
--- a/clusters/cl01tl/deployment/argo-workflows/values.yaml
+++ b/clusters/cl01tl/deployment/argo-workflows/values.yaml
@@ -1,114 +0,0 @@
-argo-workflows:
-  controller:
-    metricsConfig:
-      enabled: true
-    persistence:
-      connectionPool:
-        maxIdleConns: 100
-        maxOpenConns: 0
-      nodeStatusOffLoad: true
-      archive: true
-      postgresql:
-        host: argo-workflows-postgresql-16-cluster-rw
-        port: 5432
-        database: app
-        tableName: app
-        userNameSecret:
-          name: argo-workflows-postgresql-16-cluster-app
-          key: username
-        passwordSecret:
-          name: argo-workflows-postgresql-16-cluster-app
-          key: password
-        ssl: false
-        sslMode: disable
-    workflowWorkers: 2
-    workflowTTLWorkers: 1
-    podCleanupWorkers: 1
-    cronWorkflowWorkers: 1
-    telemetryConfig:
-      enabled: true
-    serviceMonitor:
-      enabled: true
-    name: workflow-controller
-    workflowNamespaces:
-      - argocd
-  server:
-    authModes:
-      - sso
-    ingress:
-      enabled: true
-      annotations:
-        traefik.ingress.kubernetes.io/router.entrypoints: websecure
-        traefik.ingress.kubernetes.io/router.tls: "true"
-        cert-manager.io/cluster-issuer: letsencrypt-issuer
-      ingressClassName: traefik
-      hosts:
-        - argo-workflows.alexlebens.net
-      tls:
-        - secretName: argoworkflows-example-tls
-          hosts:
-            - argo-workflows.alexlebens.net
-    sso:
-      enabled: true
-      issuer: https://authentik.alexlebens.net/application/o/argo-workflows/
-      clientId:
-        name: argo-workflows-oidc-secret
-        key: client
-      clientSecret:
-        name: argo-workflows-oidc-secret
-        key: secret
-      redirectUrl: https://argo-workflows.alexlebens.net/oauth2/callback
-      rbac:
-        enabled: false
-      scopes:
-        - openid
-        - email
-        - profile
-  useStaticCredentials: true
-  artifactRepository:
-    archiveLogs: false
-    s3: {}
-      # accessKeySecret:
-      #   name: "{{ .Release.Name }}-minio"
-      #   key: accesskey
-      # secretKeySecret:
-      #   name: "{{ .Release.Name }}-minio"
-      #   key: secretkey
-      # insecure: true
-      # bucket:
-      # endpoint:
-      # region:
-      # encryptionOptions:
-      #   enableEncryption: true
-
-argo-events:
-  controller:
-    resources:
-      requests:
-        cpu: 100m
-        memory: 128Mi
-    metrics:
-      enabled: true
-      serviceMonitor:
-        enabled: true
-        namespace: argocd
-  webhook:
-    enabled: true
-postgres-16-cluster:
-  mode: standalone
-  cluster:
-    walStorage:
-      storageClass: local-path
-    storage:
-      storageClass: local-path
-    monitoring:
-      enabled: true
-      prometheusRule:
-        enabled: false
-  backup:
-    enabled: true
-    endpointURL: https://s3.us-east-2.amazonaws.com
-    destinationPath: s3://cl01tl-postgresql-backups/argo-workflows
-    endpointCredentials: argo-workflows-postgresql-16-cluster-backup-secret
-    backupIndex: 1
-    retentionPolicy: 14d
--- a/clusters/cl01tl/deployment/kargo/Chart.yaml
+++ b/clusters/cl01tl/deployment/kargo/Chart.yaml
@@ -1,23 +0,0 @@
-apiVersion: v2
-name: kargo
-version: 1.0.0
-description: Kargo
-keywords:
-  - kargo
-  - delivery
-  - deployment
-  - lifecycle
-  - gitops
-home: ""
-sources:
-  - https://github.com/akuity/kargo
-  - https://github.com/dexidp/dex/pkgs/container/dex
-  - https://github.com/akuity/kargo/blob/main/charts/kargo/Chart.yaml
-maintainers:
-  - name: alexlebens
-dependencies:
-  - name: kargo
-    version: 0.7.1
-    repository: oci://ghcr.io/akuity/kargo-charts
-icon: https://raw.githubusercontent.com/walkxcode/dashboard-icons/main/png/argocd.png
-appVersion: v0.7.1
--- a/clusters/cl01tl/deployment/kargo/templates/external-secret.yaml
+++ b/clusters/cl01tl/deployment/kargo/templates/external-secret.yaml
@@ -1,30 +0,0 @@
-apiVersion: external-secrets.io/v1beta1
-kind: ExternalSecret
-metadata:
-  name: kargo-oidc-secret
-  namespace: {{ .Release.Namespace }}
-  labels:
-    app.kubernetes.io/name: kargo-oidc-secret
-    app.kubernetes.io/instance: {{ .Release.Name }}
-    app.kubernetes.io/version: {{ .Chart.AppVersion }}
-    app.kubernetes.io/component: web
-    app.kubernetes.io/part-of: {{ .Release.Name }}
-spec:
-  secretStoreRef:
-    kind: ClusterSecretStore
-    name: vault
-  data:
-    - secretKey: CLIENT_SECRET
-      remoteRef:
-        conversionStrategy: Default
-        decodingStrategy: None
-        key: /authentik/oidc/kargo
-        metadataPolicy: None
-        property: secret
-    - secretKey: CLIENT_ID
-      remoteRef:
-        conversionStrategy: Default
-        decodingStrategy: None
-        key: /authentik/oidc/kargo
-        metadataPolicy: None
-        property: client
--- a/clusters/cl01tl/deployment/kargo/values.yaml
+++ b/clusters/cl01tl/deployment/kargo/values.yaml
@@ -1,102 +0,0 @@
-kargo:
-  api:
-    host: kargo.alexlebens.net
-    resources:
-      requests:
-        cpu: 100m
-        memory: 128Mi
-    tls:
-      enabled: false
-    ingress:
-      enabled: true
-      annotations:
-        traefik.ingress.kubernetes.io/router.entrypoints: websecure
-        traefik.ingress.kubernetes.io/router.tls: "true"
-        cert-manager.io/cluster-issuer: letsencrypt-issuer
-      ingressClassName: traefik
-      tls:
-        enabled: true
-        selfSignedCert: false
-    adminAccount:
-      enabled: false
-    oidc:
-      enabled: true
-      admins:
-        groups: ["ArgoCD Admins"]
-      dex:
-        enabled: true
-        image:
-          repository: ghcr.io/dexidp/dex
-          tag: v2.40.0
-        env:
-          - name: CLIENT_ID
-            valueFrom:
-              secretKeyRef:
-                name: kargo-oidc-secret
-                key: CLIENT_ID
-          - name: CLIENT_SECRET
-            valueFrom:
-              secretKeyRef:
-                name: kargo-oidc-secret
-                key: CLIENT_SECRET
-        tls:
-          selfSignedCert: false
-        skipApprovalScreen: true
-        connectors:
-          - type: oidc
-            id: authentik
-            name: Authentik
-            config:
-              issuer: https://authentik.alexlebens.net/application/o/kargo/
-              clientID: "$CLIENT_ID"
-              clientSecret: "$CLIENT_SECRET"
-              redirectURI: https://kargo.alexlebens.net/dex/callback
-              insecureEnableGroups: true
-              scopes:
-                - openid
-                - profile
-                - email
-                - groups
-        resources:
-          requests:
-            cpu: 100m
-            memory: 128Mi
-    argocd:
-      urls:
-        "": https://argocd.alexlebens.net
-    rollouts:
-      integrationEnabled: true
-  controller:
-    enabled: true
-    gitClient:
-      name: "Kargo cl01tl"
-      email: "alexanderlebens@gmail.com"
-    argocd:
-      integrationEnabled: true
-    rollouts:
-      integrationEnabled: true
-    resources:
-      requests:
-        cpu: 100m
-        memory: 128Mi
-  managementController:
-    enabled: true
-    resources:
-      requests:
-        cpu: 100m
-        memory: 128Mi
-  webhooks:
-    register: true
-  webhooksServer:
-    tls:
-      selfSignedCert: true
-    resources:
-      requests:
-        cpu: 100m
-        memory: 128Mi
-  garbageCollector:
-    schedule: "0 * * * *"
-    resources:
-      requests:
-        cpu: 100m
-        memory: 128Mi
--- a/clusters/cl01tl/deployment/stack/values.yaml
+++ b/clusters/cl01tl/deployment/stack/values.yaml
@@ -17,6 +17,12 @@ applicationSet:
        prune: true
      syncOptions:
        serverSideApply: true
+  - name: management
+    syncPolicy:
+      automated:
+        prune: true
+      syncOptions:
+        serverSideApply: true
  - name: platform
    syncPolicy:
      automated: