121 lines
2.8 KiB
YAML
121 lines
2.8 KiB
YAML
kargo:
|
|
api:
|
|
host: kargo.alexlebens.net
|
|
resources:
|
|
limits:
|
|
cpu: 100m
|
|
memory: 128Mi
|
|
requests:
|
|
cpu: 100m
|
|
memory: 128Mi
|
|
tls:
|
|
enabled: false
|
|
ingress:
|
|
enabled: true
|
|
annotations:
|
|
traefik.ingress.kubernetes.io/router.entrypoints: websecure
|
|
traefik.ingress.kubernetes.io/router.tls: "true"
|
|
cert-manager.io/cluster-issuer: letsencrypt-issuer
|
|
ingressClassName: traefik
|
|
tls:
|
|
enabled: true
|
|
selfSignedCert: false
|
|
adminAccount:
|
|
enabled: false
|
|
oidc:
|
|
enabled: true
|
|
admins:
|
|
groups: ["ArgoCD Admins"]
|
|
dex:
|
|
enabled: true
|
|
image:
|
|
repository: ghcr.io/dexidp/dex
|
|
tag: v2.39.1
|
|
env:
|
|
- name: CLIENT_ID
|
|
valueFrom:
|
|
secretKeyRef:
|
|
name: kargo-oidc-secret
|
|
key: CLIENT_ID
|
|
- name: CLIENT_SECRET
|
|
valueFrom:
|
|
secretKeyRef:
|
|
name: kargo-oidc-secret
|
|
key: CLIENT_SECRET
|
|
tls:
|
|
selfSignedCert: false
|
|
skipApprovalScreen: true
|
|
connectors:
|
|
- type: oidc
|
|
id: authentik
|
|
name: Authentik
|
|
config:
|
|
issuer: https://authentik.alexlebens.net/application/o/kargo/
|
|
clientID: "$CLIENT_ID"
|
|
clientSecret: "$CLIENT_SECRET"
|
|
redirectURI: https://kargo.alexlebens.net/dex/callback
|
|
insecureEnableGroups: true
|
|
scopes:
|
|
- openid
|
|
- profile
|
|
- email
|
|
- groups
|
|
resources:
|
|
limits:
|
|
cpu: 100m
|
|
memory: 128Mi
|
|
requests:
|
|
cpu: 100m
|
|
memory: 128Mi
|
|
argocd:
|
|
urls:
|
|
"": https://argocd.alexlebens.net
|
|
rollouts:
|
|
integrationEnabled: true
|
|
controller:
|
|
enabled: true
|
|
gitClient:
|
|
name: "Kargo cl01tl"
|
|
email: "alexanderlebens@gmail.com"
|
|
argocd:
|
|
integrationEnabled: true
|
|
rollouts:
|
|
integrationEnabled: true
|
|
resources:
|
|
limits:
|
|
cpu: 100m
|
|
memory: 128Mi
|
|
requests:
|
|
cpu: 100m
|
|
memory: 128Mi
|
|
managementController:
|
|
enabled: true
|
|
resources:
|
|
limits:
|
|
cpu: 100m
|
|
memory: 128Mi
|
|
requests:
|
|
cpu: 100m
|
|
memory: 128Mi
|
|
webhooks:
|
|
register: true
|
|
webhooksServer:
|
|
tls:
|
|
selfSignedCert: true
|
|
resources:
|
|
limits:
|
|
cpu: 100m
|
|
memory: 128Mi
|
|
requests:
|
|
cpu: 100m
|
|
memory: 128Mi
|
|
garbageCollector:
|
|
schedule: "0 * * * *"
|
|
resources:
|
|
limits:
|
|
cpu: 100m
|
|
memory: 128Mi
|
|
requests:
|
|
cpu: 100m
|
|
memory: 128Mi
|