122 lines
3.2 KiB
YAML
122 lines
3.2 KiB
YAML
# Argo CD Helm Chart Values
|
|
|
|
global:
|
|
domain: ag.hexor.cy
|
|
nodeSelector:
|
|
kubernetes.io/hostname: master.tail2fe2d.ts.net
|
|
logging:
|
|
format: text
|
|
level: info
|
|
|
|
crds:
|
|
install: true
|
|
keep: true # Recommended to keep true so CRDs are not deleted on uninstall
|
|
|
|
configs:
|
|
params:
|
|
server.insecure: "true"
|
|
cm:
|
|
create: true
|
|
kustomize.buildOptions: --enable-helm
|
|
application.instanceLabelKey: argocd.argoproj.io/instance
|
|
admin.enabled: true
|
|
timeout.reconciliation: 60s
|
|
oidc.config: |
|
|
name: Authentik
|
|
issuer: https://idm.hexor.cy/application/o/argocd/
|
|
clientID: $oidc-creds:id
|
|
clientSecret: $oidc-creds:secret
|
|
requestedScopes: ["openid", "profile", "email", "groups"]
|
|
requestedIDTokenClaims: {"groups": {"essential": true}}
|
|
rbac:
|
|
create: true
|
|
policy.default: ""
|
|
policy.csv: |
|
|
# Policies for "Minecraft Manager" group
|
|
# Access to minecraft application in argocd project - view, edit, sync
|
|
p, Minecraft Manager, applications, get, argocd/minecraft, allow
|
|
p, Minecraft Manager, applications, update, argocd/minecraft, allow
|
|
p, Minecraft Manager, applications, sync, argocd/minecraft, allow
|
|
|
|
# Access to actions on minecraft application resources (including restart)
|
|
p, Minecraft Manager, applications, action/*, argocd/minecraft, allow
|
|
|
|
# Access to minecraft application logs
|
|
p, Minecraft Manager, logs, get, argocd/minecraft, allow
|
|
|
|
# Bind group to minecraft role
|
|
g, Minecraft Manager, role:minecraft
|
|
|
|
|
|
g, ArgoCD Admins, role:admin
|
|
|
|
secret:
|
|
createSecret: true
|
|
argocdServerAdminPassword: "" # <--- SET BCRYPT HASH HERE OR MANAGE EXTERNALLY
|
|
|
|
controller:
|
|
replicas: 1
|
|
nodeSelector:
|
|
kubernetes.io/hostname: master.tail2fe2d.ts.net
|
|
# Add resources (requests/limits), PDB etc. if needed
|
|
|
|
# Dex OIDC provider
|
|
dex:
|
|
replicas: 1
|
|
nodeSelector:
|
|
kubernetes.io/hostname: master.tail2fe2d.ts.net
|
|
enabled: false
|
|
|
|
# Standard Redis disabled because Redis HA is enabled
|
|
redis:
|
|
enabled: true
|
|
|
|
# Redis HA (replaces standard Redis)
|
|
redis-ha:
|
|
enabled: false
|
|
# Default settings usually work, including auth via 'argocd-redis' secret.
|
|
# Assumes 'redisSecretInit' job is enabled (default) to create the secret.
|
|
# haproxy:
|
|
# enabled: true
|
|
# redis:
|
|
# config:
|
|
# # Disable Redis disk persistence for cache performance (Argo CD uses it as a cache)
|
|
# save: '""'
|
|
|
|
# Argo CD Server (API and UI)
|
|
server:
|
|
replicas: 1
|
|
nodeSelector:
|
|
kubernetes.io/hostname: master.tail2fe2d.ts.net
|
|
ingress:
|
|
enabled: false
|
|
|
|
certificate:
|
|
enabled: false
|
|
|
|
certificateSecret:
|
|
enabled: false
|
|
|
|
# Repository Server
|
|
repoServer:
|
|
replicas: 1
|
|
nodeSelector:
|
|
kubernetes.io/hostname: master.tail2fe2d.ts.net
|
|
# Add resources (requests/limits), PDB etc. if needed
|
|
|
|
# ApplicationSet Controller
|
|
applicationSet:
|
|
enabled: true # Enabled by default
|
|
replicas: 1
|
|
nodeSelector:
|
|
kubernetes.io/hostname: master.tail2fe2d.ts.net
|
|
# Add resources (requests/limits), PDB etc. if needed
|
|
|
|
# Notifications Controller
|
|
notifications:
|
|
enabled: true # Enabled by default
|
|
replicas: 1
|
|
nodeSelector:
|
|
kubernetes.io/hostname: master.tail2fe2d.ts.net
|
|
# Add notifiers, triggers, templates configurations if needed
|