DevFW-CICD/argocd-helm
16
0
Fork 0
Code Issues Pull requests Projects Releases Packages Wiki Activity Actions

Merge d0d19bcd60 into 804af65b38

Browse source
This commit is contained in:
Tim 2023-10-24 15:35:19 +01:00 committed by GitHub
commit 4f3a9e60f3
No known key found for this signature in database
GPG key ID: 4AEE18F83AFDEB23
102 changed files with 210 additions and 12 deletions
Show stats Download patch file Download diff file Expand all files Collapse all files

2
README.md
View file

@ -19,7 +19,7 @@ We'd love to have you contribute! Please refer to our [contribution guidelines](
### Custom resource definitions
Some users would prefer to install the CRDs _outside_ of the chart. You can disable the CRD installation of the main four charts (argo-cd, argo-workflows, argo-events, argo-rollouts) by using `--set crds.install=false` when installing the chart.
Some users would prefer to install the CRDs _outside_ of the chart. You can disable the CRD installation of the main four charts (argo-cd, argo-workflows, argo-events, argo-rollouts) by using `--set crds.install=false` when installing the chart. Alternatively, installing only the CRDs can be achieved by setting `crds.only` to `true`
Helm cannot upgrade custom resource definitions in the `<chart>/crds` folder [by design](https://helm.sh/docs/chart_best_practices/custom_resource_definitions/#some-caveats-and-explanations). Our CRDs have been moved to `<chart>/templates` to address this design decision.

6
charts/argo-cd/Chart.yaml
View file

@ -3,7 +3,7 @@ appVersion: v2.8.4
kubeVersion: ">=1.23.0-0"
description: A Helm chart for Argo CD, a declarative, GitOps continuous delivery tool for Kubernetes.
name: argo-cd
version: 5.46.8
version: 5.46.9
home: https://github.com/argoproj/argo-helm
icon: https://argo-cd.readthedocs.io/en/stable/assets/logo.png
sources:
@ -26,5 +26,5 @@ annotations:
fingerprint: 2B8F22F57260EFA67BE1C5824B11F800CD9D2252
url: https://argoproj.github.io/argo-helm/pgp_keys.asc
artifacthub.io/changes: |
- kind: fixed
description: Sync redis / redis-ha readOnlyRootFilesystem=true option from upstream. This was part of Argo CD 2.8.0.
- kind: added
description: Added capability to deploy only CRDs, for cases where remote clusters need argo CRDs

2
charts/argo-cd/README.md
View file

@ -86,7 +86,7 @@ Changes in the `CustomResourceDefinition` resources shall be fixed easily by cop
### Custom resource definitions
Some users would prefer to install the CRDs _outside_ of the chart. You can disable the CRD installation of this chart by using `--set crds.install=false` when installing the chart.
Some users would prefer to install the CRDs _outside_ of the chart. You can disable the CRD installation of this chart by using `--set crds.install=false` when installing the chart. Installing CRDs by themselves is possible by setting the `crds.only` value to `true`
Helm cannot upgrade custom resource definitions in the `<chart>/crds` folder [by design](https://helm.sh/docs/chart_best_practices/custom_resource_definitions/#some-caveats-and-explanations). Starting with 5.2.0, the CRDs have been moved to `<chart>/templates` to address this design decision.

2
charts/argo-cd/templates/aggregate-roles.yaml
View file

@ -1,3 +1,4 @@
{{- if not .Values.crds.only -}}
{{- if .Values.createAggregateRoles }}
apiVersion: rbac.authorization.k8s.io/v1
kind: ClusterRole
@ -83,3 +84,4 @@ rules:
- update
- watch
{{- end }}
{{- end -}}

2
charts/argo-cd/templates/argocd-application-controller/clusterrole.yaml
View file

@ -1,3 +1,4 @@
{{- if not .Values.crds.only -}}
{{- $config := .Values.controller.clusterAdminAccess | default dict -}}
{{- if hasKey $config "enabled" | ternary $config.enabled .Values.createClusterRoles }}
apiVersion: rbac.authorization.k8s.io/v1
@ -22,3 +23,4 @@ rules:
- '*'
{{- end }}
{{- end }}
{{- end -}}

2
charts/argo-cd/templates/argocd-application-controller/clusterrolebinding.yaml
View file

@ -1,3 +1,4 @@
{{- if not .Values.crds.only -}}
{{- $config := .Values.controller.clusterAdminAccess | default dict -}}
{{- if hasKey $config "enabled" | ternary $config.enabled .Values.createClusterRoles }}
apiVersion: rbac.authorization.k8s.io/v1
@ -15,3 +16,4 @@ subjects:
name: {{ include "argo-cd.controllerServiceAccountName" . }}
namespace: {{ .Release.Namespace }}
{{- end }}
{{- end -}}

2
charts/argo-cd/templates/argocd-application-controller/metrics.yaml
View file

@ -1,3 +1,4 @@
{{- if not .Values.crds.only -}}
{{- if .Values.controller.metrics.enabled }}
apiVersion: v1
kind: Service
@ -32,3 +33,4 @@ spec:
selector:
{{- include "argo-cd.selectorLabels" (dict "context" . "name" .Values.controller.name) | nindent 4 }}
{{- end }}
{{- end -}}

2
charts/argo-cd/templates/argocd-application-controller/networkpolicy.yaml
View file

@ -1,3 +1,4 @@
{{- if not .Values.crds.only -}}
{{- if .Values.global.networkPolicy.create }}
apiVersion: networking.k8s.io/v1
kind: NetworkPolicy
@ -18,3 +19,4 @@ spec:
policyTypes:
- Ingress
{{- end }}
{{- end -}}

2
charts/argo-cd/templates/argocd-application-controller/pdb.yaml
View file

@ -1,3 +1,4 @@
{{- if not .Values.crds.only -}}
{{- if .Values.controller.pdb.enabled }}
apiVersion: policy/v1
kind: PodDisruptionBudget
@ -25,3 +26,4 @@ spec:
matchLabels:
{{- include "argo-cd.selectorLabels" (dict "context" . "name" .Values.controller.name) | nindent 6 }}
{{- end }}
{{- end -}}

2
charts/argo-cd/templates/argocd-application-controller/prometheusrule.yaml
View file

@ -1,3 +1,4 @@
{{- if not .Values.crds.only -}}
{{- if and .Values.controller.metrics.enabled .Values.controller.metrics.rules.enabled }}
apiVersion: monitoring.coreos.com/v1
kind: PrometheusRule
@ -22,3 +23,4 @@ spec:
rules:
{{- toYaml .Values.controller.metrics.rules.spec | nindent 4 }}
{{- end }}
{{- end -}}

4
charts/argo-cd/templates/argocd-application-controller/role.yaml
View file

@ -1,3 +1,4 @@
{{- if not .Values.crds.only -}}
apiVersion: rbac.authorization.k8s.io/v1
kind: Role
metadata:
@ -34,4 +35,5 @@ rules:
- events
verbs:
- create
- list
- list
{{- end -}}

4
charts/argo-cd/templates/argocd-application-controller/rolebinding.yaml
View file

@ -1,3 +1,4 @@
{{- if not .Values.crds.only -}}
apiVersion: rbac.authorization.k8s.io/v1
kind: RoleBinding
metadata:
@ -12,4 +13,5 @@ roleRef:
subjects:
- kind: ServiceAccount
name: {{ template "argo-cd.controllerServiceAccountName" . }}
namespace: {{ .Release.Namespace }}
namespace: {{ .Release.Namespace }}
{{- end -}}

2
charts/argo-cd/templates/argocd-application-controller/serviceaccount.yaml
View file

@ -1,3 +1,4 @@
{{- if not .Values.crds.only -}}
{{- if .Values.controller.serviceAccount.create }}
apiVersion: v1
kind: ServiceAccount
@ -17,3 +18,4 @@ metadata:
{{ $key }}: {{ $value | quote }}
{{- end }}
{{- end }}
{{- end -}}

2
charts/argo-cd/templates/argocd-application-controller/servicemonitor.yaml
View file

@ -1,3 +1,4 @@
{{- if not .Values.crds.only -}}
{{- if and (.Capabilities.APIVersions.Has "monitoring.coreos.com/v1") .Values.controller.metrics.enabled .Values.controller.metrics.serviceMonitor.enabled }}
apiVersion: monitoring.coreos.com/v1
kind: ServiceMonitor
@ -45,3 +46,4 @@ spec:
matchLabels:
{{- include "argo-cd.selectorLabels" (dict "context" . "component" .Values.controller.name "name" "metrics") | nindent 6 }}
{{- end }}
{{- end -}}

2
charts/argo-cd/templates/argocd-application-controller/statefulset.yaml
View file

@ -1,3 +1,4 @@
{{- if not .Values.crds.only -}}
apiVersion: apps/v1
kind: StatefulSet
metadata:
@ -338,3 +339,4 @@ spec:
{{- toYaml . | nindent 8 }}
{{- end }}
dnsPolicy: {{ .Values.controller.dnsPolicy }}
{{- end -}}

2
charts/argo-cd/templates/argocd-applicationset/certificate.yaml
View file

@ -1,3 +1,4 @@
{{- if not .Values.crds.only -}}
{{- if .Values.applicationSet.certificate.enabled -}}
apiVersion: cert-manager.io/v1
kind: Certificate
@ -37,3 +38,4 @@ spec:
{{- toYaml . | nindent 4 }}
{{- end }}
{{- end }}
{{- end -}}

2
charts/argo-cd/templates/argocd-applicationset/deployment.yaml
View file

@ -1,3 +1,4 @@
{{- if not .Values.crds.only -}}
{{- if .Values.applicationSet.enabled }}
apiVersion: apps/v1
kind: Deployment
@ -315,3 +316,4 @@ spec:
{{- end }}
dnsPolicy: {{ .Values.applicationSet.dnsPolicy }}
{{- end }}
{{- end -}}

2
charts/argo-cd/templates/argocd-applicationset/metrics.yaml
View file

@ -1,3 +1,4 @@
{{- if not .Values.crds.only -}}
{{- if and .Values.applicationSet.enabled .Values.applicationSet.metrics.enabled }}
apiVersion: v1
kind: Service
@ -32,3 +33,4 @@ spec:
selector:
{{- include "argo-cd.selectorLabels" (dict "context" . "name" .Values.applicationSet.name) | nindent 4 }}
{{- end }}
{{- end -}}

2
charts/argo-cd/templates/argocd-applicationset/networkpolicy.yaml
View file

@ -1,3 +1,4 @@
{{- if not .Values.crds.only -}}
{{- if and .Values.applicationSet.enabled .Values.global.networkPolicy.create (or .Values.applicationSet.metrics.enabled .Values.applicationSet.webhook.ingress.enabled) }}
apiVersion: networking.k8s.io/v1
kind: NetworkPolicy
@ -24,3 +25,4 @@ spec:
policyTypes:
- Ingress
{{- end }}
{{- end -}}

2
charts/argo-cd/templates/argocd-applicationset/pdb.yaml
View file

@ -1,3 +1,4 @@
{{- if not .Values.crds.only -}}
{{- if and .Values.applicationSet.enabled .Values.applicationSet.pdb.enabled }}
apiVersion: policy/v1
kind: PodDisruptionBudget
@ -25,3 +26,4 @@ spec:
matchLabels:
{{- include "argo-cd.selectorLabels" (dict "context" . "name" .Values.applicationSet.name) | nindent 6 }}
{{- end }}
{{- end -}}

2
charts/argo-cd/templates/argocd-applicationset/role.yaml
View file

@ -1,3 +1,4 @@
{{- if not .Values.crds.only -}}
{{- if .Values.applicationSet.enabled }}
apiVersion: rbac.authorization.k8s.io/v1
kind: Role
@ -87,3 +88,4 @@ rules:
- update
- watch
{{- end }}
{{- end -}}

2
charts/argo-cd/templates/argocd-applicationset/rolebinding.yaml
View file

@ -1,3 +1,4 @@
{{- if not .Values.crds.only -}}
{{- if .Values.applicationSet.enabled }}
apiVersion: rbac.authorization.k8s.io/v1
kind: RoleBinding
@ -15,3 +16,4 @@ subjects:
name: {{ template "argo-cd.applicationSetServiceAccountName" . }}
namespace: {{ .Release.Namespace }}
{{- end }}
{{- end -}}

2
charts/argo-cd/templates/argocd-applicationset/service.yaml
View file

@ -1,3 +1,4 @@
{{- if not .Values.crds.only -}}
{{- if .Values.applicationSet.enabled }}
apiVersion: v1
kind: Service
@ -24,3 +25,4 @@ spec:
selector:
{{- include "argo-cd.selectorLabels" (dict "context" . "name" .Values.applicationSet.name) | nindent 4 }}
{{- end }}
{{- end -}}

2
charts/argo-cd/templates/argocd-applicationset/serviceaccount.yaml
View file

@ -1,3 +1,4 @@
{{- if not .Values.crds.only -}}
{{- if and .Values.applicationSet.enabled .Values.applicationSet.serviceAccount.create }}
apiVersion: v1
kind: ServiceAccount
@ -17,3 +18,4 @@ metadata:
{{ $key }}: {{ $value | quote }}
{{- end }}
{{- end }}
{{- end -}}

2
charts/argo-cd/templates/argocd-applicationset/servicemonitor.yaml
View file

@ -1,3 +1,4 @@
{{- if not .Values.crds.only -}}
{{- if .Values.applicationSet.enabled }}
{{- if and (.Capabilities.APIVersions.Has "monitoring.coreos.com/v1") .Values.applicationSet.metrics.enabled .Values.applicationSet.metrics.serviceMonitor.enabled }}
apiVersion: monitoring.coreos.com/v1
@ -47,3 +48,4 @@ spec:
{{- include "argo-cd.selectorLabels" (dict "context" . "component" .Values.applicationSet.name "name" "metrics") | nindent 6 }}
{{- end }}
{{- end }}
{{- end -}}

2
charts/argo-cd/templates/argocd-applicationset/webhook-ingress.yaml
View file

@ -1,3 +1,4 @@
{{- if not .Values.crds.only -}}
{{- if and .Values.applicationSet.enabled .Values.applicationSet.webhook.ingress.enabled -}}
{{- $servicePort := .Values.applicationSet.service.portName -}}
{{- $paths := .Values.applicationSet.webhook.ingress.paths -}}
@ -71,3 +72,4 @@ spec:
{{- toYaml . | nindent 4 }}
{{- end -}}
{{- end -}}
{{- end -}}

2
charts/argo-cd/templates/argocd-configs/argocd-cm.yaml
View file

@ -1,3 +1,4 @@
{{- if not .Values.crds.only -}}
{{- if (hasKey .Values.server "configEnabled") | ternary .Values.server.configEnabled .Values.configs.cm.create }}
apiVersion: v1
kind: ConfigMap
@ -15,3 +16,4 @@ metadata:
data:
{{- include "argo-cd.config.cm" . | trim | nindent 2 }}
{{- end }}
{{- end -}}

2
charts/argo-cd/templates/argocd-configs/argocd-cmd-params-cm.yaml
View file

@ -1,3 +1,4 @@
{{- if not .Values.crds.only -}}
{{- if .Values.configs.params.create }}
apiVersion: v1
kind: ConfigMap
@ -15,3 +16,4 @@ metadata:
data:
{{- include "argo-cd.config.params" . | trim | nindent 2 }}
{{- end }}
{{- end -}}

2
charts/argo-cd/templates/argocd-configs/argocd-cmp-cm.yaml
View file

@ -1,3 +1,4 @@
{{- if not .Values.crds.only -}}
{{- if .Values.configs.cmp.create }}
apiVersion: v1
kind: ConfigMap
@ -23,3 +24,4 @@ data:
{{- toYaml $cmp_plugin_config | nindent 6 }}
{{- end }}
{{- end }}
{{- end -}}

2
charts/argo-cd/templates/argocd-configs/argocd-dex-server-tls-secret.yaml
View file

@ -1,3 +1,4 @@
{{- if not .Values.crds.only -}}
{{- if and .Values.dex.enabled .Values.dex.certificateSecret.enabled }}
apiVersion: v1
kind: Secret
@ -23,3 +24,4 @@ data:
tls.crt: {{ .Values.dex.certificateSecret.crt | b64enc | quote }}
tls.key: {{ .Values.dex.certificateSecret.key | b64enc | quote }}
{{- end }}
{{- end -}}

2
charts/argo-cd/templates/argocd-configs/argocd-gpg-keys-cm.yaml
View file

@ -1,3 +1,4 @@
{{- if not .Values.crds.only -}}
apiVersion: v1
kind: ConfigMap
metadata:
@ -15,3 +16,4 @@ metadata:
data:
{{- toYaml . | nindent 2 }}
{{- end }}
{{- end -}}

2
charts/argo-cd/templates/argocd-configs/argocd-notifications-cm.yaml
View file

@ -1,3 +1,4 @@
{{- if not .Values.crds.only -}}
{{- if and .Values.notifications.enabled .Values.notifications.cm.create }}
apiVersion: v1
kind: ConfigMap
@ -26,3 +27,4 @@ data:
{{- toYaml . | nindent 2 }}
{{- end }}
{{- end }}
{{- end -}}

2
charts/argo-cd/templates/argocd-configs/argocd-notifications-secret.yaml
View file

@ -1,3 +1,4 @@
{{- if not .Values.crds.only -}}
{{- if and .Values.notifications.enabled .Values.notifications.secret.create }}
apiVersion: v1
kind: Secret
@ -21,3 +22,4 @@ stringData:
{{- toYaml . | nindent 2 }}
{{- end }}
{{- end }}
{{- end -}}

2
charts/argo-cd/templates/argocd-configs/argocd-rbac-cm.yaml
View file

@ -1,3 +1,4 @@
{{- if not .Values.crds.only -}}
{{- if (hasKey .Values.server "rbacConfigCreate") | ternary .Values.server.rbacConfigCreate .Values.configs.rbac.create }}
apiVersion: v1
kind: ConfigMap
@ -17,3 +18,4 @@ data:
{{- toYaml . | nindent 2 }}
{{- end }}
{{- end }}
{{- end -}}

2
charts/argo-cd/templates/argocd-configs/argocd-repo-server-tls-secret.yaml
View file

@ -1,3 +1,4 @@
{{- if not .Values.crds.only -}}
{{- if .Values.repoServer.certificateSecret.enabled }}
apiVersion: v1
kind: Secret
@ -23,3 +24,4 @@ data:
tls.crt: {{ .Values.repoServer.certificateSecret.crt | b64enc | quote }}
tls.key: {{ .Values.repoServer.certificateSecret.key | b64enc | quote }}
{{- end }}
{{- end -}}

2
charts/argo-cd/templates/argocd-configs/argocd-secret.yaml
View file

@ -1,3 +1,4 @@
{{- if not .Values.crds.only -}}
{{- if .Values.configs.secret.createSecret }}
apiVersion: v1
kind: Secret
@ -47,3 +48,4 @@ data:
{{- end }}
{{- end }}
{{- end }}
{{- end -}}

2
charts/argo-cd/templates/argocd-configs/argocd-server-tls-secret.yaml
View file

@ -1,3 +1,4 @@
{{- if not .Values.crds.only -}}
{{- if and .Values.server.certificateSecret.enabled (not .Values.server.certificate.enabled) }}
apiVersion: v1
kind: Secret
@ -20,3 +21,4 @@ data:
tls.crt: {{ .Values.server.certificateSecret.crt | b64enc | quote }}
tls.key: {{ .Values.server.certificateSecret.key | b64enc | quote }}
{{- end }}
{{- end -}}

2
charts/argo-cd/templates/argocd-configs/argocd-ssh-known-hosts-cm.yaml
View file

@ -1,3 +1,4 @@
{{- if not .Values.crds.only -}}
apiVersion: v1
kind: ConfigMap
metadata:
@ -21,3 +22,4 @@ data:
{{- with .Values.configs.ssh.extraHosts }}
{{- . | nindent 4 }}
{{- end }}
{{- end -}}

2
charts/argo-cd/templates/argocd-configs/argocd-styles-cm.yaml
View file

@ -1,3 +1,4 @@
{{- if not .Values.crds.only -}}
{{- if .Values.configs.styles }}
apiVersion: v1
kind: ConfigMap
@ -10,3 +11,4 @@ data:
custom.styles.css: |
{{- .Values.configs.styles | nindent 4 }}
{{- end }}
{{- end -}}

2
charts/argo-cd/templates/argocd-configs/argocd-tls-certs-cm.yaml
View file

@ -1,3 +1,4 @@
{{- if not .Values.crds.only -}}
apiVersion: v1
kind: ConfigMap
metadata:
@ -21,3 +22,4 @@ data:
{{- toYaml . | nindent 2 }}
{{- end }}
{{- end }}
{{- end -}}

2
charts/argo-cd/templates/argocd-configs/cluster-secrets.yaml
View file

@ -1,3 +1,4 @@
{{- if not .Values.crds.only -}}
{{- range .Values.configs.clusterCredentials }}
---
apiVersion: v1
@ -33,3 +34,4 @@ stringData:
config: |
{{- required "A valid .Values.configs.clusterCredentials[].config entry is required!" .config | toRawJson | nindent 4 }}
{{- end }}
{{- end -}}

2
charts/argo-cd/templates/argocd-configs/externalredis-secret.yaml
View file

@ -1,3 +1,4 @@
{{- if not .Values.crds.only -}}
{{- if and (or .Values.externalRedis.username .Values.externalRedis.password) (not .Values.externalRedis.existingSecret) }}
apiVersion: v1
kind: Secret
@ -21,3 +22,4 @@ data:
redis-password: {{ . | b64enc }}
{{- end }}
{{- end }}
{{- end -}}

2
charts/argo-cd/templates/argocd-configs/repository-credentials-secret.yaml
View file

@ -1,3 +1,4 @@
{{- if not .Values.crds.only -}}
{{- range $repo_cred_key, $repo_cred_value := .Values.configs.credentialTemplates }}
---
apiVersion: v1
@ -19,3 +20,4 @@ data:
{{ $key }}: {{ $value | toString | b64enc }}
{{- end }}
{{- end }}
{{- end -}}

2
charts/argo-cd/templates/argocd-configs/repository-secret.yaml
View file

@ -1,3 +1,4 @@
{{- if not .Values.crds.only -}}
{{- range $repo_key, $repo_value := .Values.configs.repositories }}
---
apiVersion: v1
@ -19,3 +20,4 @@ data:
{{ $key }}: {{ $value | b64enc }}
{{- end }}
{{- end }}
{{- end -}}

2
charts/argo-cd/templates/argocd-notifications/deployment.yaml
View file

@ -1,3 +1,4 @@
{{- if not .Values.crds.only -}}
{{- if .Values.notifications.enabled }}
apiVersion: apps/v1
kind: Deployment
@ -159,3 +160,4 @@ spec:
{{- end }}
dnsPolicy: {{ .Values.notifications.dnsPolicy }}
{{- end }}
{{- end -}}

2
charts/argo-cd/templates/argocd-notifications/metrics.yaml
View file

@ -1,3 +1,4 @@
{{- if not .Values.crds.only -}}
{{- if and .Values.notifications.enabled .Values.notifications.metrics.enabled }}
apiVersion: v1
kind: Service
@ -32,3 +33,4 @@ spec:
port: {{ .Values.notifications.metrics.port }}
targetPort: metrics
{{- end }}
{{- end -}}

2
charts/argo-cd/templates/argocd-notifications/networkpolicy.yaml
View file

@ -1,3 +1,4 @@
{{- if not .Values.crds.only -}}
{{- if and .Values.notifications.enabled .Values.global.networkPolicy.create .Values.notifications.metrics.enabled }}
apiVersion: networking.k8s.io/v1
kind: NetworkPolicy
@ -18,3 +19,4 @@ spec:
policyTypes:
- Ingress
{{- end }}
{{- end -}}

2
charts/argo-cd/templates/argocd-notifications/pdb.yaml
View file

@ -1,3 +1,4 @@
{{- if not .Values.crds.only -}}
{{- if and .Values.notifications.enabled .Values.notifications.pdb.enabled }}
apiVersion: policy/v1
kind: PodDisruptionBudget
@ -25,3 +26,4 @@ spec:
matchLabels:
{{- include "argo-cd.selectorLabels" (dict "context" . "name" .Values.notifications.name) | nindent 6 }}
{{- end }}
{{- end -}}

2
charts/argo-cd/templates/argocd-notifications/role.yaml
View file

@ -1,3 +1,4 @@
{{- if not .Values.crds.only -}}
{{- if .Values.notifications.enabled }}
apiVersion: rbac.authorization.k8s.io/v1
kind: Role
@ -43,3 +44,4 @@ rules:
verbs:
- get
{{- end }}
{{- end -}}

2
charts/argo-cd/templates/argocd-notifications/rolebinding.yaml
View file

@ -1,3 +1,4 @@
{{- if not .Values.crds.only -}}
{{- if .Values.notifications.enabled }}
apiVersion: rbac.authorization.k8s.io/v1
kind: RoleBinding
@ -15,3 +16,4 @@ subjects:
name: {{ template "argo-cd.notificationsServiceAccountName" . }}
namespace: {{ .Release.Namespace }}
{{- end }}
{{- end -}}

2
charts/argo-cd/templates/argocd-notifications/serviceaccount.yaml
View file

@ -1,3 +1,4 @@
{{- if not .Values.crds.only -}}
{{- if and .Values.notifications.enabled .Values.notifications.serviceAccount.create }}
apiVersion: v1
kind: ServiceAccount
@ -17,3 +18,4 @@ metadata:
{{ $key }}: {{ $value | quote }}
{{- end }}
{{- end }}
{{- end -}}

2
charts/argo-cd/templates/argocd-notifications/servicemonitor.yaml
View file

@ -1,3 +1,4 @@
{{- if not .Values.crds.only -}}
{{- if and (.Capabilities.APIVersions.Has "monitoring.coreos.com/v1") .Values.notifications.enabled .Values.notifications.metrics.enabled .Values.notifications.metrics.serviceMonitor.enabled }}
apiVersion: monitoring.coreos.com/v1
kind: ServiceMonitor
@ -48,3 +49,4 @@ spec:
matchLabels:
{{- include "argo-cd.selectorLabels" (dict "context" . "component" .Values.notifications.name "name" "metrics") | nindent 6 }}
{{- end }}
{{- end -}}

2
charts/argo-cd/templates/argocd-repo-server/clusterrole.yaml
View file

@ -1,3 +1,4 @@
{{- if not .Values.crds.only -}}
{{- $config := .Values.repoServer.clusterAdminAccess | default dict -}}
{{- if hasKey $config "enabled" | ternary $config.enabled .Values.createClusterRoles }}
apiVersion: rbac.authorization.k8s.io/v1
@ -22,3 +23,4 @@ rules:
- '*'
{{- end }}
{{- end }}
{{- end -}}

2
charts/argo-cd/templates/argocd-repo-server/clusterrolebinding.yaml
View file

@ -1,3 +1,4 @@
{{- if not .Values.crds.only -}}
{{- $config := .Values.repoServer.clusterAdminAccess | default dict -}}
{{- if hasKey $config "enabled" | ternary $config.enabled .Values.createClusterRoles }}
apiVersion: rbac.authorization.k8s.io/v1
@ -15,3 +16,4 @@ subjects:
name: {{ include "argo-cd.repoServerServiceAccountName" . }}
namespace: {{ .Release.Namespace }}
{{- end }}
{{- end -}}

2
charts/argo-cd/templates/argocd-repo-server/deployment.yaml Executable file → Normal file
View file

@ -1,3 +1,4 @@
{{- if not .Values.crds.only -}}
apiVersion: apps/v1
kind: Deployment
metadata:
@ -396,3 +397,4 @@ spec:
{{- toYaml . | nindent 8 }}
{{- end }}
dnsPolicy: {{ .Values.repoServer.dnsPolicy }}
{{- end -}}

2
charts/argo-cd/templates/argocd-repo-server/hpa.yaml
View file

@ -1,3 +1,4 @@
{{- if not .Values.crds.only -}}
{{- if .Values.repoServer.autoscaling.enabled }}
apiVersion: autoscaling/v2
kind: HorizontalPodAutoscaler
@ -39,3 +40,4 @@ spec:
{{- toYaml . | nindent 4 }}
{{- end }}
{{- end }}
{{- end -}}

2
charts/argo-cd/templates/argocd-repo-server/metrics.yaml
View file

@ -1,3 +1,4 @@
{{- if not .Values.crds.only -}}
{{- if .Values.repoServer.metrics.enabled }}
apiVersion: v1
kind: Service
@ -32,3 +33,4 @@ spec:
selector:
{{- include "argo-cd.selectorLabels" (dict "context" . "name" .Values.repoServer.name) | nindent 4 }}
{{- end }}
{{- end -}}

2
charts/argo-cd/templates/argocd-repo-server/networkpolicy.yaml
View file

@ -1,3 +1,4 @@
{{- if not .Values.crds.only -}}
{{- if .Values.global.networkPolicy.create }}
apiVersion: networking.k8s.io/v1
kind: NetworkPolicy
@ -40,3 +41,4 @@ spec:
policyTypes:
- Ingress
{{- end }}
{{- end -}}

2
charts/argo-cd/templates/argocd-repo-server/pdb.yaml
View file

@ -1,3 +1,4 @@
{{- if not .Values.crds.only -}}
{{- if .Values.repoServer.pdb.enabled }}
apiVersion: policy/v1
kind: PodDisruptionBudget
@ -25,3 +26,4 @@ spec:
matchLabels:
{{- include "argo-cd.selectorLabels" (dict "context" . "name" .Values.repoServer.name) | nindent 6 }}
{{- end }}
{{- end -}}

2
charts/argo-cd/templates/argocd-repo-server/role.yaml
View file

@ -1,3 +1,4 @@
{{- if not .Values.crds.only -}}
{{- if .Values.repoServer.serviceAccount.create }}
apiVersion: rbac.authorization.k8s.io/v1
kind: Role
@ -11,3 +12,4 @@ rules:
{{toYaml .Values.repoServer.rbac }}
{{- end }}
{{- end }}
{{- end -}}

4
charts/argo-cd/templates/argocd-repo-server/rolebinding.yaml
View file

@ -1,3 +1,4 @@
{{- if not .Values.crds.only -}}
{{- if .Values.repoServer.serviceAccount.create }}
apiVersion: rbac.authorization.k8s.io/v1
kind: RoleBinding
@ -14,4 +15,5 @@ subjects:
- kind: ServiceAccount
name: {{ template "argo-cd.repoServerServiceAccountName" . }}
namespace: {{ .Release.Namespace }}
{{- end }}
{{- end }}
{{- end -}}

4
charts/argo-cd/templates/argocd-repo-server/service.yaml
View file

@ -1,3 +1,4 @@
{{- if not .Values.crds.only -}}
apiVersion: v1
kind: Service
metadata:
@ -21,4 +22,5 @@ spec:
port: {{ .Values.repoServer.service.port }}
targetPort: repo-server
selector:
{{- include "argo-cd.selectorLabels" (dict "context" . "name" .Values.repoServer.name) | nindent 4 }}
{{- include "argo-cd.selectorLabels" (dict "context" . "name" .Values.repoServer.name) | nindent 4 }}
{{- end -}}

2
charts/argo-cd/templates/argocd-repo-server/serviceaccount.yaml
View file

@ -1,3 +1,4 @@
{{- if not .Values.crds.only -}}
{{- if .Values.repoServer.serviceAccount.create }}
apiVersion: v1
kind: ServiceAccount
@ -17,3 +18,4 @@ metadata:
{{ $key }}: {{ $value | quote }}
{{- end }}
{{- end }}
{{- end -}}

2
charts/argo-cd/templates/argocd-repo-server/servicemonitor.yaml
View file

@ -1,3 +1,4 @@
{{- if not .Values.crds.only -}}
{{- if and (.Capabilities.APIVersions.Has "monitoring.coreos.com/v1") .Values.repoServer.metrics.enabled .Values.repoServer.metrics.serviceMonitor.enabled }}
apiVersion: monitoring.coreos.com/v1
kind: ServiceMonitor
@ -45,3 +46,4 @@ spec:
matchLabels:
{{- include "argo-cd.selectorLabels" (dict "context" . "component" .Values.repoServer.name "name" (printf "%s-metrics" .Values.repoServer.name)) | nindent 6 }}
{{- end }}
{{- end -}}

2
charts/argo-cd/templates/argocd-server/aws/service.yaml
View file

@ -1,3 +1,4 @@
{{- if not .Values.crds.only -}}
{{- if and .Values.server.ingressGrpc.enabled .Values.server.ingressGrpc.isAWSALB -}}
apiVersion: v1
kind: Service
@ -23,3 +24,4 @@ spec:
sessionAffinity: None
type: {{ .Values.server.ingressGrpc.awsALB.serviceType }}
{{- end -}}
{{- end -}}

2
charts/argo-cd/templates/argocd-server/certificate.yaml
View file

@ -1,3 +1,4 @@
{{- if not .Values.crds.only -}}
{{- if .Values.server.certificate.enabled -}}
apiVersion: cert-manager.io/v1
kind: Certificate
@ -41,3 +42,4 @@ spec:
{{- toYaml . | nindent 4 }}
{{- end }}
{{- end }}
{{- end -}}

2
charts/argo-cd/templates/argocd-server/clusterrole.yaml
View file

@ -1,3 +1,4 @@
{{- if not .Values.crds.only -}}
{{- $config := .Values.server.clusterAdminAccess | default dict -}}
{{- if hasKey $config "enabled" | ternary $config.enabled .Values.createClusterRoles }}
apiVersion: rbac.authorization.k8s.io/v1
@ -60,3 +61,4 @@ rules:
{{/* supports triggering workflows from UI */}}
- create
{{- end }}
{{- end -}}

2
charts/argo-cd/templates/argocd-server/clusterrolebinding.yaml
View file

@ -1,3 +1,4 @@
{{- if not .Values.crds.only -}}
{{- $config := .Values.server.clusterAdminAccess | default dict -}}
{{- if hasKey $config "enabled" | ternary $config.enabled .Values.createClusterRoles }}
apiVersion: rbac.authorization.k8s.io/v1
@ -15,3 +16,4 @@ subjects:
name: {{ include "argo-cd.serverServiceAccountName" . }}
namespace: {{ .Release.Namespace }}
{{- end }}
{{- end -}}

2
charts/argo-cd/templates/argocd-server/deployment.yaml Executable file → Normal file
View file

@ -1,3 +1,4 @@
{{- if not .Values.crds.only -}}
apiVersion: apps/v1
kind: Deployment
metadata:
@ -450,3 +451,4 @@ spec:
{{- toYaml . | nindent 8 }}
{{- end }}
dnsPolicy: {{ .Values.server.dnsPolicy }}
{{- end -}}

2
charts/argo-cd/templates/argocd-server/gke/backendconfig.yaml
View file

@ -1,3 +1,4 @@
{{- if not .Values.crds.only -}}
{{- if .Values.server.GKEbackendConfig.enabled }}
apiVersion: {{ include "argo-cd.apiVersions.cloudgoogle" . }}
kind: BackendConfig
@ -9,3 +10,4 @@ metadata:
spec:
{{- toYaml .Values.server.GKEbackendConfig.spec | nindent 2 }}
{{- end }}
{{- end -}}

2
charts/argo-cd/templates/argocd-server/gke/frontendconfig.yaml
View file

@ -1,3 +1,4 @@
{{- if not .Values.crds.only -}}
{{- if .Values.server.GKEfrontendConfig.enabled }}
apiVersion: networking.gke.io/v1beta1
kind: FrontendConfig
@ -9,3 +10,4 @@ metadata:
spec:
{{- toYaml .Values.server.GKEfrontendConfig.spec | nindent 2 }}
{{- end }}
{{- end -}}

2
charts/argo-cd/templates/argocd-server/gke/managedcertificate.yaml
View file

@ -1,3 +1,4 @@
{{- if not .Values.crds.only -}}
{{- if .Values.server.GKEmanagedCertificate.enabled }}
apiVersion: networking.gke.io/v1
kind: ManagedCertificate
@ -10,3 +11,4 @@ spec:
{{- toYaml . | nindent 4 }}
{{- end }}
{{- end }}
{{- end -}}

2
charts/argo-cd/templates/argocd-server/hpa.yaml
View file

@ -1,3 +1,4 @@
{{- if not .Values.crds.only -}}
{{- if .Values.server.autoscaling.enabled }}
apiVersion: autoscaling/v2
kind: HorizontalPodAutoscaler
@ -39,3 +40,4 @@ spec:
{{- toYaml . | nindent 4 }}
{{- end }}
{{- end }}
{{- end -}}

2
charts/argo-cd/templates/argocd-server/ingress-grpc.yaml
View file

@ -1,3 +1,4 @@
{{- if not .Values.crds.only -}}
{{- if and .Values.server.ingressGrpc.enabled (not .Values.server.ingressGrpc.isAWSALB) -}}
{{- $servicePort := ternary .Values.server.service.servicePortHttps .Values.server.service.servicePortHttp .Values.server.ingressGrpc.https -}}
{{- $paths := .Values.server.ingressGrpc.paths -}}
@ -71,3 +72,4 @@ spec:
{{- toYaml . | nindent 4 }}
{{- end -}}
{{- end -}}
{{- end -}}

2
charts/argo-cd/templates/argocd-server/ingress.yaml
View file

@ -1,3 +1,4 @@
{{- if not .Values.crds.only -}}
{{- if .Values.server.ingress.enabled -}}
{{- $servicePort := ternary .Values.server.service.servicePortHttps .Values.server.service.servicePortHttp .Values.server.ingress.https -}}
{{- $paths := .Values.server.ingress.paths -}}
@ -88,3 +89,4 @@ spec:
{{- toYaml . | nindent 4 }}
{{- end -}}
{{- end -}}
{{- end -}}

2
charts/argo-cd/templates/argocd-server/metrics.yaml
View file

@ -1,3 +1,4 @@
{{- if not .Values.crds.only -}}
{{- if .Values.server.metrics.enabled }}
apiVersion: v1
kind: Service
@ -32,3 +33,4 @@ spec:
selector:
{{- include "argo-cd.selectorLabels" (dict "context" . "name" .Values.server.name) | nindent 4 }}
{{- end }}
{{- end -}}

2
charts/argo-cd/templates/argocd-server/networkpolicy.yaml
View file

@ -1,3 +1,4 @@
{{- if not .Values.crds.only -}}
{{- if .Values.global.networkPolicy.create }}
apiVersion: networking.k8s.io/v1
kind: NetworkPolicy
@ -15,3 +16,4 @@ spec:
policyTypes:
- Ingress
{{- end }}
{{- end -}}

2
charts/argo-cd/templates/argocd-server/openshift/route.yaml
View file

@ -1,3 +1,4 @@
{{- if not .Values.crds.only -}}
{{- if .Values.server.route.enabled -}}
apiVersion: route.openshift.io/v1
kind: Route
@ -25,3 +26,4 @@ spec:
insecureEdgeTerminationPolicy: {{ .Values.server.route.termination_policy | quote }}
wildcardPolicy: None
{{- end }}
{{- end -}}

2
charts/argo-cd/templates/argocd-server/pdb.yaml
View file

@ -1,3 +1,4 @@
{{- if not .Values.crds.only -}}
{{- if .Values.server.pdb.enabled }}
apiVersion: policy/v1
kind: PodDisruptionBudget
@ -25,3 +26,4 @@ spec:
matchLabels:
{{- include "argo-cd.selectorLabels" (dict "context" . "name" .Values.server.name) | nindent 6 }}
{{- end }}
{{- end -}}

2
charts/argo-cd/templates/argocd-server/role.yaml
View file

@ -1,3 +1,4 @@
{{- if not .Values.crds.only -}}
apiVersion: rbac.authorization.k8s.io/v1
kind: Role
metadata:
@ -53,3 +54,4 @@ rules:
verbs:
- create
{{- end }}
{{- end -}}

4
charts/argo-cd/templates/argocd-server/rolebinding.yaml
View file

@ -1,3 +1,4 @@
{{- if not .Values.crds.only -}}
apiVersion: rbac.authorization.k8s.io/v1
kind: RoleBinding
metadata:
@ -12,4 +13,5 @@ roleRef:
subjects:
- kind: ServiceAccount
name: {{ template "argo-cd.serverServiceAccountName" . }}
namespace: {{ .Release.Namespace }}
namespace: {{ .Release.Namespace }}
{{- end -}}

2
charts/argo-cd/templates/argocd-server/service.yaml
View file

@ -1,3 +1,4 @@
{{- if not .Values.crds.only -}}
apiVersion: v1
kind: Service
metadata:
@ -54,3 +55,4 @@ spec:
{{- with .Values.server.service.sessionAffinity }}
sessionAffinity: {{ . }}
{{- end }}
{{- end -}}

2
charts/argo-cd/templates/argocd-server/serviceaccount.yaml
View file

@ -1,3 +1,4 @@
{{- if not .Values.crds.only -}}
{{- if .Values.server.serviceAccount.create }}
apiVersion: v1
kind: ServiceAccount
@ -17,3 +18,4 @@ metadata:
{{ $key }}: {{ $value | quote }}
{{- end }}
{{- end }}
{{- end -}}

2
charts/argo-cd/templates/argocd-server/servicemonitor.yaml
View file

@ -1,3 +1,4 @@
{{- if not .Values.crds.only -}}
{{- if and (.Capabilities.APIVersions.Has "monitoring.coreos.com/v1") .Values.server.metrics.enabled .Values.server.metrics.serviceMonitor.enabled }}
apiVersion: monitoring.coreos.com/v1
kind: ServiceMonitor
@ -45,3 +46,4 @@ spec:
matchLabels:
{{- include "argo-cd.selectorLabels" (dict "context" . "component" .Values.server.name "name" (printf "%s-metrics" .Values.server.name)) | nindent 6 }}
{{- end }}
{{- end -}}

2
charts/argo-cd/templates/dex/deployment.yaml Executable file → Normal file
View file

@ -1,3 +1,4 @@
{{- if not .Values.crds.only -}}
{{- if .Values.dex.enabled }}
apiVersion: apps/v1
kind: Deployment
@ -205,3 +206,4 @@ spec:
{{- end }}
dnsPolicy: {{ .Values.dex.dnsPolicy }}
{{- end }}
{{- end -}}

2
charts/argo-cd/templates/dex/networkpolicy.yaml
View file

@ -1,3 +1,4 @@
{{- if not .Values.crds.only -}}
{{- if and .Values.global.networkPolicy.create .Values.dex.enabled }}
apiVersion: networking.k8s.io/v1
kind: NetworkPolicy
@ -30,3 +31,4 @@ spec:
policyTypes:
- Ingress
{{- end }}
{{- end -}}

2
charts/argo-cd/templates/dex/pdb.yaml
View file

@ -1,3 +1,4 @@
{{- if not .Values.crds.only -}}
{{- if and .Values.dex.enabled .Values.dex.pdb.enabled }}
apiVersion: policy/v1
kind: PodDisruptionBudget
@ -25,3 +26,4 @@ spec:
matchLabels:
{{- include "argo-cd.selectorLabels" (dict "context" . "name" .Values.dex.name) | nindent 6 }}
{{- end }}
{{- end -}}

4
charts/argo-cd/templates/dex/role.yaml
View file

@ -1,3 +1,4 @@
{{- if not .Values.crds.only -}}
{{- if .Values.dex.enabled }}
apiVersion: rbac.authorization.k8s.io/v1
kind: Role
@ -16,4 +17,5 @@ rules:
- get
- list
- watch
{{- end }}
{{- end }}
{{- end -}}

4
charts/argo-cd/templates/dex/rolebinding.yaml
View file

@ -1,3 +1,4 @@
{{- if not .Values.crds.only -}}
{{- if .Values.dex.enabled }}
apiVersion: rbac.authorization.k8s.io/v1
kind: RoleBinding
@ -14,4 +15,5 @@ subjects:
- kind: ServiceAccount
name: {{ template "argo-cd.dexServiceAccountName" . }}
namespace: {{ .Release.Namespace }}
{{- end }}
{{- end }}
{{- end -}}

2
charts/argo-cd/templates/dex/service.yaml
View file

@ -1,3 +1,4 @@
{{- if not .Values.crds.only -}}
{{- if .Values.dex.enabled }}
apiVersion: v1
kind: Service
@ -34,3 +35,4 @@ spec:
selector:
{{- include "argo-cd.selectorLabels" (dict "context" . "name" .Values.dex.name) | nindent 4 }}
{{- end }}
{{- end -}}

2
charts/argo-cd/templates/dex/serviceaccount.yaml
View file

@ -1,3 +1,4 @@
{{- if not .Values.crds.only -}}
{{- if and .Values.dex.enabled .Values.dex.serviceAccount.create }}
apiVersion: v1
kind: ServiceAccount
@ -14,3 +15,4 @@ metadata:
labels:
{{- include "argo-cd.labels" (dict "context" . "component" .Values.dex.name "name" .Values.dex.name) | nindent 4 }}
{{- end }}
{{- end -}}

2
charts/argo-cd/templates/dex/servicemonitor.yaml
View file

@ -1,3 +1,4 @@
{{- if not .Values.crds.only -}}
{{- if and (.Capabilities.APIVersions.Has "monitoring.coreos.com/v1") .Values.dex.metrics.enabled .Values.dex.metrics.serviceMonitor.enabled }}
apiVersion: monitoring.coreos.com/v1
kind: ServiceMonitor
@ -45,3 +46,4 @@ spec:
matchLabels:
{{- include "argo-cd.selectorLabels" (dict "context" . "component" .Values.dex.name "name" .Values.dex.name) | nindent 6 }}
{{- end }}
{{- end -}}

2
charts/argo-cd/templates/extra-manifests.yaml
View file

@ -1,3 +1,4 @@
{{- if not .Values.crds.only -}}
{{ range .Values.extraObjects }}
---
{{ if typeIs "string" . }}
@ -6,3 +7,4 @@
{{- tpl (toYaml .) $ }}
{{- end }}
{{ end }}
{{- end -}}

2
charts/argo-cd/templates/networkpolicy-default-deny.yaml
View file

@ -1,3 +1,4 @@
{{- if not .Values.crds.only -}}
{{- if and .Values.global.networkPolicy.create .Values.global.networkPolicy.defaultDenyIngress }}
apiVersion: networking.k8s.io/v1
kind: NetworkPolicy
@ -11,3 +12,4 @@ spec:
policyTypes:
- Ingress
{{- end }}
{{- end -}}

2
charts/argo-cd/templates/redis/deployment.yaml Executable file → Normal file
View file

@ -1,3 +1,4 @@
{{- if not .Values.crds.only -}}
{{- $redisHa := index .Values "redis-ha" -}}
{{- if and .Values.redis.enabled (not $redisHa.enabled) -}}
apiVersion: apps/v1
@ -146,3 +147,4 @@ spec:
{{- end }}
dnsPolicy: {{ .Values.redis.dnsPolicy }}
{{- end }}
{{- end -}}

2
charts/argo-cd/templates/redis/metrics.yaml
View file

@ -1,3 +1,4 @@
{{- if not .Values.crds.only -}}
{{- $redisHa := (index .Values "redis-ha") -}}
{{- if and .Values.redis.enabled (not $redisHa.enabled) .Values.redis.metrics.enabled -}}
apiVersion: v1
@ -33,3 +34,4 @@ spec:
selector:
{{- include "argo-cd.selectorLabels" (dict "context" . "component" .Values.redis.name "name" .Values.redis.name) | nindent 4 }}
{{- end }}
{{- end -}}

2
charts/argo-cd/templates/redis/networkpolicy.yaml
View file

@ -1,3 +1,4 @@
{{- if not .Values.crds.only -}}
{{- $redisHa := (index .Values "redis-ha") -}}
{{- if and .Values.global.networkPolicy.create .Values.redis.enabled (not $redisHa.enabled) }}
apiVersion: networking.k8s.io/v1
@ -35,3 +36,4 @@ spec:
policyTypes:
- Ingress
{{- end }}
{{- end -}}

2
charts/argo-cd/templates/redis/pdb.yaml
View file

@ -1,3 +1,4 @@
{{- if not .Values.crds.only -}}
{{- $redisHa := index .Values "redis-ha" -}}
{{- if and .Values.redis.enabled (not $redisHa.enabled) .Values.redis.pdb.enabled }}
apiVersion: policy/v1
@ -26,3 +27,4 @@ spec:
matchLabels:
app.kubernetes.io/name: {{ include "argo-cd.name" . }}-{{ .Values.redis.name }}
{{- end }}
{{- end -}}

2
charts/argo-cd/templates/redis/service.yaml
View file

@ -1,3 +1,4 @@
{{- if not .Values.crds.only -}}
{{- $redisHa := (index .Values "redis-ha") -}}
{{- if and .Values.redis.enabled (not $redisHa.enabled) -}}
apiVersion: v1
@ -24,3 +25,4 @@ spec:
selector:
{{- include "argo-cd.selectorLabels" (dict "context" . "name" .Values.redis.name) | nindent 4 }}
{{- end }}
{{- end -}}

2
charts/argo-cd/templates/redis/serviceaccount.yaml
View file

@ -1,3 +1,4 @@
{{- if not .Values.crds.only -}}
{{- if and .Values.redis.enabled .Values.redis.serviceAccount.create }}
apiVersion: v1
kind: ServiceAccount
@ -14,3 +15,4 @@ metadata:
labels:
{{- include "argo-cd.labels" (dict "context" . "component" .Values.redis.name "name" .Values.redis.name) | nindent 4 }}
{{- end }}
{{- end -}}

Some files were not shown because too many files have changed in this diff Show more