DevFW-CICD/argocd-helm
16
0
Fork 0
Code Issues Pull requests Projects Releases Packages Wiki Activity Actions

Merge branch 'master' into argo-events_v1.2.0

Browse source
This commit is contained in:
smcavallo 2021-02-22 23:18:41 -05:00 committed by GitHub
commit a0d9bb2639
No known key found for this signature in database
GPG key ID: 4AEE18F83AFDEB23
19 changed files with 3575 additions and 2784 deletions
Show stats Download patch file Download diff file Expand all files Collapse all files

2
charts/argo-cd/Chart.yaml
View file

@ -2,7 +2,7 @@ apiVersion: v1
appVersion: 1.8.4 appVersion: 1.8.4
description: A Helm chart for ArgoCD, a declarative, GitOps continuous delivery tool for Kubernetes. description: A Helm chart for ArgoCD, a declarative, GitOps continuous delivery tool for Kubernetes.
name: argo-cd name: argo-cd
version: 2.14.2 version: 2.14.7
home: https://github.com/argoproj/argo-helm home: https://github.com/argoproj/argo-helm
icon: https://raw.githubusercontent.com/argoproj/argo/master/docs/assets/argo.png icon: https://raw.githubusercontent.com/argoproj/argo/master/docs/assets/argo.png
keywords: keywords:

2
charts/argo-cd/README.md
View file

@ -257,6 +257,8 @@ Helm v3 has removed the `install-crds` hook so CRDs are now populated by files i
| server.service.servicePortHttps | Server service https port | `443` | | server.service.servicePortHttps | Server service https port | `443` |
| server.service.servicePortHttpName | Server service http port name, can be used to route traffic via istio | `http` | | server.service.servicePortHttpName | Server service http port name, can be used to route traffic via istio | `http` |
| server.service.servicePortHttpsName | Server service https port name, can be used to route traffic via istio | `https` | | server.service.servicePortHttpsName | Server service https port name, can be used to route traffic via istio | `https` |
| server.service.nodePortHttp | Server service http port for NodePort service type| `30080` |
| server.service.servicePortHttps | Server service http port for NodePort service type | `30443` |
| server.service.loadBalancerSourceRanges | Source IP ranges to allow access to service from. | `[]` | | server.service.loadBalancerSourceRanges | Source IP ranges to allow access to service from. | `[]` |
| server.service.externalIPs | Server service external IPs. | `[]` | | server.service.externalIPs | Server service external IPs. | `[]` |
| server.service.type | Server service type | `"ClusterIP"` | | server.service.type | Server service type | `"ClusterIP"` |

23
charts/argo-cd/crds/crd-project.yaml
View file

@ -224,6 +224,29 @@ spec:
type: object type: object
type: array type: array
type: object type: object
status:
description: Status of the AppProject
properties:
jwtTokensByRole:
additionalProperties:
description: List of JWTToken objects for a given role
items:
description: Holds the issuedAt and expiresAt values of the token
properties:
exp:
description: The expiresAt value of a token
type: string
iat:
description: The issuedAt value of a token
type: string
id:
description: ID of the token
type: string
type: object
type: array
description: JWT Tokens issued for each of the roles in the project
type: object
type: object
required: required:
- metadata - metadata
- spec - spec

2
charts/argo-cd/templates/NOTES.txt
View file

@ -4,7 +4,7 @@ In order to access the server UI you have the following options:
and then open the browser on http://localhost:8080 and accept the certificate and then open the browser on http://localhost:8080 and accept the certificate
2. enable ingress in the values file `service.ingress.enabled` and either 2. enable ingress in the values file `server.ingress.enabled` and either
- Add the annotation for ssl passthrough: https://github.com/argoproj/argo-cd/blob/master/docs/operator-manual/ingress.md#option-1-ssl-passthrough - Add the annotation for ssl passthrough: https://github.com/argoproj/argo-cd/blob/master/docs/operator-manual/ingress.md#option-1-ssl-passthrough
- Add the `--insecure` flag to `server.extraArgs` in the values file and terminate SSL at your ingress: https://github.com/argoproj/argo-cd/blob/master/docs/operator-manual/ingress.md#option-2-multiple-ingress-objects-and-hosts - Add the `--insecure` flag to `server.extraArgs` in the values file and terminate SSL at your ingress: https://github.com/argoproj/argo-cd/blob/master/docs/operator-manual/ingress.md#option-2-multiple-ingress-objects-and-hosts

6
charts/argo-cd/templates/argocd-server/service.yaml
View file

@ -25,10 +25,16 @@ spec:
protocol: TCP protocol: TCP
port: {{ .Values.server.service.servicePortHttp }} port: {{ .Values.server.service.servicePortHttp }}
targetPort: {{- if .Values.server.service.namedTargetPort }} {{ .Values.server.name }} {{- else }} {{ .Values.server.containerPort }} {{- end }} targetPort: {{- if .Values.server.service.namedTargetPort }} {{ .Values.server.name }} {{- else }} {{ .Values.server.containerPort }} {{- end }}
{{- if eq .Values.server.service.type "NodePort" }}
nodePort: {{ .Values.server.service.nodePortHttp }}
{{- end }}
- name: {{ .Values.server.service.servicePortHttpsName }} - name: {{ .Values.server.service.servicePortHttpsName }}
protocol: TCP protocol: TCP
port: {{ .Values.server.service.servicePortHttps }} port: {{ .Values.server.service.servicePortHttps }}
targetPort: {{- if .Values.server.service.namedTargetPort }} {{ .Values.server.name }} {{- else }} {{ .Values.server.containerPort }} {{- end }} targetPort: {{- if .Values.server.service.namedTargetPort }} {{ .Values.server.name }} {{- else }} {{ .Values.server.containerPort }} {{- end }}
{{- if eq .Values.server.service.type "NodePort" }}
nodePort: {{ .Values.server.service.nodePortHttps }}
{{- end }}
selector: selector:
app.kubernetes.io/instance: {{ .Release.Name }} app.kubernetes.io/instance: {{ .Release.Name }}
app.kubernetes.io/name: {{ include "argo-cd.name" . }}-{{ .Values.server.name }} app.kubernetes.io/name: {{ include "argo-cd.name" . }}-{{ .Values.server.name }}

6
charts/argo-cd/templates/dex/serviceaccount.yaml
View file

@ -3,6 +3,12 @@ apiVersion: v1
kind: ServiceAccount kind: ServiceAccount
metadata: metadata:
name: {{ template "argo-cd.dexServiceAccountName" . }} name: {{ template "argo-cd.dexServiceAccountName" . }}
{{- if .Values.dex.serviceAccount.annotations }}
annotations:
{{- range $key, $value := .Values.dex.serviceAccount.annotations }}
{{ $key }}: {{ $value | quote }}
{{- end }}
{{- end }}
labels: labels:
app.kubernetes.io/name: {{ include "argo-cd.name" . }}-{{ .Values.dex.name }} app.kubernetes.io/name: {{ include "argo-cd.name" . }}-{{ .Values.dex.name }}
helm.sh/chart: {{ include "argo-cd.chart" . }} helm.sh/chart: {{ include "argo-cd.chart" . }}

7
charts/argo-cd/values.yaml
View file

@ -217,6 +217,8 @@ dex:
serviceAccount: serviceAccount:
create: true create: true
name: argocd-dex-server name: argocd-dex-server
## Annotations applied to created service account
annotations: {}
## Additional volumeMounts to the controller main container. ## Additional volumeMounts to the controller main container.
volumeMounts: volumeMounts:
@ -444,6 +446,9 @@ server:
annotations: {} annotations: {}
labels: {} labels: {}
type: ClusterIP type: ClusterIP
## For node port default ports
nodePortHttp: 30080
nodePortHttps: 30443
servicePortHttp: 80 servicePortHttp: 80
servicePortHttps: 443 servicePortHttps: 443
servicePortHttpName: http servicePortHttpName: http
@ -549,7 +554,7 @@ server:
# name: secret-name # name: secret-name
# key: sshPrivateKey # key: sshPrivateKey
# - type: helm # - type: helm
# url: https://kubernetes-charts.storage.googleapis.com # url: https://charts.helm.sh/stable
# name: stable # name: stable
# - type: helm # - type: helm
# url: https://argoproj.github.io/argo-helm # url: https://argoproj.github.io/argo-helm

2
charts/argo-rollouts/Chart.yaml
View file

@ -2,7 +2,7 @@ apiVersion: v1
appVersion: "0.10.2" appVersion: "0.10.2"
description: A Helm chart for Argo Rollouts description: A Helm chart for Argo Rollouts
name: argo-rollouts name: argo-rollouts
version: 0.4.2 version: 0.4.3
icon: https://raw.githubusercontent.com/argoproj/argo/master/argo.png icon: https://raw.githubusercontent.com/argoproj/argo/master/argo.png
home: https://github.com/argoproj/argo-helm home: https://github.com/argoproj/argo-helm
maintainers: maintainers:

5641
charts/argo-rollouts/templates/crds/analysis-run-crd.yaml
View file

File diff suppressed because it is too large Load diff

141
charts/argo-rollouts/templates/crds/analysis-template-crd.yaml
View file

@ -65,19 +65,27 @@ spec:
items: items:
properties: properties:
consecutiveErrorLimit: consecutiveErrorLimit:
format: int32 anyOf:
type: integer - type: integer
- type: string
x-kubernetes-int-or-string: true
count: count:
format: int32 anyOf:
type: integer - type: integer
- type: string
x-kubernetes-int-or-string: true
failureCondition: failureCondition:
type: string type: string
failureLimit: failureLimit:
format: int32 anyOf:
type: integer - type: integer
- type: string
x-kubernetes-int-or-string: true
inconclusiveLimit: inconclusiveLimit:
format: int32 anyOf:
type: integer - type: integer
- type: string
x-kubernetes-int-or-string: true
initialDelay: initialDelay:
type: string type: string
interval: interval:
@ -821,6 +829,15 @@ spec:
user: user:
type: string type: string
type: object type: object
seccompProfile:
properties:
localhostProfile:
type: string
type:
type: string
required:
- type
type: object
windowsOptions: windowsOptions:
properties: properties:
gmsaCredentialSpec: gmsaCredentialSpec:
@ -1360,6 +1377,15 @@ spec:
user: user:
type: string type: string
type: object type: object
seccompProfile:
properties:
localhostProfile:
type: string
type:
type: string
required:
- type
type: object
windowsOptions: windowsOptions:
properties: properties:
gmsaCredentialSpec: gmsaCredentialSpec:
@ -1903,6 +1929,15 @@ spec:
user: user:
type: string type: string
type: object type: object
seccompProfile:
properties:
localhostProfile:
type: string
type:
type: string
required:
- type
type: object
windowsOptions: windowsOptions:
properties: properties:
gmsaCredentialSpec: gmsaCredentialSpec:
@ -2088,6 +2123,15 @@ spec:
user: user:
type: string type: string
type: object type: object
seccompProfile:
properties:
localhostProfile:
type: string
type:
type: string
required:
- type
type: object
supplementalGroups: supplementalGroups:
items: items:
format: int64 format: int64
@ -2119,6 +2163,8 @@ spec:
type: string type: string
serviceAccountName: serviceAccountName:
type: string type: string
setHostnameAsFQDN:
type: boolean
shareProcessNamespace: shareProcessNamespace:
type: boolean type: boolean
subdomain: subdomain:
@ -2297,6 +2343,85 @@ spec:
pattern: ^(\+|-)?(([0-9]+(\.[0-9]*)?)|(\.[0-9]+))(([KMGTPE]i)|[numkMGTPE]|([eE](\+|-)?(([0-9]+(\.[0-9]*)?)|(\.[0-9]+))))?$ pattern: ^(\+|-)?(([0-9]+(\.[0-9]*)?)|(\.[0-9]+))(([KMGTPE]i)|[numkMGTPE]|([eE](\+|-)?(([0-9]+(\.[0-9]*)?)|(\.[0-9]+))))?$
x-kubernetes-int-or-string: true x-kubernetes-int-or-string: true
type: object type: object
ephemeral:
properties:
readOnly:
type: boolean
volumeClaimTemplate:
properties:
metadata:
type: object
spec:
properties:
accessModes:
items:
type: string
type: array
dataSource:
properties:
apiGroup:
type: string
kind:
type: string
name:
type: string
required:
- kind
- name
type: object
resources:
properties:
limits:
additionalProperties:
anyOf:
- type: integer
- type: string
pattern: ^(\+|-)?(([0-9]+(\.[0-9]*)?)|(\.[0-9]+))(([KMGTPE]i)|[numkMGTPE]|([eE](\+|-)?(([0-9]+(\.[0-9]*)?)|(\.[0-9]+))))?$
x-kubernetes-int-or-string: true
type: object
requests:
additionalProperties:
anyOf:
- type: integer
- type: string
pattern: ^(\+|-)?(([0-9]+(\.[0-9]*)?)|(\.[0-9]+))(([KMGTPE]i)|[numkMGTPE]|([eE](\+|-)?(([0-9]+(\.[0-9]*)?)|(\.[0-9]+))))?$
x-kubernetes-int-or-string: true
type: object
type: object
selector:
properties:
matchExpressions:
items:
properties:
key:
type: string
operator:
type: string
values:
items:
type: string
type: array
required:
- key
- operator
type: object
type: array
matchLabels:
additionalProperties:
type: string
type: object
type: object
storageClassName:
type: string
volumeMode:
type: string
volumeName:
type: string
type: object
required:
- spec
type: object
type: object
fc: fc:
properties: properties:
fsType: fsType:

141
charts/argo-rollouts/templates/crds/cluster-analysis-template-crd.yaml
View file

@ -65,19 +65,27 @@ spec:
items: items:
properties: properties:
consecutiveErrorLimit: consecutiveErrorLimit:
format: int32 anyOf:
type: integer - type: integer
- type: string
x-kubernetes-int-or-string: true
count: count:
format: int32 anyOf:
type: integer - type: integer
- type: string
x-kubernetes-int-or-string: true
failureCondition: failureCondition:
type: string type: string
failureLimit: failureLimit:
format: int32 anyOf:
type: integer - type: integer
- type: string
x-kubernetes-int-or-string: true
inconclusiveLimit: inconclusiveLimit:
format: int32 anyOf:
type: integer - type: integer
- type: string
x-kubernetes-int-or-string: true
initialDelay: initialDelay:
type: string type: string
interval: interval:
@ -821,6 +829,15 @@ spec:
user: user:
type: string type: string
type: object type: object
seccompProfile:
properties:
localhostProfile:
type: string
type:
type: string
required:
- type
type: object
windowsOptions: windowsOptions:
properties: properties:
gmsaCredentialSpec: gmsaCredentialSpec:
@ -1360,6 +1377,15 @@ spec:
user: user:
type: string type: string
type: object type: object
seccompProfile:
properties:
localhostProfile:
type: string
type:
type: string
required:
- type
type: object
windowsOptions: windowsOptions:
properties: properties:
gmsaCredentialSpec: gmsaCredentialSpec:
@ -1903,6 +1929,15 @@ spec:
user: user:
type: string type: string
type: object type: object
seccompProfile:
properties:
localhostProfile:
type: string
type:
type: string
required:
- type
type: object
windowsOptions: windowsOptions:
properties: properties:
gmsaCredentialSpec: gmsaCredentialSpec:
@ -2088,6 +2123,15 @@ spec:
user: user:
type: string type: string
type: object type: object
seccompProfile:
properties:
localhostProfile:
type: string
type:
type: string
required:
- type
type: object
supplementalGroups: supplementalGroups:
items: items:
format: int64 format: int64
@ -2119,6 +2163,8 @@ spec:
type: string type: string
serviceAccountName: serviceAccountName:
type: string type: string
setHostnameAsFQDN:
type: boolean
shareProcessNamespace: shareProcessNamespace:
type: boolean type: boolean
subdomain: subdomain:
@ -2297,6 +2343,85 @@ spec:
pattern: ^(\+|-)?(([0-9]+(\.[0-9]*)?)|(\.[0-9]+))(([KMGTPE]i)|[numkMGTPE]|([eE](\+|-)?(([0-9]+(\.[0-9]*)?)|(\.[0-9]+))))?$ pattern: ^(\+|-)?(([0-9]+(\.[0-9]*)?)|(\.[0-9]+))(([KMGTPE]i)|[numkMGTPE]|([eE](\+|-)?(([0-9]+(\.[0-9]*)?)|(\.[0-9]+))))?$
x-kubernetes-int-or-string: true x-kubernetes-int-or-string: true
type: object type: object
ephemeral:
properties:
readOnly:
type: boolean
volumeClaimTemplate:
properties:
metadata:
type: object
spec:
properties:
accessModes:
items:
type: string
type: array
dataSource:
properties:
apiGroup:
type: string
kind:
type: string
name:
type: string
required:
- kind
- name
type: object
resources:
properties:
limits:
additionalProperties:
anyOf:
- type: integer
- type: string
pattern: ^(\+|-)?(([0-9]+(\.[0-9]*)?)|(\.[0-9]+))(([KMGTPE]i)|[numkMGTPE]|([eE](\+|-)?(([0-9]+(\.[0-9]*)?)|(\.[0-9]+))))?$
x-kubernetes-int-or-string: true
type: object
requests:
additionalProperties:
anyOf:
- type: integer
- type: string
pattern: ^(\+|-)?(([0-9]+(\.[0-9]*)?)|(\.[0-9]+))(([KMGTPE]i)|[numkMGTPE]|([eE](\+|-)?(([0-9]+(\.[0-9]*)?)|(\.[0-9]+))))?$
x-kubernetes-int-or-string: true
type: object
type: object
selector:
properties:
matchExpressions:
items:
properties:
key:
type: string
operator:
type: string
values:
items:
type: string
type: array
required:
- key
- operator
type: object
type: array
matchLabels:
additionalProperties:
type: string
type: object
type: object
storageClassName:
type: string
volumeMode:
type: string
volumeName:
type: string
type: object
required:
- spec
type: object
type: object
fc: fc:
properties: properties:
fsType: fsType:

324
charts/argo-rollouts/templates/crds/rollout-crd.yaml
View file

@ -97,6 +97,17 @@ spec:
properties: properties:
blueGreen: blueGreen:
properties: properties:
activeMetadata:
properties:
annotations:
additionalProperties:
type: string
type: object
labels:
additionalProperties:
type: string
type: object
type: object
activeService: activeService:
type: string type: string
antiAffinity: antiAffinity:
@ -117,6 +128,11 @@ spec:
autoPromotionSeconds: autoPromotionSeconds:
format: int32 format: int32
type: integer type: integer
maxUnavailable:
anyOf:
- type: integer
- type: string
x-kubernetes-int-or-string: true
postPromotionAnalysis: postPromotionAnalysis:
properties: properties:
args: args:
@ -195,6 +211,17 @@ spec:
type: object type: object
type: array type: array
type: object type: object
previewMetadata:
properties:
annotations:
additionalProperties:
type: string
type: object
labels:
additionalProperties:
type: string
type: object
type: object
previewReplicaCount: previewReplicaCount:
format: int32 format: int32
type: integer type: integer
@ -482,6 +509,19 @@ spec:
type: object type: object
istio: istio:
properties: properties:
destinationRule:
properties:
canarySubsetName:
type: string
name:
type: string
stableSubsetName:
type: string
required:
- canarySubsetName
- name
- stableSubsetName
type: object
virtualService: virtualService:
properties: properties:
name: name:
@ -1194,6 +1234,15 @@ spec:
user: user:
type: string type: string
type: object type: object
seccompProfile:
properties:
localhostProfile:
type: string
type:
type: string
required:
- type
type: object
windowsOptions: windowsOptions:
properties: properties:
gmsaCredentialSpec: gmsaCredentialSpec:
@ -1733,6 +1782,15 @@ spec:
user: user:
type: string type: string
type: object type: object
seccompProfile:
properties:
localhostProfile:
type: string
type:
type: string
required:
- type
type: object
windowsOptions: windowsOptions:
properties: properties:
gmsaCredentialSpec: gmsaCredentialSpec:
@ -2276,6 +2334,15 @@ spec:
user: user:
type: string type: string
type: object type: object
seccompProfile:
properties:
localhostProfile:
type: string
type:
type: string
required:
- type
type: object
windowsOptions: windowsOptions:
properties: properties:
gmsaCredentialSpec: gmsaCredentialSpec:
@ -2461,6 +2528,15 @@ spec:
user: user:
type: string type: string
type: object type: object
seccompProfile:
properties:
localhostProfile:
type: string
type:
type: string
required:
- type
type: object
supplementalGroups: supplementalGroups:
items: items:
format: int64 format: int64
@ -2492,6 +2568,8 @@ spec:
type: string type: string
serviceAccountName: serviceAccountName:
type: string type: string
setHostnameAsFQDN:
type: boolean
shareProcessNamespace: shareProcessNamespace:
type: boolean type: boolean
subdomain: subdomain:
@ -2639,6 +2717,31 @@ spec:
required: required:
- volumeID - volumeID
type: object type: object
configMap:
properties:
defaultMode:
format: int32
type: integer
items:
items:
properties:
key:
type: string
mode:
format: int32
type: integer
path:
type: string
required:
- key
- path
type: object
type: array
name:
type: string
optional:
type: boolean
type: object
csi: csi:
properties: properties:
driver: driver:
@ -2659,6 +2762,44 @@ spec:
required: required:
- driver - driver
type: object type: object
downwardAPI:
properties:
defaultMode:
format: int32
type: integer
items:
items:
properties:
fieldRef:
properties:
apiVersion:
type: string
fieldPath:
type: string
required:
- fieldPath
type: object
mode:
format: int32
type: integer
path:
type: string
resourceFieldRef:
properties:
containerName:
type: string
divisor:
type: string
resource:
type: string
required:
- resource
type: object
required:
- path
type: object
type: array
type: object
emptyDir: emptyDir:
properties: properties:
medium: medium:
@ -2670,6 +2811,85 @@ spec:
pattern: ^(\+|-)?(([0-9]+(\.[0-9]*)?)|(\.[0-9]+))(([KMGTPE]i)|[numkMGTPE]|([eE](\+|-)?(([0-9]+(\.[0-9]*)?)|(\.[0-9]+))))?$ pattern: ^(\+|-)?(([0-9]+(\.[0-9]*)?)|(\.[0-9]+))(([KMGTPE]i)|[numkMGTPE]|([eE](\+|-)?(([0-9]+(\.[0-9]*)?)|(\.[0-9]+))))?$
x-kubernetes-int-or-string: true x-kubernetes-int-or-string: true
type: object type: object
ephemeral:
properties:
readOnly:
type: boolean
volumeClaimTemplate:
properties:
metadata:
type: object
spec:
properties:
accessModes:
items:
type: string
type: array
dataSource:
properties:
apiGroup:
type: string
kind:
type: string
name:
type: string
required:
- kind
- name
type: object
resources:
properties:
limits:
additionalProperties:
anyOf:
- type: integer
- type: string
pattern: ^(\+|-)?(([0-9]+(\.[0-9]*)?)|(\.[0-9]+))(([KMGTPE]i)|[numkMGTPE]|([eE](\+|-)?(([0-9]+(\.[0-9]*)?)|(\.[0-9]+))))?$
x-kubernetes-int-or-string: true
type: object
requests:
additionalProperties:
anyOf:
- type: integer
- type: string
pattern: ^(\+|-)?(([0-9]+(\.[0-9]*)?)|(\.[0-9]+))(([KMGTPE]i)|[numkMGTPE]|([eE](\+|-)?(([0-9]+(\.[0-9]*)?)|(\.[0-9]+))))?$
x-kubernetes-int-or-string: true
type: object
type: object
selector:
properties:
matchExpressions:
items:
properties:
key:
type: string
operator:
type: string
values:
items:
type: string
type: array
required:
- key
- operator
type: object
type: array
matchLabels:
additionalProperties:
type: string
type: object
type: object
storageClassName:
type: string
volumeMode:
type: string
volumeName:
type: string
type: object
required:
- spec
type: object
type: object
fc: fc:
properties: properties:
fsType: fsType:
@ -2847,6 +3067,85 @@ spec:
sources: sources:
items: items:
properties: properties:
configMap:
properties:
items:
items:
properties:
key:
type: string
mode:
format: int32
type: integer
path:
type: string
required:
- key
- path
type: object
type: array
name:
type: string
optional:
type: boolean
type: object
downwardAPI:
properties:
items:
items:
properties:
fieldRef:
properties:
apiVersion:
type: string
fieldPath:
type: string
required:
- fieldPath
type: object
mode:
format: int32
type: integer
path:
type: string
resourceFieldRef:
properties:
containerName:
type: string
divisor:
type: string
resource:
type: string
required:
- resource
type: object
required:
- path
type: object
type: array
type: object
secret:
properties:
items:
items:
properties:
key:
type: string
mode:
format: int32
type: integer
path:
type: string
required:
- key
- path
type: object
type: array
name:
type: string
optional:
type: boolean
type: object
serviceAccountToken: serviceAccountToken:
properties: properties:
audience: audience:
@ -2939,6 +3238,31 @@ spec:
- secretRef - secretRef
- system - system
type: object type: object
secret:
properties:
defaultMode:
format: int32
type: integer
items:
items:
properties:
key:
type: string
mode:
format: int32
type: integer
path:
type: string
required:
- key
- path
type: object
type: array
optional:
type: boolean
secretName:
type: string
type: object
storageos: storageos:
properties: properties:
fsType: fsType:

2
charts/argo/Chart.yaml
View file

@ -2,7 +2,7 @@ apiVersion: v2
appVersion: v2.12.5 appVersion: v2.12.5
description: A Helm chart for Argo Workflows description: A Helm chart for Argo Workflows
name: argo name: argo
version: 0.16.0 version: 0.16.2
icon: https://raw.githubusercontent.com/argoproj/argo/master/docs/assets/argo.png icon: https://raw.githubusercontent.com/argoproj/argo/master/docs/assets/argo.png
home: https://github.com/argoproj/argo-helm home: https://github.com/argoproj/argo-helm
maintainers: maintainers:

4
charts/argo/README.md
View file

@ -2,13 +2,13 @@
This is a **community maintained** chart. It is used to set up argo and it's needed dependencies through one command. This is used in conjunction with [helm](https://github.com/kubernetes/helm). This is a **community maintained** chart. It is used to set up argo and it's needed dependencies through one command. This is used in conjunction with [helm](https://github.com/kubernetes/helm).
If you want your deployment of this helm chart to most closely match the [argo CLI](https://github.com/argoproj/argo), you should deploy it in the `kube-system` namespace. If you want your deployment of this helm chart to most closely match the [argo CLI](https://github.com/argoproj/argo-workflows), you should deploy it in the `kube-system` namespace.
## Pre-Requisites ## Pre-Requisites
This chart uses an install hook to configure the CRD definition. Installation of CRDs is a somewhat privileged process in itself and in RBAC enabled clusters the `default` service account for namespaces does not typically have the ability to do create these. This chart uses an install hook to configure the CRD definition. Installation of CRDs is a somewhat privileged process in itself and in RBAC enabled clusters the `default` service account for namespaces does not typically have the ability to do create these.
A few options are: A few options are:
- Setup the CRD yourself manually and use `--set installCRD=false` when installing the helm chart. Find the CRDs in the [argo codebase](https://raw.githubusercontent.com/argoproj/argo/master/manifests/base/crds/workflow-crd.yaml) - Setup the CRD yourself manually and use `--set installCRD=false` when installing the helm chart. Find the CRDs in the [argo codebase](https://github.com/argoproj/argo-workflows/tree/master/manifests/base/crds/full)
- Manually create a ServiceAccount in the Namespace which your release will be deployed w/ appropriate bindings to perform this action and set the `init.serviceAccount` attribute - Manually create a ServiceAccount in the Namespace which your release will be deployed w/ appropriate bindings to perform this action and set the `init.serviceAccount` attribute
- Augment the `default` ServiceAccount permissions in the Namespace in which your Release is deployed to have the appropriate permissions - Augment the `default` ServiceAccount permissions in the Namespace in which your Release is deployed to have the appropriate permissions

8
charts/argo/templates/server-cluster-roles.yaml
View file

@ -1,6 +1,10 @@
{{- if .Values.server.enabled }} {{- if .Values.server.enabled }}
apiVersion: rbac.authorization.k8s.io/v1 apiVersion: rbac.authorization.k8s.io/v1
{{- if .Values.singleNamespace }}
kind: Role
{{- else }}
kind: ClusterRole kind: ClusterRole
{{- end }}
metadata: metadata:
name: {{ .Release.Name }}-{{ .Values.server.name }} name: {{ .Release.Name }}-{{ .Values.server.name }}
rules: rules:
@ -107,7 +111,11 @@ rules:
- delete - delete
--- ---
apiVersion: rbac.authorization.k8s.io/v1 apiVersion: rbac.authorization.k8s.io/v1
{{- if .Values.singleNamespace }}
kind: Role
{{- else }}
kind: ClusterRole kind: ClusterRole
{{- end }}
metadata: metadata:
name: {{ .Release.Name }}-{{ .Values.server.name }}-cluster-template name: {{ .Release.Name }}-{{ .Values.server.name }}-cluster-template
rules: rules:

16
charts/argo/templates/server-crb.yaml
View file

@ -2,16 +2,18 @@
apiVersion: rbac.authorization.k8s.io/v1 apiVersion: rbac.authorization.k8s.io/v1
{{- if .Values.singleNamespace }} {{- if .Values.singleNamespace }}
kind: RoleBinding kind: RoleBinding
metadata:
name: {{ .Release.Name }}-{{ .Values.server.name}}
{{ else }} {{ else }}
kind: ClusterRoleBinding kind: ClusterRoleBinding
{{- end }}
metadata: metadata:
name: {{ .Release.Name }}-{{ .Values.server.name}} name: {{ .Release.Name }}-{{ .Values.server.name}}
{{- end }}
roleRef: roleRef:
apiGroup: rbac.authorization.k8s.io apiGroup: rbac.authorization.k8s.io
{{- if .Values.singleNamespace }}
kind: Role
{{ else }}
kind: ClusterRole kind: ClusterRole
{{- end }}
name: {{ .Release.Name }}-{{ .Values.server.name}} name: {{ .Release.Name }}-{{ .Values.server.name}}
subjects: subjects:
- kind: ServiceAccount - kind: ServiceAccount
@ -19,12 +21,20 @@ subjects:
namespace: {{ .Release.Namespace }} namespace: {{ .Release.Namespace }}
--- ---
apiVersion: rbac.authorization.k8s.io/v1 apiVersion: rbac.authorization.k8s.io/v1
{{- if .Values.singleNamespace }}
kind: RoleBinding
{{ else }}
kind: ClusterRoleBinding kind: ClusterRoleBinding
{{- end }}
metadata: metadata:
name: {{ .Release.Name }}-{{ .Values.server.name}}-cluster-template name: {{ .Release.Name }}-{{ .Values.server.name}}-cluster-template
roleRef: roleRef:
apiGroup: rbac.authorization.k8s.io apiGroup: rbac.authorization.k8s.io
{{- if .Values.singleNamespace }}
kind: Role
{{ else }}
kind: ClusterRole kind: ClusterRole
{{- end }}
name: {{ .Release.Name }}-{{ .Values.server.name}}-cluster-template name: {{ .Release.Name }}-{{ .Values.server.name}}-cluster-template
subjects: subjects:
- kind: ServiceAccount - kind: ServiceAccount

12
charts/argo/templates/workflow-aggregate-roles.yaml
View file

@ -1,6 +1,10 @@
{{- if .Values.createAggregateRoles }} {{- if .Values.createAggregateRoles }}
apiVersion: rbac.authorization.k8s.io/v1 apiVersion: rbac.authorization.k8s.io/v1
{{- if .Values.singleNamespace }}
kind: Role
{{ else }}
kind: ClusterRole kind: ClusterRole
{{- end }}
metadata: metadata:
annotations: annotations:
helm.sh/hook: pre-install helm.sh/hook: pre-install
@ -26,7 +30,11 @@ rules:
- watch - watch
--- ---
apiVersion: rbac.authorization.k8s.io/v1 apiVersion: rbac.authorization.k8s.io/v1
{{- if .Values.singleNamespace }}
kind: Role
{{ else }}
kind: ClusterRole kind: ClusterRole
{{- end }}
metadata: metadata:
annotations: annotations:
helm.sh/hook: pre-install helm.sh/hook: pre-install
@ -57,7 +65,11 @@ rules:
- watch - watch
--- ---
apiVersion: rbac.authorization.k8s.io/v1 apiVersion: rbac.authorization.k8s.io/v1
{{- if .Values.singleNamespace }}
kind: Role
{{ else }}
kind: ClusterRole kind: ClusterRole
{{- end }}
metadata: metadata:
annotations: annotations:
helm.sh/hook: pre-install helm.sh/hook: pre-install

8
charts/argo/templates/workflow-controller-cluster-roles.yaml
View file

@ -1,5 +1,9 @@
apiVersion: rbac.authorization.k8s.io/v1 apiVersion: rbac.authorization.k8s.io/v1
{{- if .Values.singleNamespace }}
kind: Role
{{- else }}
kind: ClusterRole kind: ClusterRole
{{- end }}
metadata: metadata:
name: {{ .Release.Name }}-{{ .Values.controller.name }} name: {{ .Release.Name }}-{{ .Values.controller.name }}
rules: rules:
@ -127,7 +131,11 @@ rules:
- delete - delete
--- ---
apiVersion: rbac.authorization.k8s.io/v1 apiVersion: rbac.authorization.k8s.io/v1
{{- if .Values.singleNamespace }}
kind: Role
{{- else }}
kind: ClusterRole kind: ClusterRole
{{- end }}
metadata: metadata:
name: {{ .Release.Name }}-{{ .Values.controller.name }}-cluster-template name: {{ .Release.Name }}-{{ .Values.controller.name }}-cluster-template
rules: rules:

12
charts/argo/templates/workflow-controller-crb.yaml
View file

@ -8,7 +8,11 @@ metadata:
name: {{ .Release.Name }}-{{ .Values.controller.name }} name: {{ .Release.Name }}-{{ .Values.controller.name }}
roleRef: roleRef:
apiGroup: rbac.authorization.k8s.io apiGroup: rbac.authorization.k8s.io
{{- if .Values.singleNamespace }}
kind: Role
{{ else }}
kind: ClusterRole kind: ClusterRole
{{- end }}
name: {{ .Release.Name }}-{{ .Values.controller.name }} name: {{ .Release.Name }}-{{ .Values.controller.name }}
subjects: subjects:
- kind: ServiceAccount - kind: ServiceAccount
@ -27,12 +31,20 @@ subjects:
{{- end }} {{- end }}
--- ---
apiVersion: rbac.authorization.k8s.io/v1 apiVersion: rbac.authorization.k8s.io/v1
{{- if .Values.singleNamespace }}
kind: RoleBinding
{{ else }}
kind: ClusterRoleBinding kind: ClusterRoleBinding
{{- end }}
metadata: metadata:
name: {{ .Release.Name }}-{{ .Values.controller.name }}-cluster-template name: {{ .Release.Name }}-{{ .Values.controller.name }}-cluster-template
roleRef: roleRef:
apiGroup: rbac.authorization.k8s.io apiGroup: rbac.authorization.k8s.io
{{- if .Values.singleNamespace }}
kind: Role
{{ else }}
kind: ClusterRole kind: ClusterRole
{{- end }}
name: {{ .Release.Name }}-{{ .Values.controller.name }}-cluster-template name: {{ .Release.Name }}-{{ .Values.controller.name }}-cluster-template
subjects: subjects:
- kind: ServiceAccount - kind: ServiceAccount