DevFW-CICD/argocd-helm
16
0
Fork 0
Code Issues Pull requests Projects Releases Packages Wiki Activity Actions

feat(argo-workflows): Add the ability to use headless service for workflow controller

Browse source
This commit is contained in:
karl 2024-04-01 12:40:19 -04:00
parent d64b7e2d0c
commit a37eaa64b5
4 changed files with 47 additions and 24 deletions
Show stats Download patch file Download diff file Expand all files Collapse all files

4
charts/argo-workflows/Chart.yaml
View file

@ -3,7 +3,7 @@ appVersion: v3.5.5
name: argo-workflows
description: A Helm chart for Argo Workflows
type: application
version: 0.41.0
version: 0.41.1
icon: https://argo-workflows.readthedocs.io/en/stable/assets/logo.png
home: https://github.com/argoproj/argo-helm
sources:
@ -17,4 +17,4 @@ annotations:
url: https://argoproj.github.io/argo-helm/pgp_keys.asc
artifacthub.io/changes: |
- kind: added
description: Check Prometheus CRDs are available before creating Service Monitor resource(s)
description: Add the ability to use a headless service for the workflow controller

1
charts/argo-workflows/README.md
View file

@ -155,6 +155,7 @@ Fields to note:
| controller.extraContainers | list | `[]` | Extra containers to be added to the controller deployment |
| controller.extraEnv | list | `[]` | Extra environment variables to provide to the controller container |
| controller.extraInitContainers | list | `[]` | Enables init containers to be added to the controller deployment |
| controller.headlessService | bool | `false` | Whether to use a headless service or not. |
| controller.image.registry | string | `"quay.io"` | Registry to use for the controller |
| controller.image.repository | string | `"argoproj/workflow-controller"` | Registry to use for the controller |
| controller.image.tag | string | `""` | Image tag for the workflow controller. Defaults to `.Values.images.tag`. |

3
charts/argo-workflows/templates/controller/workflow-controller-service.yaml
View file

@ -32,6 +32,9 @@ spec:
{{- include "argo-workflows.selectorLabels" (dict "context" . "name" .Values.controller.name) | nindent 4 }}
sessionAffinity: None
type: {{ .Values.controller.serviceType }}
{{- if and (eq .Values.controller.serviceType "ClusterIP") .Values.controller.headlessService }}
clusterIP: None
{{- end }}
{{- if and (eq .Values.controller.serviceType "LoadBalancer") .Values.controller.loadBalancerSourceRanges }}
loadBalancerSourceRanges:
{{- toYaml .Values.controller.loadBalancerSourceRanges | nindent 4 }}

51
charts/argo-workflows/values.yaml
View file

@ -83,7 +83,8 @@ controller:
# -- Globally limits the rate at which pods are created.
# This is intended to mitigate flooding of the Kubernetes API server by workflows with a large amount of
# parallel nodes.
resourceRateLimit: {}
resourceRateLimit:
{}
# limit: 10
# burst: 1
@ -213,7 +214,8 @@ controller:
cronWorkflowWorkers: # 8
# -- Restricts the Workflows that the controller will process.
# Only valid for 2.9+
workflowRestrictions: {}
workflowRestrictions:
{}
# templateReferencing: Strict|Secure
# telemetryConfig controls the path and port for prometheus telemetry. Telemetry is enabled and emitted in the same endpoint
@ -235,6 +237,7 @@ controller:
servicePort: 8081
# -- telemetry service port name
servicePortName: telemetry
serviceMonitor:
# -- Enable a prometheus ServiceMonitor
enabled: false
@ -285,6 +288,8 @@ controller:
# -- Service type of the controller Service
serviceType: ClusterIP
# -- Whether to use a headless service or not.
headlessService: false
# -- Annotations to be applied to the controller Service
serviceAnnotations: {}
# -- Optional labels to add to the controller Service
@ -307,7 +312,8 @@ controller:
timeoutSeconds: 30
# -- Extra environment variables to provide to the controller container
extraEnv: []
extraEnv:
[]
# - name: FOO
# value: "bar"
@ -380,7 +386,8 @@ controller:
# -- Configure when workflow controller runs in a different k8s cluster with the workflow workloads,
# or needs to communicate with the k8s apiserver using an out-of-cluster kubeconfig secret.
# @default -- `{}` (See [values.yaml])
kubeConfig: {}
kubeConfig:
{}
# # name of the kubeconfig secret, may not be empty when kubeConfig specified
# secretName: kubeconfig-secret
# # key of the kubeconfig secret, may not be empty when kubeConfig specified
@ -520,7 +527,8 @@ server:
targetMemoryUtilizationPercentage: 50
# -- Configures the scaling behavior of the target in both Up and Down directions.
# This is only available on HPA apiVersion `autoscaling/v2beta2` and newer
behavior: {}
behavior:
{}
# scaleDown:
# stabilizationWindowSeconds: 300
# policies:
@ -566,7 +574,8 @@ server:
secure: false
# -- Extra environment variables to provide to the argo-server container
extraEnv: []
extraEnv:
[]
# - name: FOO
# value: "bar"
@ -612,7 +621,8 @@ server:
# -- List of ingress hosts
## Hostnames must be provided if Ingress is enabled.
## Secrets must be manually created in the namespace
hosts: []
hosts:
[]
# - argoworkflows.example.com
# -- List of ingress paths
@ -622,7 +632,8 @@ server:
# -- Ingress path type. One of `Exact`, `Prefix` or `ImplementationSpecific`
pathType: Prefix
# -- Additional ingress paths
extraPaths: []
extraPaths:
[]
# - path: /*
# backend:
# serviceName: ssl-redirect
@ -637,7 +648,8 @@ server:
# name: use-annotation
# -- Ingress TLS configuration
tls: []
tls:
[]
# - secretName: argoworkflows-example-tls
# hosts:
# - argoworkflows.example.com
@ -711,7 +723,8 @@ server:
secretWhitelist: []
# -- Scopes requested from the SSO ID provider
## The 'groups' scope requests group membership information, which is usually used for authorization decisions.
scopes: []
scopes:
[]
# - groups
# -- Define how long your login is valid for (in hours)
## If omitted, defaults to 10h.
@ -727,7 +740,8 @@ server:
insecureSkipVerify: false
# -- Filter the groups returned by the OIDC provider
## A logical "OR" is used between each regex in the list
filterGroupsRegex: []
filterGroupsRegex:
[]
# - ".*argo-wf.*"
# - ".*argo-workflow.*"
@ -738,7 +752,8 @@ server:
extraInitContainers: []
# -- Array of extra K8s manifests to deploy
extraObjects: []
extraObjects:
[]
# - apiVersion: secrets-store.csi.x-k8s.io/v1
# kind: SecretProviderClass
# metadata:
@ -770,7 +785,8 @@ artifactRepository:
archiveLogs: false
# -- Store artifact in a S3-compliant object store
# @default -- See [values.yaml]
s3: {}
s3:
{}
# # Note the `key` attribute is not the actual secret, it's the PATH to
# # the contents in the associated secret, as defined by the `name` attribute.
# accessKeySecret:
@ -793,7 +809,8 @@ artifactRepository:
# enableEncryption: true
# -- Store artifact in a GCS object store
# @default -- `{}` (See [values.yaml])
gcs: {}
gcs:
{}
# bucket: <project>-argo
# keyFormat: "{{ \"{{workflow.namespace}}/{{workflow.name}}/{{pod.name}}\" }}"
# # serviceAccountKeySecret is a secret selector.
@ -809,7 +826,8 @@ artifactRepository:
# key: serviceAccountKey
# -- Store artifact in Azure Blob Storage
# @default -- `{}` (See [values.yaml])
azure: {}
azure:
{}
# endpoint: https://mystorageaccountname.blob.core.windows.net
# container: my-container-name
# blobNameFormat: path/in/container
@ -841,7 +859,8 @@ customArtifactRepository: {}
# -- The section of [artifact repository ref](https://argo-workflows.readthedocs.io/en/stable/artifact-repository-ref/).
# Each map key is the name of configmap
# @default -- `{}` (See [values.yaml])
artifactRepositoryRef: {}
artifactRepositoryRef:
{}
# # -- 1st ConfigMap
# # If you want to use this config map by default, name it "artifact-repositories".
# # Otherwise, you can provide a reference to a