Merge branch 'main' into feature/gateway-api
This commit is contained in:
Petr Drastil
GitHub
commit
b5b6099801
58 changed files with 804 additions and 817 deletions
2
.github/workflows/lint-and-test.yml
vendored
2
.github/workflows/lint-and-test.yml
vendored
|
|
@ -32,7 +32,7 @@ jobs:
|
|||
version: v3.10.1 # Also update in publish.yaml
|
||||
|
||||
- name: Set up python
|
||||
uses: actions/setup-python@82c7e631bb3cdc910f68e0081d67478d79c6982d # v5.1.0
|
||||
uses: actions/setup-python@f677139bbe7f9c59b41e40162b753c062f5d49a3 # v5.2.0
|
||||
with:
|
||||
python-version: 3.9
|
||||
|
||||
|
|
|
|||
2
.github/workflows/pr-sizing.yml
vendored
2
.github/workflows/pr-sizing.yml
vendored
|
|
@ -25,6 +25,6 @@ jobs:
|
|||
size-label:
|
||||
runs-on: ubuntu-latest
|
||||
steps:
|
||||
- uses: pascalgn/size-label-action@bbbaa0d5ccce8e2e76254560df5c64b82dac2e12 # v0.5.2
|
||||
- uses: pascalgn/size-label-action@be08a2d5f857dc99c5b9426cdb5a8ea1aa7f0399 # v0.5.4
|
||||
env:
|
||||
GITHUB_TOKEN: "${{ secrets.GITHUB_TOKEN }}"
|
||||
|
|
|
|||
2
.github/workflows/publish.yml
vendored
2
.github/workflows/publish.yml
vendored
|
|
@ -66,7 +66,7 @@ jobs:
|
|||
CR_TOKEN: "${{ secrets.GITHUB_TOKEN }}"
|
||||
|
||||
- name: Login to GHCR
|
||||
uses: docker/login-action@0d4c9c5ea7693da7b068278f7b52bda2a190a446 # v3.2.0
|
||||
uses: docker/login-action@9780b0c442fbb1117ed29e0efdff1e18412f7567 # v3.3.0
|
||||
with:
|
||||
registry: ghcr.io
|
||||
username: ${{ github.actor }}
|
||||
|
|
|
|||
6
.github/workflows/renovate.yaml
vendored
6
.github/workflows/renovate.yaml
vendored
|
|
@ -16,7 +16,7 @@ jobs:
|
|||
runs-on: ubuntu-latest
|
||||
steps:
|
||||
- name: Get token
|
||||
uses: actions/create-github-app-token@31c86eb3b33c9b601a1f60f98dcbfd1d70f379b4 # v1.10.3
|
||||
uses: actions/create-github-app-token@3378cda945da322a8db4b193e19d46352ebe2de5 # v1.10.4
|
||||
id: get_token
|
||||
with:
|
||||
app-id: ${{ vars.RENOVATE_APP_ID }}
|
||||
|
|
@ -26,11 +26,11 @@ jobs:
|
|||
uses: actions/checkout@692973e3d937129bcbf40652eb9f2f61becf3332 # v4.1.7
|
||||
|
||||
- name: Self-hosted Renovate
|
||||
uses: renovatebot/github-action@042670e39b8d7335e992c3fa526ecbfbd52ef57b # v40.2.2
|
||||
uses: renovatebot/github-action@630a255a1f2f56c8d8ce160bed3e3ca577ca53e2 # v40.2.7
|
||||
with:
|
||||
configurationFile: .github/configs/renovate-config.js
|
||||
# renovate: datasource=docker depName=ghcr.io/renovatebot/renovate
|
||||
renovate-version: 37.421.4
|
||||
renovate-version: 38.59.2
|
||||
token: '${{ steps.get_token.outputs.token }}'
|
||||
env:
|
||||
LOG_LEVEL: 'debug'
|
||||
|
|
|
|||
6
.github/workflows/scorecard.yml
vendored
6
.github/workflows/scorecard.yml
vendored
|
|
@ -38,7 +38,7 @@ jobs:
|
|||
persist-credentials: false
|
||||
|
||||
- name: "Run analysis"
|
||||
uses: ossf/scorecard-action@dc50aa9510b46c811795eb24b2f1ba02a914e534 # v2.3.3
|
||||
uses: ossf/scorecard-action@62b2cac7ed8198b15735ed49ab1e5cf35480ba46 # v2.4.0
|
||||
with:
|
||||
results_file: results.sarif
|
||||
results_format: sarif
|
||||
|
|
@ -60,7 +60,7 @@ jobs:
|
|||
# Upload the results as artifacts (optional). Commenting out will disable uploads of run results in SARIF
|
||||
# format to the repository Actions tab.
|
||||
- name: "Upload artifact"
|
||||
uses: actions/upload-artifact@0b2256b8c012f0828dc542b3febcab082c67f72b # v4.3.4
|
||||
uses: actions/upload-artifact@50769540e7f4bd5e21e526ee35c689e35e0d6874 # v4.4.0
|
||||
with:
|
||||
name: SARIF file
|
||||
path: results.sarif
|
||||
|
|
@ -68,6 +68,6 @@ jobs:
|
|||
|
||||
# Upload the results to GitHub's code scanning dashboard.
|
||||
- name: "Upload to code-scanning"
|
||||
uses: github/codeql-action/upload-sarif@b611370bb5703a7efb587f9d136a52ea24c5c38c # v3.25.11
|
||||
uses: github/codeql-action/upload-sarif@4dd16135b69a43b6c8efb853346f8437d92d3c93 # v3.26.6
|
||||
with:
|
||||
sarif_file: results.sarif
|
||||
|
|
|
|||
|
|
@ -1,6 +1,6 @@
|
|||
dependencies:
|
||||
- name: redis-ha
|
||||
repository: https://dandydeveloper.github.io/charts/
|
||||
version: 4.26.1
|
||||
digest: sha256:d72c308ab0eef4233e25bfc3f8fc97cf9b02a9c5d0186ea89e2f8fb332cb9c41
|
||||
generated: "2024-02-18T19:42:53.135599+02:00"
|
||||
version: 4.27.6
|
||||
digest: sha256:69c6b20682f0a2a8044b71731b7c656a57118088a7b3611f59217b537167af2e
|
||||
generated: "2024-08-28T13:02:33.763307+02:00"
|
||||
|
|
|
|||
|
|
@ -1,9 +1,9 @@
|
|||
apiVersion: v2
|
||||
appVersion: v2.11.4
|
||||
kubeVersion: ">=1.23.0-0"
|
||||
appVersion: v2.12.3
|
||||
kubeVersion: ">=1.25.0-0"
|
||||
description: A Helm chart for Argo CD, a declarative, GitOps continuous delivery tool for Kubernetes.
|
||||
name: argo-cd
|
||||
version: 7.3.4
|
||||
version: 7.5.2
|
||||
home: https://github.com/argoproj/argo-helm
|
||||
icon: https://argo-cd.readthedocs.io/en/stable/assets/logo.png
|
||||
sources:
|
||||
|
|
@ -18,7 +18,7 @@ maintainers:
|
|||
url: https://argoproj.github.io/
|
||||
dependencies:
|
||||
- name: redis-ha
|
||||
version: 4.26.1
|
||||
version: 4.27.6
|
||||
repository: https://dandydeveloper.github.io/charts/
|
||||
condition: redis-ha.enabled
|
||||
annotations:
|
||||
|
|
@ -26,5 +26,5 @@ annotations:
|
|||
fingerprint: 2B8F22F57260EFA67BE1C5824B11F800CD9D2252
|
||||
url: https://argoproj.github.io/argo-helm/pgp_keys.asc
|
||||
artifacthub.io/changes: |
|
||||
- kind: changed
|
||||
description: Bump argo-cd to v2.11.4
|
||||
- kind: fixed
|
||||
description: Certificate template was wrong leading to null
|
||||
|
|
|
|||
|
|
@ -278,6 +278,31 @@ For full list of changes please check ArtifactHub [changelog].
|
|||
|
||||
Highlighted versions provide information about additional steps that should be performed by user when upgrading to newer version.
|
||||
|
||||
### 7.0.0
|
||||
|
||||
We changed the type of `.Values.configs.clusterCredentials` from `list` to `object`.
|
||||
If you used the value, please migrate like below.
|
||||
|
||||
```yaml
|
||||
# before
|
||||
configs:
|
||||
clusterCredentials:
|
||||
- mycluster:
|
||||
server: https://mycluster.example.com
|
||||
labels: {}
|
||||
annotations: {}
|
||||
# ...
|
||||
|
||||
# after
|
||||
configs:
|
||||
clusterCredentials:
|
||||
mycluster:
|
||||
server: https://mycluster.example.com
|
||||
labels: {}
|
||||
annotations: {}
|
||||
# ...
|
||||
```
|
||||
|
||||
### 6.10.0
|
||||
|
||||
This version introduces authentication for Redis to mitigate GHSA-9766-5277-j5hr.
|
||||
|
|
@ -290,7 +315,7 @@ Upstream steps in the [FAQ] are not enough, since we chose a different approach.
|
|||
Steps to roteate the secret when using the helm chart (bold step is additional to upstream):
|
||||
* Delete `argocd-redis` secret in the namespace where Argo CD is installed.
|
||||
```bash
|
||||
kubectl delete secret argocd-redis -n <argocd namesapce>
|
||||
kubectl delete secret argocd-redis -n <argocd namespace>
|
||||
```
|
||||
* **Perform a helm upgrade**
|
||||
```bash
|
||||
|
|
@ -622,7 +647,7 @@ server:
|
|||
|
||||
## Prerequisites
|
||||
|
||||
- Kubernetes: `>=1.23.0-0`
|
||||
- Kubernetes: `>=1.25.0-0`
|
||||
- We align with [Amazon EKS calendar][EKS EoL] because there are many AWS users and it's a conservative approach.
|
||||
- Please check [Support Matrix of Argo CD][Kubernetes Compatibility Matrix] for official info.
|
||||
- Helm v3.0.0+
|
||||
|
|
@ -1517,6 +1542,12 @@ If you use an External Redis (See Option 3 above), this Job is not deployed.
|
|||
| notifications.image.tag | string | `""` (defaults to global.image.tag) | Tag to use for the notifications controller |
|
||||
| notifications.imagePullSecrets | list | `[]` (defaults to global.imagePullSecrets) | Secrets with credentials to pull images from a private registry |
|
||||
| notifications.initContainers | list | `[]` | Init containers to add to the notifications controller pod |
|
||||
| notifications.livenessProbe.enabled | bool | `false` | Enable Kubernetes liveness probe for notifications controller Pods |
|
||||
| notifications.livenessProbe.failureThreshold | int | `3` | Minimum consecutive failures for the [probe] to be considered failed after having succeeded |
|
||||
| notifications.livenessProbe.initialDelaySeconds | int | `10` | Number of seconds after the container has started before [probe] is initiated |
|
||||
| notifications.livenessProbe.periodSeconds | int | `10` | How often (in seconds) to perform the [probe] |
|
||||
| notifications.livenessProbe.successThreshold | int | `1` | Minimum consecutive successes for the [probe] to be considered successful after having failed |
|
||||
| notifications.livenessProbe.timeoutSeconds | int | `1` | Number of seconds after which the [probe] times out |
|
||||
| notifications.logFormat | string | `""` (defaults to global.logging.format) | Notifications controller log format. Either `text` or `json` |
|
||||
| notifications.logLevel | string | `""` (defaults to global.logging.level) | Notifications controller log level. One of: `debug`, `info`, `warn`, `error` |
|
||||
| notifications.metrics.enabled | bool | `false` | Enables prometheus metrics server |
|
||||
|
|
@ -1545,6 +1576,12 @@ If you use an External Redis (See Option 3 above), this Job is not deployed.
|
|||
| notifications.podAnnotations | object | `{}` | Annotations to be applied to the notifications controller Pods |
|
||||
| notifications.podLabels | object | `{}` | Labels to be applied to the notifications controller Pods |
|
||||
| notifications.priorityClassName | string | `""` (defaults to global.priorityClassName) | Priority class for the notifications controller pods |
|
||||
| notifications.readinessProbe.enabled | bool | `false` | Enable Kubernetes liveness probe for notifications controller Pods |
|
||||
| notifications.readinessProbe.failureThreshold | int | `3` | Minimum consecutive failures for the [probe] to be considered failed after having succeeded |
|
||||
| notifications.readinessProbe.initialDelaySeconds | int | `10` | Number of seconds after the container has started before [probe] is initiated |
|
||||
| notifications.readinessProbe.periodSeconds | int | `10` | How often (in seconds) to perform the [probe] |
|
||||
| notifications.readinessProbe.successThreshold | int | `1` | Minimum consecutive successes for the [probe] to be considered successful after having failed |
|
||||
| notifications.readinessProbe.timeoutSeconds | int | `1` | Number of seconds after which the [probe] times out |
|
||||
| notifications.resources | object | `{}` | Resource limits and requests for the notifications controller |
|
||||
| notifications.secret.annotations | object | `{}` | key:value pairs of annotations to be added to the secret |
|
||||
| notifications.secret.create | bool | `true` | Whether helm chart creates notifications controller secret |
|
||||
|
|
|
|||
|
|
@ -278,6 +278,31 @@ For full list of changes please check ArtifactHub [changelog].
|
|||
|
||||
Highlighted versions provide information about additional steps that should be performed by user when upgrading to newer version.
|
||||
|
||||
### 7.0.0
|
||||
|
||||
We changed the type of `.Values.configs.clusterCredentials` from `list` to `object`.
|
||||
If you used the value, please migrate like below.
|
||||
|
||||
```yaml
|
||||
# before
|
||||
configs:
|
||||
clusterCredentials:
|
||||
- mycluster:
|
||||
server: https://mycluster.example.com
|
||||
labels: {}
|
||||
annotations: {}
|
||||
# ...
|
||||
|
||||
# after
|
||||
configs:
|
||||
clusterCredentials:
|
||||
mycluster:
|
||||
server: https://mycluster.example.com
|
||||
labels: {}
|
||||
annotations: {}
|
||||
# ...
|
||||
```
|
||||
|
||||
### 6.10.0
|
||||
|
||||
This version introduces authentication for Redis to mitigate GHSA-9766-5277-j5hr.
|
||||
|
|
@ -290,7 +315,7 @@ Upstream steps in the [FAQ] are not enough, since we chose a different approach.
|
|||
Steps to roteate the secret when using the helm chart (bold step is additional to upstream):
|
||||
* Delete `argocd-redis` secret in the namespace where Argo CD is installed.
|
||||
```bash
|
||||
kubectl delete secret argocd-redis -n <argocd namesapce>
|
||||
kubectl delete secret argocd-redis -n <argocd namespace>
|
||||
```
|
||||
* **Perform a helm upgrade**
|
||||
```bash
|
||||
|
|
|
|||
|
|
@ -1,6 +1,6 @@
|
|||
In order to access the server UI you have the following options:
|
||||
|
||||
1. kubectl port-forward service/{{ include "argo-cd.fullname" . }}-server -n {{ .Release.Namespace }} 8080:443
|
||||
1. kubectl port-forward service/{{ include "argo-cd.fullname" . }}-server -n {{ include "argo-cd.namespace" . }} 8080:443
|
||||
|
||||
and then open the browser on http://localhost:8080 and accept the certificate
|
||||
|
||||
|
|
@ -12,7 +12,7 @@ In order to access the server UI you have the following options:
|
|||
{{ if eq (toString (index .Values.configs.cm "admin.enabled")) "true" -}}
|
||||
After reaching the UI the first time you can login with username: admin and the random password generated during the installation. You can find the password by running:
|
||||
|
||||
kubectl -n {{ .Release.Namespace }} get secret argocd-initial-admin-secret -o jsonpath="{.data.password}" | base64 -d
|
||||
kubectl -n {{ include "argo-cd.namespace" . }} get secret argocd-initial-admin-secret -o jsonpath="{.data.password}" | base64 -d
|
||||
|
||||
(You should delete the initial secret afterwards as suggested by the Getting Started Guide: https://argo-cd.readthedocs.io/en/stable/getting_started/#4-login-using-the-cli)
|
||||
{{ else if or (index .Values.configs.cm "dex.config") (index .Values.configs.cm "oidc.config") -}}
|
||||
|
|
|
|||
|
|
@ -99,7 +99,7 @@ Create the name of the Redis secret-init service account to use
|
|||
*/}}
|
||||
{{- define "argo-cd.redisSecretInit.serviceAccountName" -}}
|
||||
{{- if .Values.redisSecretInit.serviceAccount.create -}}
|
||||
{{ default (include "argo-cd.redisSecretInit.fullname" .) .Values.redis.serviceAccount.name }}
|
||||
{{ default (include "argo-cd.redisSecretInit.fullname" .) .Values.redisSecretInit.serviceAccount.name }}
|
||||
{{- else -}}
|
||||
{{ default "default" .Values.redisSecretInit.serviceAccount.name }}
|
||||
{{- end -}}
|
||||
|
|
@ -183,7 +183,7 @@ Argo Configuration Preset Values (Influenced by Values configuration)
|
|||
{{- define "argo-cd.config.cm.presets" -}}
|
||||
{{- $presets := dict -}}
|
||||
{{- $_ := set $presets "url" (printf "https://%s" .Values.global.domain) -}}
|
||||
{{- if index .Values.configs.cm "statusbadge.enabled" | eq true -}}
|
||||
{{- if eq (toString (index .Values.configs.cm "statusbadge.enabled")) "true" -}}
|
||||
{{- $_ := set $presets "statusbadge.url" (printf "https://%s/" .Values.global.domain) -}}
|
||||
{{- end -}}
|
||||
{{- if .Values.configs.styles -}}
|
||||
|
|
|
|||
|
|
@ -208,10 +208,22 @@ spec:
|
|||
name: {{ default "argocd-redis" .Values.externalRedis.existingSecret }}
|
||||
{{- if .Values.externalRedis.host }}
|
||||
key: redis-password
|
||||
optional: true
|
||||
{{- else }}
|
||||
key: auth
|
||||
{{- end }}
|
||||
optional: true
|
||||
- name: REDIS_SENTINEL_USERNAME
|
||||
valueFrom:
|
||||
secretKeyRef:
|
||||
name: {{ default (include "argo-cd.redis.fullname" .) .Values.externalRedis.existingSecret }}
|
||||
key: redis-sentinel-username
|
||||
optional: true
|
||||
- name: REDIS_SENTINEL_PASSWORD
|
||||
valueFrom:
|
||||
secretKeyRef:
|
||||
name: {{ default (include "argo-cd.redis.fullname" .) .Values.externalRedis.existingSecret }}
|
||||
key: redis-sentinel-password
|
||||
optional: true
|
||||
- name: ARGOCD_DEFAULT_CACHE_EXPIRATION
|
||||
valueFrom:
|
||||
configMapKeyRef:
|
||||
|
|
|
|||
|
|
@ -3,7 +3,7 @@ apiVersion: monitoring.coreos.com/v1
|
|||
kind: PrometheusRule
|
||||
metadata:
|
||||
name: {{ template "argo-cd.controller.fullname" . }}
|
||||
namespace: {{ default .Release.Namespace .Values.controller.metrics.rules.namespace | quote }}
|
||||
namespace: {{ default (include "argo-cd.namespace" .) .Values.controller.metrics.rules.namespace | quote }}
|
||||
labels:
|
||||
{{- include "argo-cd.labels" (dict "context" . "component" .Values.controller.name "name" .Values.controller.name) | nindent 4 }}
|
||||
{{- if .Values.controller.metrics.rules.selector }}
|
||||
|
|
|
|||
|
|
@ -3,7 +3,7 @@ apiVersion: monitoring.coreos.com/v1
|
|||
kind: ServiceMonitor
|
||||
metadata:
|
||||
name: {{ template "argo-cd.controller.fullname" . }}
|
||||
namespace: {{ default .Release.Namespace .Values.controller.metrics.serviceMonitor.namespace | quote }}
|
||||
namespace: {{ default (include "argo-cd.namespace" .) .Values.controller.metrics.serviceMonitor.namespace | quote }}
|
||||
labels:
|
||||
{{- include "argo-cd.labels" (dict "context" . "component" .Values.controller.name "name" .Values.controller.name) | nindent 4 }}
|
||||
{{- with .Values.controller.metrics.serviceMonitor.selector }}
|
||||
|
|
|
|||
|
|
@ -205,9 +205,9 @@ spec:
|
|||
valueFrom:
|
||||
secretKeyRef:
|
||||
name: {{ default "argocd-redis" .Values.externalRedis.existingSecret }}
|
||||
optional: true
|
||||
{{- if .Values.externalRedis.host }}
|
||||
key: redis-password
|
||||
optional: true
|
||||
{{- else }}
|
||||
key: auth
|
||||
{{- end }}
|
||||
|
|
|
|||
|
|
@ -35,6 +35,8 @@ rules:
|
|||
- appprojects
|
||||
verbs:
|
||||
- get
|
||||
- list
|
||||
- watch
|
||||
- apiGroups:
|
||||
- ""
|
||||
resources:
|
||||
|
|
|
|||
|
|
@ -34,6 +34,8 @@ rules:
|
|||
- appprojects
|
||||
verbs:
|
||||
- get
|
||||
- list
|
||||
- watch
|
||||
- apiGroups:
|
||||
- ""
|
||||
resources:
|
||||
|
|
|
|||
|
|
@ -3,7 +3,7 @@ apiVersion: monitoring.coreos.com/v1
|
|||
kind: ServiceMonitor
|
||||
metadata:
|
||||
name: {{ template "argo-cd.applicationSet.fullname" . }}
|
||||
namespace: {{ default .Release.Namespace .Values.applicationSet.metrics.serviceMonitor.namespace | quote }}
|
||||
namespace: {{ default (include "argo-cd.namespace" .) .Values.applicationSet.metrics.serviceMonitor.namespace | quote }}
|
||||
labels:
|
||||
{{- include "argo-cd.labels" (dict "context" . "component" .Values.applicationSet.name "name" .Values.applicationSet.name) | nindent 4 }}
|
||||
{{- with .Values.applicationSet.metrics.serviceMonitor.selector }}
|
||||
|
|
|
|||
|
|
@ -4,7 +4,7 @@ apiVersion: v1
|
|||
kind: Secret
|
||||
metadata:
|
||||
name: {{ include "argo-cd.name" $ }}-cluster-{{ $cluster_key }}
|
||||
namespace: {{ $.Release.Namespace | quote }}
|
||||
namespace: {{ include "argo-cd.namespace" $ | quote }}
|
||||
labels:
|
||||
{{- include "argo-cd.labels" (dict "context" $) | nindent 4 }}
|
||||
{{- with $cluster_value.labels }}
|
||||
|
|
|
|||
|
|
@ -4,7 +4,7 @@ apiVersion: v1
|
|||
kind: Secret
|
||||
metadata:
|
||||
name: argocd-repo-creds-{{ $repo_cred_key }}
|
||||
namespace: {{ $.Release.Namespace | quote }}
|
||||
namespace: {{ include "argo-cd.namespace" $ | quote }}
|
||||
labels:
|
||||
argocd.argoproj.io/secret-type: repo-creds
|
||||
{{- include "argo-cd.labels" (dict "context" $) | nindent 4 }}
|
||||
|
|
|
|||
|
|
@ -4,7 +4,7 @@ apiVersion: v1
|
|||
kind: Secret
|
||||
metadata:
|
||||
name: argocd-repo-{{ $repo_key }}
|
||||
namespace: {{ $.Release.Namespace | quote }}
|
||||
namespace: {{ include "argo-cd.namespace" $ | quote }}
|
||||
labels:
|
||||
argocd.argoproj.io/secret-type: repository
|
||||
{{- include "argo-cd.labels" (dict "context" $) | nindent 4 }}
|
||||
|
|
|
|||
|
|
@ -107,6 +107,26 @@ spec:
|
|||
- name: metrics
|
||||
containerPort: {{ .Values.notifications.containerPorts.metrics }}
|
||||
protocol: TCP
|
||||
{{- if .Values.notifications.livenessProbe.enabled }}
|
||||
livenessProbe:
|
||||
tcpSocket:
|
||||
port: metrics
|
||||
initialDelaySeconds: {{ .Values.notifications.livenessProbe.initialDelaySeconds }}
|
||||
periodSeconds: {{ .Values.notifications.livenessProbe.periodSeconds }}
|
||||
timeoutSeconds: {{ .Values.notifications.livenessProbe.timeoutSeconds }}
|
||||
successThreshold: {{ .Values.notifications.livenessProbe.successThreshold }}
|
||||
failureThreshold: {{ .Values.notifications.livenessProbe.failureThreshold }}
|
||||
{{- end }}
|
||||
{{- if .Values.notifications.readinessProbe.enabled }}
|
||||
readinessProbe:
|
||||
tcpSocket:
|
||||
port: metrics
|
||||
initialDelaySeconds: {{ .Values.notifications.readinessProbe.initialDelaySeconds }}
|
||||
periodSeconds: {{ .Values.notifications.readinessProbe.periodSeconds }}
|
||||
timeoutSeconds: {{ .Values.notifications.readinessProbe.timeoutSeconds }}
|
||||
successThreshold: {{ .Values.notifications.readinessProbe.successThreshold }}
|
||||
failureThreshold: {{ .Values.notifications.readinessProbe.failureThreshold }}
|
||||
{{- end }}
|
||||
resources:
|
||||
{{- toYaml .Values.notifications.resources | nindent 12 }}
|
||||
{{- with .Values.notifications.containerSecurityContext }}
|
||||
|
|
|
|||
|
|
@ -3,7 +3,7 @@ apiVersion: monitoring.coreos.com/v1
|
|||
kind: ServiceMonitor
|
||||
metadata:
|
||||
name: {{ template "argo-cd.notifications.fullname" . }}
|
||||
namespace: {{ default .Release.Namespace .Values.notifications.metrics.serviceMonitor.namespace | quote }}
|
||||
namespace: {{ default (include "argo-cd.namespace" .) .Values.notifications.metrics.serviceMonitor.namespace | quote }}
|
||||
labels:
|
||||
{{- include "argo-cd.labels" (dict "context" . "component" .Values.notifications.name "name" .Values.notifications.name) | nindent 4 }}
|
||||
{{- with .Values.notifications.metrics.serviceMonitor.selector }}
|
||||
|
|
|
|||
|
|
@ -182,9 +182,9 @@ spec:
|
|||
valueFrom:
|
||||
secretKeyRef:
|
||||
name: {{ default "argocd-redis" .Values.externalRedis.existingSecret }}
|
||||
optional: true
|
||||
{{- if .Values.externalRedis.host }}
|
||||
key: redis-password
|
||||
optional: true
|
||||
{{- else }}
|
||||
key: auth
|
||||
{{- end }}
|
||||
|
|
@ -290,6 +290,12 @@ spec:
|
|||
key: reposerver.revision.cache.lock.timeout
|
||||
name: argocd-cmd-params-cm
|
||||
optional: true
|
||||
- name: ARGOCD_REPO_SERVER_INCLUDE_HIDDEN_DIRECTORIES
|
||||
valueFrom:
|
||||
configMapKeyRef:
|
||||
key: reposerver.include.hidden.directories
|
||||
name: argocd-cmd-params-cm
|
||||
optional: true
|
||||
{{- if .Values.repoServer.useEphemeralHelmWorkingDir }}
|
||||
- name: HELM_CACHE_HOME
|
||||
value: /helm-working-dir
|
||||
|
|
|
|||
|
|
@ -3,7 +3,7 @@ apiVersion: monitoring.coreos.com/v1
|
|||
kind: ServiceMonitor
|
||||
metadata:
|
||||
name: {{ template "argo-cd.repoServer.fullname" . }}
|
||||
namespace: {{ default .Release.Namespace .Values.repoServer.metrics.serviceMonitor.namespace | default }}
|
||||
namespace: {{ default (include "argo-cd.namespace" .) .Values.repoServer.metrics.serviceMonitor.namespace | quote }}
|
||||
labels:
|
||||
{{- include "argo-cd.labels" (dict "context" . "component" .Values.repoServer.name "name" .Values.repoServer.name) | nindent 4 }}
|
||||
{{- with .Values.repoServer.metrics.serviceMonitor.selector }}
|
||||
|
|
|
|||
|
|
@ -13,13 +13,13 @@ metadata:
|
|||
labels:
|
||||
{{- include "argo-cd.labels" (dict "context" . "component" .Values.server.name "name" .Values.server.name) | nindent 4 }}
|
||||
spec:
|
||||
{{- with .Values.server.certificate.secretTemplateAnnotations }}
|
||||
secretTemplate:
|
||||
{{- with .Values.server.certificate.secretTemplateAnnotations }}
|
||||
annotations:
|
||||
{{- range $key, $value := . }}
|
||||
{{ $key }}: {{ $value | quote }}
|
||||
{{- end }}
|
||||
{{- end }}
|
||||
{{- end }}
|
||||
secretName: argocd-server-tls
|
||||
commonName: {{ .Values.server.certificate.domain | default .Values.global.domain }}
|
||||
dnsNames:
|
||||
|
|
|
|||
|
|
@ -250,9 +250,9 @@ spec:
|
|||
valueFrom:
|
||||
secretKeyRef:
|
||||
name: {{ default "argocd-redis" .Values.externalRedis.existingSecret }}
|
||||
optional: true
|
||||
{{- if .Values.externalRedis.host }}
|
||||
key: redis-password
|
||||
optional: true
|
||||
{{- else }}
|
||||
key: auth
|
||||
{{- end }}
|
||||
|
|
|
|||
|
|
@ -3,7 +3,7 @@ apiVersion: monitoring.coreos.com/v1
|
|||
kind: ServiceMonitor
|
||||
metadata:
|
||||
name: {{ template "argo-cd.server.fullname" . }}
|
||||
namespace: {{ default .Release.Namespace .Values.server.metrics.serviceMonitor.namespace | quote }}
|
||||
namespace: {{ default (include "argo-cd.namespace" .) .Values.server.metrics.serviceMonitor.namespace | quote }}
|
||||
labels:
|
||||
{{- include "argo-cd.labels" (dict "context" . "component" .Values.server.name "name" .Values.server.name) | nindent 4 }}
|
||||
{{- with .Values.server.metrics.serviceMonitor.selector }}
|
||||
|
|
|
|||
|
|
@ -39,20 +39,29 @@ spec:
|
|||
name: Revision
|
||||
priority: 10
|
||||
type: string
|
||||
- jsonPath: .spec.project
|
||||
name: Project
|
||||
priority: 10
|
||||
type: string
|
||||
name: v1alpha1
|
||||
schema:
|
||||
openAPIV3Schema:
|
||||
description: Application is a definition of Application resource.
|
||||
properties:
|
||||
apiVersion:
|
||||
description: 'APIVersion defines the versioned schema of this representation
|
||||
of an object. Servers should convert recognized schemas to the latest
|
||||
internal value, and may reject unrecognized values. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#resources'
|
||||
description: |-
|
||||
APIVersion defines the versioned schema of this representation of an object.
|
||||
Servers should convert recognized schemas to the latest internal value, and
|
||||
may reject unrecognized values.
|
||||
More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#resources
|
||||
type: string
|
||||
kind:
|
||||
description: 'Kind is a string value representing the REST resource this
|
||||
object represents. Servers may infer this from the endpoint the client
|
||||
submits requests to. Cannot be updated. In CamelCase. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#types-kinds'
|
||||
description: |-
|
||||
Kind is a string value representing the REST resource this object represents.
|
||||
Servers may infer this from the endpoint the client submits requests to.
|
||||
Cannot be updated.
|
||||
In CamelCase.
|
||||
More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#types-kinds
|
||||
type: string
|
||||
metadata:
|
||||
type: object
|
||||
|
|
@ -150,22 +159,21 @@ spec:
|
|||
type: object
|
||||
type: array
|
||||
revision:
|
||||
description: Revision is the revision (Git) or chart version (Helm)
|
||||
which to sync the application to If omitted, will use the revision
|
||||
specified in app spec.
|
||||
description: |-
|
||||
Revision is the revision (Git) or chart version (Helm) which to sync the application to
|
||||
If omitted, will use the revision specified in app spec.
|
||||
type: string
|
||||
revisions:
|
||||
description: Revisions is the list of revision (Git) or chart
|
||||
version (Helm) which to sync each source in sources field for
|
||||
the application to If omitted, will use the revision specified
|
||||
in app spec.
|
||||
description: |-
|
||||
Revisions is the list of revision (Git) or chart version (Helm) which to sync each source in sources field for the application to
|
||||
If omitted, will use the revision specified in app spec.
|
||||
items:
|
||||
type: string
|
||||
type: array
|
||||
source:
|
||||
description: Source overrides the source definition set in the
|
||||
application. This is typically set in a Rollback operation and
|
||||
is nil during a Sync operation
|
||||
description: |-
|
||||
Source overrides the source definition set in the application.
|
||||
This is typically set in a Rollback operation and is nil during a Sync operation
|
||||
properties:
|
||||
chart:
|
||||
description: Chart is a Helm chart name, and must be specified
|
||||
|
|
@ -486,18 +494,18 @@ spec:
|
|||
Helm) that contains the application manifests
|
||||
type: string
|
||||
targetRevision:
|
||||
description: TargetRevision defines the revision of the source
|
||||
to sync the application to. In case of Git, this can be
|
||||
commit, tag, or branch. If omitted, will equal to HEAD.
|
||||
description: |-
|
||||
TargetRevision defines the revision of the source to sync the application to.
|
||||
In case of Git, this can be commit, tag, or branch. If omitted, will equal to HEAD.
|
||||
In case of Helm, this is a semver tag for the Chart's version.
|
||||
type: string
|
||||
required:
|
||||
- repoURL
|
||||
type: object
|
||||
sources:
|
||||
description: Sources overrides the source definition set in the
|
||||
application. This is typically set in a Rollback operation and
|
||||
is nil during a Sync operation
|
||||
description: |-
|
||||
Sources overrides the source definition set in the application.
|
||||
This is typically set in a Rollback operation and is nil during a Sync operation
|
||||
items:
|
||||
description: ApplicationSource contains all required information
|
||||
about the source of an application
|
||||
|
|
@ -825,11 +833,10 @@ spec:
|
|||
Helm) that contains the application manifests
|
||||
type: string
|
||||
targetRevision:
|
||||
description: TargetRevision defines the revision of the
|
||||
source to sync the application to. In case of Git, this
|
||||
can be commit, tag, or branch. If omitted, will equal
|
||||
to HEAD. In case of Helm, this is a semver tag for the
|
||||
Chart's version.
|
||||
description: |-
|
||||
TargetRevision defines the revision of the source to sync the application to.
|
||||
In case of Git, this can be commit, tag, or branch. If omitted, will equal to HEAD.
|
||||
In case of Helm, this is a semver tag for the Chart's version.
|
||||
type: string
|
||||
required:
|
||||
- repoURL
|
||||
|
|
@ -848,10 +855,10 @@ spec:
|
|||
the sync.
|
||||
properties:
|
||||
force:
|
||||
description: Force indicates whether or not to supply
|
||||
the --force flag to `kubectl apply`. The --force flag
|
||||
deletes and re-create the resource, when PATCH encounters
|
||||
conflict and has retried for 5 times.
|
||||
description: |-
|
||||
Force indicates whether or not to supply the --force flag to `kubectl apply`.
|
||||
The --force flag deletes and re-create the resource, when PATCH encounters conflict and has
|
||||
retried for 5 times.
|
||||
type: boolean
|
||||
type: object
|
||||
hook:
|
||||
|
|
@ -859,10 +866,10 @@ spec:
|
|||
perform the sync. This is the default strategy
|
||||
properties:
|
||||
force:
|
||||
description: Force indicates whether or not to supply
|
||||
the --force flag to `kubectl apply`. The --force flag
|
||||
deletes and re-create the resource, when PATCH encounters
|
||||
conflict and has retried for 5 times.
|
||||
description: |-
|
||||
Force indicates whether or not to supply the --force flag to `kubectl apply`.
|
||||
The --force flag deletes and re-create the resource, when PATCH encounters conflict and has
|
||||
retried for 5 times.
|
||||
type: boolean
|
||||
type: object
|
||||
type: object
|
||||
|
|
@ -883,9 +890,9 @@ spec:
|
|||
not set.
|
||||
type: string
|
||||
namespace:
|
||||
description: Namespace specifies the target namespace for the
|
||||
application's resources. The namespace will only be set for
|
||||
namespace-scoped resources that have not set a value for .metadata.namespace
|
||||
description: |-
|
||||
Namespace specifies the target namespace for the application's resources.
|
||||
The namespace will only be set for namespace-scoped resources that have not set a value for .metadata.namespace
|
||||
type: string
|
||||
server:
|
||||
description: Server specifies the URL of the target cluster's
|
||||
|
|
@ -914,10 +921,9 @@ spec:
|
|||
kind:
|
||||
type: string
|
||||
managedFieldsManagers:
|
||||
description: ManagedFieldsManagers is a list of trusted managers.
|
||||
Fields mutated by those managers will take precedence over
|
||||
the desired state defined in the SCM and won't be displayed
|
||||
in diffs
|
||||
description: |-
|
||||
ManagedFieldsManagers is a list of trusted managers. Fields mutated by those managers will take precedence over the
|
||||
desired state defined in the SCM and won't be displayed in diffs
|
||||
items:
|
||||
type: string
|
||||
type: array
|
||||
|
|
@ -944,18 +950,17 @@ spec:
|
|||
type: object
|
||||
type: array
|
||||
project:
|
||||
description: Project is a reference to the project this application
|
||||
belongs to. The empty string means that application belongs to the
|
||||
'default' project.
|
||||
description: |-
|
||||
Project is a reference to the project this application belongs to.
|
||||
The empty string means that application belongs to the 'default' project.
|
||||
type: string
|
||||
revisionHistoryLimit:
|
||||
description: RevisionHistoryLimit limits the number of items kept
|
||||
in the application's revision history, which is used for informational
|
||||
purposes as well as for rollbacks to previous versions. This should
|
||||
only be changed in exceptional circumstances. Setting to zero will
|
||||
store no history. This will reduce storage used. Increasing will
|
||||
increase the space used to store the history, so we do not recommend
|
||||
increasing it. Default is 10.
|
||||
description: |-
|
||||
RevisionHistoryLimit limits the number of items kept in the application's revision history, which is used for informational purposes as well as for rollbacks to previous versions.
|
||||
This should only be changed in exceptional circumstances.
|
||||
Setting to zero will store no history. This will reduce storage used.
|
||||
Increasing will increase the space used to store the history, so we do not recommend increasing it.
|
||||
Default is 10.
|
||||
format: int64
|
||||
type: integer
|
||||
source:
|
||||
|
|
@ -1274,10 +1279,10 @@ spec:
|
|||
that contains the application manifests
|
||||
type: string
|
||||
targetRevision:
|
||||
description: TargetRevision defines the revision of the source
|
||||
to sync the application to. In case of Git, this can be commit,
|
||||
tag, or branch. If omitted, will equal to HEAD. In case of Helm,
|
||||
this is a semver tag for the Chart's version.
|
||||
description: |-
|
||||
TargetRevision defines the revision of the source to sync the application to.
|
||||
In case of Git, this can be commit, tag, or branch. If omitted, will equal to HEAD.
|
||||
In case of Helm, this is a semver tag for the Chart's version.
|
||||
type: string
|
||||
required:
|
||||
- repoURL
|
||||
|
|
@ -1606,10 +1611,10 @@ spec:
|
|||
that contains the application manifests
|
||||
type: string
|
||||
targetRevision:
|
||||
description: TargetRevision defines the revision of the source
|
||||
to sync the application to. In case of Git, this can be commit,
|
||||
tag, or branch. If omitted, will equal to HEAD. In case of
|
||||
Helm, this is a semver tag for the Chart's version.
|
||||
description: |-
|
||||
TargetRevision defines the revision of the source to sync the application to.
|
||||
In case of Git, this can be commit, tag, or branch. If omitted, will equal to HEAD.
|
||||
In case of Helm, this is a semver tag for the Chart's version.
|
||||
type: string
|
||||
required:
|
||||
- repoURL
|
||||
|
|
@ -2102,11 +2107,10 @@ spec:
|
|||
Helm) that contains the application manifests
|
||||
type: string
|
||||
targetRevision:
|
||||
description: TargetRevision defines the revision of the
|
||||
source to sync the application to. In case of Git, this
|
||||
can be commit, tag, or branch. If omitted, will equal
|
||||
to HEAD. In case of Helm, this is a semver tag for the
|
||||
Chart's version.
|
||||
description: |-
|
||||
TargetRevision defines the revision of the source to sync the application to.
|
||||
In case of Git, this can be commit, tag, or branch. If omitted, will equal to HEAD.
|
||||
In case of Helm, this is a semver tag for the Chart's version.
|
||||
type: string
|
||||
required:
|
||||
- repoURL
|
||||
|
|
@ -2448,11 +2452,10 @@ spec:
|
|||
or Helm) that contains the application manifests
|
||||
type: string
|
||||
targetRevision:
|
||||
description: TargetRevision defines the revision of the
|
||||
source to sync the application to. In case of Git, this
|
||||
can be commit, tag, or branch. If omitted, will equal
|
||||
to HEAD. In case of Helm, this is a semver tag for the
|
||||
Chart's version.
|
||||
description: |-
|
||||
TargetRevision defines the revision of the source to sync the application to.
|
||||
In case of Git, this can be commit, tag, or branch. If omitted, will equal to HEAD.
|
||||
In case of Helm, this is a semver tag for the Chart's version.
|
||||
type: string
|
||||
required:
|
||||
- repoURL
|
||||
|
|
@ -2464,9 +2467,9 @@ spec:
|
|||
type: object
|
||||
type: array
|
||||
observedAt:
|
||||
description: 'ObservedAt indicates when the application state was
|
||||
updated without querying latest git state Deprecated: controller
|
||||
no longer updates ObservedAt field'
|
||||
description: |-
|
||||
ObservedAt indicates when the application state was updated without querying latest git state
|
||||
Deprecated: controller no longer updates ObservedAt field
|
||||
format: date-time
|
||||
type: string
|
||||
operationState:
|
||||
|
|
@ -2579,22 +2582,21 @@ spec:
|
|||
type: object
|
||||
type: array
|
||||
revision:
|
||||
description: Revision is the revision (Git) or chart version
|
||||
(Helm) which to sync the application to If omitted,
|
||||
will use the revision specified in app spec.
|
||||
description: |-
|
||||
Revision is the revision (Git) or chart version (Helm) which to sync the application to
|
||||
If omitted, will use the revision specified in app spec.
|
||||
type: string
|
||||
revisions:
|
||||
description: Revisions is the list of revision (Git) or
|
||||
chart version (Helm) which to sync each source in sources
|
||||
field for the application to If omitted, will use the
|
||||
revision specified in app spec.
|
||||
description: |-
|
||||
Revisions is the list of revision (Git) or chart version (Helm) which to sync each source in sources field for the application to
|
||||
If omitted, will use the revision specified in app spec.
|
||||
items:
|
||||
type: string
|
||||
type: array
|
||||
source:
|
||||
description: Source overrides the source definition set
|
||||
in the application. This is typically set in a Rollback
|
||||
operation and is nil during a Sync operation
|
||||
description: |-
|
||||
Source overrides the source definition set in the application.
|
||||
This is typically set in a Rollback operation and is nil during a Sync operation
|
||||
properties:
|
||||
chart:
|
||||
description: Chart is a Helm chart name, and must
|
||||
|
|
@ -2937,19 +2939,18 @@ spec:
|
|||
(Git or Helm) that contains the application manifests
|
||||
type: string
|
||||
targetRevision:
|
||||
description: TargetRevision defines the revision of
|
||||
the source to sync the application to. In case of
|
||||
Git, this can be commit, tag, or branch. If omitted,
|
||||
will equal to HEAD. In case of Helm, this is a semver
|
||||
tag for the Chart's version.
|
||||
description: |-
|
||||
TargetRevision defines the revision of the source to sync the application to.
|
||||
In case of Git, this can be commit, tag, or branch. If omitted, will equal to HEAD.
|
||||
In case of Helm, this is a semver tag for the Chart's version.
|
||||
type: string
|
||||
required:
|
||||
- repoURL
|
||||
type: object
|
||||
sources:
|
||||
description: Sources overrides the source definition set
|
||||
in the application. This is typically set in a Rollback
|
||||
operation and is nil during a Sync operation
|
||||
description: |-
|
||||
Sources overrides the source definition set in the application.
|
||||
This is typically set in a Rollback operation and is nil during a Sync operation
|
||||
items:
|
||||
description: ApplicationSource contains all required
|
||||
information about the source of an application
|
||||
|
|
@ -3300,11 +3301,10 @@ spec:
|
|||
(Git or Helm) that contains the application manifests
|
||||
type: string
|
||||
targetRevision:
|
||||
description: TargetRevision defines the revision
|
||||
of the source to sync the application to. In case
|
||||
of Git, this can be commit, tag, or branch. If
|
||||
omitted, will equal to HEAD. In case of Helm,
|
||||
this is a semver tag for the Chart's version.
|
||||
description: |-
|
||||
TargetRevision defines the revision of the source to sync the application to.
|
||||
In case of Git, this can be commit, tag, or branch. If omitted, will equal to HEAD.
|
||||
In case of Helm, this is a semver tag for the Chart's version.
|
||||
type: string
|
||||
required:
|
||||
- repoURL
|
||||
|
|
@ -3325,11 +3325,10 @@ spec:
|
|||
to perform the sync.
|
||||
properties:
|
||||
force:
|
||||
description: Force indicates whether or not to
|
||||
supply the --force flag to `kubectl apply`.
|
||||
The --force flag deletes and re-create the resource,
|
||||
when PATCH encounters conflict and has retried
|
||||
for 5 times.
|
||||
description: |-
|
||||
Force indicates whether or not to supply the --force flag to `kubectl apply`.
|
||||
The --force flag deletes and re-create the resource, when PATCH encounters conflict and has
|
||||
retried for 5 times.
|
||||
type: boolean
|
||||
type: object
|
||||
hook:
|
||||
|
|
@ -3337,11 +3336,10 @@ spec:
|
|||
to perform the sync. This is the default strategy
|
||||
properties:
|
||||
force:
|
||||
description: Force indicates whether or not to
|
||||
supply the --force flag to `kubectl apply`.
|
||||
The --force flag deletes and re-create the resource,
|
||||
when PATCH encounters conflict and has retried
|
||||
for 5 times.
|
||||
description: |-
|
||||
Force indicates whether or not to supply the --force flag to `kubectl apply`.
|
||||
The --force flag deletes and re-create the resource, when PATCH encounters conflict and has
|
||||
retried for 5 times.
|
||||
type: boolean
|
||||
type: object
|
||||
type: object
|
||||
|
|
@ -3385,9 +3383,9 @@ spec:
|
|||
description: Group specifies the API group of the resource
|
||||
type: string
|
||||
hookPhase:
|
||||
description: HookPhase contains the state of any operation
|
||||
associated with this resource OR hook This can also
|
||||
contain values for non-hook resources.
|
||||
description: |-
|
||||
HookPhase contains the state of any operation associated with this resource OR hook
|
||||
This can also contain values for non-hook resources.
|
||||
type: string
|
||||
hookType:
|
||||
description: HookType specifies the type of the hook.
|
||||
|
|
@ -3772,11 +3770,10 @@ spec:
|
|||
or Helm) that contains the application manifests
|
||||
type: string
|
||||
targetRevision:
|
||||
description: TargetRevision defines the revision of the
|
||||
source to sync the application to. In case of Git, this
|
||||
can be commit, tag, or branch. If omitted, will equal
|
||||
to HEAD. In case of Helm, this is a semver tag for the
|
||||
Chart's version.
|
||||
description: |-
|
||||
TargetRevision defines the revision of the source to sync the application to.
|
||||
In case of Git, this can be commit, tag, or branch. If omitted, will equal to HEAD.
|
||||
In case of Helm, this is a semver tag for the Chart's version.
|
||||
type: string
|
||||
required:
|
||||
- repoURL
|
||||
|
|
@ -4127,11 +4124,10 @@ spec:
|
|||
or Helm) that contains the application manifests
|
||||
type: string
|
||||
targetRevision:
|
||||
description: TargetRevision defines the revision of
|
||||
the source to sync the application to. In case of
|
||||
Git, this can be commit, tag, or branch. If omitted,
|
||||
will equal to HEAD. In case of Helm, this is a semver
|
||||
tag for the Chart's version.
|
||||
description: |-
|
||||
TargetRevision defines the revision of the source to sync the application to.
|
||||
In case of Git, this can be commit, tag, or branch. If omitted, will equal to HEAD.
|
||||
In case of Helm, this is a semver tag for the Chart's version.
|
||||
type: string
|
||||
required:
|
||||
- repoURL
|
||||
|
|
@ -4158,8 +4154,9 @@ spec:
|
|||
description: Resources is a list of Kubernetes resources managed by
|
||||
this application
|
||||
items:
|
||||
description: 'ResourceStatus holds the current sync and health status
|
||||
of a resource TODO: describe members of this type'
|
||||
description: |-
|
||||
ResourceStatus holds the current sync and health status of a resource
|
||||
TODO: describe members of this type
|
||||
properties:
|
||||
group:
|
||||
type: string
|
||||
|
|
@ -4242,10 +4239,9 @@ spec:
|
|||
if Server is not set.
|
||||
type: string
|
||||
namespace:
|
||||
description: Namespace specifies the target namespace
|
||||
for the application's resources. The namespace will
|
||||
only be set for namespace-scoped resources that have
|
||||
not set a value for .metadata.namespace
|
||||
description: |-
|
||||
Namespace specifies the target namespace for the application's resources.
|
||||
The namespace will only be set for namespace-scoped resources that have not set a value for .metadata.namespace
|
||||
type: string
|
||||
server:
|
||||
description: Server specifies the URL of the target cluster's
|
||||
|
|
@ -4274,10 +4270,9 @@ spec:
|
|||
kind:
|
||||
type: string
|
||||
managedFieldsManagers:
|
||||
description: ManagedFieldsManagers is a list of trusted
|
||||
managers. Fields mutated by those managers will take
|
||||
precedence over the desired state defined in the SCM
|
||||
and won't be displayed in diffs
|
||||
description: |-
|
||||
ManagedFieldsManagers is a list of trusted managers. Fields mutated by those managers will take precedence over the
|
||||
desired state defined in the SCM and won't be displayed in diffs
|
||||
items:
|
||||
type: string
|
||||
type: array
|
||||
|
|
@ -4623,11 +4618,10 @@ spec:
|
|||
or Helm) that contains the application manifests
|
||||
type: string
|
||||
targetRevision:
|
||||
description: TargetRevision defines the revision of the
|
||||
source to sync the application to. In case of Git, this
|
||||
can be commit, tag, or branch. If omitted, will equal
|
||||
to HEAD. In case of Helm, this is a semver tag for the
|
||||
Chart's version.
|
||||
description: |-
|
||||
TargetRevision defines the revision of the source to sync the application to.
|
||||
In case of Git, this can be commit, tag, or branch. If omitted, will equal to HEAD.
|
||||
In case of Helm, this is a semver tag for the Chart's version.
|
||||
type: string
|
||||
required:
|
||||
- repoURL
|
||||
|
|
@ -4978,11 +4972,10 @@ spec:
|
|||
or Helm) that contains the application manifests
|
||||
type: string
|
||||
targetRevision:
|
||||
description: TargetRevision defines the revision of
|
||||
the source to sync the application to. In case of
|
||||
Git, this can be commit, tag, or branch. If omitted,
|
||||
will equal to HEAD. In case of Helm, this is a semver
|
||||
tag for the Chart's version.
|
||||
description: |-
|
||||
TargetRevision defines the revision of the source to sync the application to.
|
||||
In case of Git, this can be commit, tag, or branch. If omitted, will equal to HEAD.
|
||||
In case of Helm, this is a semver tag for the Chart's version.
|
||||
type: string
|
||||
required:
|
||||
- repoURL
|
||||
|
|
|
|||
|
|
@ -72,6 +72,7 @@ spec:
|
|||
type: string
|
||||
type: object
|
||||
type: object
|
||||
x-kubernetes-map-type: atomic
|
||||
name:
|
||||
type: string
|
||||
requeueAfterSeconds:
|
||||
|
|
@ -668,6 +669,7 @@ spec:
|
|||
type: string
|
||||
type: object
|
||||
type: object
|
||||
x-kubernetes-map-type: atomic
|
||||
template:
|
||||
properties:
|
||||
metadata:
|
||||
|
|
@ -2430,6 +2432,7 @@ spec:
|
|||
type: string
|
||||
type: object
|
||||
type: object
|
||||
x-kubernetes-map-type: atomic
|
||||
name:
|
||||
type: string
|
||||
requeueAfterSeconds:
|
||||
|
|
@ -3026,6 +3029,7 @@ spec:
|
|||
type: string
|
||||
type: object
|
||||
type: object
|
||||
x-kubernetes-map-type: atomic
|
||||
template:
|
||||
properties:
|
||||
metadata:
|
||||
|
|
@ -6891,6 +6895,7 @@ spec:
|
|||
type: string
|
||||
type: object
|
||||
type: object
|
||||
x-kubernetes-map-type: atomic
|
||||
type: object
|
||||
type: array
|
||||
template:
|
||||
|
|
@ -7487,6 +7492,7 @@ spec:
|
|||
type: string
|
||||
type: object
|
||||
type: object
|
||||
x-kubernetes-map-type: atomic
|
||||
name:
|
||||
type: string
|
||||
requeueAfterSeconds:
|
||||
|
|
@ -8083,6 +8089,7 @@ spec:
|
|||
type: string
|
||||
type: object
|
||||
type: object
|
||||
x-kubernetes-map-type: atomic
|
||||
template:
|
||||
properties:
|
||||
metadata:
|
||||
|
|
@ -11948,6 +11955,7 @@ spec:
|
|||
type: string
|
||||
type: object
|
||||
type: object
|
||||
x-kubernetes-map-type: atomic
|
||||
type: object
|
||||
type: array
|
||||
mergeKeys:
|
||||
|
|
@ -14648,6 +14656,7 @@ spec:
|
|||
type: string
|
||||
type: object
|
||||
type: object
|
||||
x-kubernetes-map-type: atomic
|
||||
type: object
|
||||
type: array
|
||||
goTemplate:
|
||||
|
|
@ -15306,11 +15315,16 @@ spec:
|
|||
type: string
|
||||
step:
|
||||
type: string
|
||||
targetRevisions:
|
||||
items:
|
||||
type: string
|
||||
type: array
|
||||
required:
|
||||
- application
|
||||
- message
|
||||
- status
|
||||
- step
|
||||
- targetRevisions
|
||||
type: object
|
||||
type: array
|
||||
conditions:
|
||||
|
|
@ -15334,6 +15348,37 @@ spec:
|
|||
- type
|
||||
type: object
|
||||
type: array
|
||||
resources:
|
||||
items:
|
||||
properties:
|
||||
group:
|
||||
type: string
|
||||
health:
|
||||
properties:
|
||||
message:
|
||||
type: string
|
||||
status:
|
||||
type: string
|
||||
type: object
|
||||
hook:
|
||||
type: boolean
|
||||
kind:
|
||||
type: string
|
||||
name:
|
||||
type: string
|
||||
namespace:
|
||||
type: string
|
||||
requiresPruning:
|
||||
type: boolean
|
||||
status:
|
||||
type: string
|
||||
syncWave:
|
||||
format: int64
|
||||
type: integer
|
||||
version:
|
||||
type: string
|
||||
type: object
|
||||
type: array
|
||||
type: object
|
||||
required:
|
||||
- metadata
|
||||
|
|
|
|||
|
|
@ -31,22 +31,28 @@ spec:
|
|||
- name: v1alpha1
|
||||
schema:
|
||||
openAPIV3Schema:
|
||||
description: 'AppProject provides a logical grouping of applications, providing
|
||||
controls for: * where the apps may deploy to (cluster whitelist) * what
|
||||
may be deployed (repository whitelist, resource whitelist/blacklist) * who
|
||||
can access these applications (roles, OIDC group claims bindings) * and
|
||||
what they can do (RBAC policies) * automation access to these roles (JWT
|
||||
tokens)'
|
||||
description: |-
|
||||
AppProject provides a logical grouping of applications, providing controls for:
|
||||
* where the apps may deploy to (cluster whitelist)
|
||||
* what may be deployed (repository whitelist, resource whitelist/blacklist)
|
||||
* who can access these applications (roles, OIDC group claims bindings)
|
||||
* and what they can do (RBAC policies)
|
||||
* automation access to these roles (JWT tokens)
|
||||
properties:
|
||||
apiVersion:
|
||||
description: 'APIVersion defines the versioned schema of this representation
|
||||
of an object. Servers should convert recognized schemas to the latest
|
||||
internal value, and may reject unrecognized values. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#resources'
|
||||
description: |-
|
||||
APIVersion defines the versioned schema of this representation of an object.
|
||||
Servers should convert recognized schemas to the latest internal value, and
|
||||
may reject unrecognized values.
|
||||
More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#resources
|
||||
type: string
|
||||
kind:
|
||||
description: 'Kind is a string value representing the REST resource this
|
||||
object represents. Servers may infer this from the endpoint the client
|
||||
submits requests to. Cannot be updated. In CamelCase. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#types-kinds'
|
||||
description: |-
|
||||
Kind is a string value representing the REST resource this object represents.
|
||||
Servers may infer this from the endpoint the client submits requests to.
|
||||
Cannot be updated.
|
||||
In CamelCase.
|
||||
More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#types-kinds
|
||||
type: string
|
||||
metadata:
|
||||
type: object
|
||||
|
|
@ -57,9 +63,9 @@ spec:
|
|||
description: ClusterResourceBlacklist contains list of blacklisted
|
||||
cluster level resources
|
||||
items:
|
||||
description: GroupKind specifies a Group and a Kind, but does not
|
||||
force a version. This is useful for identifying concepts during
|
||||
lookup stages without having partially valid types
|
||||
description: |-
|
||||
GroupKind specifies a Group and a Kind, but does not force a version. This is useful for identifying
|
||||
concepts during lookup stages without having partially valid types
|
||||
properties:
|
||||
group:
|
||||
type: string
|
||||
|
|
@ -74,9 +80,9 @@ spec:
|
|||
description: ClusterResourceWhitelist contains list of whitelisted
|
||||
cluster level resources
|
||||
items:
|
||||
description: GroupKind specifies a Group and a Kind, but does not
|
||||
force a version. This is useful for identifying concepts during
|
||||
lookup stages without having partially valid types
|
||||
description: |-
|
||||
GroupKind specifies a Group and a Kind, but does not force a version. This is useful for identifying
|
||||
concepts during lookup stages without having partially valid types
|
||||
properties:
|
||||
group:
|
||||
type: string
|
||||
|
|
@ -103,9 +109,9 @@ spec:
|
|||
not set.
|
||||
type: string
|
||||
namespace:
|
||||
description: Namespace specifies the target namespace for the
|
||||
application's resources. The namespace will only be set for
|
||||
namespace-scoped resources that have not set a value for .metadata.namespace
|
||||
description: |-
|
||||
Namespace specifies the target namespace for the application's resources.
|
||||
The namespace will only be set for namespace-scoped resources that have not set a value for .metadata.namespace
|
||||
type: string
|
||||
server:
|
||||
description: Server specifies the URL of the target cluster's
|
||||
|
|
@ -118,9 +124,9 @@ spec:
|
|||
description: NamespaceResourceBlacklist contains list of blacklisted
|
||||
namespace level resources
|
||||
items:
|
||||
description: GroupKind specifies a Group and a Kind, but does not
|
||||
force a version. This is useful for identifying concepts during
|
||||
lookup stages without having partially valid types
|
||||
description: |-
|
||||
GroupKind specifies a Group and a Kind, but does not force a version. This is useful for identifying
|
||||
concepts during lookup stages without having partially valid types
|
||||
properties:
|
||||
group:
|
||||
type: string
|
||||
|
|
@ -135,9 +141,9 @@ spec:
|
|||
description: NamespaceResourceWhitelist contains list of whitelisted
|
||||
namespace level resources
|
||||
items:
|
||||
description: GroupKind specifies a Group and a Kind, but does not
|
||||
force a version. This is useful for identifying concepts during
|
||||
lookup stages without having partially valid types
|
||||
description: |-
|
||||
GroupKind specifies a Group and a Kind, but does not force a version. This is useful for identifying
|
||||
concepts during lookup stages without having partially valid types
|
||||
properties:
|
||||
group:
|
||||
type: string
|
||||
|
|
|
|||
|
|
@ -3,7 +3,7 @@ apiVersion: monitoring.coreos.com/v1
|
|||
kind: ServiceMonitor
|
||||
metadata:
|
||||
name: {{ template "argo-cd.dex.fullname" . }}
|
||||
namespace: {{ default .Release.Namespace .Values.dex.metrics.serviceMonitor.namespace | quote }}
|
||||
namespace: {{ default (include "argo-cd.namespace" .) .Values.dex.metrics.serviceMonitor.namespace | quote }}
|
||||
labels:
|
||||
{{- include "argo-cd.labels" (dict "context" . "component" .Values.dex.name "name" .Values.dex.name) | nindent 4 }}
|
||||
{{- with .Values.dex.metrics.serviceMonitor.selector }}
|
||||
|
|
|
|||
|
|
@ -3,7 +3,7 @@ apiVersion: batch/v1
|
|||
kind: Job
|
||||
metadata:
|
||||
name: {{ include "argo-cd.redisSecretInit.fullname" . }}
|
||||
namespace: {{ .Release.Namespace | quote }}
|
||||
namespace: {{ include "argo-cd.namespace" . | quote }}
|
||||
annotations:
|
||||
"helm.sh/hook": pre-install,pre-upgrade
|
||||
"helm.sh/hook-delete-policy": before-hook-creation
|
||||
|
|
@ -13,6 +13,7 @@ metadata:
|
|||
labels:
|
||||
{{- include "argo-cd.labels" (dict "context" . "component" .Values.redisSecretInit.name "name" .Values.redisSecretInit.name) | nindent 4 }}
|
||||
spec:
|
||||
ttlSecondsAfterFinished: 60
|
||||
template:
|
||||
metadata:
|
||||
labels:
|
||||
|
|
|
|||
|
|
@ -8,7 +8,7 @@ metadata:
|
|||
labels:
|
||||
{{- include "argo-cd.labels" (dict "context" . "component" .Values.redisSecretInit.name "name" .Values.redisSecretInit.name) | nindent 4 }}
|
||||
name: {{ include "argo-cd.redisSecretInit.fullname" . }}
|
||||
namespace: {{ .Release.Namespace | quote }}
|
||||
namespace: {{ include "argo-cd.namespace" . | quote }}
|
||||
rules:
|
||||
- apiGroups:
|
||||
- ""
|
||||
|
|
|
|||
|
|
@ -8,7 +8,7 @@ metadata:
|
|||
labels:
|
||||
{{- include "argo-cd.labels" (dict "context" . "component" .Values.redisSecretInit.name "name" .Values.redisSecretInit.name) | nindent 4 }}
|
||||
name: {{ include "argo-cd.redisSecretInit.fullname" . }}
|
||||
namespace: {{ .Release.Namespace | quote }}
|
||||
namespace: {{ include "argo-cd.namespace" . | quote }}
|
||||
roleRef:
|
||||
apiGroup: rbac.authorization.k8s.io
|
||||
kind: Role
|
||||
|
|
|
|||
|
|
@ -1,10 +1,10 @@
|
|||
{{- if and .Values.redisSecretInit.enabled (not .Values.externalRedis.host) }}
|
||||
{{- if and .Values.redisSecretInit.enabled .Values.redisSecretInit.serviceAccount.create (not .Values.externalRedis.host) }}
|
||||
apiVersion: v1
|
||||
kind: ServiceAccount
|
||||
automountServiceAccountToken: {{ .Values.redisSecretInit.serviceAccount.automountServiceAccountToken }}
|
||||
metadata:
|
||||
name: {{ include "argo-cd.redisSecretInit.serviceAccountName" . }}
|
||||
namespace: {{ .Release.Namespace | quote }}
|
||||
namespace: {{ include "argo-cd.namespace" . | quote }}
|
||||
annotations:
|
||||
"helm.sh/hook": pre-install,pre-upgrade
|
||||
"helm.sh/hook-delete-policy": before-hook-creation
|
||||
|
|
|
|||
|
|
@ -4,7 +4,7 @@ apiVersion: monitoring.coreos.com/v1
|
|||
kind: ServiceMonitor
|
||||
metadata:
|
||||
name: {{ template "argo-cd.redis.fullname" . }}
|
||||
namespace: {{ default .Release.Namespace .Values.redis.metrics.serviceMonitor.namespace | quote }}
|
||||
namespace: {{ default (include "argo-cd.namespace" .) .Values.redis.metrics.serviceMonitor.namespace | quote }}
|
||||
labels:
|
||||
{{- include "argo-cd.labels" (dict "context" . "component" .Values.redis.name "name" .Values.redis.name) | nindent 4 }}
|
||||
{{- with .Values.redis.metrics.serviceMonitor.selector }}
|
||||
|
|
|
|||
|
|
@ -3356,6 +3356,36 @@ notifications:
|
|||
drop:
|
||||
- ALL
|
||||
|
||||
## Probes for notifications controller Pods (optional)
|
||||
## Ref: https://kubernetes.io/docs/tasks/configure-pod-container/configure-liveness-readiness-probes/
|
||||
readinessProbe:
|
||||
# -- Enable Kubernetes liveness probe for notifications controller Pods
|
||||
enabled: false
|
||||
# -- Number of seconds after the container has started before [probe] is initiated
|
||||
initialDelaySeconds: 10
|
||||
# -- How often (in seconds) to perform the [probe]
|
||||
periodSeconds: 10
|
||||
# -- Number of seconds after which the [probe] times out
|
||||
timeoutSeconds: 1
|
||||
# -- Minimum consecutive successes for the [probe] to be considered successful after having failed
|
||||
successThreshold: 1
|
||||
# -- Minimum consecutive failures for the [probe] to be considered failed after having succeeded
|
||||
failureThreshold: 3
|
||||
|
||||
livenessProbe:
|
||||
# -- Enable Kubernetes liveness probe for notifications controller Pods
|
||||
enabled: false
|
||||
# -- Number of seconds after the container has started before [probe] is initiated
|
||||
initialDelaySeconds: 10
|
||||
# -- How often (in seconds) to perform the [probe]
|
||||
periodSeconds: 10
|
||||
# -- Number of seconds after which the [probe] times out
|
||||
timeoutSeconds: 1
|
||||
# -- Minimum consecutive successes for the [probe] to be considered successful after having failed
|
||||
successThreshold: 1
|
||||
# -- Minimum consecutive failures for the [probe] to be considered failed after having succeeded
|
||||
failureThreshold: 3
|
||||
|
||||
# -- terminationGracePeriodSeconds for container lifecycle hook
|
||||
terminationGracePeriodSeconds: 30
|
||||
|
||||
|
|
|
|||
|
|
@ -1,8 +1,8 @@
|
|||
apiVersion: v2
|
||||
appVersion: v1.7.1
|
||||
appVersion: v1.7.2
|
||||
description: A Helm chart for Argo Rollouts
|
||||
name: argo-rollouts
|
||||
version: 2.37.2
|
||||
version: 2.37.6
|
||||
home: https://github.com/argoproj/argo-helm
|
||||
icon: https://argoproj.github.io/argo-rollouts/assets/logo.png
|
||||
keywords:
|
||||
|
|
@ -18,5 +18,5 @@ annotations:
|
|||
fingerprint: 2B8F22F57260EFA67BE1C5824B11F800CD9D2252
|
||||
url: https://argoproj.github.io/argo-helm/pgp_keys.asc
|
||||
artifacthub.io/changes: |
|
||||
- kind: added
|
||||
description: Added traefik.io apiGroup to Role and ClusterRole
|
||||
- kind: changed
|
||||
description: add loadBalancerClass field for Service resources
|
||||
|
|
|
|||
|
|
@ -57,6 +57,7 @@ For full list of changes please check ArtifactHub [changelog].
|
|||
| keepCRDs | bool | `true` | Keep CRD's on helm uninstall |
|
||||
| kubeVersionOverride | string | `""` | Override the Kubernetes version, which is used to evaluate certain manifests |
|
||||
| nameOverride | string | `nil` | String to partially override "argo-rollouts.fullname" template |
|
||||
| notifications.configmap.create | bool | `true` | Whether to create notifications configmap |
|
||||
| notifications.notifiers | object | `{}` | Configures notification services |
|
||||
| notifications.secret.annotations | object | `{}` | Annotations to be added to the notifications secret |
|
||||
| notifications.secret.create | bool | `false` | Whether to create notifications secret |
|
||||
|
|
@ -181,6 +182,7 @@ For full list of changes please check ArtifactHub [changelog].
|
|||
| dashboard.service.annotations | object | `{}` | Service annotations |
|
||||
| dashboard.service.externalIPs | list | `[]` | Dashboard service external IPs |
|
||||
| dashboard.service.labels | object | `{}` | Service labels |
|
||||
| dashboard.service.loadBalancerClass | string | `""` | The class of the load balancer implementation |
|
||||
| dashboard.service.loadBalancerIP | string | `""` | LoadBalancer will get created with the IP specified in this field |
|
||||
| dashboard.service.loadBalancerSourceRanges | list | `[]` | Source IP ranges to allow access to service from |
|
||||
| dashboard.service.nodePort | int | `nil` | Service nodePort |
|
||||
|
|
|
|||
|
|
@ -109,3 +109,311 @@ Return the appropriate apiVersion for pod disruption budget
|
|||
{{- print "policy/v1" -}}
|
||||
{{- end -}}
|
||||
{{- end -}}
|
||||
|
||||
{{/*
|
||||
Return the rules for controller's Role and ClusterRole
|
||||
*/}}
|
||||
{{- define "argo-rollouts.controller.roleRules" -}}
|
||||
- apiGroups:
|
||||
- argoproj.io
|
||||
resources:
|
||||
- rollouts
|
||||
- rollouts/status
|
||||
- rollouts/finalizers
|
||||
verbs:
|
||||
- get
|
||||
- list
|
||||
- watch
|
||||
- update
|
||||
- patch
|
||||
- apiGroups:
|
||||
- argoproj.io
|
||||
resources:
|
||||
- analysisruns
|
||||
- analysisruns/finalizers
|
||||
- experiments
|
||||
- experiments/finalizers
|
||||
verbs:
|
||||
- create
|
||||
- get
|
||||
- list
|
||||
- watch
|
||||
- update
|
||||
- patch
|
||||
- delete
|
||||
- apiGroups:
|
||||
- argoproj.io
|
||||
resources:
|
||||
- analysistemplates
|
||||
- clusteranalysistemplates
|
||||
verbs:
|
||||
- get
|
||||
- list
|
||||
- watch
|
||||
# replicaset access needed for managing ReplicaSets
|
||||
- apiGroups:
|
||||
- apps
|
||||
resources:
|
||||
- replicasets
|
||||
verbs:
|
||||
- create
|
||||
- get
|
||||
- list
|
||||
- watch
|
||||
- update
|
||||
- patch
|
||||
- delete
|
||||
# deployments and podtemplates read access needed for workload reference support
|
||||
- apiGroups:
|
||||
- ""
|
||||
- apps
|
||||
resources:
|
||||
- deployments
|
||||
- podtemplates
|
||||
verbs:
|
||||
- get
|
||||
- list
|
||||
- watch
|
||||
- update
|
||||
# services patch needed to update selector of canary/stable/active/preview services
|
||||
# services create needed to create and delete services for experiments
|
||||
- apiGroups:
|
||||
- ""
|
||||
resources:
|
||||
- services
|
||||
verbs:
|
||||
- get
|
||||
- list
|
||||
- watch
|
||||
- patch
|
||||
- create
|
||||
- delete
|
||||
# leases create/get/update needed for leader election
|
||||
- apiGroups:
|
||||
- coordination.k8s.io
|
||||
resources:
|
||||
- leases
|
||||
verbs:
|
||||
- create
|
||||
- get
|
||||
- update
|
||||
# secret read access to run analysis templates which reference secrets
|
||||
- apiGroups:
|
||||
- ""
|
||||
resources:
|
||||
- secrets
|
||||
verbs:
|
||||
- get
|
||||
- list
|
||||
- watch
|
||||
- apiGroups:
|
||||
- ""
|
||||
resources:
|
||||
- configmaps
|
||||
verbs:
|
||||
- get
|
||||
- list
|
||||
- watch
|
||||
{{- if .Values.providerRBAC.providers.gatewayAPI }}
|
||||
- create
|
||||
- update
|
||||
{{- end }}
|
||||
# pod list/update needed for updating ephemeral data
|
||||
- apiGroups:
|
||||
- ""
|
||||
resources:
|
||||
- pods
|
||||
verbs:
|
||||
- list
|
||||
- update
|
||||
- watch
|
||||
# pods eviction needed for restart
|
||||
- apiGroups:
|
||||
- ""
|
||||
resources:
|
||||
- pods/eviction
|
||||
verbs:
|
||||
- create
|
||||
# event write needed for emitting events
|
||||
- apiGroups:
|
||||
- ""
|
||||
resources:
|
||||
- events
|
||||
verbs:
|
||||
- create
|
||||
- update
|
||||
- patch
|
||||
# ingress patch needed for managing ingress annotations, create needed for nginx canary
|
||||
- apiGroups:
|
||||
- networking.k8s.io
|
||||
- extensions
|
||||
resources:
|
||||
- ingresses
|
||||
verbs:
|
||||
- create
|
||||
- get
|
||||
- list
|
||||
- watch
|
||||
- update
|
||||
- patch
|
||||
# job access needed for analysis template job metrics
|
||||
- apiGroups:
|
||||
- batch
|
||||
resources:
|
||||
- jobs
|
||||
verbs:
|
||||
- create
|
||||
- get
|
||||
- list
|
||||
- watch
|
||||
- update
|
||||
- patch
|
||||
- delete
|
||||
{{- if .Values.providerRBAC.enabled }}
|
||||
{{- if .Values.providerRBAC.providers.istio }}
|
||||
# virtualservice/destinationrule access needed for using the Istio provider
|
||||
- apiGroups:
|
||||
- networking.istio.io
|
||||
resources:
|
||||
- virtualservices
|
||||
- destinationrules
|
||||
verbs:
|
||||
- watch
|
||||
- get
|
||||
- update
|
||||
- patch
|
||||
- list
|
||||
{{- end }}
|
||||
{{- if .Values.providerRBAC.providers.smi }}
|
||||
# trafficsplit access needed for using the SMI provider
|
||||
- apiGroups:
|
||||
- split.smi-spec.io
|
||||
resources:
|
||||
- trafficsplits
|
||||
verbs:
|
||||
- create
|
||||
- watch
|
||||
- get
|
||||
- update
|
||||
- patch
|
||||
{{- end }}
|
||||
{{- if .Values.providerRBAC.providers.ambassador }}
|
||||
# ambassador access needed for Ambassador provider
|
||||
- apiGroups:
|
||||
- getambassador.io
|
||||
- x.getambassador.io
|
||||
resources:
|
||||
- mappings
|
||||
- ambassadormappings
|
||||
verbs:
|
||||
- create
|
||||
- watch
|
||||
- get
|
||||
- update
|
||||
- list
|
||||
- delete
|
||||
{{- end }}
|
||||
{{- if .Values.providerRBAC.providers.awsLoadBalancerController }}
|
||||
# Endpoints and TargetGroupBindings needed for ALB target group verification when using AWS Load Balancer Controller
|
||||
- apiGroups:
|
||||
- ""
|
||||
resources:
|
||||
- endpoints
|
||||
verbs:
|
||||
- get
|
||||
- apiGroups:
|
||||
- elbv2.k8s.aws
|
||||
resources:
|
||||
- targetgroupbindings
|
||||
verbs:
|
||||
- list
|
||||
- get
|
||||
{{- end }}
|
||||
{{- if .Values.providerRBAC.providers.awsAppMesh }}
|
||||
# AppMesh virtualservices/virtualrouter CRD read-only access needed for using the App Mesh provider
|
||||
- apiGroups:
|
||||
- appmesh.k8s.aws
|
||||
resources:
|
||||
- virtualservices
|
||||
verbs:
|
||||
- watch
|
||||
- get
|
||||
- list
|
||||
# AppMesh virtualnode CRD r/w access needed for using the App Mesh provider
|
||||
- apiGroups:
|
||||
- appmesh.k8s.aws
|
||||
resources:
|
||||
- virtualnodes
|
||||
- virtualrouters
|
||||
verbs:
|
||||
- watch
|
||||
- get
|
||||
- list
|
||||
- update
|
||||
- patch
|
||||
{{- end }}
|
||||
{{- if .Values.providerRBAC.providers.traefik }}
|
||||
# Traefik access needed when using the Traefik provider
|
||||
- apiGroups:
|
||||
- traefik.containo.us
|
||||
- traefik.io
|
||||
resources:
|
||||
- traefikservices
|
||||
verbs:
|
||||
- watch
|
||||
- get
|
||||
- update
|
||||
{{- end }}
|
||||
{{- if .Values.providerRBAC.providers.apisix }}
|
||||
# Access needed when using the Apisix provider
|
||||
- apiGroups:
|
||||
- apisix.apache.org
|
||||
resources:
|
||||
- apisixroutes
|
||||
verbs:
|
||||
- watch
|
||||
- get
|
||||
- update
|
||||
{{- end }}
|
||||
{{- if .Values.providerRBAC.providers.contour }}
|
||||
# Access needed when using the Contour provider
|
||||
- apiGroups:
|
||||
- projectcontour.io
|
||||
resources:
|
||||
- httpproxies
|
||||
verbs:
|
||||
- get
|
||||
- list
|
||||
- watch
|
||||
- update
|
||||
{{- end }}
|
||||
{{- if .Values.providerRBAC.providers.glooPlatform }}
|
||||
# Access needed when using the Gloo Platform provider
|
||||
- apiGroups:
|
||||
- networking.gloo.solo.io
|
||||
resources:
|
||||
- routetables
|
||||
verbs:
|
||||
- '*'
|
||||
{{- end }}
|
||||
{{- if .Values.providerRBAC.providers.gatewayAPI }}
|
||||
# Access needed when using the Gateway API provider
|
||||
- apiGroups:
|
||||
- gateway.networking.k8s.io
|
||||
resources:
|
||||
- httproutes
|
||||
- tcproutes
|
||||
- tlsroutes
|
||||
- udproutes
|
||||
- grpcroutes
|
||||
verbs:
|
||||
- get
|
||||
- list
|
||||
- watch
|
||||
- update
|
||||
{{- end }}
|
||||
{{- with .Values.providerRBAC.additionalRules }}
|
||||
{{ toYaml . }}
|
||||
{{- end }}
|
||||
{{- end }}
|
||||
{{- end -}}
|
||||
|
|
|
|||
|
|
@ -7,305 +7,5 @@ metadata:
|
|||
app.kubernetes.io/component: {{ .Values.controller.component }}
|
||||
{{- include "argo-rollouts.labels" . | nindent 4 }}
|
||||
rules:
|
||||
- apiGroups:
|
||||
- argoproj.io
|
||||
resources:
|
||||
- rollouts
|
||||
- rollouts/status
|
||||
- rollouts/finalizers
|
||||
verbs:
|
||||
- get
|
||||
- list
|
||||
- watch
|
||||
- update
|
||||
- patch
|
||||
- apiGroups:
|
||||
- argoproj.io
|
||||
resources:
|
||||
- analysisruns
|
||||
- analysisruns/finalizers
|
||||
- experiments
|
||||
- experiments/finalizers
|
||||
verbs:
|
||||
- create
|
||||
- get
|
||||
- list
|
||||
- watch
|
||||
- update
|
||||
- patch
|
||||
- delete
|
||||
- apiGroups:
|
||||
- argoproj.io
|
||||
resources:
|
||||
- analysistemplates
|
||||
- clusteranalysistemplates
|
||||
verbs:
|
||||
- get
|
||||
- list
|
||||
- watch
|
||||
# replicaset access needed for managing ReplicaSets
|
||||
- apiGroups:
|
||||
- apps
|
||||
resources:
|
||||
- replicasets
|
||||
verbs:
|
||||
- create
|
||||
- get
|
||||
- list
|
||||
- watch
|
||||
- update
|
||||
- patch
|
||||
- delete
|
||||
# deployments and podtemplates read access needed for workload reference support
|
||||
- apiGroups:
|
||||
- ""
|
||||
- apps
|
||||
resources:
|
||||
- deployments
|
||||
- podtemplates
|
||||
verbs:
|
||||
- get
|
||||
- list
|
||||
- watch
|
||||
# services patch needed to update selector of canary/stable/active/preview services
|
||||
# services create needed to create and delete services for experiments
|
||||
- apiGroups:
|
||||
- ""
|
||||
resources:
|
||||
- services
|
||||
verbs:
|
||||
- get
|
||||
- list
|
||||
- watch
|
||||
- patch
|
||||
- create
|
||||
- delete
|
||||
# leases create/get/update needed for leader election
|
||||
- apiGroups:
|
||||
- coordination.k8s.io
|
||||
resources:
|
||||
- leases
|
||||
verbs:
|
||||
- create
|
||||
- get
|
||||
- update
|
||||
# secret read access to run analysis templates which reference secrets
|
||||
- apiGroups:
|
||||
- ""
|
||||
resources:
|
||||
- secrets
|
||||
verbs:
|
||||
- get
|
||||
- list
|
||||
- watch
|
||||
- apiGroups:
|
||||
- ""
|
||||
resources:
|
||||
- configmaps
|
||||
verbs:
|
||||
- get
|
||||
- list
|
||||
- watch
|
||||
{{- if .Values.providerRBAC.providers.gatewayAPI }}
|
||||
- create
|
||||
- update
|
||||
{{- end }}
|
||||
# pod list/update needed for updating ephemeral data
|
||||
- apiGroups:
|
||||
- ""
|
||||
resources:
|
||||
- pods
|
||||
verbs:
|
||||
- list
|
||||
- update
|
||||
- watch
|
||||
# pods eviction needed for restart
|
||||
- apiGroups:
|
||||
- ""
|
||||
resources:
|
||||
- pods/eviction
|
||||
verbs:
|
||||
- create
|
||||
# event write needed for emitting events
|
||||
- apiGroups:
|
||||
- ""
|
||||
resources:
|
||||
- events
|
||||
verbs:
|
||||
- create
|
||||
- update
|
||||
- patch
|
||||
# ingress patch needed for managing ingress annotations, create needed for nginx canary
|
||||
- apiGroups:
|
||||
- networking.k8s.io
|
||||
- extensions
|
||||
resources:
|
||||
- ingresses
|
||||
verbs:
|
||||
- create
|
||||
- get
|
||||
- list
|
||||
- watch
|
||||
- update
|
||||
- patch
|
||||
# job access needed for analysis template job metrics
|
||||
- apiGroups:
|
||||
- batch
|
||||
resources:
|
||||
- jobs
|
||||
verbs:
|
||||
- create
|
||||
- get
|
||||
- list
|
||||
- watch
|
||||
- update
|
||||
- patch
|
||||
- delete
|
||||
{{- if .Values.providerRBAC.enabled }}
|
||||
{{- if .Values.providerRBAC.providers.istio }}
|
||||
# virtualservice/destinationrule access needed for using the Istio provider
|
||||
- apiGroups:
|
||||
- networking.istio.io
|
||||
resources:
|
||||
- virtualservices
|
||||
- destinationrules
|
||||
verbs:
|
||||
- watch
|
||||
- get
|
||||
- update
|
||||
- patch
|
||||
- list
|
||||
{{- end }}
|
||||
{{- if .Values.providerRBAC.providers.smi }}
|
||||
# trafficsplit access needed for using the SMI provider
|
||||
- apiGroups:
|
||||
- split.smi-spec.io
|
||||
resources:
|
||||
- trafficsplits
|
||||
verbs:
|
||||
- create
|
||||
- watch
|
||||
- get
|
||||
- update
|
||||
- patch
|
||||
{{- end }}
|
||||
{{- if .Values.providerRBAC.providers.ambassador }}
|
||||
# ambassador access needed for Ambassador provider
|
||||
- apiGroups:
|
||||
- getambassador.io
|
||||
- x.getambassador.io
|
||||
resources:
|
||||
- mappings
|
||||
- ambassadormappings
|
||||
verbs:
|
||||
- create
|
||||
- watch
|
||||
- get
|
||||
- update
|
||||
- list
|
||||
- delete
|
||||
{{- end }}
|
||||
{{- if .Values.providerRBAC.providers.awsLoadBalancerController }}
|
||||
# Endpoints and TargetGroupBindings needed for ALB target group verification when using AWS Load Balancer Controller
|
||||
- apiGroups:
|
||||
- ""
|
||||
resources:
|
||||
- endpoints
|
||||
verbs:
|
||||
- get
|
||||
- apiGroups:
|
||||
- elbv2.k8s.aws
|
||||
resources:
|
||||
- targetgroupbindings
|
||||
verbs:
|
||||
- list
|
||||
- get
|
||||
{{- end }}
|
||||
{{- if .Values.providerRBAC.providers.awsAppMesh }}
|
||||
# AppMesh virtualservices/virtualrouter CRD read-only access needed for using the App Mesh provider
|
||||
- apiGroups:
|
||||
- appmesh.k8s.aws
|
||||
resources:
|
||||
- virtualservices
|
||||
verbs:
|
||||
- watch
|
||||
- get
|
||||
- list
|
||||
# AppMesh virtualnode CRD r/w access needed for using the App Mesh provider
|
||||
- apiGroups:
|
||||
- appmesh.k8s.aws
|
||||
resources:
|
||||
- virtualnodes
|
||||
- virtualrouters
|
||||
verbs:
|
||||
- watch
|
||||
- get
|
||||
- list
|
||||
- update
|
||||
- patch
|
||||
{{- end }}
|
||||
{{- if .Values.providerRBAC.providers.traefik }}
|
||||
# Traefik access needed when using the Traefik provider
|
||||
- apiGroups:
|
||||
- traefik.containo.us
|
||||
- traefik.io
|
||||
resources:
|
||||
- traefikservices
|
||||
verbs:
|
||||
- watch
|
||||
- get
|
||||
- update
|
||||
{{- end }}
|
||||
{{- if .Values.providerRBAC.providers.apisix }}
|
||||
# Access needed when using the Apisix provider
|
||||
- apiGroups:
|
||||
- apisix.apache.org
|
||||
resources:
|
||||
- apisixroutes
|
||||
verbs:
|
||||
- watch
|
||||
- get
|
||||
- update
|
||||
{{- end }}
|
||||
{{- if .Values.providerRBAC.providers.contour }}
|
||||
# Access needed when using the Contour provider
|
||||
- apiGroups:
|
||||
- projectcontour.io
|
||||
resources:
|
||||
- httpproxies
|
||||
verbs:
|
||||
- get
|
||||
- list
|
||||
- watch
|
||||
- update
|
||||
{{- end }}
|
||||
{{- if .Values.providerRBAC.providers.glooPlatform }}
|
||||
# Access needed when using the Gloo Platform provider
|
||||
- apiGroups:
|
||||
- networking.gloo.solo.io
|
||||
resources:
|
||||
- routetables
|
||||
verbs:
|
||||
- '*'
|
||||
{{- end }}
|
||||
{{- if .Values.providerRBAC.providers.gatewayAPI }}
|
||||
# Access needed when using the Gateway API provider
|
||||
- apiGroups:
|
||||
- gateway.networking.k8s.io
|
||||
resources:
|
||||
- httproutes
|
||||
- tcproutes
|
||||
- tlsroutes
|
||||
- udproutes
|
||||
- grpcroutes
|
||||
verbs:
|
||||
- get
|
||||
- list
|
||||
- watch
|
||||
- update
|
||||
{{- end }}
|
||||
{{- with .Values.providerRBAC.additionalRules }}
|
||||
{{ toYaml . }}
|
||||
{{- end }}
|
||||
{{- end }}
|
||||
{{- include "argo-rollouts.controller.roleRules" . | nindent 2 }}
|
||||
{{- end }}
|
||||
|
|
|
|||
|
|
@ -1,3 +1,4 @@
|
|||
{{ if .Values.notifications.configmap.create }}
|
||||
apiVersion: v1
|
||||
kind: ConfigMap
|
||||
metadata:
|
||||
|
|
@ -20,3 +21,4 @@ data:
|
|||
subscriptions: |
|
||||
{{- toYaml . | nindent 4 }}
|
||||
{{- end }}
|
||||
{{- end }}
|
||||
|
|
@ -8,290 +8,5 @@ metadata:
|
|||
app.kubernetes.io/component: {{ .Values.controller.component }}
|
||||
{{- include "argo-rollouts.labels" . | nindent 4 }}
|
||||
rules:
|
||||
- apiGroups:
|
||||
- argoproj.io
|
||||
resources:
|
||||
- rollouts
|
||||
- rollouts/status
|
||||
- rollouts/finalizers
|
||||
verbs:
|
||||
- get
|
||||
- list
|
||||
- watch
|
||||
- update
|
||||
- patch
|
||||
- apiGroups:
|
||||
- argoproj.io
|
||||
resources:
|
||||
- analysisruns
|
||||
- analysisruns/finalizers
|
||||
- experiments
|
||||
- experiments/finalizers
|
||||
verbs:
|
||||
- create
|
||||
- get
|
||||
- list
|
||||
- watch
|
||||
- update
|
||||
- patch
|
||||
- delete
|
||||
- apiGroups:
|
||||
- argoproj.io
|
||||
resources:
|
||||
- analysistemplates
|
||||
- clusteranalysistemplates
|
||||
verbs:
|
||||
- get
|
||||
- list
|
||||
- watch
|
||||
# replicaset access needed for managing ReplicaSets
|
||||
- apiGroups:
|
||||
- apps
|
||||
resources:
|
||||
- replicasets
|
||||
verbs:
|
||||
- create
|
||||
- get
|
||||
- list
|
||||
- watch
|
||||
- update
|
||||
- patch
|
||||
- delete
|
||||
# deployments and podtemplates read access needed for workload reference support
|
||||
- apiGroups:
|
||||
- ""
|
||||
- apps
|
||||
resources:
|
||||
- deployments
|
||||
- podtemplates
|
||||
verbs:
|
||||
- get
|
||||
- list
|
||||
- watch
|
||||
# services patch needed to update selector of canary/stable/active/preview services
|
||||
# services create needed to create and delete services for experiments
|
||||
- apiGroups:
|
||||
- ""
|
||||
resources:
|
||||
- services
|
||||
verbs:
|
||||
- get
|
||||
- list
|
||||
- watch
|
||||
- patch
|
||||
- create
|
||||
- delete
|
||||
# leases create/get/update needed for leader election
|
||||
- apiGroups:
|
||||
- coordination.k8s.io
|
||||
resources:
|
||||
- leases
|
||||
verbs:
|
||||
- create
|
||||
- get
|
||||
- update
|
||||
# secret read access to run analysis templates which reference secrets
|
||||
- apiGroups:
|
||||
- ""
|
||||
resources:
|
||||
- secrets
|
||||
verbs:
|
||||
- get
|
||||
- list
|
||||
- watch
|
||||
- apiGroups:
|
||||
- ""
|
||||
resources:
|
||||
- configmaps
|
||||
verbs:
|
||||
- get
|
||||
- list
|
||||
- watch
|
||||
{{- if .Values.providerRBAC.providers.gatewayAPI }}
|
||||
- create
|
||||
- update
|
||||
{{- end }}
|
||||
# pod list/update needed for updating ephemeral data
|
||||
- apiGroups:
|
||||
- ""
|
||||
resources:
|
||||
- pods
|
||||
verbs:
|
||||
- list
|
||||
- update
|
||||
- watch
|
||||
# pods eviction needed for restart
|
||||
- apiGroups:
|
||||
- ""
|
||||
resources:
|
||||
- pods/eviction
|
||||
verbs:
|
||||
- create
|
||||
# event write needed for emitting events
|
||||
- apiGroups:
|
||||
- ""
|
||||
resources:
|
||||
- events
|
||||
verbs:
|
||||
- create
|
||||
- update
|
||||
- patch
|
||||
# ingress patch needed for managing ingress annotations, create needed for nginx canary
|
||||
- apiGroups:
|
||||
- networking.k8s.io
|
||||
- extensions
|
||||
resources:
|
||||
- ingresses
|
||||
verbs:
|
||||
- create
|
||||
- get
|
||||
- list
|
||||
- watch
|
||||
- update
|
||||
- patch
|
||||
# job access needed for analysis template job metrics
|
||||
- apiGroups:
|
||||
- batch
|
||||
resources:
|
||||
- jobs
|
||||
verbs:
|
||||
- create
|
||||
- get
|
||||
- list
|
||||
- watch
|
||||
- update
|
||||
- patch
|
||||
- delete
|
||||
{{- if .Values.providerRBAC.enabled }}
|
||||
{{- if .Values.providerRBAC.providers.istio }}
|
||||
# virtualservice/destinationrule access needed for using the Istio provider
|
||||
- apiGroups:
|
||||
- networking.istio.io
|
||||
resources:
|
||||
- virtualservices
|
||||
- destinationrules
|
||||
verbs:
|
||||
- watch
|
||||
- get
|
||||
- update
|
||||
- patch
|
||||
- list
|
||||
{{- end }}
|
||||
{{- if .Values.providerRBAC.providers.smi }}
|
||||
# trafficsplit access needed for using the SMI provider
|
||||
- apiGroups:
|
||||
- split.smi-spec.io
|
||||
resources:
|
||||
- trafficsplits
|
||||
verbs:
|
||||
- create
|
||||
- watch
|
||||
- get
|
||||
- update
|
||||
- patch
|
||||
{{- end }}
|
||||
{{- if .Values.providerRBAC.providers.ambassador }}
|
||||
# ambassador access needed for Ambassador provider
|
||||
- apiGroups:
|
||||
- getambassador.io
|
||||
- x.getambassador.io
|
||||
resources:
|
||||
- mappings
|
||||
- ambassadormappings
|
||||
verbs:
|
||||
- create
|
||||
- watch
|
||||
- get
|
||||
- update
|
||||
- list
|
||||
- delete
|
||||
{{- end }}
|
||||
{{- if .Values.providerRBAC.providers.awsLoadBalancerController }}
|
||||
# Endpoints and TargetGroupBindings needed for ALB target group verification when using AWS Load Balancer Controller
|
||||
- apiGroups:
|
||||
- ""
|
||||
resources:
|
||||
- endpoints
|
||||
verbs:
|
||||
- get
|
||||
- apiGroups:
|
||||
- elbv2.k8s.aws
|
||||
resources:
|
||||
- targetgroupbindings
|
||||
verbs:
|
||||
- list
|
||||
- get
|
||||
{{- end }}
|
||||
{{- if .Values.providerRBAC.providers.awsAppMesh }}
|
||||
# AppMesh virtualservices/virtualrouter CRD read-only access needed for using the App Mesh provider
|
||||
- apiGroups:
|
||||
- appmesh.k8s.aws
|
||||
resources:
|
||||
- virtualservices
|
||||
verbs:
|
||||
- watch
|
||||
- get
|
||||
- list
|
||||
# AppMesh virtualnode CRD r/w access needed for using the App Mesh provider
|
||||
- apiGroups:
|
||||
- appmesh.k8s.aws
|
||||
resources:
|
||||
- virtualnodes
|
||||
- virtualrouters
|
||||
verbs:
|
||||
- watch
|
||||
- get
|
||||
- list
|
||||
- update
|
||||
- patch
|
||||
{{- end }}
|
||||
{{- if .Values.providerRBAC.providers.traefik }}
|
||||
# Traefik access needed when using the Traefik provider
|
||||
- apiGroups:
|
||||
- traefik.containo.us
|
||||
- traefik.io
|
||||
resources:
|
||||
- traefikservices
|
||||
verbs:
|
||||
- watch
|
||||
- get
|
||||
- update
|
||||
{{- end }}
|
||||
{{- if .Values.providerRBAC.providers.apisix }}
|
||||
# Access needed when using the Apisix provider
|
||||
- apiGroups:
|
||||
- apisix.apache.org
|
||||
resources:
|
||||
- apisixroutes
|
||||
verbs:
|
||||
- watch
|
||||
- get
|
||||
- update
|
||||
{{- end }}
|
||||
{{- if .Values.providerRBAC.providers.glooPlatform }}
|
||||
# Access needed when using the Gloo Platform provider
|
||||
- apiGroups:
|
||||
- networking.gloo.solo.io
|
||||
resources:
|
||||
- routetables
|
||||
verbs:
|
||||
- '*'
|
||||
{{- end }}
|
||||
{{- if .Values.providerRBAC.providers.gatewayAPI }}
|
||||
# Access needed when using the Gateway API provider
|
||||
- apiGroups:
|
||||
- gateway.networking.k8s.io
|
||||
resources:
|
||||
- httproutes
|
||||
- tcproutes
|
||||
- tlsroutes
|
||||
- udproutes
|
||||
- grpcroutes
|
||||
verbs:
|
||||
- get
|
||||
- list
|
||||
- watch
|
||||
- update
|
||||
{{- end }}
|
||||
{{- end }}
|
||||
{{- include "argo-rollouts.controller.roleRules" . | nindent 2 }}
|
||||
{{- end }}
|
||||
|
|
|
|||
|
|
@ -22,6 +22,9 @@ spec:
|
|||
externalIPs: {{- toYaml . | nindent 4 }}
|
||||
{{- end }}
|
||||
{{- if eq .Values.dashboard.service.type "LoadBalancer" }}
|
||||
{{- with .Values.dashboard.service.loadBalancerClass }}
|
||||
loadBalancerClass: {{ . }}
|
||||
{{- end }}
|
||||
{{- with .Values.dashboard.service.loadBalancerIP }}
|
||||
loadBalancerIP: {{ . | quote }}
|
||||
{{- end }}
|
||||
|
|
|
|||
|
|
@ -356,6 +356,8 @@ dashboard:
|
|||
service:
|
||||
# -- Sets the type of the Service
|
||||
type: ClusterIP
|
||||
# -- The class of the load balancer implementation
|
||||
loadBalancerClass: ""
|
||||
# -- LoadBalancer will get created with the IP specified in this field
|
||||
loadBalancerIP: ""
|
||||
# -- Source IP ranges to allow access to service from
|
||||
|
|
@ -449,6 +451,10 @@ dashboard:
|
|||
volumeMounts: []
|
||||
|
||||
notifications:
|
||||
configmap:
|
||||
# -- Whether to create notifications configmap
|
||||
create: true
|
||||
|
||||
secret:
|
||||
# -- Whether to create notifications secret
|
||||
create: false
|
||||
|
|
|
|||
|
|
@ -1,9 +1,9 @@
|
|||
apiVersion: v2
|
||||
appVersion: v3.5.8
|
||||
appVersion: v3.5.10
|
||||
name: argo-workflows
|
||||
description: A Helm chart for Argo Workflows
|
||||
type: application
|
||||
version: 0.41.11
|
||||
version: 0.42.1
|
||||
icon: https://argo-workflows.readthedocs.io/en/stable/assets/logo.png
|
||||
home: https://github.com/argoproj/argo-helm
|
||||
sources:
|
||||
|
|
@ -16,5 +16,5 @@ annotations:
|
|||
fingerprint: 2B8F22F57260EFA67BE1C5824B11F800CD9D2252
|
||||
url: https://argoproj.github.io/argo-helm/pgp_keys.asc
|
||||
artifacthub.io/changes: |
|
||||
- kind: fixed
|
||||
description: Add `app:` label to components to match upstream
|
||||
- kind: changed
|
||||
description: add loadBalancerClass field for Service resources
|
||||
|
|
|
|||
|
|
@ -149,6 +149,7 @@ Fields to note:
|
|||
| controller.clusterWorkflowTemplates.enabled | bool | `true` | Create a ClusterRole and CRB for the controller to access ClusterWorkflowTemplates. |
|
||||
| controller.clusterWorkflowTemplates.serviceAccounts | list | `[]` | Extra service accounts to be added to the ClusterRoleBinding |
|
||||
| controller.columns | list | `[]` | Configure Argo Server to show custom [columns] |
|
||||
| controller.configMap.annotations | object | `{}` | ConfigMap annotations |
|
||||
| controller.configMap.create | bool | `true` | Create a ConfigMap for the controller |
|
||||
| controller.configMap.name | string | `""` | ConfigMap name |
|
||||
| controller.cronWorkflowWorkers | string | `nil` | Number of cron workflow workers Only valid for 3.5+ |
|
||||
|
|
@ -167,6 +168,7 @@ Fields to note:
|
|||
| controller.kubeConfig | object | `{}` (See [values.yaml]) | Configure when workflow controller runs in a different k8s cluster with the workflow workloads, or needs to communicate with the k8s apiserver using an out-of-cluster kubeconfig secret. |
|
||||
| controller.links | list | `[]` | Configure Argo Server to show custom [links] |
|
||||
| controller.livenessProbe | object | See [values.yaml] | Configure liveness [probe] for the controller |
|
||||
| controller.loadBalancerClass | string | `""` | The class of the load balancer implementation |
|
||||
| controller.loadBalancerSourceRanges | list | `[]` | Source ranges to allow access to service from. Only applies to service type `LoadBalancer` |
|
||||
| controller.logging.format | string | `"text"` | Set the logging format (one of: `text`, `json`) |
|
||||
| controller.logging.globallevel | string | `"0"` | Set the glog logging level |
|
||||
|
|
@ -301,6 +303,7 @@ Fields to note:
|
|||
| server.ingress.pathType | string | `"Prefix"` | Ingress path type. One of `Exact`, `Prefix` or `ImplementationSpecific` |
|
||||
| server.ingress.paths | list | `["/"]` | List of ingress paths |
|
||||
| server.ingress.tls | list | `[]` | Ingress TLS configuration |
|
||||
| server.loadBalancerClass | string | `""` | The class of the load balancer implementation |
|
||||
| server.loadBalancerIP | string | `""` | Static IP address to assign to loadBalancer service type `LoadBalancer` |
|
||||
| server.loadBalancerSourceRanges | list | `[]` | Source ranges to allow access to service from. Only applies to service type `LoadBalancer` |
|
||||
| server.logging.format | string | `"text"` | Set the logging format (one of: `text`, `json`) |
|
||||
|
|
|
|||
|
|
@ -6,6 +6,10 @@ metadata:
|
|||
namespace: {{ include "argo-workflows.namespace" . | quote }}
|
||||
labels:
|
||||
{{- include "argo-workflows.labels" (dict "context" . "component" .Values.controller.name "name" "cm") | nindent 4 }}
|
||||
{{- with .Values.controller.configMap.annotations }}
|
||||
annotations:
|
||||
{{- toYaml . | nindent 4 }}
|
||||
{{- end }}
|
||||
data:
|
||||
config: |
|
||||
{{- if .Values.controller.instanceID.enabled }}
|
||||
|
|
|
|||
|
|
@ -35,8 +35,13 @@ spec:
|
|||
{{- if and (eq .Values.controller.serviceType "ClusterIP") .Values.controller.metricsConfig.headlessService }}
|
||||
clusterIP: None
|
||||
{{- end }}
|
||||
{{- if and (eq .Values.controller.serviceType "LoadBalancer") .Values.controller.loadBalancerSourceRanges }}
|
||||
{{- if eq .Values.controller.serviceType "LoadBalancer" }}
|
||||
{{- with .Values.controller.loadBalancerClass }}
|
||||
loadBalancerClass: {{ . }}
|
||||
{{- end }}
|
||||
{{- if .Values.controller.loadBalancerSourceRanges }}
|
||||
loadBalancerSourceRanges:
|
||||
{{- toYaml .Values.controller.loadBalancerSourceRanges | nindent 4 }}
|
||||
{{- end }}
|
||||
{{- end }}
|
||||
{{- end -}}
|
||||
|
|
|
|||
|
|
@ -17,7 +17,9 @@ roleRef:
|
|||
subjects:
|
||||
- kind: ServiceAccount
|
||||
name: {{ $.Values.workflow.serviceAccount.name }}
|
||||
namespace: {{ $namespace }}
|
||||
{{- with $namespace }}
|
||||
namespace: {{ . }}
|
||||
{{- end }}
|
||||
{{- range $.Values.workflow.rbac.serviceAccounts }}
|
||||
- kind: ServiceAccount
|
||||
name: {{ .name }}
|
||||
|
|
|
|||
|
|
@ -28,11 +28,16 @@ spec:
|
|||
{{- include "argo-workflows.selectorLabels" (dict "context" . "name" .Values.server.name) | nindent 4 }}
|
||||
sessionAffinity: None
|
||||
type: {{ .Values.server.serviceType }}
|
||||
{{- if and (eq .Values.server.serviceType "LoadBalancer") .Values.server.loadBalancerIP }}
|
||||
loadBalancerIP: {{ .Values.server.loadBalancerIP | quote }}
|
||||
{{- if eq .Values.server.serviceType "LoadBalancer" }}
|
||||
{{- with .Values.controller.loadBalancerClass }}
|
||||
loadBalancerClass: {{ . }}
|
||||
{{- end }}
|
||||
{{- if and (eq .Values.server.serviceType "LoadBalancer") .Values.server.loadBalancerSourceRanges }}
|
||||
{{- with .Values.server.loadBalancerIP }}
|
||||
loadBalancerIP: {{ . | quote }}
|
||||
{{- end }}
|
||||
{{- if .Values.server.loadBalancerSourceRanges }}
|
||||
loadBalancerSourceRanges:
|
||||
{{- toYaml .Values.server.loadBalancerSourceRanges | nindent 4 }}
|
||||
{{- end }}
|
||||
{{- end }}
|
||||
{{- end -}}
|
||||
|
|
|
|||
|
|
@ -106,6 +106,8 @@ controller:
|
|||
create: true
|
||||
# -- ConfigMap name
|
||||
name: ""
|
||||
# -- ConfigMap annotations
|
||||
annotations: {}
|
||||
|
||||
# -- Limits the maximum number of incomplete workflows in a namespace
|
||||
namespaceParallelism:
|
||||
|
|
@ -295,6 +297,8 @@ controller:
|
|||
serviceAnnotations: {}
|
||||
# -- Optional labels to add to the controller Service
|
||||
serviceLabels: {}
|
||||
# -- The class of the load balancer implementation
|
||||
loadBalancerClass: ""
|
||||
# -- Source ranges to allow access to service from. Only applies to service type `LoadBalancer`
|
||||
loadBalancerSourceRanges: []
|
||||
|
||||
|
|
@ -506,6 +510,8 @@ server:
|
|||
serviceAnnotations: {}
|
||||
# -- Optional labels to add to the UI Service
|
||||
serviceLabels: {}
|
||||
# -- The class of the load balancer implementation
|
||||
loadBalancerClass: ""
|
||||
# -- Static IP address to assign to loadBalancer service type `LoadBalancer`
|
||||
loadBalancerIP: ""
|
||||
# -- Source ranges to allow access to service from. Only applies to service type `LoadBalancer`
|
||||
|
|
|
|||
|
|
@ -2,8 +2,8 @@ apiVersion: v2
|
|||
name: argocd-image-updater
|
||||
description: A Helm chart for Argo CD Image Updater, a tool to automatically update the container images of Kubernetes workloads which are managed by Argo CD
|
||||
type: application
|
||||
version: 0.10.2
|
||||
appVersion: v0.13.1
|
||||
version: 0.11.0
|
||||
appVersion: v0.14.0
|
||||
home: https://github.com/argoproj-labs/argocd-image-updater
|
||||
icon: https://argocd-image-updater.readthedocs.io/en/stable/assets/logo.png
|
||||
keywords:
|
||||
|
|
@ -18,5 +18,5 @@ annotations:
|
|||
fingerprint: 2B8F22F57260EFA67BE1C5824B11F800CD9D2252
|
||||
url: https://argoproj.github.io/argo-helm/pgp_keys.asc
|
||||
artifacthub.io/changes: |
|
||||
- kind: fixed
|
||||
description: Fixed a URL in values.yaml comments
|
||||
- kind: changed
|
||||
description: Bump argocd-image-updater to v0.14.0
|
||||
|
|
|
|||
|
|
@ -79,6 +79,9 @@ The `config.registries` value can be used exactly as it looks in the documentati
|
|||
| config.argocd.token | string | `""` | If specified, the secret with Argo CD API key will be created. |
|
||||
| config.disableKubeEvents | bool | `false` | Disable kubernetes events |
|
||||
| config.gitCommitMail | string | `""` | E-Mail address to use for Git commits |
|
||||
| config.gitCommitSignOff | bool | `false` | Enables sign off on commits |
|
||||
| config.gitCommitSigningKey | string | `""` | Path to public SSH key mounted in container, or GPG key ID used to sign commits |
|
||||
| config.gitCommitSigningMethod | string | `""` | Method used to sign Git commits. `openpgp` or `ssh` |
|
||||
| config.gitCommitTemplate | string | `""` | Changing the Git commit message |
|
||||
| config.gitCommitUser | string | `""` | Username to use for Git commits |
|
||||
| config.logLevel | string | `"info"` | Argo CD Image Update log level |
|
||||
|
|
|
|||
|
|
@ -31,6 +31,15 @@ data:
|
|||
git.commit-message-template: |
|
||||
{{- nindent 4 . }}
|
||||
{{- end }}
|
||||
{{- with .Values.config.gitCommitSigningKey }}
|
||||
git.commit-signing-key: {{ . | quote }}
|
||||
{{- end }}
|
||||
{{- with .Values.config.gitCommitSignOff }}
|
||||
git.commit-sign-off: {{ . | quote }}
|
||||
{{- end }}
|
||||
{{- with .Values.config.gitCommitSigningMethod }}
|
||||
git.commit-signing-method: {{ . | quote }}
|
||||
{{- end }}
|
||||
kube.events: {{ .Values.config.disableKubeEvents | quote }}
|
||||
{{- with .Values.config.registries }}
|
||||
registries.conf: |
|
||||
|
|
|
|||
|
|
@ -100,6 +100,24 @@ spec:
|
|||
key: kube.events
|
||||
name: argocd-image-updater-config
|
||||
optional: true
|
||||
- name: GIT_COMMIT_SIGNING_KEY
|
||||
valueFrom:
|
||||
configMapKeyRef:
|
||||
key: git.commit-signing-key
|
||||
name: argocd-image-updater-config
|
||||
optional: true
|
||||
- name: GIT_COMMIT_SIGNING_METHOD
|
||||
valueFrom:
|
||||
configMapKeyRef:
|
||||
key: git.commit-signing-method
|
||||
name: argocd-image-updater-config
|
||||
optional: true
|
||||
- name: GIT_COMMIT_SIGN_OFF
|
||||
valueFrom:
|
||||
configMapKeyRef:
|
||||
key: git.commit-sign-off
|
||||
name: argocd-image-updater-config
|
||||
optional: true
|
||||
{{- with .Values.extraEnv }}
|
||||
{{- toYaml . | nindent 10 }}
|
||||
{{- end }}
|
||||
|
|
@ -141,6 +159,10 @@ spec:
|
|||
name: ssh-config
|
||||
- mountPath: /tmp
|
||||
name: tmp
|
||||
- name: ssh-signing-key
|
||||
mountPath: /app/ssh-keys/id_rsa
|
||||
readOnly: true
|
||||
subPath: sshPrivateKey
|
||||
{{- if .Values.authScripts.enabled }}
|
||||
- mountPath: /scripts
|
||||
name: authscripts
|
||||
|
|
@ -172,6 +194,10 @@ spec:
|
|||
name: argocd-image-updater-ssh-config
|
||||
optional: true
|
||||
name: ssh-config
|
||||
- name: ssh-signing-key
|
||||
secret:
|
||||
secretName: ssh-git-creds
|
||||
optional: true
|
||||
- emptyDir: {}
|
||||
name: tmp
|
||||
{{- with .Values.volumes }}
|
||||
|
|
|
|||
|
|
@ -133,6 +133,15 @@ config:
|
|||
# -- Changing the Git commit message
|
||||
gitCommitTemplate: ""
|
||||
|
||||
# -- Path to public SSH key mounted in container, or GPG key ID used to sign commits
|
||||
gitCommitSigningKey: ""
|
||||
|
||||
# -- Enables sign off on commits
|
||||
gitCommitSignOff: false
|
||||
|
||||
# -- Method used to sign Git commits. `openpgp` or `ssh`
|
||||
gitCommitSigningMethod: ""
|
||||
|
||||
# -- Argo CD Image Update log level
|
||||
logLevel: "info"
|
||||
|
||||
|
|
|
|||
Loading…
Reference in a new issue