feat(argo-cd): Add dnsConfig and dnsPolicy for pods (#1771)

Signed-off-by: Loris Torikian <loris_torikian@hotmail.fr>

charts/argo-cd/Chart.yaml

@@ -3,7 +3,7 @@ appVersion: v2.5.7
 kubeVersion: ">=1.22.0-0"
 description: A Helm chart for Argo CD, a declarative, GitOps continuous delivery tool for Kubernetes.
 name: argo-cd
-version: 5.17.2
+version: 5.18.0
 home: https://github.com/argoproj/argo-helm
 icon: https://argo-cd.readthedocs.io/en/stable/assets/logo.png
 sources:
@@ -23,4 +23,5 @@ dependencies:
     condition: redis-ha.enabled
 annotations:
   artifacthub.io/changes: |
+    - "[Added]: Allow dnsConfig and dnsPolicy pod configuration"
     - "[Changed]: Update Argo CD to v2.5.7"

charts/argo-cd/README.md

@@ -456,6 +456,8 @@ NAME: my-release
 | controller.clusterRoleRules.rules | list | `[]` | List of custom rules for the application controller's ClusterRole resource |
 | controller.containerPort | int | `8082` | Application controller listening port |
 | controller.containerSecurityContext | object | See [values.yaml] | Application controller container-level security context |
+| controller.dnsConfig | object | `{}` | [DNS configuration] |
+| controller.dnsPolicy | object | `{}` | [DNS configuration] |
 | controller.env | list | `[]` | Environment variables to pass to application controller |
 | controller.envFrom | list | `[]` (See [values.yaml]) | envFrom to pass to application controller |
 | controller.extraArgs | list | `[]` | Additional command line arguments to pass to application controller |
@@ -534,6 +536,8 @@ NAME: my-release
 | repoServer.containerPort | int | `8081` | Configures the repo server port |
 | repoServer.containerSecurityContext | object | See [values.yaml] | Repo server container-level security context |
 | repoServer.deploymentAnnotations | object | `{}` | Annotations to be added to repo server Deployment |
+| repoServer.dnsConfig | object | `{}` | [DNS configuration] |
+| repoServer.dnsPolicy | object | `{}` | [DNS configuration] |
 | repoServer.env | list | `[]` | Environment variables to pass to repo server |
 | repoServer.envFrom | list | `[]` (See [values.yaml]) | envFrom to pass to repo server |
 | repoServer.extraArgs | list | `[]` | Additional command line arguments to pass to repo server |
@@ -633,6 +637,8 @@ NAME: my-release
 | server.containerPort | int | `8080` | Configures the server port |
 | server.containerSecurityContext | object | See [values.yaml] | Server container-level security context |
 | server.deploymentAnnotations | object | `{}` | Annotations to be added to server Deployment |
+| server.dnsConfig | object | `{}` | [DNS configuration] |
+| server.dnsPolicy | object | `{}` | [DNS configuration] |
 | server.env | list | `[]` | Environment variables to pass to Argo CD server |
 | server.envFrom | list | `[]` (See [values.yaml]) | envFrom to pass to Argo CD server |
 | server.extensions.containerSecurityContext | object | See [values.yaml] | Server UI extensions container-level security context |
@@ -777,6 +783,8 @@ server:
 | dex.containerPortMetrics | int | `5558` | Container port for metrics access |
 | dex.containerSecurityContext | object | See [values.yaml] | Dex container-level security context |
 | dex.deploymentAnnotations | object | `{}` | Annotations to be added to the Dex server Deployment |
+| dex.dnsConfig | object | `{}` | [DNS configuration] |
+| dex.dnsPolicy | object | `{}` | [DNS configuration] |
 | dex.enabled | bool | `true` | Enable dex |
 | dex.env | list | `[]` | Environment variables to pass to the Dex server |
 | dex.envFrom | list | `[]` (See [values.yaml]) | envFrom to pass to the Dex server |
@@ -851,6 +859,8 @@ server:
 | redis.containerPort | int | `6379` | Redis container port |
 | redis.containerSecurityContext | object | See [values.yaml] | Redis container-level security context |
 | redis.deploymentAnnotations | object | `{}` | Annotations to be added to the Redis server Deployment |
+| redis.dnsConfig | object | `{}` | [DNS configuration] |
+| redis.dnsPolicy | object | `{}` | [DNS configuration] |
 | redis.enabled | bool | `true` | Enable redis |
 | redis.env | list | `[]` | Environment variables to pass to the Redis server |
 | redis.envFrom | list | `[]` (See [values.yaml]) | envFrom to pass to the Redis server |
@@ -959,6 +969,8 @@ If you want to use an existing Redis (eg. a managed service from a cloud provide
 | applicationSet.args.probeBindAddr | string | `":8081"` | The default health check port |
 | applicationSet.containerSecurityContext | object | See [values.yaml] | ApplicationSet controller container-level security context |
 | applicationSet.deploymentAnnotations | object | `{}` | Annotations to be added to ApplicationSet controller Deployment |
+| applicationSet.dnsConfig | object | `{}` | [DNS configuration] |
+| applicationSet.dnsPolicy | object | `{}` | [DNS configuration] |
 | applicationSet.enabled | bool | `true` | Enable ApplicationSet controller |
 | applicationSet.extraArgs | list | `[]` | List of extra cli args to add |
 | applicationSet.extraContainers | list | `[]` | Additional containers to be added to the ApplicationSet controller pod |
@@ -1039,6 +1051,8 @@ If you want to use an existing Redis (eg. a managed service from a cloud provide
 | notifications.argocdUrl | string | `nil` | Argo CD dashboard url; used in place of {{.context.argocdUrl}} in templates |
 | notifications.bots.slack.affinity | object | `{}` | Assign custom [affinity] rules |
 | notifications.bots.slack.containerSecurityContext | object | See [values.yaml] | Slack bot container-level security Context |
+| notifications.bots.slack.dnsConfig | object | `{}` | [DNS configuration] |
+| notifications.bots.slack.dnsPolicy | object | `{}` | [DNS configuration] |
 | notifications.bots.slack.enabled | bool | `false` | Enable slack bot |
 | notifications.bots.slack.image.imagePullPolicy | string | `""` (defaults to global.image.imagePullPolicy) | Image pull policy for the Slack bot |
 | notifications.bots.slack.image.repository | string | `""` (defaults to global.image.repository) | Repository to use for the Slack bot |
@@ -1062,6 +1076,8 @@ If you want to use an existing Redis (eg. a managed service from a cloud provide
 | notifications.containerSecurityContext | object | See [values.yaml] | Notification controller container-level security Context |
 | notifications.context | object | `{}` | Define user-defined context |
 | notifications.deploymentAnnotations | object | `{}` | Annotations to be applied to the notifications controller Deployment |
+| notifications.dnsConfig | object | `{}` | [DNS configuration] |
+| notifications.dnsPolicy | object | `{}` | [DNS configuration] |
 | notifications.enabled | bool | `true` | Enable notifications controller |
 | notifications.extraArgs | list | `[]` | Extra arguments to provide to the notifications controller |
 | notifications.extraContainers | list | `[]` | Additional containers to be added to the notifications controller pod |
@@ -1121,6 +1137,7 @@ Autogenerated from chart metadata using [helm-docs](https://github.com/norwoodj/
 [BackendConfigSpec]: https://cloud.google.com/kubernetes-engine/docs/concepts/backendconfig#backendconfigspec_v1beta1_cloudgooglecom
 [CSS styles]: https://argo-cd.readthedocs.io/en/stable/operator-manual/custom-styles/
 [changelog]: https://artifacthub.io/packages/helm/argo/argo-cd?modal=changelog
+[DNS configuration]: https://kubernetes.io/docs/concepts/services-networking/dns-pod-service/
 [external cluster credentials]: https://argo-cd.readthedocs.io/en/stable/operator-manual/declarative-setup/#clusters
 [FrontendConfigSpec]: https://cloud.google.com/kubernetes-engine/docs/how-to/ingress-features#configuring_ingress_features_through_frontendconfig_parameters
 [declarative setup]: https://argo-cd.readthedocs.io/en/stable/operator-manual/declarative-setup

charts/argo-cd/README.md.gotmpl

@@ -515,6 +515,7 @@ Autogenerated from chart metadata using [helm-docs](https://github.com/norwoodj/
 [BackendConfigSpec]: https://cloud.google.com/kubernetes-engine/docs/concepts/backendconfig#backendconfigspec_v1beta1_cloudgooglecom
 [CSS styles]: https://argo-cd.readthedocs.io/en/stable/operator-manual/custom-styles/
 [changelog]: https://artifacthub.io/packages/helm/argo/argo-cd?modal=changelog
+[DNS configuration]: https://kubernetes.io/docs/concepts/services-networking/dns-pod-service/
 [external cluster credentials]: https://argo-cd.readthedocs.io/en/stable/operator-manual/declarative-setup/#clusters
 [FrontendConfigSpec]: https://cloud.google.com/kubernetes-engine/docs/how-to/ingress-features#configuring_ingress_features_through_frontendconfig_parameters
 [declarative setup]: https://argo-cd.readthedocs.io/en/stable/operator-manual/declarative-setup

charts/argo-cd/templates/argocd-application-controller/statefulset.yaml

@@ -311,3 +311,10 @@ spec:
       {{- with .Values.controller.priorityClassName }}
       priorityClassName: {{ . }}
       {{- end }}
+      {{- with .Values.controller.dnsConfig }}
+      dnsConfig:
+      {{- toYaml . | nindent 8 }}
+      {{- end }}
+      {{- with .Values.controller.dnsPolicy }}
+      dnsPolicy: {{ . }}
+      {{- end }}

charts/argo-cd/templates/argocd-applicationset/deployment.yaml

@@ -163,4 +163,11 @@ spec:
           emptyDir: {}
         - name: tmp
           emptyDir: {}
+      {{- with .Values.applicationSet.dnsConfig }}
+      dnsConfig:
+      {{- toYaml . | nindent 8 }}
+      {{- end }}
+      {{- with .Values.applicationSet.dnsPolicy }}
+      dnsPolicy: {{ . }}
+      {{- end }}
 {{- end }}

charts/argo-cd/templates/argocd-notifications/bots/slack/deployment.yaml

@@ -60,4 +60,11 @@ spec:
       tolerations:
         {{- toYaml . | nindent 8 }}
       {{- end }}
+      {{- with .Values.notifications.bots.slack.dnsConfig }}
+      dnsConfig:
+      {{- toYaml . | nindent 8 }}
+      {{- end }}
+      {{- with .Values.notifications.bots.slack.dnsPolicy }}
+      dnsPolicy: {{ . }}
+      {{- end }}
 {{ end }}

charts/argo-cd/templates/argocd-notifications/deployment.yaml

@@ -121,4 +121,11 @@ spec:
               path: tls.key
             - key: ca.crt
               path: ca.crt
+      {{- with .Values.notifications.dnsConfig }}
+      dnsConfig:
+      {{- toYaml . | nindent 8 }}
+      {{- end }}
+      {{- with .Values.notifications.dnsPolicy }}
+      dnsPolicy: {{ . }}
+      {{- end }}
 {{- end }}

charts/argo-cd/templates/argocd-repo-server/deployment.yaml

@@ -354,3 +354,10 @@ spec:
       {{- with .Values.repoServer.priorityClassName }}
       priorityClassName: {{ . }}
       {{- end }}
+      {{- with .Values.repoServer.dnsConfig }}
+      dnsConfig:
+      {{- toYaml . | nindent 8 }}
+      {{- end }}
+      {{- with .Values.repoServer.dnsPolicy }}
+      dnsPolicy: {{ . }}
+      {{- end }}

charts/argo-cd/templates/argocd-server/deployment.yaml

@@ -413,3 +413,10 @@ spec:
       {{- with .Values.server.priorityClassName }}
       priorityClassName: {{ . }}
       {{- end }}
+      {{- with .Values.server.dnsConfig }}
+      dnsConfig:
+      {{- toYaml . | nindent 8 }}
+      {{- end }}
+      {{- with .Values.server.dnsPolicy }}
+      dnsPolicy: {{ . }}
+      {{- end }}

charts/argo-cd/templates/dex/deployment.yaml

@@ -188,4 +188,11 @@ spec:
       {{- with .Values.dex.priorityClassName }}
       priorityClassName: {{ . }}
       {{- end }}
+      {{- with .Values.dex.dnsConfig }}
+      dnsConfig:
+      {{- toYaml . | nindent 8 }}
+      {{- end }}
+      {{- with .Values.dex.dnsPolicy }}
+      dnsPolicy: {{ . }}
+      {{- end }}
 {{- end }}

charts/argo-cd/templates/redis/deployment.yaml

@@ -128,4 +128,11 @@ spec:
       volumes:
         {{- toYaml . | nindent 8}}
       {{- end }}
+      {{- with .Values.redis.dnsConfig }}
+      dnsConfig:
+      {{- toYaml . | nindent 8 }}
+      {{- end }}
+      {{- with .Values.redis.dnsPolicy }}
+      dnsPolicy: {{ . }}
+      {{- end }}
 {{- end }}

charts/argo-cd/values.yaml

@@ -732,6 +732,11 @@ controller:
     # -- List of custom rules for the application controller's ClusterRole resource
     rules: []
 
+  # -- [DNS configuration]
+  dnsConfig: {}
+  # -- [DNS configuration]
+  dnsPolicy: {}
+
 ## Dex
 dex:
   # -- Enable dex
@@ -964,6 +969,11 @@ dex:
   # -- Priority class for dex
   priorityClassName: ""
 
+  # -- [DNS configuration]
+  dnsConfig: {}
+  # -- [DNS configuration]
+  dnsPolicy: {}
+
 ## Redis
 redis:
   # -- Enable redis
@@ -1175,6 +1185,11 @@ redis:
       # -- Prometheus ServiceMonitor annotations
       annotations: {}
 
+  # -- [DNS configuration]
+  dnsConfig: {}
+  # -- [DNS configuration]
+  dnsPolicy: {}
+
 # This key configures Redis-HA subchart and when enabled (redis-ha.enabled=true)
 # the custom redis deployment is omitted
 # Check the redis-ha chart for more properties
@@ -1769,6 +1784,11 @@ server:
   #     enabled: true
   #     responseCodeName: RESPONSE_CODE
 
+  # -- [DNS configuration]
+  dnsConfig: {}
+  # -- [DNS configuration]
+  dnsPolicy: {}
+
 ## Repo Server
 repoServer:
   # -- Repo server name
@@ -2066,6 +2086,11 @@ repoServer:
   #     - list
   #     - watch
 
+  # -- [DNS configuration]
+  dnsConfig: {}
+  # -- [DNS configuration]
+  dnsPolicy: {}
+
 ## ApplicationSet controller
 applicationSet:
   # -- Enable ApplicationSet controller
@@ -2332,6 +2357,11 @@ applicationSet:
         #   hosts:
         #     - argocd-applicationset.example.com
 
+  # -- [DNS configuration]
+  dnsConfig: {}
+  # -- [DNS configuration]
+  dnsPolicy: {}
+
 ## Notifications controller
 notifications:
   # -- Enable notifications controller
@@ -2811,6 +2841,11 @@ notifications:
     # defaultTriggers: |
     #   - on-sync-status-unknown
 
+  # -- [DNS configuration]
+  dnsConfig: {}
+  # -- [DNS configuration]
+  dnsPolicy: {}
+
   ## The optional bot component simplifies managing subscriptions
   ## For more information: https://argocd-notifications.readthedocs.io/en/stable/bots/overview/
   bots:
@@ -2899,3 +2934,8 @@ notifications:
 
       # -- [Node selector]
       nodeSelector: {}
+
+      # -- [DNS configuration]
+      dnsConfig: {}
+      # -- [DNS configuration]
+      dnsPolicy: {}