* Add ability to create ServiceAccount for redis
Signed-off-by: Marco Kilchhofer <mkilchhofer@users.noreply.github.com>
* Use correct default for ServiceAccounts in _helpers.tpl
Signed-off-by: Marco Kilchhofer <mkilchhofer@users.noreply.github.com>
* Bump version and update changelog
Signed-off-by: Marco Kilchhofer <mkilchhofer@users.noreply.github.com>
* feat: Add ability to override api versions for argocd
Signed-off-by: Atze de Vries <devries@zorgdomein.nl>
* fix linting
Signed-off-by: Atze de Vries <devries@zorgdomein.nl>
* reimplement a bit and update chart version
Signed-off-by: Atze de Vries <devries@zorgdomein.nl>
* update to new minor
Signed-off-by: Atze de Vries <devries@zorgdomein.nl>
* fix spaces in comments
Signed-off-by: Atze de Vries <devries@zorgdomein.nl>
* Updated flow control and add documentation on apiVersionOverrides
Signed-off-by: Atze de Vries <devries@zorgdomein.nl>
* Add changelog annotation
Signed-off-by: Marco Kilchhofer <mkilchhofer@users.noreply.github.com>
Co-authored-by: Marco Kilchhofer <mkilchhofer@users.noreply.github.com>
Modern GKE versions only accept ImplementationSpecific
as pathType for the ingress resource, so here we added
a new value for the pathType which can be used to set
pathType on demand, the default value is still Prefix
for backward compatability
Signed-off-by: Mouhsen Ibrahim <mouhsen.ibrahim@gmail.com>
* fix(argo-cd): Set ArgoCD server certificate manager certificate secret name to match the documentation by default.
Signed-off-by: Rich <git0@bitservices.io>
* fix(argo-cd): Add server certificate issuer subvalues to values.yaml and a relevant comment.
Signed-off-by: Rich <git0@bitservices.io>
* Bump chart version again
Signed-off-by: Marco Kilchhofer <mkilchhofer@users.noreply.github.com>
Co-authored-by: Marco Kilchhofer <mkilchhofer@users.noreply.github.com>
* chore: Cleanup old CRD hooks
Signed-off-by: Marco Kilchhofer <mkilchhofer@users.noreply.github.com>
* Bump chart version
Signed-off-by: Marco Kilchhofer <mkilchhofer@users.noreply.github.com>
Co-authored-by: Oliver Bähler <oliverbaehler@hotmail.com>
* feat: Add global kubeCapabilities
Signed-off-by: Oliver Bähler <oliverbaehler@hotmail.com>
* chore: change var global.kubeCapabilities > kubeVersionOverride
Signed-off-by: Marco Kilchhofer <mkilchhofer@users.noreply.github.com>
* docs: add missing variable in README
Signed-off-by: Marco Kilchhofer <mkilchhofer@users.noreply.github.com>
* fix: Bump version in README again
Signed-off-by: Marco Kilchhofer <mkilchhofer@users.noreply.github.com>
Co-authored-by: Marco Kilchhofer <mkilchhofer@users.noreply.github.com>
* feat: add support for envFrom
Signed-off-by: Michał Czeraszkiewicz <contact@czerasz.com>
* config: bump chart version
Signed-off-by: Michał Czeraszkiewicz <contact@czerasz.com>
* Apply suggestions from code review
Signed-off-by: Marco Kilchhofer <mkilchhofer@users.noreply.github.com>
Co-authored-by: Marco Kilchhofer <mkilchhofer@users.noreply.github.com>
* fix: Update NOTES to match the latest version
Signed-off-by: Vale <valerauko@gmail.com>
* chore: Bump chart version
Signed-off-by: Vale <valerauko@gmail.com>
* Add colon for better format
Signed-off-by: Marco Kilchhofer <mkilchhofer@users.noreply.github.com>
Co-authored-by: Marco Kilchhofer <mkilchhofer@users.noreply.github.com>
* feat(argocd): Added externalTrafficPolicy to server service
Signed-off-by: flavio.lemos <flavio.lemos@farfetch.com>
* chore: apply review changes
Signed-off-by: Marco Kilchhofer <mkilchhofer@users.noreply.github.com>
Co-authored-by: Marco Kilchhofer <mkilchhofer@users.noreply.github.com>
* feat: define custom styles via values
Signed-off-by: Oliver Bähler <oliverbaehler@hotmail.com>
* Version Bump
Signed-off-by: Oliver Bähler <oliverbaehler@hotmail.com>
* Mount to correct server
Signed-off-by: Oliver Bähler <oliverbaehler@hotmail.com>
* fix(argo-cd): correct alphabetical place of new values
Signed-off-by: Marco Kilchhofer <mkilchhofer@users.noreply.github.com>
* fix(argo-cd): correct alphabetical place of new values in README
Signed-off-by: Marco Kilchhofer <mkilchhofer@users.noreply.github.com>
Co-authored-by: Marco Kilchhofer <mkilchhofer@users.noreply.github.com>
* feat: Support custom rules for the Application Controller Cluster Role
Signed-off-by: Lorelei McCollum <lorelei.mccollum@endurance.com>
* Add newline at end of file
Signed-off-by: Lorelei McCollum <lorelei.mccollum@endurance.com>
* copy CRD resource files from https://github.com/argoproj/argo-cd/tree/v2.0.0/manifests/crds
Signed-off-by: Marcel Hoyer <mhoyer@pixelplastic.de>
* update `global.image` values in `values.yaml` to quay.io
Signed-off-by: Marcel Hoyer <mhoyer@pixelplastic.de>
* update redis image to 6.2.1
Signed-off-by: Marcel Hoyer <mhoyer@pixelplastic.de>
* add optional volume mount to secret `argocd-repo-server-tls` according to 7a68880e2e
Signed-off-by: Marcel Hoyer <mhoyer@pixelplastic.de>
* increase patch version of chart to 3.0.1
Signed-off-by: Marcel Hoyer <mhoyer@pixelplastic.de>
* add `redis.extraArgs` to enable customization of `redis-server` arguments
Signed-off-by: Marcel Hoyer <mhoyer@pixelplastic.de>
* add some notes to the `README` about syncing changes from original `manifests/install.yaml`
Signed-off-by: Marcel Hoyer <mhoyer@pixelplastic.de>
* fix example for `extraArgs` in `values.yaml` of argo-cd chart
Signed-off-by: Marcel Hoyer <mhoyer@pixelplastic.de>
* Bump chart version to 3.1.2
Signed-off-by: Marcel Hoyer <mhoyer@pixelplastic.de>
* Bump argo-cd version to 3.2.2
Signed-off-by: Marcel Hoyer <mhoyer@pixelplastic.de>
Co-authored-by: Oliver Bähler <oliverbaehler@hotmail.com>
Co-authored-by: Oliver Bähler <oliverbaehler@hotmail.com>
* add cluster label for use with appSet cluster selector
Signed-off-by: mike sarver <mike.sarver@ibotta.com>
* feat(argo-cd): Add label to cluster-secrets for usage with appSet cluster selector
Signed-off-by: mike sarver <mike.sarver@ibotta.com>
* feat(argo-cd): use with for adding labels
Signed-off-by: mike sarver <mike.sarver@ibotta.com>
Co-authored-by: Oliver Bähler <oliverbaehler@hotmail.com>
* fix: oliverbaehler as codeowner
Signed-off-by: Oliver Bähler <oliverbaehler@hotmail.com>
* Disable ServiceAccount on disabled Dex
Signed-off-by: Oliver Bähler <oliverbaehler@hotmail.com>
* fix: Mount emptyDir on repoServer when using read-only FS
Signed-off-by: Marco Kilchhofer <marco@kilchhofer.info>
* fix: Mount emptyDir on repoServer for /tmp and /app/config/gpg/keys
The emptyDir for /app/config/gpg/keys was already implemented in the plain
manifests in the main project: https://github.com/argoproj/argo-cd/pull/4136
Signed-off-by: Marco Kilchhofer <marco@kilchhofer.info>
* fix(argo-cd): hard coded .selector.matchLabels
it fixes#602
Signed-off-by: abdennour <mail@abdennoor.com>
* style(argo-cd): linting circle ci
error too many blank lines
it fixes#602
Signed-off-by: abdennour <mail@abdennoor.com>
* chore(argo-cd): adding myself to codeowners
it is related to #602
Signed-off-by: abdennour <mail@abdennoor.com>
* chore(argo-cd): CODEOWNER work by invitation
related to #603#602
Signed-off-by: abdennour <mail@abdennoor.com>
* fix(argo-cd): Add info in README about labels
Signed-off-by: Sean Johnson <seanson@users.noreply.github.com>
Co-authored-by: Sean Johnson <seanson@users.noreply.github.com>
* feat: Add annotations to the dex service account
Signed-off-by: Jacob Wernette <jawernette@ibm.com>
Signed-off-by: Jacob Wernette <werne2j@gmail.com>
* update deployment to statefulset
* Update chart version
Signed-off-by: Chris Sauer <mr-sour@users.noreply.github.com>
* chore: Bumping minor semver as this has a resource change
* chore: Add feature flag for enabling StatefulSet
Signed-off-by: seanson@users.noreply.github.com <seanson@users.noreply.github.com>
* Add annotations to dex service
Currently `.Values.dex.metrics.service.annotations` is not used anywhere - this adds that to the template.
* Add labels to dex service
* Update chart version
Similar to #317, this allows us to add extra paths to Argo CD.
This adds compatibility with the ALB Ingress Controller when using EKS
to be able to add the additional listener rule to perform a HTTP->HTTPS
redirect on port 80.
* Add support for syncWindows in additionalProjects
* Update values.yaml
Add example of syncWindows
* Update Chart.yaml
Bump version
Co-authored-by: Spencer Gilbert <Spencer.Gilbert@gmail.com>
* fix: #404 - Set Security Context for Redis Pod
* Separate Container and Pod Security Context for Redis
* Bump Chart Version
* Syntax fix
* Also set Group in Redis Security Context
* Allow server service port names to be configured.
Allows to route traffic via istio to split gRPC from http
* Update Chart.yaml for argo-cd
* Bump Chart version to match PR orders
Currently the `openshift.enabled` flag causes the repo server to have an invalid command
argument. It's also not documented yet.
Signed-off-by: Johannes Siebel <johannes.siebel@gmail.com>
* Adding custom labels to the argocd-server service when specified in the Helm values.yaml
* Updated argo-cd chart version to 2.2.2 due to argocd-server service labeling implementation
* feat: argo-cd can deploy Redis HA
Signed-off-by: Carlos Juan Gómez Peñalver <carlosjuangp@gmail.com>
* fix: add unarchived subchart redis-ha
Signed-off-by: Carlos Juan Gómez Peñalver <carlosjuangp@gmail.com>
* fix: Redis HA upgraded since 4.3.4 contains a bug on the chart
Signed-off-by: Carlos Juan Gómez Peñalver <carlosjuangp@gmail.com>
* docs: how to configure Redis and Redis HA
* fix: add missing chart folder
Signed-off-by: Carlos Juan Gómez Peñalver <carlosjuangp@gmail.com>
* fix: Helm bug with subcharts and alias
* fix: Chart version
* fix: Remove archived subcharts
Signed-off-by: Carlos Juan Gómez Peñalver <carlosjuangp@gmail.com>
* fix: lint script
Signed-off-by: Carlos Juan Gómez Peñalver <carlosjuangp@gmail.com>
* Revert "fix: lint script"
This reverts commit f4b81cbb6f.
* fix: lint and publish scripts
Signed-off-by: Carlos Juan Gómez Peñalver <carlosjuangp@gmail.com>
* fix: align test-image versions
Signed-off-by: Carlos Juan Gómez Peñalver <carlosjuangp@gmail.com>
* fix: remove sudo from scripts
Signed-off-by: Carlos Juan Gómez Peñalver <carlosjuangp@gmail.com>
* fix: add required repositories to helm
Signed-off-by: Carlos Juan Gómez Peñalver <carlosjuangp@gmail.com>
* fix: simplify expression
Signed-off-by: Carlos Juan Gómez Peñalver <carlosjuangp@gmail.com>
* fix: bump up chart version
Signed-off-by: Carlos Juan Gómez Peñalver <carlosjuangp@gmail.com>
Co-authored-by: Spencer Gilbert <Spencer.Gilbert@gmail.com>
* feat: Helm Chart: add hostAliases to deployments #272
* feat: Bumped version number of argo-cd chart
* Bumped version number of argo-cd chart. Feature #272
* feat: extraArgs allows same flag multiple times
Superseeds #244 (I messed up the rebase 🤦)
Relates to #232
This change allows ArgoCD chart to render multiple times the same flag with different values
Mainly, if not only, used to specify multiple Redis Sentinel addresses
5ec5aeb002/manifests/ha/base/overlays/argocd-application-controller-deployment.yaml (L16)aeb48b0a69/util/cache/cache.go (L33)
```
--sentinel
```
using this syntax
```
controller:
extraArgs:
- --sentinel
- argocd-redis-ha-announce-0
- --sentinel
- argocd-redis-ha-announce-1
- --sentinel
- argocd-redis-ha-announce-2
```
instead of
```
controller:
extraArgs:
sentinel=argocd-redis-ha-announce-0:
sentinel=argocd-redis-ha-announce-1:
sentinel=argocd-redis-ha-announce-2:
```
Basically same syntax as the flags documentation
```
docker run --rm argoproj/argocd:v1.4.2 argocd-server help
...
Flags:
--app-state-cache-expiration duration Cache expiration for app state (default 1h0m0s)
--as string Username to impersonate for the operation
--as-group stringArray Group to impersonate for the operation, this flag can be repeated to specify multiple groups.
--basehref string Value for base href in index.html. Used if Argo CD is running behind reverse proxy under subpath different from / (default "/")
--certificate-authority string Path to a cert file for the certificate authority
--client-certificate string Path to a client certificate file for TLS
--client-key string Path to a client key file for TLS
--cluster string The name of the kubeconfig cluster to use
--connection-status-cache-expiration duration Cache expiration for cluster/repo connection status (default 1h0m0s)
--context string The name of the kubeconfig context to use
--default-cache-expiration duration Cache expiration default (default 24h0m0s)
--dex-server string Dex server address (default "http://argocd-dex-server:5556")
--disable-auth Disable client authentication
--gloglevel int Set the glog logging level
-h, --help help for argocd-server
--insecure Run server without TLS
--insecure-skip-tls-verify If true, the server's certificate will not be checked for validity. This will make your HTTPS connections insecure
--kubeconfig string Path to a kube config. Only required if out-of-cluster
--loglevel string Set the logging level. One of: debug|info|warn|error (default "info")
--metrics-port int Start metrics on given port (default 8083)
-n, --namespace string If present, the namespace scope for this CLI request
--oidc-cache-expiration duration Cache expiration for OIDC state (default 3m0s)
--password string Password for basic authentication to the API server
--port int Listen on given port (default 8080)
--redis string Redis server hostname and port (e.g. argocd-redis:6379).
--redisdb int Redis database.
--repo-server string Repo server address (default "argocd-repo-server:8081")
--repo-server-timeout-seconds int Repo server RPC call timeout seconds. (default 60)
--request-timeout string The length of time to wait before giving up on a single server request. Non-zero values should contain a corresponding time unit (e.g. 1s, 2m, 3h). A value of zero means don't timeout requests. (default "0")
--sentinel stringArray Redis sentinel hostname and port (e.g. argocd-redis-ha-announce-0:6379).
--sentinelmaster string Redis sentinel master group name. (default "master")
--server string The address and port of the Kubernetes API server
--staticassets string Static assets directory path
--tlsmaxversion string The maximum SSL/TLS version that is acceptable (one of: 1.0|1.1|1.2)
--tlsminversion string The minimum SSL/TLS version that is acceptable (one of: 1.0|1.1|1.2)
--token string Bearer token for authentication to the API server
--user string The name of the kubeconfig user to use
--username string Username for basic authentication to the API server
--x-frame-options value Set X-Frame-Options header in HTTP responses to value. To disable, set to "". (default "sameorigin")
```
Signed-off-by: Carlos Juan Gómez Peñalver <carlosjuangp@gmail.com>
* fix: bump up chart version
* Fix volumeMounts indention for argocd-server
VolumeMounts have to be indented with 8 spaces.
* chore: bump chart version
* Fix volumes indention for argo-server
* Bump version
The official Argo-CD HA manifests do not scale the dex server
or the application controller past 1 because they still have
local caches and cannot support more than one pod at a time
Signed-off-by: Carson Anderson <ca@carsonoid.net>
Automatically setting password modification time to the current time leads to
it changing every time the chart is rendered. Ironically, this is a problem
when Argo CD manages itself using this chart ;-)
This spec.subdomain field is not part of OpenShift 3.11 route OpenAPI
specification and since it's empty it can safely be removed without impacting
OpenShift 4.
* Fixes version label in argocd components
Breaking change introduced in this PR https://github.com/argoproj/argo-helm/pull/203 causes labeles to be removed due to an empty vaule in .Values.*.image.tag.
* Update Chart.yaml
patch version bump
* [argo-cd] Added simple PrometheusRule
This patch adds a few simple rules which you can leverage to make
sure that your infrastructure is up to date. They are optional
and opt-in only.
* Add conditional selector fix from #180
* Bump chart version
Signed-off-by: Léo Depriester <leo.depriester@camptocamp.com>
* Fix controller env path
* Updating chart bump to patch as this is a backwards compatible change
* ArgoCD: Configure Repository Credentials in Values
* Argo CD Helm Chart: Add a Secret Resource in Repo Server for configuring Repository Credentials
Change-Id: I64c343d3558a939d0faef795e62d4e258810bc67
* Minor formatting fix, add documentation.
* [charts/argo-cd] Update to 1.3, some chart cleanup
* Bumps the version of ArgoCD to 1.3 and the chart version to 1.2 due
to a CRD change. Restored conditional CRDs to correct #27. Additionally,
some value defaults were added so Helm strict linting could pass.
* This adds some examples to the values.yaml on how to use the new
Helm repo chart types. Add helmignore to help with development.
* Added Role and service account to repo-server
* Fixed comment in repo-server SA name helper
* Bumped chart version
* Added repoServer service account annotations
* Better Helm chart NOTES.txt templating
Add some extra templating to NOTES.txt, which are displayed to the
user after a successful helm install command. These are really
helpful notes, but if you didn't specify a release name of argocd
or put it in a separate namespace, these commands weren't exactly
working with a copy paste. Now they should take into account
the release name and release namespace helm was given.
* Small CONTRIBUTING.md command line change
Instead of just doing `argocd version`, be a little more explicit
by passing in the server name and insecure flag. This will make
sure that you're doing the version of the instance you're
port-forwarding above, as opposed to some other argocd.
The argocd application expects that the label 'app.kubernetes.io/part-of' is set to 'argocd' otherwise the configmap or secret is rejected, and the argocd-dex-server, argocd-server, and argocd-application-controller fail to start.
This adds new parameters to each Deployment in the argo-cd chart,
allowing users to specify custom volumes to mount. This makes it
possible to use a Git repository self-signed certificates by manually
adding a "known_hosts" file, as recommended in the documentation:
https://argoproj.github.io/argo-cd/user-guide/private-repositories/
"volumes" and "volumeMounts" parameters are added to each Deployment,
with defaults set to empty.
This change was tested by templating the chart with default parameters,
and by templating it with volume mounts specified for each service.
* Add application controller resources
First chart version for argo-cd
added the new labels recommeneded for k8
* Add repo server resources
Use legacy label and new one for application controller selectors
Set labels for deployment for easier discovery
* Configure git repositories, helm chart museums and dex connectors
This way argo-cd could be configured to update itself via helm
* Parameterize the rbac configmap
* Parameterize webhook secrets
* Parameterize server deployment and set services with the labels
* Add service account, role and rolebinding for server deployment
* Clean the old label, use only latest recommendations
Follow the ideas and changes of https://github.com/argoproj/argo-cd/pull/1035
* Fix var naming issues
* Fix server service incorrect ports
* Install crds with helm hook
* Enable cluster admin accessby default
Default installation will allow installing apps in the current cluster without
inputted credentials. For other clusters inputted credentials will be needed
* Parameterize the dex server
* Harcode resource names because code expects them this way
Some resource names and application urls are hardcoded in code with these
names. So they can't be parameterized.
* Create the ingress with tls passthrough support
Tls is terminated on the ArgoCD server, not on ingress
* Fix typo on application controller sa
* Add notes on how to connect to server UI after installation
