Compare commits

...
Sign in to create a new pull request.

2 commits
main ... kargo

Author SHA1 Message Date
Greg Haynes
cd8a4d1525 Update kargo package to install as cnoe package
Signed-off-by: Greg Haynes <greg.haynes@autodesk.com>
2024-10-28 19:09:36 +00:00
Greg Haynes
0993c6a803 WIP: Add Kargo Stack
Signed-off-by: Greg Haynes <greg.haynes@autodesk.com>
2024-10-28 19:00:22 +00:00
3 changed files with 122 additions and 0 deletions

21
kargo/kargo.yaml Normal file
View file

@ -0,0 +1,21 @@
apiVersion: argoproj.io/v1alpha1
kind: Application
metadata:
name: kargo
namespace: argocd
finalizers:
- resources-finalizer.argocd.argoproj.io
spec:
destination:
namespace: kargo
server: "https://kubernetes.default.svc"
source:
repoURL: cnoe://kargo
targetRevision: HEAD
path: "."
project: default
syncPolicy:
automated:
selfHeal: true
syncOptions:
- CreateNamespace=true

View file

@ -0,0 +1,28 @@
apiVersion: argoproj.io/v1alpha1
kind: Application
metadata:
name: cert-manager
namespace: argocd
finalizers:
- resources-finalizer.argocd.argoproj.io
spec:
destination:
server: "https://kubernetes.default.svc"
namespace: cert-manager
source:
chart: cert-manager
repoURL: https://charts.jetstack.io
targetRevision: 1.14.5
helm:
releaseName: cert-manager
valueFiles:
- values.yaml
values: |
installCRDs: true
project: default
syncPolicy:
automated:
prune: true
selfHeal: true
syncOptions:
- CreateNamespace=true

73
kargo/kargo/kargo.yaml Normal file
View file

@ -0,0 +1,73 @@
apiVersion: v1
kind: Namespace
metadata:
name: kargo
---
apiVersion: argoproj.io/v1alpha1
kind: Application
metadata:
name: kargo-helm
namespace: argocd
finalizers:
- resources-finalizer.argocd.argoproj.io
spec:
destination:
server: "https://kubernetes.default.svc"
namespace: kargo
source:
chart: kargo
repoURL: ghcr.io/akuity/kargo-charts
targetRevision: 1.0.3
helm:
parameters:
- name: api.ingress.tls.enabled
value: "false"
- name: api.tls.selfSignedCert
value: "true"
- name: api.secret.name
value: kargo-api
project: default
syncPolicy:
automated:
prune: true
selfHeal: true
syncOptions:
- CreateNamespace=true
---
apiVersion: networking.k8s.io/v1
kind: Ingress
metadata:
name: kargo-api
namespace: kargo
annotations:
# We need the ingress to pass through ssl traffic to the vCluster
# This only works for the nginx-ingress (enable via --enable-ssl-passthrough
# https://kubernetes.github.io/ingress-nginx/user-guide/tls/#ssl-passthrough )
# for other ingress controllers please check their respective documentation.
nginx.ingress.kubernetes.io/backend-protocol: HTTPS
nginx.ingress.kubernetes.io/ssl-passthrough: "true"
nginx.ingress.kubernetes.io/ssl-redirect: "true"
spec:
ingressClassName: "nginx"
rules:
- host: kargo.cnoe.localtest.me
http:
paths:
- path: /
pathType: Prefix
backend:
service:
name: kargo-api
port:
number: 443
---
apiVersion: v1
data:
ADMIN_ACCOUNT_PASSWORD_HASH: JDJhJDEwJFpyaGhpZTR2THo1eWd0VlNhaWY2by5xTjM2amdzNnZqdE1CZE02eXJVMUZPZWlBQU1NeE9t
ADMIN_ACCOUNT_TOKEN_SIGNING_KEY: aXdpc2h0b3dhc2hteWlyaXNod3Jpc3R3YXRjaA==
kind: Secret
metadata:
labels:
name: kargo-api
namespace: kargo
type: Opaque