wip: more or less working argo and cilium helmfile setup

2025-05-16 15:30:01 +02:00
parent ddc95aad80
commit 223149ecdd
37 changed files with 582 additions and 100 deletions
@@ -1,38 +0,0 @@
-apiVersion: argoproj.io/v1alpha1
-kind: Application
-metadata:
-  name: argocd
-  namespace: argocd
-  annotations:
-    argocd.argoproj.io/sync-wave: "-1"
-spec:
-  destination:
-    namespace: argocd
-    server: 'https://kubernetes.default.svc'
-  sources:
-  - repoURL: {{ .Values.cluster_config.manifests }}
-    targetRevision: HEAD
-    path: helmfiles/argocd
-    plugin:
-      name: helmfile
-      env:
-        - name: CLUSTER_NAME
-          value: {{ .Values.cluster_config.name }}
-        - name: HELMFILE_ENVIRONMENT
-          value: {{ .environment }}
-  {{/* - repoURL: {{ .Values.cluster_config.manifests }} */}}
-  {{/*   path: {{ .Values.cluster_config.policies }}/argocd */}}
-  {{/*   targetRevision: HEAD */}}
-  project: sys
-  syncPolicy:
-    managedNamespaceMetadata:
-      labels:
-        component: sys
-    syncOptions:
-      - CreateNamespace=true
-      - ApplyOutOfSyncOnly=true
-    {{- if .Values.argocd.autosync }}
-    automated:
-      prune: true
-      # selfHeal: false
-    {{- end }}
@@ -1,65 +0,0 @@
-{{- if .Values.cilium.enabled }}
-apiVersion: argoproj.io/v1alpha1
-kind: Application
-metadata:
-  name: cilium
-  namespace: argocd
-  annotations:
-    argocd.argoproj.io/sync-wave: "-1"
-spec:
-  destination:
-    namespace: kube-system
-    server: 'https://kubernetes.default.svc'
-  sources:
-  - repoURL: {{ .Values.cluster_config.manifests }}
-    targetRevision: HEAD
-    ref: manifests
-  {{- if .Values.cilium.spire.enabled }}
-  - repoURL: {{ .Values.cluster_config.manifests }}
-    path: {{ .Values.cluster_config.policies }}/cilium-spire
-    targetRevision: HEAD
-  {{- end }}
-  - repoURL: 'https://helm.cilium.io'
-    targetRevision: {{ .Values.cilium.version }}
-    chart: cilium
-    helm:
-      valuesFiles:
-      - $manifests/values/cilium/values.yaml
-      - $manifests/values/cilium/values-{{ .Values.cluster_config.name }}.yaml
-      ignoreMissingValueFiles: true
-  project: sys
-  syncPolicy:
-    syncOptions:
-    - ServerSideApply=true
-    {{- if .Values.cilium.autosync }}
-    automated:
-      prune: true
-      # selfHeal: false
-    {{- end }}
-  ignoreDifferences:
-    - group: apps
-      jqPathExpressions:
-        - .spec.volumeClaimTemplates
-      kind: StatefulSet
-      name: spire-server
-    - group: monitoring.coreos.com
-      jqPathExpressions:
-        - .spec.endpoints[]?.relabelings[]?.action
-      kind: ServiceMonitor
-    - group: ''
-      jsonPointers:
-        - /data/ca.crt
-      kind: ConfigMap
-      name: hubble-ca-cert
-    - group: ''
-      jsonPointers:
-        - /data/ca.crt
-        - /data/ca.key
-      kind: Secret
-      name: cilium-ca
-    - group: ''
-      jqPathExpressions:
-        - .spec.ports[]?.nodePort
-      kind: Service
-      name: cilium-ingress
-{{- end }}
@@ -1,23 +0,0 @@
-{{if and (.Values.cilium.enabled) (.Values.cilium.loadbalancerPool.enabled )}}
-apiVersion: "cilium.io/v2alpha1"
-kind: CiliumLoadBalancerIPPool
-metadata:
-  name: "loadbalancer"
-spec:
-  blocks:
-  {{- range .Values.cilium.loadbalancerPool.cidr}}
-  - cidr: {{ . }}
-  {{- end }}
---
-apiVersion: "cilium.io/v2alpha1"
-kind: CiliumL2AnnouncementPolicy
-metadata:
-  name: policy
-spec:
-  nodeSelector:
-    matchExpressions:
-      - key: node-role.kubernetes.io/control-plane
-        operator: DoesNotExist
-  externalIPs: true
-  loadBalancerIPs: true
-{{- end}}