fix: update loki, tempo and openfga apps

apps/loki.yaml

@@ -46,8 +46,8 @@ spec:
             s3:
               endpoint: http://10.255.241.30:30080
               region: tos
-              secretAccessKey: ${S3SECRET}
               accessKeyId: ${S3KEY}
+              secretAccessKey: ${S3SECRET}
               s3ForcePathStyle: true
               http_config:
                 insecure_skip_verify: true

apps/openfga.yaml

@@ -1,47 +1,40 @@
 apiVersion: argoproj.io/v1alpha1
-kind: ApplicationSet
+kind: Application
 metadata:
-  name: openfga
+  name: staging-openfga
   namespace: argocd
+  annotations:
+    argocd.argoproj.io/sync-options: SkipDryRunOnMissingResource=true
+  finalizers:
+  - resources-finalizer.argocd.argoproj.io
 spec:
-  goTemplate: true
+  destination:
-  generators:
+    namespace: openfga
-  - list:
+    server: https://kubernetes.default.svc
-      elements:
+  project: aux
-      - cluster: https://kubernetes.default.svc
+  # ignoreDifferences:
-        env: prod
+  # - group: apps
-        hostname: openfga.adm.oceanbox.io
+  #   kind: StatefulSet
-        autoSync: false
+  #   jsonPointers:
-        prune: true
+  #   - /spec/persistentVolumeClaimRetentionPolicy
-      - cluster: https://kubernetes.default.svc
+  syncPolicy:
-        env: staging
+    managedNamespaceMetadata:
-        hostname: openfga.dev.oceanbox.io
+      labels:
-        autoSync: true
+        component: aux
-        prune: true
+    syncOptions:
-  template:
+      - CreateNamespace=true
-    metadata:
+      - ApplyOutOfSyncOnly=true
-      name: '{{ .env }}-openfga'
+    automated:
-    spec:
+      prune: true
-      project: aux
+      selfHeal: true
-      destination:
+  sources:
-        namespace: idp
+  - repoURL: https://openfga.github.io/helm-charts
-        server: '{{ .cluster }}'
+    targetRevision: 0.2.19
-      sources:
+    chart: openfga
-        - repoURL: https://openfga.github.io/helm-charts
+    helm:
-          targetRevision: 0.2.12
+      valueFiles:
-          chart: openfga
+      - $values/values/openfga/values.yaml
-          helm:
+      - $values/values/openfga/values-staging.yaml
-            valueFiles:
+  - repoURL: https://gitlab.com/oceanbox/manifests.git
-              - $values/values/openfga/values.yaml
+    targetRevision: main
-              - $values/values/openfga/values-{{ .env }}.yaml
+    ref: values
-        - repoURL: https://gitlab.com/oceanbox/manifests.git
-          targetRevision: main
-          ref: values
-  templatePatch: |
-    {{- if .autoSync }}
-    spec:
-      syncPolicy:
-        automated:
-          prune: {{ .prune }}
-          selfHeal: false
-    {{- end }}

apps/tempo.yaml

@@ -34,11 +34,11 @@ spec:
               backend: s3
               s3:
                 bucket: tempo-traces
-                endpoint: http://10.255.241.30:30080
+                endpoint: 10.255.241.30:30080
-                access_key: ${S3SECRET}
+                access_key: ${S3KEY}
-                secret_key: ${S3KEY}
+                secret_key: ${S3SECRET}
+                forcepathstyle: true
                 insecure: true
-              backend: local
               local:
                 path: /var/tempo/traces
               wal:
@@ -46,6 +46,7 @@ spec:
           metricsGenerator:
             enabled: true
             remoteWriteUrl: "http://prom-prometheus.prometheus:9090/api/v1/write"
+          extraArgs: { config.expand-env=true }
           extraEnv:
           - name: S3KEY
             valueFrom: