wip: unify sys and apps

2025-05-06 16:00:57 +02:00
parent 4590ddc30a
commit 7de100a4d4
204 changed files with 3 additions and 0 deletions
@@ -0,0 +1,104 @@
+{{ if .Values.oncall.enabled }}
+apiVersion: argoproj.io/v1alpha1
+kind: Application
+metadata:
+  name: oncall
+  namespace: argocd
+  annotations:
+    argocd.argoproj.io/sync-options: SkipDryRunOnMissingResource=true
+  finalizers:
+  - resources-finalizer.argocd.argoproj.io
+spec:
+  destination:
+    namespace: prometheus
+    server: 'https://kubernetes.default.svc'
+  project: sys
+  syncPolicy:
+    managedNamespaceMetadata:
+      labels:
+        component: sys
+    syncOptions:
+      - CreateNamespace=true
+      - ApplyOutOfSyncOnly=true
+    {{ if .Values.oncall.autosync }}
+    automated:
+      prune: true
+      # selfHeal: false
+    {{ end }}
+  sources:
+#  - repoURL: {{ .Values.cluster_config.manifests }}
+#    path: {{ .Values.cluster_config.policies }}/oncall
+#    targetRevision: HEAD
+  - repoURL: 'https://grafana.github.io/helm-charts'
+    targetRevision: '{{ .Values.oncall.version }}'
+    chart: oncall
+    helm:
+      values: |
+        base_url: oncall.{{ .Values.cluster_config.domain }}
+        base_url_protocol: https
+        image:
+          repository: grafana/oncall
+          pullPolicy: IfNotPresent
+        ingress-nginx:
+           enabled: false
+        cert-manager:
+           enabled: false
+           installCRDs: false
+        ingress:
+          enabled: true
+          ingressClassName: nginx
+          annotations:
+            cert-manager.io/cluster-issuer: {{ .Values.cluster_config.ingress_clusterissuer }}
+            nginx.ingress.kubernetes.io/ssl-redirect: "true"
+            {{- with .Values.cluster_config.ingress_whitelist_ips }}
+            nginx.ingress.kubernetes.io/whitelist-source-range: {{ join "," . }}
+            {{- end }}
+          path: /
+          pathType: Prefix
+          hosts:
+            - oncall.{{ .Values.cluster_config.domain }}
+          tls:
+            - secretName: oncall-tls
+              hosts:
+                - oncall.{{ .Values.cluster_config.domain }}
+
+        {{- if .Values.oncall.slack }}
+        oncall:
+          slack:
+            enabled: true
+            clientId: {{ .Values.oncall.slack.clientId }}
+            clientSecret: {{ .Values.oncall.slack.clientSecret }}
+            signingSecret: {{ .Values.oncall.slack.signingSecret }}
+            redirectHost: https://oncall.{{ .Values.cluster_config.domain }}
+        {{- end }}
+
+        {{- if .Values.oncall.smtp }}
+        oncall:
+          smtp:
+            enabled: true
+            host: {{ .Values.oncall.smtp.host }}
+            port: {{ .Values.oncall.smtp.port }}
+            username: {{ .Values.oncall.smtp.username }}
+            password: {{ .Values.oncall.smtp.password }}
+            tls: {{ .Values.oncall.smtp.tls }}
+            fromEmail: {{ .Values.oncall.smtp.fromEmail }}
+        {{- end }}
+        database:
+          type: postgresql
+        postgresql:
+          enabled: true
+          auth:
+            database: oncall
+        mariadb:
+          enabled: false
+        redis:
+          enabled: true
+        broker:
+           type: rabbitmq
+        rabbitmq:
+          enabled: true
+        grafana:
+          enabled: false
+        externalGrafana:
+          url: {{ .Values.oncall.externalGrafana.url }}
+{{- end }}