wip: Match chart to k8s state

values/argo/values/argocd.yaml.gotmpl

@@ -135,10 +135,10 @@ controller:
       enabled: true
   resources:
     limits:
-      memory: "1000Mi"
+      memory: {{ .Values.argocd.resources.controller.memory  | default "1000Mi" }}
     requests:
-      cpu: "250m"
-      memory: "1000Mi"
+      cpu: {{ .Values.argocd.resources.controller.cpu  | default "250m" }}
+      memory: {{ .Values.argocd.resources.controller.memory  | default "1000Mi" }}
 
 # Mount azure ca as file for SAML auth
 dex:
@@ -175,6 +175,25 @@ repoServer:
       enabled: true
   {{- range .Values.argocd.repoServers }}
   extraContainers:
+  - command:
+    - /var/run/argocd/argocd-cmp-server
+    image: registry.gitlab.com/oceanbox/manifests/helmfile-cmp:latest
+    imagePullPolicy: Always
+    name: helmfile-cmp
+    securityContext:
+      runAsNonRoot: true
+      runAsUser: 999
+    terminationMessagePath: /dev/termination-log
+    terminationMessagePolicy: File
+    volumeMounts:
+    - mountPath: /var/run/argocd
+      name: var-files
+    - mountPath: /home/argocd/cmp-server/plugins
+      name: plugins
+    - mountPath: /tmp
+      name: cmp-tmp
+    - mountPath: /helm-working-dir
+      name: helm-working-dir
   - command:
     - /var/run/argocd/argocd-cmp-server
     image: {{ .image }}
@@ -196,10 +215,40 @@ repoServer:
   - name: cmp-tmp
     emptyDir: {}
   imagePullSecrets:
-    {{- range .imagePullSecret }}
-    - name: {{ .name }}
+    {{- range .imagePullSecrets }}
+    - name: {{ . }}
     {{- end }}
   {{- end }}
+  initContainers:
+  - command:
+    - /bin/sh
+    - /plugin/init-helm-repos.sh
+    env:
+    - name: OCEANBOX_HELM_ACCESS_TOKEN
+      valueFrom:
+        secretKeyRef:
+          key: token
+          name: oceanbox-helm
+          optional: false
+    image: registry.gitlab.com/oceanbox/manifests/kustomize-helm-with-rewrite:latest
+    imagePullPolicy: Always
+    name: init-helm-repos
+    resources: {}
+    securityContext:
+      allowPrivilegeEscalation: false
+      capabilities:
+        drop:
+        - ALL
+      readOnlyRootFilesystem: true
+      runAsNonRoot: true
+      runAsUser: 999
+      seccompProfile:
+        type: RuntimeDefault
+    terminationMessagePath: /dev/termination-log
+    terminationMessagePolicy: File
+    volumeMounts:
+    - mountPath: /helm-working-dir
+      name: helm-working-dir
 
 # Configuration for argocd server instance
 server: