wip: helmfileify

values/openfga/kustomize/base/kustomization.yaml

@@ -0,0 +1,4 @@
+apiVersion: kustomize.config.k8s.io/v1beta1
+kind: Kustomization
+resources:
+  - _manifest.yaml

values/openfga/manifests/openfga.yaml

@@ -0,0 +1,40 @@
+{{- if .Values.clusterConfig.argo.enabled }}
+{{- range .Values.openfga.envs }}
+apiVersion: argoproj.io/v1alpha1
+kind: Application
+metadata:
+  name: {{ . }}-openfga 
+  namespace: argocd
+  annotations:
+    argocd.argoproj.io/sync-options: SkipDryRunOnMissingResource=true
+  finalizers:
+  - resources-finalizer.argocd.argoproj.io
+spec:
+  destination:
+    namespace: openfga
+    server: 'https://kubernetes.default.svc'
+  sources:
+  - repoURL: {{ .Values.clusterConfig.manifests }}
+    targetRevision: HEAD
+    path: helmfiles/openfga
+    plugin:
+      name: helmfile
+      env:
+      - name: CLUSTER_NAME
+        value: {{ .Values.clusterConfig.cluster }}
+  project: sys
+  syncPolicy:
+    managedNamespaceMetadata:
+      labels:
+        component: aux
+    syncOptions:
+      - CreateNamespace=true
+      - ApplyOutOfSyncOnly=true
+      # - ServerSideApply=true
+    {{- if .Values.openfga.autosync }}
+    automated:
+      prune: true
+      # selfHeal: false
+    {{- end }}
+{{- end }}
+{{- end }}

values/openfga/values.yaml.gotmpl

@@ -0,0 +1,5 @@
+openfga:
+  enabled: true
+  envs:
+  - prod
+  - staging

values/openfga/values/openfga-prod.yaml.gotmpl

@@ -5,23 +5,23 @@ datastore:
   uriSecret: prod-openfga-db-superuser
   migrationType: initContainer
 
-postgresql:
-  enabled: false
-
-playground:
-  enabled: false
-
-telemetry:
-  metrics:
-    enabled: true
-    serviceMonitor:
-      enabled: true
-    enableRPCHistograms: true
-  trace:
-    enabled: true
-    otlp:
-      endpoint: opentelemetry-collector.otel.svc.cluster.local:4317
-    sampleRatio: 0.1
+#postgresql:
+#  enabled: false
+#
+#playground:
+#  enabled: false
+#
+#telemetry:
+#  metrics:
+#    enabled: true
+#    serviceMonitor:
+#      enabled: true
+#    enableRPCHistograms: true
+#  trace:
+#    enabled: true
+#    otlp:
+#      endpoint: opentelemetry-collector.otel.svc.cluster.local:4317
+#    sampleRatio: 0.1
 
 ingress:
   enabled: true
@@ -55,3 +55,4 @@ extraObjects:
      backup:
        retentionPolicy: 60d
        target: prefer-standby
+

values/openfga/values/openfga-staging.yaml.gotmpl

@@ -5,23 +5,23 @@ datastore:
   uriSecret: staging-openfga-db-superuser
   migrationType: initContainer
 
-postgresql:
-  enabled: false
-
-playground:
-  enabled: false
-
-telemetry:
-  metrics:
-    enabled: true
-    serviceMonitor:
-      enabled: true
-    enableRPCHistograms: true
-  trace:
-    enabled: true
-    otlp:
-      endpoint: opentelemetry-collector.otel.svc.cluster.local:4317
-    sampleRatio: 0.1
+#postgresql:
+#  enabled: false
+#
+#playground:
+#  enabled: false
+#
+#telemetry:
+#  metrics:
+#    enabled: true
+#    serviceMonitor:
+#      enabled: true
+#    enableRPCHistograms: true
+#  trace:
+#    enabled: true
+#    otlp:
+#      endpoint: opentelemetry-collector.otel.svc.cluster.local:4317
+#    sampleRatio: 0.1
 
 ingress:
   enabled: true
@@ -76,3 +76,4 @@ extraObjects:
         sslRootCert:
           key: ca.crt
           name: prod-openfga-db-ca
+

values/openfga/values/openfga.yaml.gotmpl

@@ -0,0 +1,17 @@
+postgresql:
+  enabled: false
+
+playground:
+  enabled: false
+
+telemetry:
+  metrics:
+    enabled: true
+    serviceMonitor:
+      enabled: true
+    enableRPCHistograms: true
+  trace:
+    enabled: true
+    otlp:
+      endpoint: opentelemetry-collector.otel.svc.cluster.local:4317
+    sampleRatio: 0.1