feat: openfga helmfile

values/openfga/manifests/migration-job.yaml

@@ -1,41 +0,0 @@
-apiVersion: batch/v1
-kind: Job
-metadata:
-  name: staging-openfga-migrate
-  labels:
-    helm.sh/chart: openfga-0.2.12
-    app.kubernetes.io/name: openfga
-    app.kubernetes.io/instance: staging
-    app.kubernetes.io/version: "v1.5.9"
-    app.kubernetes.io/managed-by: Helm
-  annotations:
-    helm.sh/hook: post-install, post-upgrade, post-rollback, post-delete
-    helm.sh/hook-delete-policy: before-hook-creation
-    helm.sh/hook-weight: "-5"
-spec:
-  template:
-    metadata:
-      annotations:
-        helm.sh/hook: post-install, post-upgrade, post-rollback, post-delete
-        helm.sh/hook-delete-policy: before-hook-creation
-        helm.sh/hook-weight: "-5"
-    spec:
-      serviceAccountName: staging-openfga
-      containers:
-        - name: migrate-database
-          securityContext:
-            {}
-          image: "openfga/openfga:v1.5.9"
-          args: ["migrate"]
-          env:
-            - name: OPENFGA_DATASTORE_ENGINE
-              value: "postgres"
-            - name: OPENFGA_DATASTORE_URI
-              valueFrom:
-                secretKeyRef:
-                  name: "staging-openfga-db-superuser"
-                  key: "uri"
-          resources:
-            {}
-      restartPolicy: Never
-  backoffLimit: 1

values/openfga/manifests/openfga.yaml

@@ -1,9 +1,8 @@
 {{- if .Values.clusterConfig.argo.enabled }}
-{{- range .Values.openfga.envs }}
 apiVersion: argoproj.io/v1alpha1
 kind: Application
 metadata:
-  name: {{ . }}-openfga 
+  name: {{ .Values.openfga.env }}-openfga
   namespace: argocd
   annotations:
     argocd.argoproj.io/sync-options: SkipDryRunOnMissingResource=true
@@ -12,17 +11,31 @@ metadata:
 spec:
   destination:
     namespace: openfga
-    server: 'https://kubernetes.default.svc'
+    server: https://kubernetes.default.svc
+  project: sys
   sources:
   - repoURL: {{ .Values.clusterConfig.manifests }}
     targetRevision: HEAD
-    path: helmfiles/openfga
+    path: helmfile.d
     plugin:
-      name: helmfile
+      name: helmfile-cmp
       env:
       - name: CLUSTER_NAME
         value: {{ .Values.clusterConfig.cluster }}
-  project: sys
+      - name: HELMFILE_ENVIRONMENT
+        value: {{ .Values.openfga.env }}
+      - name: HELMFILE_FILE_PATH
+        value: openfga.yaml.gotmpl
+  # - repoURL: https://openfga.github.io/helm-charts
+  #   targetRevision: 0.2.35
+  #   chart: openfga
+  #   helm:
+  #     valueFiles:
+  #     - $values/values/openfga/values/values.yaml
+  #     - $values/values/openfga/values/values-{{ .Values.openfga.env }}.yaml
+  # - repoURL: https://gitlab.com/oceanbox/manifests.git
+  #   targetRevision: main
+  #   ref: values
   syncPolicy:
     managedNamespaceMetadata:
       labels:
@@ -37,4 +50,3 @@ spec:
       # selfHeal: false
     {{- end }}
 {{- end }}
-{{- end }}

values/openfga/manifests/postgres-secret.yaml

@@ -1,19 +0,0 @@
-apiVersion: v1
-stringData:
-  postgres-password: blT6zzv37KyFvzb1Ct3bhfAwPxhTG2fBO1EiIASQWI4wnEOB8AOWvmVa2sogGexr
-  uri:  postgres://postgres:blT6zzv37KyFvzb1Ct3bhfAwPxhTG2fBO1EiIASQWI4wnEOB8AOWvmVa2sogGexr@prod-openfga-rw.openfga.svc.cluster.local:5432/postgres?sslmode=disable
-kind: Secret
-metadata:
-  name: prod-openfga-postgresql
-  namespace: openfga
-type: Opaque
----
-apiVersion: v1
-stringData:
-  postgres-password: iAnMHs3eEuQM0D4jeAP1dwEoLWUBSwNXwhBuPDOgmfoeZ58iV0zogQ77U3GNUbwa
-  uri:  postgres://postgres:iAnMHs3eEuQM0D4jeAP1dwEoLWUBSwNXwhBuPDOgmfoeZ58iV0zogQ77U3GNUbwa@staging-openfga-rw.openfga.svc.cluster.local:5432/postgres?sslmode=disable
-kind: Secret
-metadata:
-  name: staging-openfga-postgresql
-  namespace: openfga
-type: Opaque