basicstack/stack.basicstack.de
2
0
Fork 0
Code Issues Pull requests 1 Projects Releases Packages Wiki Activity Actions
stack.basicstack.de/apps/app-argocd.yaml

30 lines
755 B
YAML
Raw Normal View History

Enable Argo CD self-management via dedicated Application Create app-argocd Application to manage argocd resources using kustomize. Update stack Application exclusion to allow Application manifests while excluding direct resource management (prevents namespace errors from directory recursion bypassing kustomization). Architecture: - stack Application manages Application manifests (app-*.yaml) - argocd Application manages argocd resources via kustomize - Both Applications can self-manage through this pattern Co-Authored-By: Paperclip <noreply@paperclip.ing>
2026-07-12 09:25:19 +00:00
apiVersion: argoproj.io/v1alpha1
kind: Application
metadata:
name: argocd
namespace: argocd
feat(argocd): switch to community Helm chart (DEV-519) Replace the vendored ~33k-line apps/argocd/argocd-install.yaml with the argoproj/argo-helm chart argo-cd 10.4.0 (app v3.5.1). Values live in apps/argocd/values.yaml; the local kustomize wrapper now only carries the Traefik ingress and the sealed secrets. The root apps/app-argocd.yaml Application becomes multi-source (chart + this repo as $values), enables ServerSideApply + ApplyOutOfSyncOnly, and pins the resources-finalizer explicitly. Behavior-equivalent to the previous install: same URL, OIDC (Pocket ID), argo_admins RBAC mapping, resource.exclusions list, and per-component memory limits (DEV-281). Ingress is disabled in the chart; ours stays in kustomize with cert-manager letsencrypt-prod annotations. README.md updated with the Helm bump procedure. argocd-install.yaml removed. Verified locally: helm template argocd argo/argo-cd --version 10.4.0 \ -f apps/argocd/values.yaml -n argocd # renders 34k lines, image: quay.io/argoproj/argocd:v3.5.1 kustomize build apps/argocd/ # renders 1 Ingress + 3 SealedSecrets, no errors Refs: DEV-521, plan DEV-519 §3, §8. Co-Authored-By: Paperclip <noreply@paperclip.ing>
2026-08-23 08:32:23 +00:00
finalizers:
- resources-finalizer.argocd.argoproj.io
Enable Argo CD self-management via dedicated Application Create app-argocd Application to manage argocd resources using kustomize. Update stack Application exclusion to allow Application manifests while excluding direct resource management (prevents namespace errors from directory recursion bypassing kustomization). Architecture: - stack Application manages Application manifests (app-*.yaml) - argocd Application manages argocd resources via kustomize - Both Applications can self-manage through this pattern Co-Authored-By: Paperclip <noreply@paperclip.ing>
2026-07-12 09:25:19 +00:00
spec:
project: default
destination:
server: https://kubernetes.default.svc
namespace: argocd
feat(argocd): switch to community Helm chart (DEV-519) Replace the vendored ~33k-line apps/argocd/argocd-install.yaml with the argoproj/argo-helm chart argo-cd 10.4.0 (app v3.5.1). Values live in apps/argocd/values.yaml; the local kustomize wrapper now only carries the Traefik ingress and the sealed secrets. The root apps/app-argocd.yaml Application becomes multi-source (chart + this repo as $values), enables ServerSideApply + ApplyOutOfSyncOnly, and pins the resources-finalizer explicitly. Behavior-equivalent to the previous install: same URL, OIDC (Pocket ID), argo_admins RBAC mapping, resource.exclusions list, and per-component memory limits (DEV-281). Ingress is disabled in the chart; ours stays in kustomize with cert-manager letsencrypt-prod annotations. README.md updated with the Helm bump procedure. argocd-install.yaml removed. Verified locally: helm template argocd argo/argo-cd --version 10.4.0 \ -f apps/argocd/values.yaml -n argocd # renders 34k lines, image: quay.io/argoproj/argocd:v3.5.1 kustomize build apps/argocd/ # renders 1 Ingress + 3 SealedSecrets, no errors Refs: DEV-521, plan DEV-519 §3, §8. Co-Authored-By: Paperclip <noreply@paperclip.ing>
2026-08-23 08:32:23 +00:00
sources:
- repoURL: https://argoproj.github.io/argo-helm
chart: argo-cd
targetRevision: 10.4.0
helm:
releaseName: argocd
valueFiles:
- $values/apps/argocd/values.yaml
- repoURL: git@forgejo.forgejo.svc.cluster.local:basicstack/stack.basicstack.de.git
targetRevision: main
path: apps/argocd
ref: values
Enable Argo CD self-management via dedicated Application Create app-argocd Application to manage argocd resources using kustomize. Update stack Application exclusion to allow Application manifests while excluding direct resource management (prevents namespace errors from directory recursion bypassing kustomization). Architecture: - stack Application manages Application manifests (app-*.yaml) - argocd Application manages argocd resources via kustomize - Both Applications can self-manage through this pattern Co-Authored-By: Paperclip <noreply@paperclip.ing>
2026-07-12 09:25:19 +00:00
syncPolicy:
syncOptions:
feat(argocd): switch to community Helm chart (DEV-519) Replace the vendored ~33k-line apps/argocd/argocd-install.yaml with the argoproj/argo-helm chart argo-cd 10.4.0 (app v3.5.1). Values live in apps/argocd/values.yaml; the local kustomize wrapper now only carries the Traefik ingress and the sealed secrets. The root apps/app-argocd.yaml Application becomes multi-source (chart + this repo as $values), enables ServerSideApply + ApplyOutOfSyncOnly, and pins the resources-finalizer explicitly. Behavior-equivalent to the previous install: same URL, OIDC (Pocket ID), argo_admins RBAC mapping, resource.exclusions list, and per-component memory limits (DEV-281). Ingress is disabled in the chart; ours stays in kustomize with cert-manager letsencrypt-prod annotations. README.md updated with the Helm bump procedure. argocd-install.yaml removed. Verified locally: helm template argocd argo/argo-cd --version 10.4.0 \ -f apps/argocd/values.yaml -n argocd # renders 34k lines, image: quay.io/argoproj/argocd:v3.5.1 kustomize build apps/argocd/ # renders 1 Ingress + 3 SealedSecrets, no errors Refs: DEV-521, plan DEV-519 §3, §8. Co-Authored-By: Paperclip <noreply@paperclip.ing>
2026-08-23 08:32:23 +00:00
- CreateNamespace=true
- ServerSideApply=true
- ApplyOutOfSyncOnly=true
Reference in a new issue Copy permalink