447ff93ccf
Argo CD repo-server needs the forgejo.forgejo.svc.cluster.local host key in its known_hosts to clone the git repos over SSH. Adding it to configs.ssh.extraHosts so the helm-managed ssh-known-hosts-cm renders the entry from git and does not drift when the argocd Application syncs. Co-Authored-By: Paperclip <noreply@paperclip.ing>
84 lines
2.6 KiB
YAML
84 lines
2.6 KiB
YAML
global:
|
|
image:
|
|
tag: v3.5.1
|
|
|
|
configs:
|
|
cm:
|
|
url: https://argo.basicstack.de
|
|
application.instanceLabelKey: argocd.argoproj.io/instance
|
|
resource.exclusions: |
|
|
- apiGroups: [cilium.io]
|
|
kinds: [CiliumIdentity, CiliumEndpoint, CiliumEndpointSlice]
|
|
- apiGroups: [kyverno.io, reports.kyverno.io, wgpolicyk8s.io]
|
|
kinds: [PolicyReport, ClusterPolicyReport, EphemeralReport,
|
|
ClusterEphemeralReport, AdmissionReport, ClusterAdmissionReport,
|
|
BackgroundScanReport, ClusterBackgroundScanReport, UpdateRequest]
|
|
oidc.config: |
|
|
name: Pocket ID
|
|
issuer: https://auth.basicstack.de
|
|
clientID: $oidc.pocketid.clientId
|
|
clientSecret: $oidc.pocketid.clientSecret
|
|
requestedScopes: [openid, profile, email, groups]
|
|
requestedIDTokenClaims:
|
|
groups: {essential: true}
|
|
|
|
rbac:
|
|
policy.default: role:readonly
|
|
policy.csv: |
|
|
g, argo_admins, role:admin
|
|
p, role:admin, applications, *, */*, allow
|
|
p, role:admin, clusters, *, *, allow
|
|
p, role:admin, repositories, *, *, allow
|
|
p, role:admin, projects, *, *, allow
|
|
p, role:admin, accounts, *, *, allow
|
|
p, role:admin, gpgkeys, *, *, allow
|
|
p, role:admin, certificates, *, *, allow
|
|
p, role:admin, exec, *, *, allow
|
|
|
|
ssh:
|
|
extraHosts: |
|
|
forgejo.forgejo.svc.cluster.local ssh-rsa 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
|
|
|
|
controller:
|
|
resources:
|
|
requests:
|
|
memory: 256Mi
|
|
limits:
|
|
memory: 512Mi
|
|
|
|
repoServer:
|
|
resources:
|
|
requests:
|
|
memory: 256Mi
|
|
limits:
|
|
memory: 512Mi
|
|
|
|
server:
|
|
resources:
|
|
requests:
|
|
memory: 128Mi
|
|
limits:
|
|
memory: 256Mi
|
|
ingress:
|
|
enabled: false
|
|
|
|
redis:
|
|
resources:
|
|
requests:
|
|
memory: 128Mi
|
|
limits:
|
|
memory: 256Mi
|
|
|
|
notifications:
|
|
resources:
|
|
requests:
|
|
memory: 64Mi
|
|
limits:
|
|
memory: 128Mi
|
|
|
|
applicationSet:
|
|
resources:
|
|
requests:
|
|
memory: 128Mi
|
|
limits:
|
|
memory: 256Mi
|