e8ab9d4674
Argo CD server was returning HTTP 307 redirect loop behind Traefik because it was serving HTTPS on port 8080 while the ingress terminates TLS. Setting server.insecure so the server speaks plain HTTP internally. Co-Authored-By: Paperclip <noreply@paperclip.ing>
87 lines
2.7 KiB
YAML
87 lines
2.7 KiB
YAML
global:
|
|
image:
|
|
tag: v3.5.1
|
|
|
|
configs:
|
|
cm:
|
|
url: https://argo.basicstack.de
|
|
application.instanceLabelKey: argocd.argoproj.io/instance
|
|
resource.exclusions: |
|
|
- apiGroups: [cilium.io]
|
|
kinds: [CiliumIdentity, CiliumEndpoint, CiliumEndpointSlice]
|
|
- apiGroups: [kyverno.io, reports.kyverno.io, wgpolicyk8s.io]
|
|
kinds: [PolicyReport, ClusterPolicyReport, EphemeralReport,
|
|
ClusterEphemeralReport, AdmissionReport, ClusterAdmissionReport,
|
|
BackgroundScanReport, ClusterBackgroundScanReport, UpdateRequest]
|
|
oidc.config: |
|
|
name: Pocket ID
|
|
issuer: https://auth.basicstack.de
|
|
clientID: $oidc.pocketid.clientId
|
|
clientSecret: $oidc.pocketid.clientSecret
|
|
requestedScopes: [openid, profile, email, groups]
|
|
requestedIDTokenClaims:
|
|
groups: {essential: true}
|
|
|
|
rbac:
|
|
policy.default: role:readonly
|
|
policy.csv: |
|
|
g, argo_admins, role:admin
|
|
p, role:admin, applications, *, */*, allow
|
|
p, role:admin, clusters, *, *, allow
|
|
p, role:admin, repositories, *, *, allow
|
|
p, role:admin, projects, *, *, allow
|
|
p, role:admin, accounts, *, *, allow
|
|
p, role:admin, gpgkeys, *, *, allow
|
|
p, role:admin, certificates, *, *, allow
|
|
p, role:admin, exec, *, *, allow
|
|
|
|
params:
|
|
server.insecure: "true"
|
|
|
|
ssh:
|
|
extraHosts: |
|
|
forgejo.forgejo.svc.cluster.local ssh-rsa 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
|
|
|
|
controller:
|
|
resources:
|
|
requests:
|
|
memory: 256Mi
|
|
limits:
|
|
memory: 512Mi
|
|
|
|
repoServer:
|
|
resources:
|
|
requests:
|
|
memory: 256Mi
|
|
limits:
|
|
memory: 512Mi
|
|
|
|
server:
|
|
resources:
|
|
requests:
|
|
memory: 128Mi
|
|
limits:
|
|
memory: 256Mi
|
|
ingress:
|
|
enabled: false
|
|
|
|
redis:
|
|
resources:
|
|
requests:
|
|
memory: 128Mi
|
|
limits:
|
|
memory: 256Mi
|
|
|
|
notifications:
|
|
resources:
|
|
requests:
|
|
memory: 64Mi
|
|
limits:
|
|
memory: 128Mi
|
|
|
|
applicationSet:
|
|
resources:
|
|
requests:
|
|
memory: 128Mi
|
|
limits:
|
|
memory: 256Mi
|