reorg

2026-02-08 10:42:10 +01:00
parent a42e94672e
commit bec3b6310a
13 changed files with 56 additions and 42 deletions
--- a/argocd/apps/cert-manager-application.yaml
+++ b/argocd/apps/cert-manager-application.yaml
@@ -1,95 +0,0 @@
-apiVersion: argoproj.io/v1alpha1
-kind: Application
-metadata:
-  name: cert-manager
-  namespace: argocd
-  labels:
-    app.kubernetes.io/name: cert-manager
-    app.kubernetes.io/part-of: platform
-    app.kubernetes.io/managed-by: argocd
-  finalizers:
-  - resources-finalizer.argocd.argoproj.io
-spec:
-  project: default
-
-  source:
-    repoURL: https://charts.jetstack.io
-    chart: cert-manager
-    targetRevision: "v1.14.0"
-
-    helm:
-      values: |
-        # Install CustomResourceDefinitions
-        installCRDs: true
-
-        # Global configuration
-        global:
-          leaderElection:
-            namespace: cert-manager
-
-        # Webhook configuration
-        webhook:
-          enabled: true
-          replicaCount: 1
-          timeoutSeconds: 10
-          # Disable Istio sidecar injection for webhook to avoid mTLS issues
-          podAnnotations:
-            sidecar.istio.io/inject: "false"
-
-        # CA Injector
-        caInjector:
-          enabled: true
-          replicaCount: 1
-          # Disable Istio sidecar injection for CA injector
-          podAnnotations:
-            sidecar.istio.io/inject: "false"
-
-        # Disable Istio sidecar for main controller pods
-        podAnnotations:
-          sidecar.istio.io/inject: "false"
-
-        # Security context
-        podSecurityPolicy:
-          enabled: false
-
-        # Resources
-        resources:
-          requests:
-            cpu: 50m
-            memory: 64Mi
-          limits:
-            cpu: 100m
-            memory: 128Mi
-
-        # Service account
-        serviceAccount:
-          create: true
-          name: cert-manager
-
-        # Enable debug logging if needed (set to false for production)
-        logLevel: 2
-
-  destination:
-    server: https://kubernetes.default.svc
-    namespace: cert-manager
-
-  # Patch namespace to disable Istio injection
-  syncPolicy:
-    automated:
-      prune: true
-      selfHeal: true
-      allowEmpty: false
-
-    syncOptions:
-    - CreateNamespace=true
-    - Validate=true
-    - ServerSideApply=true
-    - Replace=false
-
-    timeout: 300s
-    retry:
-      limit: 5
-      backoff:
-        duration: 5s
-        factor: 2
-        maxDuration: 3m
--- a/argocd/apps/cluster-resources-application.yaml
+++ b/argocd/apps/cluster-resources-application.yaml
@@ -1,45 +0,0 @@
-apiVersion: argoproj.io/v1alpha1
-kind: Application
-metadata:
-  name: cluster-resources
-  namespace: argocd
-  labels:
-    app.kubernetes.io/name: cluster-resources
-    app.kubernetes.io/part-of: platform
-    app.kubernetes.io/managed-by: argocd
-  annotations:
-    argocd.argoproj.io/sync-wave: "1"
-  finalizers:
-  - resources-finalizer.argocd.argoproj.io
-spec:
-  project: default
-
-  source:
-    repoURL: https://github.com/snothub/scaling-parakeet.git
-    targetRevision: HEAD
-    path: cluster-resources
-
-  destination:
-    server: https://kubernetes.default.svc
-    namespace: argocd
-
-  syncPolicy:
-    automated:
-      prune: true
-      selfHeal: true
-      allowEmpty: false
-
-    syncOptions:
-    - CreateNamespace=true
-    - Validate=true
-    - ServerSideApply=true
-    - Replace=false
-    - ApplyOutOfSyncOnly=false
-
-    timeout: 300s
-    retry:
-      limit: 5
-      backoff:
-        duration: 5s
-        factor: 2
-        maxDuration: 3m
--- a/argocd/apps/fluent-bit.yaml
+++ b/argocd/apps/fluent-bit.yaml
@@ -1,47 +0,0 @@
-apiVersion: argoproj.io/v1alpha1
-kind: Application
-metadata:
-  name: fluent-bit
-  namespace: argocd
-  labels:
-    app.kubernetes.io/name: fluent-bit
-    app.kubernetes.io/part-of: monitoring-stack
-    app.kubernetes.io/managed-by: argocd
-  finalizers:
-  - resources-finalizer.argocd.argoproj.io
-spec:
-  project: default
-
-  sources:
-  - repoURL: https://fluent.github.io/helm-charts
-    chart: fluent-bit
-    targetRevision: 0.47.10
-    helm:
-      releaseName: fluent-bit
-      valueFiles:
-      - $values/argocd/values/fluent-bit-values.yaml
-
-  - repoURL: https://github.com/YOUR_ORG/YOUR_GITOPS_REPO.git
-    targetRevision: main
-    ref: values
-
-  destination:
-    server: https://kubernetes.default.svc
-    namespace: monitoring
-
-  syncPolicy:
-    automated:
-      prune: true
-      selfHeal: true
-      allowEmpty: false
-    syncOptions:
-    - CreateNamespace=true
-    - Validate=true
-    - ServerSideApply=true
-    timeout: 300s
-    retry:
-      limit: 5
-      backoff:
-        duration: 5s
-        factor: 2
-        maxDuration: 3m
--- a/argocd/apps/grafana.yaml
+++ b/argocd/apps/grafana.yaml
@@ -1,47 +0,0 @@
-apiVersion: argoproj.io/v1alpha1
-kind: Application
-metadata:
-  name: grafana
-  namespace: argocd
-  labels:
-    app.kubernetes.io/name: grafana
-    app.kubernetes.io/part-of: monitoring-stack
-    app.kubernetes.io/managed-by: argocd
-  finalizers:
-  - resources-finalizer.argocd.argoproj.io
-spec:
-  project: default
-
-  sources:
-  - repoURL: https://grafana.github.io/helm-charts
-    chart: grafana
-    targetRevision: "8.0.0"
-    helm:
-      releaseName: grafana
-      valueFiles:
-      - $values/argocd/values/grafana-values.yaml
-
-  - repoURL: https://github.com/YOUR_ORG/YOUR_GITOPS_REPO.git
-    targetRevision: main
-    ref: values
-
-  destination:
-    server: https://kubernetes.default.svc
-    namespace: monitoring
-
-  syncPolicy:
-    automated:
-      prune: true
-      selfHeal: true
-      allowEmpty: false
-    syncOptions:
-    - CreateNamespace=true
-    - Validate=true
-    - ServerSideApply=true
-    timeout: 300s
-    retry:
-      limit: 5
-      backoff:
-        duration: 5s
-        factor: 2
-        maxDuration: 3m
--- a/argocd/apps/kyverno.yaml
+++ b/argocd/apps/kyverno.yaml
@@ -1,43 +0,0 @@
-apiVersion: argoproj.io/v1alpha1
-kind: Application
-metadata:
-  name: kyverno
-  namespace: argocd
-  labels:
-    app.kubernetes.io/name: kyverno
-    app.kubernetes.io/part-of: platform
-    app.kubernetes.io/managed-by: argocd
-  annotations:
-    argocd.argoproj.io/sync-wave: "0"
-  finalizers:
-  - resources-finalizer.argocd.argoproj.io
-spec:
-  project: default
-
-  source:
-    chart: kyverno
-    repoURL: https://kyverno.github.io/kyverno/
-    targetRevision: v1.13.0 # Update to latest stable version
-    helm:
-      releaseName: kyverno
-
-  destination:
-    server: https://kubernetes.default.svc
-    namespace: kyverno
-
-  syncPolicy:
-    automated:
-      prune: true
-      selfHeal: true
-      allowEmpty: false
-    syncOptions:
-    - CreateNamespace=true
-    - Validate=true
-    - ServerSideApply=true
-    timeout: 300s
-    retry:
-      limit: 5
-      backoff:
-        duration: 5s
-        factor: 2
-        maxDuration: 3m
--- a/argocd/apps/loki.yaml
+++ b/argocd/apps/loki.yaml
@@ -1,47 +0,0 @@
-apiVersion: argoproj.io/v1alpha1
-kind: Application
-metadata:
-  name: loki
-  namespace: argocd
-  labels:
-    app.kubernetes.io/name: loki
-    app.kubernetes.io/part-of: monitoring-stack
-    app.kubernetes.io/managed-by: argocd
-  finalizers:
-  - resources-finalizer.argocd.argoproj.io
-spec:
-  project: default
-
-  sources:
-  - repoURL: https://grafana.github.io/helm-charts
-    chart: loki
-    targetRevision: "6.0.0"
-    helm:
-      releaseName: loki
-      valueFiles:
-      - $values/argocd/values/loki-values.yaml
-
-  - repoURL: https://github.com/YOUR_ORG/YOUR_GITOPS_REPO.git
-    targetRevision: main
-    ref: values
-
-  destination:
-    server: https://kubernetes.default.svc
-    namespace: monitoring
-
-  syncPolicy:
-    automated:
-      prune: true
-      selfHeal: true
-      allowEmpty: false
-    syncOptions:
-    - CreateNamespace=true
-    - Validate=true
-    - ServerSideApply=true
-    timeout: 300s
-    retry:
-      limit: 5
-      backoff:
-        duration: 5s
-        factor: 2
-        maxDuration: 3m
--- a/argocd/apps/prometheus.yaml
+++ b/argocd/apps/prometheus.yaml
@@ -1,47 +0,0 @@
-apiVersion: argoproj.io/v1alpha1
-kind: Application
-metadata:
-  name: prometheus
-  namespace: argocd
-  labels:
-    app.kubernetes.io/name: prometheus
-    app.kubernetes.io/part-of: monitoring-stack
-    app.kubernetes.io/managed-by: argocd
-  finalizers:
-  - resources-finalizer.argocd.argoproj.io
-spec:
-  project: default
-
-  sources:
-  - repoURL: https://prometheus-community.github.io/helm-charts
-    chart: prometheus
-    targetRevision: "65.0.0"
-    helm:
-      releaseName: prometheus
-      valueFiles:
-      - $values/argocd/values/prometheus-values.yaml
-
-  - repoURL: https://github.com/YOUR_ORG/YOUR_GITOPS_REPO.git
-    targetRevision: main
-    ref: values
-
-  destination:
-    server: https://kubernetes.default.svc
-    namespace: monitoring
-
-  syncPolicy:
-    automated:
-      prune: true
-      selfHeal: true
-      allowEmpty: false
-    syncOptions:
-    - CreateNamespace=true
-    - Validate=true
-    - ServerSideApply=true
-    timeout: 300s
-    retry:
-      limit: 5
-      backoff:
-        duration: 5s
-        factor: 2
-        maxDuration: 3m
--- a/argocd/apps/sealedsecrets.yaml
+++ b/argocd/apps/sealedsecrets.yaml
@@ -1,44 +0,0 @@
-apiVersion: argoproj.io/v1alpha1
-kind: Application
-metadata:
-  name: sealed-secrets
-  namespace: argocd
-  labels:
-    app.kubernetes.io/name: sealed-secrets
-    app.kubernetes.io/part-of: platform
-    app.kubernetes.io/managed-by: argocd
-  finalizers:
-  - resources-finalizer.argocd.argoproj.io
-spec:
-  project: default
-
-  source:
-    chart: sealed-secrets
-    repoURL: https://bitnami-labs.github.io/sealed-secrets
-    targetRevision: 2.16.2 # Update to latest stable version
-    helm:
-      releaseName: sealed-secrets
-      parameters:
-      - name: fullnameOverride
-        value: sealed-secrets-controller
-
-  destination:
-    server: https://kubernetes.default.svc
-    namespace: kube-system
-
-  syncPolicy:
-    automated:
-      prune: true
-      selfHeal: true
-      allowEmpty: false
-    syncOptions:
-    - CreateNamespace=false # kube-system already exists
-    - Validate=true
-    - ServerSideApply=true
-    timeout: 300s
-    retry:
-      limit: 5
-      backoff:
-        duration: 5s
-        factor: 2
-        maxDuration: 3m
--- a/argocd/apps/traefik-application.yaml
+++ b/argocd/apps/traefik-application.yaml
@@ -1,70 +0,0 @@
-apiVersion: argoproj.io/v1alpha1
-kind: Application
-metadata:
-  name: traefik
-  namespace: argocd
-  labels:
-    app.kubernetes.io/name: traefik
-    app.kubernetes.io/part-of: platform
-    app.kubernetes.io/managed-by: argocd
-  finalizers:
-  - resources-finalizer.argocd.argoproj.io
-spec:
-  project: default
-
-  source:
-    repoURL: https://traefik.github.io/charts
-    chart: traefik
-    targetRevision: "28.0.0"
-
-    helm:
-      values: |
-        deployment:
-          replicas: 2
-
-        service:
-          type: LoadBalancer
-          annotations:
-            service.beta.kubernetes.io/azure-load-balancer-health-probe-request-path: /ping
-
-        ingressClass:
-          enabled: true
-          isDefaultClass: true
-
-        # Configure entry points
-        entryPoints:
-          web:
-            address: :80
-            http:
-              redirections:
-                entrypoint:
-                  to: websecure
-                  scheme: https
-          websecure:
-            address: :443
-            http:
-              tls: {}
-
-  destination:
-    server: https://kubernetes.default.svc
-    namespace: traefik-system
-
-  syncPolicy:
-    automated:
-      prune: true
-      selfHeal: true
-      allowEmpty: false
-
-    syncOptions:
-    - CreateNamespace=true
-    - Validate=true
-    - ServerSideApply=true
-    - Replace=false
-
-    timeout: 300s
-    retry:
-      limit: 5
-      backoff:
-        duration: 5s
-        factor: 2
-        maxDuration: 3m
--- a/argocd/apps/trivy.yaml
+++ b/argocd/apps/trivy.yaml
@@ -1,44 +0,0 @@
-apiVersion: argoproj.io/v1alpha1
-kind: Application
-metadata:
-  name: trivy
-  namespace: argocd
-  labels:
-    app.kubernetes.io/name: trivy
-    app.kubernetes.io/part-of: platform
-    app.kubernetes.io/managed-by: argocd
-  finalizers:
-  - resources-finalizer.argocd.argoproj.io
-spec:
-  project: default
-
-  source:
-    chart: trivy-operator
-    repoURL: https://aquasecurity.github.io/helm-charts
-    targetRevision: v0.0.7 # Update to latest stable version
-    helm:
-      releaseName: trivy-operator
-      parameters:
-      - name: trivy.ignoreUnfixed
-        value: "true"
-
-  destination:
-    server: https://kubernetes.default.svc
-    namespace: kube-system
-
-  syncPolicy:
-    automated:
-      prune: true
-      selfHeal: true
-      allowEmpty: false
-    syncOptions:
-    - CreateNamespace=false # kube-system already exists
-    - Validate=true
-    - ServerSideApply=true
-    timeout: 300s
-    retry:
-      limit: 5
-      backoff:
-        duration: 5s
-        factor: 2
-        maxDuration: 3m