|
1 | 1 | ## Codefresh gitops runtime
|
2 |
| -  |
| 2 | +  |
3 | 3 |
|
4 | 4 | ## Prerequisites
|
5 | 5 |
|
@@ -27,7 +27,7 @@ We have created a helper utility to resolve this issue:
|
27 | 27 | The utility is packaged in a container image. Below are instructions on executing the utility using Docker:
|
28 | 28 |
|
29 | 29 | ```
|
30 |
| -docker run -v <output_dir>:/output quay.io/codefresh/gitops-runtime-private-registry-utils:0.7.0 <local_registry> |
| 30 | +docker run -v <output_dir>:/output quay.io/codefresh/gitops-runtime-private-registry-utils:0.11.0 <local_registry> |
31 | 31 | ```
|
32 | 32 | `output_dir` - is a local directory where the utility will output files. <br>
|
33 | 33 | `local_registry` - is your local registry where you want to mirror the images to
|
@@ -71,6 +71,7 @@ sealed-secrets:
|
71 | 71 |
|
72 | 72 | | Key | Type | Default | Description |
|
73 | 73 | |-----|------|---------|-------------|
|
| 74 | +| alice | string | `"bob"` | | |
74 | 75 | | app-proxy.affinity | object | `{}` | |
|
75 | 76 | | app-proxy.config.argoCdUrl | string | `nil` | ArgoCD Url. determined by chart logic. Do not change unless you are certain you need to |
|
76 | 77 | | app-proxy.config.argoCdUsername | string | `"admin"` | ArgoCD user to be used by app-proxy |
|
@@ -144,37 +145,16 @@ sealed-secrets:
|
144 | 145 | | app-proxy.serviceAccount.create | bool | `true` | |
|
145 | 146 | | app-proxy.serviceAccount.name | string | `"cap-app-proxy"` | |
|
146 | 147 | | app-proxy.tolerations | list | `[]` | |
|
| 148 | +| argo-cd | object | `{"applicationVersioning":{"enabled":true,"useApplicationConfiguration":true},"configs":{"cm":{"accounts.admin":"apiKey,login","application.resourceTrackingMethod":"annotation+label","timeout.reconciliation":"20s"},"params":{"application.namespaces":"cf-*","server.insecure":true}},"crds":{"install":true},"eventReporter":{"enabled":true,"replicas":3,"version":"v2"},"fullnameOverride":"argo-cd","notifications":{"bots":{"slack":{}},"enabled":true,"notifiers":{"service.webhook.cf-promotion-app-revision-changed-notifier":"url: http://gitops-operator:8082/app-revision-changed\nheaders:\n- name: Content-Type\n value: application/json\n"},"subscriptions":[{"recipients":["cf-promotion-app-revision-changed-notifier"],"triggers":["cf-promotion-on-deployed-trigger"]},{"recipients":["cf-promotion-app-revision-changed-notifier"],"triggers":["cf-promotion-on-out-of-sync-trigger"]}],"templates":{"template.cf-promotion-app-revision-changed-template":"webhook:\n cf-promotion-app-revision-changed-notifier:\n method: POST\n body: |\n {\n \"APP_NAMESPACE\": {{ .app.metadata.namespace | quote }},\n \"APP_NAME\": {{ .app.metadata.name | quote }},\n \"REPO_URL\": {{ call .repo.RepoURLToHTTPS .app.spec.source.repoURL | quote }},\n \"BRANCH\": {{ .app.spec.source.targetRevision | quote }},\n \"PATH\": {{ .app.spec.source.path | quote }},\n \"PREV_COMMIT_SHA\": {{ (index .app.status.history (sub (len .app.status.history) 2)).revision | quote }},\n \"CURRENT_COMMIT_SHA\": {{ .app.status.operationState.syncResult.revision | quote }}\n }\n"},"triggers":{"trigger.cf-promotion-on-deployed-trigger":"- description: Application is synced and healthy. Triggered once per commit.\n when: get(app.spec.syncPolicy, \"automated\") != nil && app.status.sync.status == \"Synced\" && app.status.health.status == \"Healthy\" && app.status.operationState.syncResult.revision != nil\n oncePer: app.status.operationState.syncResult.revision\n send:\n - cf-promotion-app-revision-changed-template\n","trigger.cf-promotion-on-out-of-sync-trigger":"- description: Application is out of sync (when autoHeal is off). Triggered once per commit.\n when: get(app.spec.syncPolicy, \"automated\") == nil && app.status.sync.status == \"OutOfSync\" && app.status.operationState.syncResult.revision != nil\n oncePer: app.status.operationState.syncResult.revision\n send:\n - cf-promotion-app-revision-changed-template\n"}}}` | ------------------------------------------------------------------------------------------------------------------- | |
147 | 149 | | argo-cd.applicationVersioning.enabled | bool | `true` | Enable application versioning |
|
148 | 150 | | argo-cd.applicationVersioning.useApplicationConfiguration | bool | `true` | Extract application version based on ApplicationConfiguration CRD |
|
149 |
| -| argo-cd.configs.cm."accounts.admin" | string | `"apiKey,login"` | | |
150 |
| -| argo-cd.configs.cm."application.resourceTrackingMethod" | string | `"annotation+label"` | | |
151 |
| -| argo-cd.configs.cm."timeout.reconciliation" | string | `"20s"` | | |
152 |
| -| argo-cd.configs.params."application.namespaces" | string | `"cf-*"` | | |
153 |
| -| argo-cd.configs.params."server.insecure" | bool | `true` | | |
154 |
| -| argo-cd.crds.install | bool | `true` | | |
155 | 151 | | argo-cd.eventReporter.enabled | bool | `true` | Installs new event reporter component to cluster |
|
156 | 152 | | argo-cd.eventReporter.replicas | int | `3` | Amount of shards to handle applications events |
|
157 | 153 | | argo-cd.eventReporter.version | string | `"v2"` | Switches between old and new reporter version. Possible values: v1, v2. For v2 `argo-cd.eventReporter.enabled=true` is required |
|
158 |
| -| argo-cd.fullnameOverride | string | `"argo-cd"` | | |
159 |
| -| argo-cd.notifications.bots.slack | object | `{}` | | |
160 |
| -| argo-cd.notifications.enabled | bool | `true` | | |
161 |
| -| argo-cd.notifications.notifiers."service.webhook.cf-promotion-app-revision-changed-notifier" | string | `"url: http://gitops-operator:8082/app-revision-changed\nheaders:\n- name: Content-Type\n value: application/json\n"` | | |
162 |
| -| argo-cd.notifications.subscriptions[0].recipients[0] | string | `"cf-promotion-app-revision-changed-notifier"` | | |
163 |
| -| argo-cd.notifications.subscriptions[0].triggers[0] | string | `"cf-promotion-on-deployed-trigger"` | | |
164 |
| -| argo-cd.notifications.subscriptions[1].recipients[0] | string | `"cf-promotion-app-revision-changed-notifier"` | | |
165 |
| -| argo-cd.notifications.subscriptions[1].triggers[0] | string | `"cf-promotion-on-out-of-sync-trigger"` | | |
166 |
| -| argo-cd.notifications.templates."template.cf-promotion-app-revision-changed-template" | string | `"webhook:\n cf-promotion-app-revision-changed-notifier:\n method: POST\n body: |\n {\n \"APP_NAMESPACE\": {{ .app.metadata.namespace | quote }},\n \"APP_NAME\": {{ .app.metadata.name | quote }},\n \"REPO_URL\": {{ call .repo.RepoURLToHTTPS .app.spec.source.repoURL | quote }},\n \"BRANCH\": {{ .app.spec.source.targetRevision | quote }},\n \"PATH\": {{ .app.spec.source.path | quote }},\n \"PREV_COMMIT_SHA\": {{ (index .app.status.history (sub (len .app.status.history) 2)).revision | quote }},\n \"CURRENT_COMMIT_SHA\": {{ .app.status.operationState.syncResult.revision | quote }}\n }\n"` | | |
167 |
| -| argo-cd.notifications.triggers."trigger.cf-promotion-on-deployed-trigger" | string | `"- description: Application is synced and healthy. Triggered once per commit.\n when: get(app.spec.syncPolicy, \"automated\") != nil && app.status.sync.status == \"Synced\" && app.status.health.status == \"Healthy\" && app.status.operationState.syncResult.revision != nil\n oncePer: app.status.operationState.syncResult.revision\n send:\n - cf-promotion-app-revision-changed-template\n"` | | |
168 |
| -| argo-cd.notifications.triggers."trigger.cf-promotion-on-out-of-sync-trigger" | string | `"- description: Application is out of sync (when autoHeal is off). Triggered once per commit.\n when: get(app.spec.syncPolicy, \"automated\") == nil && app.status.sync.status == \"OutOfSync\" && app.status.operationState.syncResult.revision != nil\n oncePer: app.status.operationState.syncResult.revision\n send:\n - cf-promotion-app-revision-changed-template\n"` | | |
169 |
| -| argo-events.crds.install | bool | `false` | | |
170 |
| -| argo-events.fullnameOverride | string | `"argo-events"` | | |
171 |
| -| argo-rollouts.controller.replicas | int | `1` | | |
172 |
| -| argo-rollouts.enabled | bool | `true` | | |
173 |
| -| argo-rollouts.fullnameOverride | string | `"argo-rollouts"` | | |
174 |
| -| argo-rollouts.installCRDs | bool | `true` | | |
| 154 | +| argo-events | object | `{"crds":{"install":false},"fullnameOverride":"argo-events"}` | ------------------------------------------------------------------------------------------------------------------- | |
| 155 | +| argo-rollouts | object | `{"controller":{"replicas":1},"enabled":true,"fullnameOverride":"argo-rollouts","installCRDs":true}` | ------------------------------------------------------------------------------------------------------------------- | |
| 156 | +| argo-workflows | object | `{"crds":{"install":true},"enabled":true,"fullnameOverride":"argo","server":{"authModes":["client"],"baseHref":"/workflows/"}}` | ------------------------------------------------------------------------------------------------------------------- | |
175 | 157 | | argo-workflows.crds.install | bool | `true` | Install and upgrade CRDs |
|
176 |
| -| argo-workflows.enabled | bool | `true` | | |
177 |
| -| argo-workflows.fullnameOverride | string | `"argo"` | | |
178 | 158 | | argo-workflows.server.authModes | list | `["client"]` | auth-mode needs to be set to client to be able to see workflow logs from Codefresh UI |
|
179 | 159 | | argo-workflows.server.baseHref | string | `"/workflows/"` | Do not change. Workflows UI is only accessed through internal router, changing this values will break routing to workflows native UI from Codefresh. |
|
180 | 160 | | event-reporters.events.argoCDServerServiceName | string | `nil` | LEAVE EMPTY and let the chart logic determine the name. Change only if you are totally sure you need to override ArgoCD service name. |
|
@@ -233,37 +213,13 @@ sealed-secrets:
|
233 | 213 | | event-reporters.workflow.sensor.retryStrategy.steps | int | `3` | Number of retries |
|
234 | 214 | | event-reporters.workflow.sensor.tolerations | list | `[]` | |
|
235 | 215 | | event-reporters.workflow.serviceAccount.create | bool | `true` | |
|
236 |
| -| gitops-operator.affinity | object | `{}` | | |
| 216 | +| foo | string | `"bar"` | | |
| 217 | +| gitops-operator | object | `{"affinity":{},"crds":{"additionalLabels":{},"annotations":{},"install":true,"keep":false},"enabled":true,"env":{},"fullnameOverride":"","image":{},"imagePullSecrets":[],"kube-rbac-proxy":{"image":{},"resources":{"limits":{"cpu":"500m","memory":"128Mi"},"requests":{"cpu":"100m","memory":"64Mi"}},"securityContext":{"allowPrivilegeEscalation":false,"capabilities":{"drop":["ALL"]}}},"nameOverride":"","nodeSelector":{},"podAnnotations":{},"podLabels":{},"replicaCount":1,"resources":{"limits":{"cpu":"500m","memory":"128Mi"},"requests":{"cpu":"100m","memory":"64Mi"}},"serviceAccount":{"annotations":{},"create":true,"name":"gitops-operator-controller-manager"},"tolerations":[]}` | ------------------------------------------------------------------------------------------------------------------- | |
237 | 218 | | gitops-operator.crds | object | `{"additionalLabels":{},"annotations":{},"install":true,"keep":false}` | Codefresh gitops operator crds |
|
238 | 219 | | gitops-operator.crds.additionalLabels | object | `{}` | Additional labels for gitops operator CRDs |
|
239 | 220 | | gitops-operator.crds.annotations | object | `{}` | Annotations on gitops operator CRDs |
|
240 | 221 | | gitops-operator.crds.install | bool | `true` | Whether or not to install CRDs |
|
241 | 222 | | gitops-operator.crds.keep | bool | `false` | Keep CRDs if gitops runtime release is uninstalled |
|
242 |
| -| gitops-operator.enabled | bool | `true` | | |
243 |
| -| gitops-operator.env | object | `{}` | | |
244 |
| -| gitops-operator.fullnameOverride | string | `""` | | |
245 |
| -| gitops-operator.image | object | `{}` | | |
246 |
| -| gitops-operator.imagePullSecrets | list | `[]` | | |
247 |
| -| gitops-operator.kube-rbac-proxy.image | object | `{}` | | |
248 |
| -| gitops-operator.kube-rbac-proxy.resources.limits.cpu | string | `"500m"` | | |
249 |
| -| gitops-operator.kube-rbac-proxy.resources.limits.memory | string | `"128Mi"` | | |
250 |
| -| gitops-operator.kube-rbac-proxy.resources.requests.cpu | string | `"100m"` | | |
251 |
| -| gitops-operator.kube-rbac-proxy.resources.requests.memory | string | `"64Mi"` | | |
252 |
| -| gitops-operator.kube-rbac-proxy.securityContext.allowPrivilegeEscalation | bool | `false` | | |
253 |
| -| gitops-operator.kube-rbac-proxy.securityContext.capabilities.drop[0] | string | `"ALL"` | | |
254 |
| -| gitops-operator.nameOverride | string | `""` | | |
255 |
| -| gitops-operator.nodeSelector | object | `{}` | | |
256 |
| -| gitops-operator.podAnnotations | object | `{}` | | |
257 |
| -| gitops-operator.podLabels | object | `{}` | | |
258 |
| -| gitops-operator.replicaCount | int | `1` | | |
259 |
| -| gitops-operator.resources.limits.cpu | string | `"500m"` | | |
260 |
| -| gitops-operator.resources.limits.memory | string | `"128Mi"` | | |
261 |
| -| gitops-operator.resources.requests.cpu | string | `"100m"` | | |
262 |
| -| gitops-operator.resources.requests.memory | string | `"64Mi"` | | |
263 |
| -| gitops-operator.serviceAccount.annotations | object | `{}` | | |
264 |
| -| gitops-operator.serviceAccount.create | bool | `true` | | |
265 |
| -| gitops-operator.serviceAccount.name | string | `"gitops-operator-controller-manager"` | | |
266 |
| -| gitops-operator.tolerations | list | `[]` | | |
267 | 223 | | global.codefresh | object | `{"accountId":"","apiEventsPath":"/2.0/api/events","tls":{"caCerts":{"secret":{"annotations":{},"content":"","create":false,"key":"ca-bundle.crt"},"secretKeyRef":{}},"workflowPipelinesGitWebhooks":{"annotatins":{},"certificates":{}}},"url":"https://g.codefresh.io","userToken":{"secretKeyRef":{},"token":""}}` | Codefresh platform and account-related settings |
|
268 | 224 | | global.codefresh.accountId | string | `""` | Codefresh Account ID. |
|
269 | 225 | | global.codefresh.apiEventsPath | string | `"/2.0/api/events"` | Events API endpoint URL suffix. |
|
@@ -329,7 +285,8 @@ sealed-secrets:
|
329 | 285 | | internal-router.serviceAccount.create | bool | `true` | |
|
330 | 286 | | internal-router.serviceAccount.name | string | `""` | |
|
331 | 287 | | internal-router.tolerations | list | `[]` | |
|
332 |
| -| sealed-secrets | object | `{"fullnameOverride":"sealed-secrets-controller","image":{"registry":"quay.io","repository":"codefresh/sealed-secrets-controller","tag":"v0.24.5"},"keyrenewperiod":"720h","resources":{"limits":{"cpu":"500m","memory":"1Gi"},"requests":{"cpu":"200m","memory":"512Mi"}}}` | --------------------------------------------------------------------------------------------------------------------- | |
333 |
| -| tunnel-client | object | `{"enabled":true,"libraryMode":true,"tunnelServer":{"host":"register-tunnels.cf-cd.com","subdomainHost":"tunnels.cf-cd.com"}}` | Tunnel based runtime. Not supported for on-prem platform. In on-prem use ingress based runtimes. | |
| 288 | +| key | string | `"value"` | | |
| 289 | +| sealed-secrets | object | `{"fullnameOverride":"sealed-secrets-controller","image":{"registry":"quay.io","repository":"codefresh/sealed-secrets-controller","tag":"v0.24.5"},"keyrenewperiod":"720h","resources":{"limits":{"cpu":"500m","memory":"1Gi"},"requests":{"cpu":"200m","memory":"512Mi"}}}` | ------------------------------------------------------------------------------------------------------------------- | |
| 290 | +| tunnel-client | object | `{"enabled":true,"libraryMode":true,"tunnelServer":{"host":"register-tunnels.cf-cd.com","subdomainHost":"tunnels.cf-cd.com"}}` | ------------------------------------------------------------------------------------------------------------------- | |
334 | 291 | | tunnel-client.enabled | bool | `true` | Will only be used if global.runtime.ingress.enabled = false |
|
335 | 292 | | tunnel-client.libraryMode | bool | `true` | Do not change this value! Breaks chart logic |
|
0 commit comments