test in app secret decrypt and import

This commit is contained in:
2024-07-15 11:34:40 +10:00
parent 07dee3e2e3
commit 2cdbb594a7
6 changed files with 18 additions and 29 deletions

View File

@@ -1,24 +0,0 @@
apiVersion: v1
kind: ConfigMap
metadata:
name: argocd-cm
namespace: argocd
data:
admin.enabled: "true"
application.instanceLabelKey: "argocd.argoproj.io/instance"
exec.enabled: "false"
server.rbac.log.enforce.enable: "false"
statusbadge.enabled: "false"
timeout.hard.reconciliation: "0s"
timeout.reconciliation: "180s"
url: "https://argocd.cluster.edward.sydney"
kustomize.buildOptions: "--enable-helm"
configManagementPlugins: |
- name: kustomized-helm
init:
command: ["/bin/sh", "-c"]
args: ["helm dependency build"]
generate:
command: [sh, -c]
args: ["helm template --release-name release-name . > all.yaml && kustomize build"]
helm.valuesFileSchemes: "http, https, secrets+age-import-kubernetes"

View File

@@ -1,9 +1,9 @@
{ {
"appName": "argocd-cm", "appName": "app-secrets",
"userGivenName": "argocd-cm", "userGivenName": "app-secrets",
"destNamespace": "argocd-cm", "destNamespace": "argocd",
"destServer": "https://kubernetes.default.svc", "destServer": "https://kubernetes.default.svc",
"srcPath": "resources/argocd-cm/env/k3s-cluster", "srcPath": "resources/secrets/env/k3s-cluster",
"srcRepoURL": "https://github.com/3dwardch3ng/home-cluster-ops.git", "srcRepoURL": "https://github.com/3dwardch3ng/home-cluster-ops.git",
"srcTargetRevision": "", "srcTargetRevision": "",
"labels": null, "labels": null,

View File

@@ -1,4 +1,4 @@
apiVersion: kustomize.config.k8s.io/v1beta1 apiVersion: kustomize.config.k8s.io/v1beta1
kind: Kustomization kind: Kustomization
resources: resources:
- ./configmap.yaml - ../../base

View File

@@ -6,6 +6,7 @@ kubectl create namespace argocd || echo "Namespace argocd already exists"
helm repo add argo https://argoproj.github.io/argo-helm || echo "Argo repo already exists" helm repo add argo https://argoproj.github.io/argo-helm || echo "Argo repo already exists"
helm repo update || echo "Failed to update helm repos" helm repo update || echo "Failed to update helm repos"
helm upgrade --install argocd -n argocd -f argocd-values.yaml argo/argo-cd --version 7.3.6 helm upgrade --install argocd -n argocd -f argocd-values.yaml argo/argo-cd --version 7.3.6
helm plugin install https://github.com/jkroepke/helm-secrets
#Check repo server secret accessibility #Check repo server secret accessibility
echo "Checking repo server secret accessibility:" echo "Checking repo server secret accessibility:"

View File

@@ -6,6 +6,18 @@ global:
domain: argocd.cluster.edward.sydney domain: argocd.cluster.edward.sydney
configs: configs:
cm: >-
kustomize.buildOptions: "--enable-helm"
configManagementPlugins: |
- name: kustomized-helm
init:
command: ["/bin/sh", "-c"]
args: ["helm dependency build"]
generate:
command: [sh, -c]
args: ["helm template --release-name release-name . > all.yaml && kustomize build"]
helm.valuesFileSchemes: "secrets"
params: params:
server.insecure: true server.insecure: true