Skip to content

Commit

Permalink
add gke test cluster and bootstrap-v2
Browse files Browse the repository at this point in the history
try multiplanetary

values test
  • Loading branch information
eseiker committed Jan 21, 2025
1 parent f09292e commit 6489166
Show file tree
Hide file tree
Showing 13 changed files with 393 additions and 7 deletions.
13 changes: 6 additions & 7 deletions charts/multiplanetary/templates/network.yaml
Original file line number Diff line number Diff line change
@@ -1,4 +1,4 @@
{{ range $.Values.network }}
{{- range $.Values.network }}
apiVersion: argoproj.io/v1alpha1
kind: Application
metadata:
Expand All @@ -7,16 +7,15 @@ metadata:
spec:
project: default
source:
repoURL: https://github.com/planetarium/9c-infra.git
targetRevision: main
repoURL: {{ $.Values.repoURL | default "https://github.com/planetarium/9c-infra.git" }}
targetRevision: {{ $.Values.targetRevision | default "main" }}
path: charts/all-in-one
helm:
valueFiles:
- "../../{{ $.Values.path }}/network/general.yaml"
- "../../{{ $.Values.path }}/network/{{ . }}.yaml"

- /{{ $.Values.path }}/network/general.yaml
- /{{ $.Values.path }}/network/{{ . }}.yaml
destination:
server: https://kubernetes.default.svc
namespace: {{ . }}
---
{{ end }}
{{- end }}
6 changes: 6 additions & 0 deletions common/bootstrap-v2/Chart.yaml
Original file line number Diff line number Diff line change
@@ -0,0 +1,6 @@
apiVersion: v2
type: application
name: bootstrap-v2
description: A Helm chart bootstrapping the cluster
version: 0.2.0
appVersion: 1.0.0
17 changes: 17 additions & 0 deletions common/bootstrap-v2/templates/argocd-appproject-infra.yaml
Original file line number Diff line number Diff line change
@@ -0,0 +1,17 @@
apiVersion: argoproj.io/v1alpha1
kind: AppProject
metadata:
name: infra
spec:
description: In-cluster applications managed by DevOps team
sourceRepos:
- '*'
destinations:
- namespace: '*'
server: https://kubernetes.default.svc
clusterResourceWhitelist:
- group: '*'
kind: '*'
namespaceResourceWhitelist:
- group: '*'
kind: '*'
20 changes: 20 additions & 0 deletions common/bootstrap-v2/templates/argocd-secretstore.yaml
Original file line number Diff line number Diff line change
@@ -0,0 +1,20 @@
apiVersion: external-secrets.io/v1beta1
kind: SecretStore
metadata:
name: argocd-secretstore
namespace: argocd
spec:
provider:
{{- if eq .Values.provider "AWS" }}
aws:
service: SecretsManager
region: {{ .Values.AWS.region }}
{{- else if eq .Values.provider "GCP" }}
gcpsm:
projectID: {{ .Values.GCP.projectID }}
{{- else }}
fake:
data:
- key: {{ .Values.clusterName }}-argocd-github-ssh-client
value: '{"dex.github.clientId":"DUMMY","dex.github.clientSecret":""}'
{{- end }}
78 changes: 78 additions & 0 deletions common/bootstrap-v2/templates/argocd.yaml
Original file line number Diff line number Diff line change
@@ -0,0 +1,78 @@
apiVersion: argoproj.io/v1alpha1
kind: Application
metadata:
name: argocd
namespace: argocd
spec:
project: infra
syncPolicy:
syncOptions:
- CreateNamespace=true
automated:
prune: true
selfHeal: true
destination:
server: https://kubernetes.default.svc
namespace: argocd
source:
repoURL: https://argoproj.github.io/argo-helm
chart: argo-cd
targetRevision: 7.7.16
helm:
values: |-
global:
domain: {{ .Values.argocd.domain }}
controller:
replicas: 1
redis-ha:
enabled: true
repoServer:
autoscaling:
enabled: true
server:
autoscaling:
enabled: true
ingress:
enabled: true
ingressClassName: traefik
configs:
params:
server.insecure: true
rbac:
scopes: "[email, groups]"
policy.default: role:readonly
policy.csv: |
g, planetarium:DevOps, role:admin
cm:
admin.enabled: true
statusbadge.enabled: true
dex.config: |-
connectors:
- type: github
id: github
name: GitHub
config:
orgs:
- name: planetarium
clientID: "$github-ssh-client:dex.github.clientId"
clientSecret: "$github-ssh-client:dex.github.clientSecret"
extraObjects:
- apiVersion: external-secrets.io/v1beta1
kind: ExternalSecret
metadata:
name: github-ssh-client
spec:
refreshInterval: 1m
secretStoreRef:
kind: SecretStore
name: argocd-secretstore
target:
name: github-ssh-client
template:
metadata:
labels:
app.kubernetes.io/instance: argocd
app.kubernetes.io/part-of: argocd
dataFrom:
- extract:
key: {{ .Values.clusterName }}-argocd-github-ssh-client
34 changes: 34 additions & 0 deletions common/bootstrap-v2/templates/external-dns.yaml
Original file line number Diff line number Diff line change
@@ -0,0 +1,34 @@
apiVersion: argoproj.io/v1alpha1
kind: Application
metadata:
name: external-dns
namespace: argocd
spec:
project: infra
syncPolicy:
syncOptions:
- CreateNamespace=true
automated:
prune: true
selfHeal: true
destination:
server: https://kubernetes.default.svc
namespace: external-dns
source:
repoURL: https://charts.bitnami.com/bitnami
chart: external-dns
targetRevision: 8.3.9
helm:
values: |-
sources:
- service
- ingress
- gateway-httproute
- gateway-grpcroute
policy: sync
txtOwnerId: "{{ .Values.clusterName }}"
serviceAccount:
annotations:
{{- with .Values.externalDns.serviceAccount.annotations }}
{{- toYaml . | nindent 12 }}
{{- end }}
31 changes: 31 additions & 0 deletions common/bootstrap-v2/templates/external-secrets.yaml
Original file line number Diff line number Diff line change
@@ -0,0 +1,31 @@
apiVersion: argoproj.io/v1alpha1
kind: Application
metadata:
name: external-secrets
namespace: argocd
spec:
project: infra
syncPolicy:
syncOptions:
- CreateNamespace=true
automated:
prune: true
selfHeal: true
destination:
server: https://kubernetes.default.svc
namespace: external-secrets
source:
repoURL: https://charts.external-secrets.io
chart: external-secrets
targetRevision: 0.12.1
helm:
values: |-
certController:
create: false
webhook:
create: false
serviceAccount:
annotations:
{{- with .Values.externalSecrets.serviceAccount.annotations }}
{{- toYaml . | nindent 12 }}
{{- end }}
27 changes: 27 additions & 0 deletions common/bootstrap-v2/templates/traefik.yaml
Original file line number Diff line number Diff line change
@@ -0,0 +1,27 @@
apiVersion: argoproj.io/v1alpha1
kind: Application
metadata:
name: traefik
namespace: argocd
spec:
project: infra
syncPolicy:
syncOptions:
- CreateNamespace=true
automated:
prune: true
selfHeal: true
destination:
server: https://kubernetes.default.svc
namespace: traefik
source:
repoURL: https://traefik.github.io/charts
chart: traefik
targetRevision: 34.1.0
helm:
values: |-
service:
annotations:
{{- with .Values.global.service.annotations }}
{{- toYaml . | nindent 12 }}
{{- end }}
17 changes: 17 additions & 0 deletions common/bootstrap-v2/values.yaml
Original file line number Diff line number Diff line change
@@ -0,0 +1,17 @@
clusterName:
provider:

global:
service:
annotations:

argocd:
domain:

externalSecrets:
serviceAccount:
annotations:

externalDns:
serviceAccount:
annotations:
27 changes: 27 additions & 0 deletions gke-ninechronicles-internal/bootstrap.yaml
Original file line number Diff line number Diff line change
@@ -0,0 +1,27 @@
apiVersion: argoproj.io/v1alpha1
kind: Application
metadata:
name: bootstrap
namespace: argocd
spec:
project: infra
destination:
server: https://kubernetes.default.svc
namespace: argocd
sources:
- repoURL: https://github.com/planetarium/9c-infra
path: common/bootstrap-v2
targetRevision: gke
helm:
valueFiles:
- /gke-ninechronicles-internal/values.yaml
- repoURL: https://github.com/planetarium/9c-infra.git
path: charts/multiplanetary
targetRevision: gke
helm:
values: |-
clusterName: ninechronicles-internal-test-1
targetRevision: gke
path: gke-ninechronicles-internal
network:
- odin
15 changes: 15 additions & 0 deletions gke-ninechronicles-internal/network/general.yaml
Original file line number Diff line number Diff line change
@@ -0,0 +1,15 @@
clusterName: ninechronicles-internal-test-1

global:
image:
repository: planetariumhq/ninechronicles-headless
tag: "git-5681ee3a468d8c550d70e0ebed6eb530a5caf82a"

service:
annotations:

seed:
image:
repository: planetariumhq/libplanet-seed
pullPolicy: Always
tag: "git-67d0ef91c52a71a9772cd7fdb241c9fc37b165b8"
Loading

0 comments on commit 6489166

Please sign in to comment.