Services App of Apps

gitops-kaisers-info/templates/cert-manager.yaml

@@ -0,0 +1,68 @@
+apiVersion: argoproj.io/v1alpha1
+kind: Application
+metadata:
+  name: cert-manager
+  namespace: {{ .Values.spec.namespace }}
+  finalizers:
+  - resources-finalizer.argocd.argoproj.io
+spec:
+  destination:
+    namespace: cert-manager
+    name: {{ .Values.spec.destination.name }}
+  project: {{ .Values.spec.project }}
+  syncPolicy:
+    automated:
+      prune: true
+      selfHeal: true
+  source:
+    chart: cert-manager
+    repoURL: https://charts.jetstack.io
+    targetRevision: 1.7.1
+    helm:
+      releaseName: cert-manager
+---
+apiVersion: cert-manager.io/v1
+kind: ClusterIssuer
+metadata:
+  name: letsencrypt-staging
+  namespace: cert-manager
+spec:
+  acme:
+    email: "admin@kaisers.info" # replace this
+    privateKeySecretRef:
+      name: "staging-issuer-account-key"
+    server: "https://acme-staging-v02.api.letsencrypt.org/directory"
+    solvers:
+      - http01:
+          ingress:
+            class: "traefik"
+            ingressTemplate:
+              metadata:
+                annotations:
+                  kubernetes.io/ingress.class: "traefik"
+#                  traefik.ingress.kubernetes.io/router.tls: "true"
+#                  traefik.ingress.kubernetes.io/frontend-entry-points: "https"
+#                  traefik.ingress.kubernetes.io/router.entrypoints: "websecure"
+---
+apiVersion: cert-manager.io/v1
+kind: ClusterIssuer
+metadata:
+  name: letsencrypt-prod
+  namespace: cert-manager
+spec:
+  acme:
+    email: "admin@kaisers.info" # replace this
+    privateKeySecretRef:
+      name: "prod-issuer-account-key"
+    server: "https://acme-v02.api.letsencrypt.org/directory"
+    solvers:
+      - http01:
+          ingress:
+            class: "traefik"
+            ingressTemplate:
+              metadata:
+                annotations:
+                  kubernetes.io/ingress.class: "traefik"
+                  traefik.ingress.kubernetes.io/router.tls: "true"
+                  traefik.ingress.kubernetes.io/frontend-entry-points: "https"
+                  traefik.ingress.kubernetes.io/router.entrypoints: "websecure"

gitops-kaisers-info/templates/namespaces.yaml

@@ -21,13 +21,6 @@ metadata:
 ---
 apiVersion: v1
 kind: Namespace
-metadata:
-  name: authentik
-  annotations:
-    argocd.argoproj.io/sync-wave: "-1"
----
-apiVersion: v1
-kind: Namespace
 metadata:
   name: cert-manager
   annotations:

services-kaisers-info/Chart.yaml

@@ -0,0 +1,23 @@
+apiVersion: v2
+name: services-kaisers-info
+description: Applications
+
+# A chart can be either an 'application' or a 'library' chart.
+#
+# Application charts are a collection of templates that can be packaged into versioned archives
+# to be deployed.
+#
+# Library charts provide useful utilities or functions for the chart developer. They're included as
+# a dependency of application charts to inject those utilities and functions into the rendering
+# pipeline. Library charts do not define any templates and therefore cannot be deployed.
+type: application
+
+# This is the chart version. This version number should be incremented each time you make changes
+# to the chart and its templates, including the app version.
+# Versions are expected to follow Semantic Versioning (https://semver.org/)
+version: 0.1.0
+
+# This is the version number of the application being deployed. This version number should be
+# incremented each time you make changes to the application. Versions are not expected to
+# follow Semantic Versioning. They should reflect the version the application is using.
+appVersion: "0.1.0"

services-kaisers-info/templates/namespaces.yaml

@@ -0,0 +1,6 @@
+apiVersion: v1
+kind: Namespace
+metadata:
+  name: authentik
+  annotations:
+    argocd.argoproj.io/sync-wave: "-1"

services-kaisers-info/values.yaml

@@ -0,0 +1,13 @@
+spec:
+  destination:
+    name: in-cluster
+  source:
+    path: gitops-kaisers-info
+    repoURL: https://git.kaisers.info/simonkaiser/k8s-kaisers-info.git
+    targetRevision: master
+  project: services-kaisers-info
+  namespace: argocd
+  syncPolicy:
+    automated:
+      prune: true
+      selfHeal: true