apps/cluster-infrastructure/cilium.yaml

@@ -1,31 +0,0 @@
-apiVersion: argoproj.io/v1alpha1
-kind: Application
-metadata:
-  name: cilium
-  namespace: argocd
-  annotations:
-    argocd.argoproj.io/sync-wave: "-1000"
-spec:
-  project: cluster-infrastructure
-  syncPolicy:
-    automated:
-      prune: true
-      selfHeal: true
-  source:
-    chart: cilium
-    repoURL: https://helm.cilium.io/
-    targetRevision: 1.14.4
-    helm:
-      releaseName: cilium
-      valuesObject:
-        kubeProxyReplacement: true
-        k8sServiceHost: cthulhu.k8s.vxm.cz
-        k8sServicePort: 6443
-        hubble:
-          relay:
-            enabled: true
-          ui:
-            enabled: true
-  destination:
-    server: "https://kubernetes.default.svc"
-    namespace: kube-system

apps/cluster-infrastructure/hetzner-ccm.yaml

@@ -1,44 +0,0 @@
-apiVersion: argoproj.io/v1alpha1
-kind: Application
-metadata:
-  name: hetzner-ccm
-  namespace: argocd
-  annotations:
-    argocd.argoproj.io/sync-wave: "10"
-spec:
-  project: cluster-infrastructure
-  syncPolicy:
-    automated:
-      prune: true
-      selfHeal: true
-  source:
-    chart: hcloud-cloud-controller-manager
-    repoURL: https://charts.hetzner.cloud
-    targetRevision: 1.19.0
-    helm:
-      releaseName: hetzner-ccm
-      valuesObject:
-        nameOverride: hetzner-ccm
-        replicaCount: 2
-        # Since version 1.19.0, the CCM supports also Hetzner Robot (bare metal)
-        robot:
-          enabled: true
-        env:
-          HCLOUD_TOKEN:
-            valueFrom:
-              secretKeyRef:
-                name: hetzner-cloud-token
-                key: cloud-token
-          ROBOT_USER:
-            valueFrom:
-              secretKeyRef:
-                name: hetzner-robot-credentials
-                key: robot-user
-          ROBOT_PASSWORD:
-            valueFrom:
-              secretKeyRef:
-                name: hetzner-robot-credentials
-                key: robot-password
-  destination:
-    server: "https://kubernetes.default.svc"
-    namespace: kube-system

apps/cluster-infrastructure/ingress-nginx.yaml

@@ -1,48 +0,0 @@
-apiVersion: argoproj.io/v1alpha1
-kind: Application
-metadata:
-  name: ingress-nginx
-  namespace: argocd
-  annotations:
-    argocd.argoproj.io/sync-wave: "-1000"
-spec:
-  project: cluster-infrastructure
-  syncPolicy:
-    automated:
-      prune: true
-      selfHeal: true
-    syncOptions:
-      - CreateNamespace=true
-  source:
-    chart: ingress-nginx
-    repoURL: https://kubernetes.github.io/ingress-nginx
-    targetRevision: 4.8.4
-    helm:
-      releaseName: ingress-nginx
-      valuesObject:
-        ingressClassResource:
-          default: true
-        controller:
-          kind: DaemonSet
-          updateStrategy:
-            type: RollingUpdate
-            rollingUpdate:
-              maxUnavailable: 1
-          service:
-            type: NodePort
-            nodePorts:
-              http: 32080
-              https: 32443
-          hostPort:
-            enabled: true
-          metrics:
-            enabled: true
-            serviceMonitor:
-              enabled: false
-          config:
-            allow-snippet-annotations: "true"
-            generate-request-id: "true"
-            use-proxy-protocol: "true"
-  destination:
-    server: "https://kubernetes.default.svc"
-    namespace: ingress-nginx

apps/cluster-infrastructure/minio-operator.yaml

@@ -0,0 +1,37 @@
+apiVersion: argoproj.io/v1alpha1
+kind: Application
+metadata:
+  name: minio-operator
+  namespace: argocd
+  annotations:
+    argocd.argoproj.io/sync-wave: "10"
+spec:
+  project: cluster-infrastructure
+  syncPolicy:
+    automated:
+      prune: true
+      selfHeal: true
+    syncOptions:
+      - CreateNamespace=true
+  source:
+    chart: operator
+    repoURL: https://operator.min.io
+    targetRevision: 5.0.10
+    helm:
+      releaseName: minio-operator
+      valuesObject:
+        console:
+          replicaCount: 2
+          ingress:
+            enabled: true
+            ingressClassName: nginx
+            annotations:
+              cert-manager.io/cluster-issuer: letsencrypt-prod
+            host: console.minio.cthulhunetes.net
+            tls:
+              - hosts:
+                  - console.minio.ops.cthulhunetes.net
+                secretName: minio-console-ingress-tls
+  destination:
+    server: "https://kubernetes.default.svc"
+    namespace: minio-operator

apps/shared-resources/redis.yaml

@@ -1,55 +0,0 @@
-apiVersion: argoproj.io/v1alpha1
-kind: Application
-metadata:
-  name: redis
-  namespace: argocd
-  annotations:
-    argocd.argoproj.io/sync-wave: "20"
-spec:
-  project: shared-resources
-  syncPolicy:
-    automated:
-      prune: true
-      selfHeal: true
-    syncOptions:
-      - CreateNamespace=true
-  source:
-    chart: redis-ha
-    repoURL: https://dandydeveloper.github.io/charts
-    targetRevision: 4.23.0
-    helm:
-      releaseName: redis
-      valuesObject:
-        fullnameOverride: redis
-        replicas: 3
-        hardAntiAffinity: true
-        persistentVolume:
-          enabled: true
-          size: 10Gi
-          accessModes:
-            - ReadWriteOnce
-          storageClass: longhorn-static
-        redis:
-          resources:
-            limits:
-              cpu: 500m
-              memory: 4Gi
-            requests:
-              cpu: 200m
-              memory: 4Gi
-        haproxy:
-          enabled: true
-          replicas: 3
-          hardAntiAffinity: true
-          resources:
-            limits:
-              cpu: 400m
-              memory: 1Gi
-            requests:
-              cpu: 200m
-              memory: 1Gi
-        exporter:
-          enabled: true
-  destination:
-    server: "https://kubernetes.default.svc"
-    namespace: redis

manifests/postgres/postgres.yaml

@@ -37,4 +37,4 @@ spec:
   affinity:
     enablePodAntiAffinity: true
     topologyKey: topology.kubernetes.io/zone # default: kubernetes.io/hostname
-    podAntiAffinityType: preferred
+    podAntiAffinityType: required

renovate.json

@@ -1,11 +0,0 @@
-{
-  "$schema": "https://docs.renovatebot.com/renovate-schema.json",
-  "extends": [
-    "local>vojtechmares/renovate-config"
-  ],
-  "argocd": {
-    "fileMatch": [
-      "apps\/.+\\.yaml$"
-    ]
-  }
-}