103 lines
3.2 KiB
YAML
103 lines
3.2 KiB
YAML
apiVersion: argoproj.io/v1alpha1
|
|
kind: ApplicationSet
|
|
metadata:
|
|
name: universal-external-secrets
|
|
spec:
|
|
generators:
|
|
- list:
|
|
elements:
|
|
- cluster: cherry
|
|
url: https://kubernetes.default.svc
|
|
syncPolicy:
|
|
applicationsSync: sync
|
|
template:
|
|
metadata:
|
|
name: "{{cluster}}-external-secrets"
|
|
spec:
|
|
project: infrastructure
|
|
syncPolicy:
|
|
automated:
|
|
prune: true
|
|
selfHeal: true
|
|
syncOptions:
|
|
- CreateNamespace=true
|
|
source:
|
|
chart: external-secrets
|
|
repoURL: https://charts.external-secrets.io
|
|
targetRevision: 0.9.5
|
|
helm:
|
|
releaseName: external-secrets
|
|
valuesObject:
|
|
installCRDs: true
|
|
# Operator
|
|
replicaCount: 2
|
|
leaderElect: true
|
|
podDisruptionBudget:
|
|
enabled: true
|
|
minAvailable: 1
|
|
resources:
|
|
limits:
|
|
cpu: 60m
|
|
memory: 128Mi
|
|
requests:
|
|
cpu: 10m
|
|
memory: 32Mi
|
|
affinity:
|
|
podAntiAffinity:
|
|
requiredDuringSchedulingIgnoredDuringExecution:
|
|
- labelSelector:
|
|
matchExpressions:
|
|
- key: app.kubernetes.io/name
|
|
operator: In
|
|
values:
|
|
- external-secrets
|
|
topologyKey: kubernetes.io/hostname
|
|
# Webhook
|
|
webhook:
|
|
replicaCount: 2
|
|
podDisruptionBudget:
|
|
enabled: true
|
|
minAvailable: 1
|
|
resources:
|
|
limits:
|
|
cpu: 60m
|
|
memory: 128Mi
|
|
requests:
|
|
cpu: 10m
|
|
memory: 32Mi
|
|
affinity:
|
|
podAntiAffinity:
|
|
requiredDuringSchedulingIgnoredDuringExecution:
|
|
- labelSelector:
|
|
matchExpressions:
|
|
- key: app.kubernetes.io/name
|
|
operator: In
|
|
values:
|
|
- external-secrets-webhook
|
|
topologyKey: kubernetes.io/hostname
|
|
# Cert Controller
|
|
certController:
|
|
replicaCount: 2
|
|
podDisruptionBudget:
|
|
enabled: true
|
|
minAvailable: 1
|
|
resources:
|
|
limits:
|
|
cpu: 60m
|
|
memory: 128Mi
|
|
requests:
|
|
cpu: 10m
|
|
memory: 32Mi
|
|
affinity:
|
|
podAntiAffinity:
|
|
requiredDuringSchedulingIgnoredDuringExecution:
|
|
- labelSelector:
|
|
matchExpressions:
|
|
- key: app.kubernetes.io/name
|
|
operator: In
|
|
values:
|
|
- external-secrets-cert-controller
|
|
topologyKey: kubernetes.io/hostname
|
|
destination:
|
|
server: "{{url}}"
|
|
namespace: external-secrets
|