argocd-apps/argocd.yaml

@@ -3,8 +3,6 @@ kind: Application
 metadata:
   name: argocd
   namespace: argocd
-  labels:
-    env: infra
 spec:
   project: infra
   source:
@@ -18,8 +16,5 @@ spec:
     server: https://kubernetes.default.svc
     namespace: argocd
   syncPolicy:
-    automated:
-      prune: true
-      selfHeal: true
     syncOptions:
       - CreateNamespace=true

argocd-apps/bitnami-minio.yaml

@@ -3,8 +3,6 @@ kind: Application
 metadata:
   name: minio-bitnami
   namespace: argocd
-  labels:
-    env: infra
 spec:
   project: infra
   source:
@@ -17,8 +15,3 @@ spec:
   destination:
     server: https://kubernetes.default.svc
     namespace: infra
-  syncPolicy:
-    automated:
-      prune: true
-      selfHeal: true
-

argocd-apps/caretta.yaml

@@ -3,8 +3,6 @@ kind: Application
 metadata:
   name: caretta
   namespace: argocd
-  labels:
-    env: infra
 spec:
   project: infra
   source:
@@ -18,8 +16,5 @@ spec:
     server: https://kubernetes.default.svc
     namespace: caretta
   syncPolicy:
-    automated:
-      prune: true
-      selfHeal: true
     syncOptions:
       - CreateNamespace=true

argocd-apps/cert-manager.yaml

@@ -3,8 +3,6 @@ kind: Application
 metadata:
   name: cert-manager
   namespace: argocd
-  labels:
-    env: infra
 spec:
   project: infra
   source:
@@ -18,8 +16,5 @@ spec:
     server: https://kubernetes.default.svc
     namespace: cert-manager
   syncPolicy:
-    automated:
-      prune: true
-      selfHeal: true
     syncOptions:
       - CreateNamespace=true

argocd-apps/cloudflared.yaml

@@ -3,8 +3,6 @@ kind: Application
 metadata:
   name: cloudflared
   namespace: argocd
-  labels:
-    env: infra
 spec:
   project: infra
   destination:
@@ -16,10 +14,4 @@ spec:
     path: charts/cloudflare-tunnel
     helm:
       valueFiles:
-        - ../../manifests/cloudflared/values.yaml
-  syncPolicy:
-    automated:
-      prune: true
-      selfHeal: true
-    syncOptions:
-      - CreateNamespace=true
+        - ../../manifests/cloudflared/values.yaml

argocd-apps/headlamp.yaml

@@ -3,8 +3,6 @@ kind: Application
 metadata:
   name: headlamp
   namespace: argocd
-  labels:
-    env: infra
 spec:
   project: infra
   source:
@@ -17,8 +15,3 @@ spec:
   destination:
     server: https://kubernetes.default.svc
     namespace: infra
-  syncPolicy:
-    automated:
-      prune: true
-      selfHeal: true
-

argocd-apps/keycloak.yaml

@@ -3,8 +3,6 @@ kind: Application
 metadata:
   name: keycloak
   namespace: argocd
-  labels:
-    env: infra
 spec:
   project: infra
   source:
@@ -16,8 +14,4 @@ spec:
         - ../../manifests/keycloak/values.yaml
   destination:
     server: https://kubernetes.default.svc
-    namespace: infra
-  syncPolicy:
-    automated:
-      prune: true
-      selfHeal: true
+    namespace: infra

argocd-apps/local-path-provisioner.yaml

@@ -3,8 +3,6 @@ kind: Application
 metadata:
   name: local-path-provisioner
   namespace: argocd
-  labels:
-    env: infra
 spec:
   project: infra
   destination:
@@ -18,7 +16,5 @@ spec:
       valueFiles:
         - ../../manifests/local-path-provisioner/values.yaml
   syncPolicy:
-    automated:
-      prune: true
-      selfHeal: true
-
+    syncOptions:
+      - CreateNamespace=true

argocd-apps/metallb-base.yaml

@@ -3,8 +3,6 @@ kind: Application
 metadata:
   name: metallb-base
   namespace: argocd
-  labels:
-    env: infra
 spec:
   project: infra
   source:
@@ -25,9 +23,3 @@ spec:
     kind: CustomResourceDefinition
     jsonPointers:
       - /spec/conversion/webhook/clientConfig/caBundle
-  syncPolicy:
-    automated:
-      prune: true
-      selfHeal: true
-    syncOptions:
-      - CreateNamespace=true

argocd-apps/metallb-config.yaml

@@ -3,8 +3,6 @@ kind: Application
 metadata:
   name: metallb-config
   namespace: argocd
-  labels:
-    env: infra
 spec:
   project: infra
   source:
@@ -14,9 +12,3 @@ spec:
   destination:
     server: https://kubernetes.default.svc
     namespace: metallb-system
-  syncPolicy:
-    automated:
-      prune: true
-      selfHeal: true
-    syncOptions:
-      - CreateNamespace=true

argocd-apps/nfs-subdir.yaml

@@ -3,8 +3,6 @@ kind: Application
 metadata:
   name: nfs-subdir
   namespace: argocd
-  labels:
-    env: infra
 spec:
   project: infra
   source:
@@ -17,8 +15,3 @@ spec:
   destination:
     server: https://kubernetes.default.svc
     namespace: infra
-  syncPolicy:
-    automated:
-      prune: true
-      selfHeal: true
-

argocd-apps/nvidia-device-plugin.yaml

@@ -3,8 +3,6 @@ kind: Application
 metadata:
   name: nvidia-device-plugin
   namespace: argocd
-  labels:
-    env: infra
 spec:
   project: infra
   source:
@@ -15,6 +13,5 @@ spec:
     server: https://kubernetes.default.svc
     namespace: kube-system
   syncPolicy:
-    automated:
-      prune: true
-      selfHeal: true
+    syncOptions:
+      - CreateNamespace=false

argocd-apps/radar.yaml

@@ -3,8 +3,6 @@ kind: Application
 metadata:
   name: radar
   namespace: argocd
-  labels:
-    env: infra
 spec:
   project: infra
   source:
@@ -17,8 +15,3 @@ spec:
   destination:
     server: https://kubernetes.default.svc
     namespace: infra
-  syncPolicy:
-    automated:
-      prune: true
-      selfHeal: true
-

argocd-apps/raw-resources.yaml

@@ -3,8 +3,6 @@ kind: Application
 metadata:
   name: raw-resources
   namespace: argocd
-  labels:
-    env: infra
 spec:
   project: infra
   source:
@@ -17,6 +15,8 @@ spec:
     server: https://kubernetes.default.svc
     namespace: infra
   syncPolicy:
+    syncOptions:
+      - CreateNamespace=true
     automated:
       prune: true
       selfHeal: true

manifests/headlamp/values.yaml

@@ -7,14 +7,13 @@ image:
   tag: "v0.40.1"
 
 config:
-  inCluster: true
+  baseURL: ""
   oidc:
     clientID: headlamp
-    clientSecret: ""
+    clientSecret: lPpiDSlF74VGLhbxCfW7cFpRfcUGjxv7
     issuerURL: https://keycloak.dvirlabs.com/realms/lab
-    scopes: profile,email
+    scopes: openid,profile,email,groups
     callbackURL: https://headlamp.dvirlabs.com/oidc-callback
-    usePKCE: true
 
 serviceAccount:
   create: true

manifests/raw/keycloak/headlamp/headlamp-admin.yaml

@@ -1,18 +0,0 @@
-apiVersion: v1
-kind: ServiceAccount
-metadata:
-  name: headlamp-sa
-  namespace: kube-system
----
-apiVersion: rbac.authorization.k8s.io/v1
-kind: ClusterRoleBinding
-metadata:
-  name: headlamp-sa-binding
-subjects:
-  - kind: ServiceAccount
-    name: headlamp-sa
-    namespace: kube-system
-roleRef:
-  kind: ClusterRole
-  name: cluster-admin
-  apiGroup: rbac.authorization.k8s.io