diff --git a/argocd-apps/raw-resources-observability-stack.yaml b/argocd-apps/raw-resources-observability-stack.yaml new file mode 100644 index 0000000..54b217d --- /dev/null +++ b/argocd-apps/raw-resources-observability-stack.yaml @@ -0,0 +1,22 @@ +apiVersion: argoproj.io/v1alpha1 +kind: Application +metadata: + name: raw-resources-observability-stack + namespace: argocd +spec: + project: observability-stack + source: + repoURL: ssh://git@gitea-ssh.dev-tools.svc.cluster.local:2222/dvirlabs/observability-stack.git + targetRevision: HEAD + path: manifests/raw-resources-observability-stack + directory: + recurse: true + destination: + server: https://kubernetes.default.svc + namespace: observability-stack + syncPolicy: + automated: + prune: true + selfHeal: true + syncOptions: + - CreateNamespace=true diff --git a/argocd-apps/secrets-observability-stack.yaml b/argocd-apps/secrets-observability-stack.yaml new file mode 100644 index 0000000..b909c45 --- /dev/null +++ b/argocd-apps/secrets-observability-stack.yaml @@ -0,0 +1,23 @@ +apiVersion: argoproj.io/v1alpha1 +kind: Application +metadata: + name: secrets-observability-stack + namespace: argocd +spec: + project: observability-stack + source: + repoURL: ssh://git@gitea-ssh.dev-tools.svc.cluster.local:2222/dvirlabs/observability-stack.git + targetRevision: HEAD + path: charts/secrets + helm: + valueFiles: + - ../../manifests/secrets-observability-stack/values.yaml + destination: + server: https://kubernetes.default.svc + namespace: observability-stack + syncPolicy: + automated: + prune: true + selfHeal: true + syncOptions: + - CreateNamespace=true diff --git a/charts/secrets/Chart.yaml b/charts/secrets/Chart.yaml new file mode 100644 index 0000000..402fec2 --- /dev/null +++ b/charts/secrets/Chart.yaml @@ -0,0 +1,6 @@ +apiVersion: v2 +name: secrets +description: Generic ExternalSecret resources chart +type: application +version: 0.1.0 +appVersion: "1.0.0" diff --git a/charts/secrets/templates/external-secret.yaml b/charts/secrets/templates/external-secret.yaml new file mode 100644 index 0000000..8ff0912 --- /dev/null +++ b/charts/secrets/templates/external-secret.yaml @@ -0,0 +1,23 @@ +{{- range .Values.externalSecrets }} +--- +apiVersion: external-secrets.io/v1 +kind: ExternalSecret +metadata: + name: {{ .name }} + namespace: {{ .namespace }} +spec: + refreshInterval: {{ .refreshInterval | default "1h" }} + secretStoreRef: + name: {{ $.Values.secretStore.name }} + kind: {{ $.Values.secretStore.kind }} + target: + name: {{ .targetName }} + creationPolicy: {{ .creationPolicy | default "Owner" }} + data: +{{- range .data }} + - secretKey: {{ .secretKey }} + remoteRef: + key: {{ .remoteKey }} + property: {{ .property }} +{{- end }} +{{- end }} diff --git a/manifests/raw-resources-observability-stack/.gitkeep b/manifests/raw-resources-observability-stack/.gitkeep new file mode 100644 index 0000000..e69de29 diff --git a/manifests/secrets-observability-stack/values.yaml b/manifests/secrets-observability-stack/values.yaml new file mode 100644 index 0000000..b7db6dd --- /dev/null +++ b/manifests/secrets-observability-stack/values.yaml @@ -0,0 +1,5 @@ +secretStore: + name: vault + kind: ClusterSecretStore + +externalSecrets: []