Files
ea0b7bf589 Merge pull request from GHSA-9766-5277-j5hr
* fix: Enable Redis authentication in the default installation

Signed-off-by: May Zhang <[email protected]>

* chore: fix git_test unit test

Signed-off-by: Leonardo Luz Almeida <[email protected]>

---------

Signed-off-by: May Zhang <[email protected]>
Signed-off-by: Leonardo Luz Almeida <[email protected]>
Co-authored-by: Leonardo Luz Almeida <[email protected]>
Co-authored-by: pashakostohrys <[email protected]>
2024-05-21 16:22:43 +03:00

308 lines
6.9 KiB
YAML

apiVersion: kustomize.config.k8s.io/v1beta1
kind: Kustomization
resources:
- chart/upstream.yaml
- argocd-redis-ha-proxy-network-policy.yaml
- argocd-redis-ha-server-network-policy.yaml
patches:
- target:
version: v1
group: ""
kind: ConfigMap
name: argocd-redis-ha-health-configmap
namespace: argocd
path: overlays/remove-namespace.yaml
- target:
version: v1
group: ""
kind: ConfigMap
name: argocd-redis-ha-configmap
namespace: argocd
path: overlays/remove-namespace.yaml
- target:
version: v1
group: ""
kind: ServiceAccount
name: argocd-redis-ha
namespace: argocd
path: overlays/remove-namespace.yaml
- target:
version: v1
group: ""
kind: ServiceAccount
name: argocd-redis-ha-haproxy
namespace: argocd
path: overlays/remove-namespace.yaml
- target:
group: rbac.authorization.k8s.io
version: v1
kind: Role
name: argocd-redis-ha
namespace: argocd
path: overlays/remove-namespace.yaml
- target:
group: rbac.authorization.k8s.io
version: v1
kind: Role
name: argocd-redis-ha-haproxy
namespace: argocd
path: overlays/remove-namespace.yaml
- target:
group: rbac.authorization.k8s.io
version: v1
kind: RoleBinding
name: argocd-redis-ha
namespace: argocd
path: overlays/remove-namespace.yaml
- target:
group: rbac.authorization.k8s.io
version: v1
kind: RoleBinding
name: argocd-redis-ha-haproxy
namespace: argocd
path: overlays/remove-namespace.yaml
- target:
version: v1
group: ""
kind: Service
name: argocd-redis-ha-announce-0
namespace: argocd
path: overlays/remove-namespace.yaml
- target:
version: v1
group: ""
kind: Service
name: argocd-redis-ha-announce-1
namespace: argocd
path: overlays/remove-namespace.yaml
- target:
version: v1
group: ""
kind: Service
name: argocd-redis-ha-announce-2
namespace: argocd
path: overlays/remove-namespace.yaml
- target:
version: v1
group: ""
kind: Service
name: argocd-redis-ha
namespace: argocd
path: overlays/remove-namespace.yaml
- target:
version: v1
group: ""
kind: Service
name: argocd-redis-ha-haproxy
namespace: argocd
path: overlays/remove-namespace.yaml
- target:
group: apps
version: v1
kind: Deployment
name: argocd-redis-ha-haproxy
namespace: argocd
path: overlays/remove-namespace.yaml
- target:
group: apps
version: v1
kind: StatefulSet
name: argocd-redis-ha-server
namespace: argocd
path: overlays/remove-namespace.yaml
# Replace helm's app/release/chart/heritage labels with argocd common labels
- target:
version: v1
group: ""
kind: ConfigMap
name: argocd-redis-ha-health-configmap
path: overlays/modify-labels.yaml
- target:
version: v1
group: ""
kind: ConfigMap
name: argocd-redis-ha-configmap
path: overlays/modify-labels.yaml
- target:
version: v1
group: ""
kind: Service
name: argocd-redis-ha-announce-0
path: overlays/modify-labels.yaml
- target:
version: v1
group: ""
kind: Service
name: argocd-redis-ha-announce-1
path: overlays/modify-labels.yaml
- target:
version: v1
group: ""
kind: Service
name: argocd-redis-ha-announce-2
path: overlays/modify-labels.yaml
- target:
version: v1
group: ""
kind: Service
name: argocd-redis-ha
path: overlays/modify-labels.yaml
- target:
group: apps
version: v1
kind: StatefulSet
name: argocd-redis-ha-server
path: overlays/modify-labels.yaml
- target:
version: v1
group: ""
kind: ServiceAccount
name: argocd-redis-ha
path: overlays/modify-labels.yaml
- target:
group: rbac.authorization.k8s.io
version: v1
kind: Role
name: argocd-redis-ha
path: overlays/modify-labels.yaml
- target:
group: rbac.authorization.k8s.io
version: v1
kind: Role
name: argocd-redis-ha-haproxy
path: overlays/modify-labels.yaml
- target:
group: rbac.authorization.k8s.io
version: v1
kind: RoleBinding
name: argocd-redis-ha
path: overlays/modify-labels.yaml
- target:
group: rbac.authorization.k8s.io
version: v1
kind: RoleBinding
name: argocd-redis-ha-haproxy
path: overlays/modify-labels.yaml
- target:
version: v1
group: ""
kind: ServiceAccount
name: argocd-redis-ha-haproxy
path: overlays/haproxy-modify-labels.yaml
- target:
version: v1
group: ""
kind: Service
name: argocd-redis-ha-haproxy
path: overlays/haproxy-modify-labels.yaml
- target:
group: apps
version: v1
kind: Deployment
name: argocd-redis-ha-haproxy
path: overlays/haproxy-modify-labels.yaml
# add pod template labels
- target:
group: apps
version: v1
kind: StatefulSet
name: argocd-redis-ha-server
path: overlays/statefulset-labels.yaml
- target:
group: apps
version: v1
kind: Deployment
name: argocd-redis-ha-haproxy
path: overlays/deployment-labels.yaml
# remove pod template nodeSelector
- target:
group: apps
version: v1
kind: Deployment
name: argocd-redis-ha-haproxy
path: overlays/deployment-nodeSelector.yaml
# remove pod template tolerations
- target:
group: apps
version: v1
kind: Deployment
name: argocd-redis-ha-haproxy
path: overlays/deployment-tolerations.yaml
# remove pod template resources
- target:
group: apps
version: v1
kind: Deployment
name: argocd-redis-ha-haproxy
path: overlays/deployment-resources.yaml
- target:
group: apps
version: v1
kind: StatefulSet
name: argocd-redis-ha-server
path: overlays/statefulset-resources.yaml
# update service selectors to match
- target:
version: v1
kind: Service
group: ""
name: argocd-redis-ha-announce-0
path: overlays/service-selector.yaml
- target:
version: v1
group: ""
kind: Service
name: argocd-redis-ha-announce-1
path: overlays/service-selector.yaml
- target:
version: v1
group: ""
kind: Service
name: argocd-redis-ha-announce-2
path: overlays/service-selector.yaml
- target:
version: v1
group: ""
kind: Service
name: argocd-redis-ha
path: overlays/service-selector.yaml
- target:
version: v1
group: ""
kind: Service
name: argocd-redis-ha-haproxy
path: overlays/haproxy-service-selector.yaml
# add container-level security contexts
- target:
group: apps
version: v1
kind: Deployment
name: argocd-redis-ha-haproxy
path: overlays/deployment-containers-securityContext.yaml
- target:
group: apps
version: v1
kind: StatefulSet
name: argocd-redis-ha-server
path: overlays/statefulset-containers-securityContext.yaml
- target:
group: rbac.authorization.k8s.io
version: v1
kind: Role
name: argocd-redis-ha-haproxy
path: overlays/haproxy-role.yaml
- target:
group: apps
version: v1
kind: Deployment
name: argocd-redis-ha-haproxy
path: overlays/deployment-initContainers.yaml