78 lines
2.1 KiB
YAML
78 lines
2.1 KiB
YAML
apiVersion: argoproj.io/v1alpha1
|
|
kind: Application
|
|
metadata:
|
|
annotations:
|
|
argocd.argoproj.io/client-side-apply-migration-manager: argocd-controller
|
|
argocd.argoproj.io/sync-wave: "1"
|
|
name: cert-manager
|
|
namespace: argocd
|
|
spec:
|
|
destination:
|
|
namespace: cert-manager
|
|
server: https://kubernetes.default.svc
|
|
project: default
|
|
sources:
|
|
- chart: cert-manager
|
|
helm:
|
|
values: |
|
|
crds:
|
|
enabled: true
|
|
config:
|
|
apiVersion: controller.config.cert-manager.io/v1alpha1
|
|
kind: ControllerConfiguration
|
|
featureGates:
|
|
ExperimentalGatewayAPISupport: true
|
|
resources:
|
|
limits:
|
|
cpu: 200m
|
|
memory: 256Mi
|
|
requests:
|
|
cpu: 10m
|
|
memory: 64Mi
|
|
# The chart's egress fits the controller: ACME and Cloudflare on 443,
|
|
# DNS-01 propagation checks on 53, and the API on 6443
|
|
networkPolicy:
|
|
enabled: true
|
|
cainjector:
|
|
# Only talks to the API
|
|
networkPolicy:
|
|
enabled: true
|
|
egress:
|
|
- ports:
|
|
- port: 6443
|
|
protocol: TCP
|
|
resources:
|
|
limits:
|
|
cpu: 200m
|
|
memory: 256Mi
|
|
requests:
|
|
cpu: 10m
|
|
memory: 64Mi
|
|
webhook:
|
|
# Only talks to the API
|
|
networkPolicy:
|
|
enabled: true
|
|
egress:
|
|
- ports:
|
|
- port: 6443
|
|
protocol: TCP
|
|
resources:
|
|
limits:
|
|
cpu: 200m
|
|
memory: 128Mi
|
|
requests:
|
|
cpu: 10m
|
|
memory: 32Mi
|
|
repoURL: https://charts.jetstack.io
|
|
targetRevision: v1.21.2
|
|
- path: add-ons/cert-manager
|
|
repoURL: https://gitea.whyredfire.dev/whyredfire/gitops.git
|
|
targetRevision: main
|
|
syncPolicy:
|
|
automated:
|
|
prune: true
|
|
selfHeal: true
|
|
syncOptions:
|
|
- CreateNamespace=true
|
|
- ServerSideApply=true
|