Add ArgoCD resources including HelmRelease, HTTPRoute, and Namespace

Author: ams0

ToDeploy.md

@@ -9,16 +9,16 @@
 - [ ] BookStack
 - [ ] https://github.com/owncloud/helm-charts
 - [ ] n8n task runners https://docs.n8n.io/hosting/configuration/task-runners/#external-mode
-- [ ] https://go-vikunja.github.io/helm-chart/
-- [ ] https://goauthentik.io
+- [X] https://go-vikunja.github.io/helm-chart/
+- [X] https://goauthentik.io
 - [ ] https://github.com/openSUSE/osem/blob/master/INSTALL.md
 - [X] Keycloak
 - [ ] Nextcloud
 - [ ] Keycloak theme
 - [X] Openclaw
 - [X] Coder https://github.com/Azure-Samples/aks-kueue-sample/blob/main/coder/
 - [X] https://github.com/open-webui/helm-charts or https://www.librechat.ai
-- [ ] Grafana/Prometheus
+- [X] Grafana/Prometheus
 - [X] Forgejo 
 - [X] Mailer and runners for ForgeJo
 - [ ] RustFS (https://s3.vps.kubespaces.cloud/)

gitops/argocd/argocd-helmrelease.yaml

@@ -0,0 +1,38 @@
+---
+apiVersion: helm.toolkit.fluxcd.io/v2
+kind: HelmRelease
+metadata:
+  name: argocd
+  namespace: flux-system
+  labels:
+    app: argocd
+spec:
+  interval: 10m
+  timeout: 5m
+  targetNamespace: argocd
+  chart:
+    spec:
+      chart: argocd
+      sourceRef:
+        kind: HelmRepository
+        name: argocd
+        namespace: flux-system
+      interval: 5m0s
+  install:
+    createNamespace: true
+    remediation:
+      retries: 3
+  upgrade:
+    remediation:
+      retries: 3
+  values:
+    configs:
+      params:
+        server.insecure: "true"
+    controller:
+      clusterAdminAccess:
+        enabled: false
+    server:
+      clusterAdminAccess:
+        enabled: false
+

gitops/argocd/argocd-helmrepo.yaml

@@ -0,0 +1,9 @@
+---
+apiVersion: source.toolkit.fluxcd.io/v1
+kind: HelmRepository
+metadata:
+  name: argocd
+  namespace: flux-system
+spec:
+  interval: 1h
+  url: https://argoproj.github.io/argo-helm

gitops/argocd/argocd-httproute.yaml

@@ -0,0 +1,21 @@
+---
+apiVersion: gateway.networking.k8s.io/v1
+kind: HTTPRoute
+metadata:
+  name: argocd
+  namespace: argocd
+spec:
+  parentRefs:
+    - name: gateway
+      namespace: istio-system
+      sectionName: http   # listener name on the Gateway
+  hostnames:
+    - "argocd.vps.kubespaces.cloud"  # Change this to your actual domain
+  rules:
+    - matches:
+        - path:
+            type: PathPrefix
+            value: /
+      backendRefs:
+        - name: argocd
+          port: 8080

gitops/argocd/kustomization.yaml

@@ -0,0 +1,8 @@
+---
+apiVersion: kustomize.config.k8s.io/v1beta1
+kind: Kustomization
+resources:
+  - namespace.yaml
+  - argocd-helmrepo.yaml
+  - argocd-helmrelease.yaml
+  - argocd-httproute.yaml

gitops/argocd/namespace.yaml

@@ -0,0 +1,7 @@
+---
+apiVersion: v1
+kind: Namespace
+metadata:
+  name: argocd
+  labels:
+    name: argocd

gitops/kustomization.yaml

@@ -13,6 +13,7 @@ resources:
 - gateways/configmap.yaml
 - gateways/gateway.yaml
 - local-path-provisioner/local-path-provisioner.yaml
+- argocd
 
 # Add more resources here as you create them
 # - deployment.yaml

ingress/traefik/dynamic.yml

@@ -25,6 +25,13 @@ http:
       tls:
         certResolver: letsencrypt
 
+    argocd:
+      rule: "Host(`argocd.vps.kubespaces.cloud`)"
+      entryPoints: [websecure]
+      service: backend-service
+      tls:
+        certResolver: letsencrypt
+ 
     codimd:
       rule: "Host(`codimd.vps.kubespaces.cloud`)"
       entryPoints: [websecure]