KubeArchive: install on stone-stage-p01 (#7342)

Signed-off-by: Hector Martinez <[email protected]>

Author: rh-hemartin

argo-cd-apps/base/member/infra-deployments/kubearchive/kubearchive.yaml

@@ -16,8 +16,8 @@ spec:
                 clusterDir: ""
           - list:
               elements:
-                # - nameNormalized: stone-stage-p01
-                #   values.clusterDir: stone-stage-p01
+                - nameNormalized: stone-stage-p01
+                  values.clusterDir: stone-stage-p01
                 - nameNormalized: stone-stg-rh01
                   values.clusterDir: stone-stg-rh01
                 # Private

argo-cd-apps/overlays/staging-downstream/delete-applications.yaml

@@ -30,13 +30,6 @@ metadata:
   name: quality-dashboard
 $patch: delete
 ---
-# There is not RDS database provisioned yet for internal staging, starting with external staging only
-apiVersion: argoproj.io/v1alpha1
-kind: ApplicationSet
-metadata:
-  name: kubearchive
-$patch: delete
----
 # At this time we're starting with external staging
 apiVersion: argoproj.io/v1alpha1
 kind: ApplicationSet

components/konflux-ui/staging/stone-stage-p01/kubearchive.conf

@@ -9,10 +9,6 @@ configMapGenerator:
   - name: dex
     files:
     - dex-config.yaml
-  - name: proxy-nginx-static
-    files:
-      - kubearchive.conf
-    behavior: merge
 
 patches:
 - path: add-service-certs-patch.yaml

components/konflux-ui/staging/stone-stage-p01/kustomization.yaml

@@ -0,0 +1,28 @@
+---
+apiVersion: external-secrets.io/v1beta1
+kind: ExternalSecret
+metadata:
+  name: database-secret
+  annotations:
+    argocd.argoproj.io/sync-options: SkipDryRunOnMissingResource=true
+    argocd.argoproj.io/sync-wave: "-1"
+spec:
+  dataFrom:
+    - extract:
+        key: integrations-output/external-resources/appsres09ue1/stone-stage-p01/kube-archive-staging-rds
+  refreshInterval: 1h
+  secretStoreRef:
+    kind: ClusterSecretStore
+    name: appsre-vault
+  target:
+    creationPolicy: Owner
+    deletionPolicy: Delete
+    name: kubearchive-database-credentials
+    template:
+      data:
+        DATABASE_KIND: postgresql
+        DATABASE_PORT: "5432"
+        DATABASE_URL: '{{ index . "db.host" }}'
+        DATABASE_PASSWORD: '{{ index . "db.password" }}'
+        DATABASE_USER: '{{ index . "db.user" }}'
+        DATABASE_DB: '{{ index . "db.name" }}'

components/kubearchive/staging/stone-stage-p01/database-secret.yaml

@@ -0,0 +1,28 @@
+---
+apiVersion: route.openshift.io/v1
+kind: Route
+metadata:
+  annotations:
+    argocd.argoproj.io/sync-options: SkipDryRunOnMissingResource=true
+    argocd.argoproj.io/sync-wave: "0"
+    haproxy.router.openshift.io/hsts_header: max-age=63072000
+    haproxy.router.openshift.io/timeout: 86410s
+    openshift.io/host.generated: "true"
+    router.openshift.io/haproxy.health.check.interval: 86400s
+  labels:
+    app.kubernetes.io/name: "kubearchive-api-server"
+    app.kubernetes.io/component: api-server
+    app.kubernetes.io/part-of: kubearchive
+  name: kubearchive-api-server
+  namespace: product-kubearchive
+spec:
+  port:
+    targetPort: server
+  tls:
+    insecureEdgeTerminationPolicy: Redirect
+    termination: reencrypt
+  to:
+    kind: Service
+    name: kubearchive-api-server
+    weight: 100
+  wildcardPolicy: None

components/kubearchive/staging/stone-stage-p01/kubearchive-routes.yaml

@@ -0,0 +1,18 @@
+---
+apiVersion: kustomize.config.k8s.io/v1beta1
+kind: Kustomization
+resources:
+  - ../../development
+  - kubearchive-routes.yaml
+  - database-secret.yaml
+
+namespace: product-kubearchive
+
+patches:
+  - patch: |-
+      $patch: delete
+      apiVersion: v1
+      kind: Secret
+      metadata:
+        name: kubearchive-database-credentials
+        namespace: kubearchive

components/kubearchive/staging/stone-stage-p01/kustomization.yaml

@@ -2,4 +2,5 @@ apiVersion: kustomize.config.k8s.io/v1beta1
 kind: Kustomization
 resources:
 - ../base/
+- ../policies/kubearchive/
 - ../policies/kueue/