gitops-template/aws-gitlab/templates/mgmt/components/atlantis/application.yaml at 8be15902050d59173c44b304751b1d7936cb2fed · konstructio/gitops-template · GitHub

1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41
42
43
44
45
46
47
48
49
50
51
52
53
54
55
56
57
58
59
60
61
62
63
64
65
66
67
68
69
70
71
72
73
74
75
76
77
78
79
80
81
82
83
84
85
86
87
88
89
90
91
92
93
94
95
96
97
98
99
100
apiVersion: argoproj.io/v1alpha1
kind: Application
metadata:
  name: atlantis
  namespace: argocd
  annotations:
    argocd.argoproj.io/sync-wave: '10'
spec:
  project: default
  source:
    repoURL: https://runatlantis.github.io/helm-charts
    chart: atlantis
    targetRevision: 4.11.2
    helm:
      values: |-
        initConfig:
          enabled: true
          image: alpine:latest
          imagePullPolicy: IfNotPresent
          # sharedDir is set as env var INIT_SHARED_DIR
          sharedDir: /plugins
          workDir: /tmp
          sizeLimit: 250Mi
          script: |
            #!/bin/sh
            set -eoux pipefail

            # OpenTofu
            TF_VERSION="1.6.2"
            # TF_FILE="${INIT_SHARED_DIR}/tofu"
            TF_FILE="${INIT_SHARED_DIR}/terraform"
            wget https://github.com/opentofu/opentofu/releases/download/v${TF_VERSION}/tofu_${TF_VERSION}_linux_amd64.zip
            unzip tofu_${TF_VERSION}_linux_amd64.zip
            # mv tofu ${INIT_SHARED_DIR}/terraform
            mv tofu "${TF_FILE}"
            chmod 755 "${TF_FILE}"
            terraform -v

        environment:
          ATLANTIS_TF_DOWNLOAD: false

        statefulSet:
          annotations:
            secret.reloader.stakater.com/reload: "atlantis-secrets"
        atlantisUrl: https://atlantis.<DOMAIN_NAME>
        orgAllowlist: <ATLANTIS_ALLOW_LIST>
        hidePrevPlanComments: true
        serviceAccount:
          create: true
          mount: true
          annotations:
            eks.amazonaws.com/role-arn: 'arn:aws:iam::<AWS_ACCOUNT_ID>:role/atlantis-<CLUSTER_NAME>'
        resources:
          limits:
            cpu: 400m
            memory: 1Gi
          requests:
            cpu: 400m
            memory: 512Mi
        ingress:
          enabled: true
          annotations:
            <CERT_MANAGER_ISSUER_ANNOTATION_1>
            <CERT_MANAGER_ISSUER_ANNOTATION_2>
            <CERT_MANAGER_ISSUER_ANNOTATION_3>
            <CERT_MANAGER_ISSUER_ANNOTATION_4>
          path: /
          host: atlantis.<DOMAIN_NAME>
          ingressClassName: "nginx"
          tls:
            - secretName: atlantis-tls
              hosts:
                - atlantis.<DOMAIN_NAME>
        loadEnvFromSecrets:
          - atlantis-secrets
        repoConfig: |
          ---
          repos:
          - id: <ATLANTIS_ALLOW_LIST>
            workflow: default
            allowed_overrides: [apply_requirements]
            apply_requirements: [mergeable]
        volumeClaim:
          enabled: true
          dataStorage: 10Gi
  destination:
    server: 'https://kubernetes.default.svc'
    namespace: atlantis
  syncPolicy:
    automated:
      prune: true
      selfHeal: true
    syncOptions:
      - CreateNamespace=true
    retry:
      limit: 5
      backoff:
        duration: 5s
        maxDuration: 5m0s
        factor: 2