declarative application definition 101

infrastructure/02-argocd/applications/projects-website.yaml

@@ -1,20 +1,17 @@
-API Version: argoproj.io/v1alpha1
-Name: website
-Namespace: argocd
-Annotations:
-  argocd-image-updater.argoproj.io/image-list: website=illiumst/website
-  argocd-image-updater.argoproj.io/website.update-strategy: latest
-
-Kind: Application
-Spec:
-  Destination:
-    Name: in-cluster
-    Namespace: website
-  Project: default
-  Source:
-    Path: projects/website
-    Repo URL: https://github.com/illiumst/kubedeploy.git
-    Target Revision: HEAD
-  Sync Policy:
-    Sync Options:
-      CreateNamespace=true
+apiVersion: argoproj.io/v1alpha1
+kind: Application
+metadata:
+  name: website
+  namespace: argocd
+spec:
+  destination:
+    name: in-cluster
+    namespace: website
+  project: default
+  source:
+    path: projects/website
+    repoURL: https://github.com/illiumst/kubedeploy.git
+    targetRevision: HEAD
+  syncPolicy:
+    syncOptions:
+      - CreateNamespace=true

infrastructure/02-argocd/base/argo-cd-ghcr-secret-sealed.yaml

@@ -1,29 +0,0 @@
-{
-  "kind": "SealedSecret",
-  "apiVersion": "bitnami.com/v1alpha1",
-  "metadata": {
-    "name": "argo-cd-ghcr-secret",
-    "namespace": "argocd",
-    "creationTimestamp": null,
-    "annotations": {
-      "sealedsecrets.bitnami.com/namespace-wide": "true"
-    }
-  },
-  "spec": {
-    "template": {
-      "metadata": {
-        "name": "argo-cd-ghcr-secret",
-        "namespace": "argocd",
-        "creationTimestamp": null,
-        "annotations": {
-          "sealedsecrets.bitnami.com/namespace-wide": "true"
-        }
-      },
-      "type": "Opaque"
-    },
-    "encryptedData": {
-      "password": "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",
-      "username": "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"
-    }
-  }
-}

infrastructure/02-argocd/base/argo-cd-image-updater-cm.yaml

@@ -1,14 +0,0 @@
-apiVersion: v1
-kind: ConfigMap
-metadata:
-  labels:
-    app.kubernetes.io/name: argocd-image-updater-config
-    app.kubernetes.io/part-of: argocd-image-updater
-name: argocd-image-updater-config
-data:
-  registries.conf: |
-    registries:
-    - name: GHCR.io
-      prefix: ghcr.io
-      api_url: hhttps://ghcr.io/v2
-      credentials: pullsecret:argocd/argo-cd-ghcr-secret

infrastructure/02-argocd/base/ghcr-io-secret-sealed.yaml

@@ -0,0 +1,16 @@
+---
+apiVersion: bitnami.com/v1alpha1
+kind: SealedSecret
+metadata:
+  creationTimestamp: null
+  name: ghcr.io-secret
+  namespace: default
+spec:
+  encryptedData:
+    .dockerconfigjson: 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
+  template:
+    metadata:
+      creationTimestamp: null
+      name: ghcr.io-secret
+      namespace: default
+    type: kubernetes.io/dockerconfigjson

infrastructure/02-argocd/kustomization.yaml

@@ -6,17 +6,17 @@ namespace: argocd
 # - base/argo-cd-ui-ingress.yaml
 resources:
 # Applications
-- applications/projcts-website.yaml
+- applications/projects-website.yaml
 # Base functionality
 - base/argo-cd-k-with-helm.yaml
-- base/argo-cd-image-updater-cm.yaml
-- patches/argocd-cmd-params-cm.yaml
 - https://raw.githubusercontent.com/argoproj/argo-cd/stable/manifests/install.yaml
 - base/argo-cd-namespace.yaml
+- base/ghcr-io-secret-sealed.yaml
 
 patches:
 - path: patches/argocd-server-service.yaml
 - path: patches/argocd-cm-patch.yaml
+- path: patches/argocd-cmd-params-cm.yaml
 - path: patches/nodeselector.yaml
   target:
     kind: (StatefulSet|Deployment|Job)

infrastructure/02-argocd/patches/argocd-cm-patch.yaml

@@ -2,5 +2,7 @@ apiVersion: v1
 kind: ConfigMap
 metadata:
   name: argocd-cm
+  annotations:
+    app.kubernetes.io/part-of: argocd
 data:
   kustomize.buildOptions: --enable-helm

infrastructure/02-argocd/patches/argocd-cmd-params-cm.yaml

@@ -2,5 +2,8 @@ apiVersion: v1
 kind: ConfigMap
 metadata:
   name: argocd-cmd-params-cm
+  annotations:
+    app.kubernetes.io/part-of: argocd
+
 data:
   server.insecure: "true"

projects/website/base/website-deployment.yaml

@@ -21,4 +21,6 @@ spec:
             - containerPort: 80
               protocol: TCP
           resources: {}
+      imagePullSecrets:
+        - name: ghcr.io-secret
       restartPolicy: Always