apps-dev ordner

argocd/apps-dev.yaml

@@ -1,22 +0,0 @@
-apiVersion: argoproj.io/v1alpha1
-kind: Application
-metadata:
-  name: apps-dev
-spec:
-  project: default
-  source:
-    repoURL: 'git@192.168.4.101:innohub/k3s.git'
-    path: argocd/apps
-    targetRevision: main
-    directory:
-      recurse: true
-      exclude: '**/include/*'
-      jsonnet: {}
-  destination:
-    server: 'https://192.168.4.202:6443''
-    namespace: argocd
-  syncPolicy:
-    automated:
-      selfHeal: true
-      prune: true
-

argocd/apps-dev/tatort/tatort-dev.yaml

@@ -0,0 +1,47 @@
+apiVersion: argoproj.io/v1alpha1
+kind: Application
+metadata:
+  name: tatort-dev
+  finalizers:
+  - resources-finalizer.argocd.argoproj.io
+spec:
+  project: default
+  source:
+    repoURL: 'https://gitea.innovation-hub-niedersachsen.de/innohub/charts/raw/main/tatort'
+    targetRevision: 0.*.*
+    helm:
+      parameters:
+        - name: ingress.enabled
+          value: "true"
+        - name: ingress.className
+          value: "traefik"
+        - name: ingress.hosts[0]
+          value: "tatort-dev.innovation-hub-niedersachsen.de"
+        - name: ingress.annotations.kubernetes\.io\/ingress\.class
+          value: traefik
+        - name: ingress.tls[0].secretName
+          value: "tatort-dev-tls"
+        - name: ingress.annotations.traefik\.ingress\.kubernetes\.io\/router\.entrypoints
+          value: websecure
+        - name: ingress.annotations.kubernetes\.io\/ingress\.class
+          value: traefik
+        - name: ingress.annotations.traefik\.ingress\.kubernetes\.io\/router\.tls
+          value: 'true'
+          forceString: true
+        - name: ingress.tls[0].hosts[0]
+          value: "tatort-dev.innovation-hub-niedersachsen.de"
+        - name: ingress.annotations.cert-manager\.io\/cluster-issuer
+          value: lets-encrypt
+    chart: tatort
+  destination:
+    server: 'https://192.168.4.202:6443'
+    namespace: tatort
+  syncPolicy:
+    managedNamespaceMetadata:
+      labels: 
+        pod-security.kubernetes.io/enforce: "privileged"
+    automated:
+      selfHeal: true
+      prune: true
+    syncOptions:
+      - CreateNamespace=true