blob: ad30bfb41d0e3cb55b7554e67857e5df192ddd91 (
plain)
1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41
42
43
44
45
46
47
48
49
50
51
52
53
54
55
56
57
58
59
60
61
62
63
64
65
66
67
68
69
70
71
72
73
74
75
76
77
78
79
80
81
82
83
84
85
86
87
88
89
90
91
92
93
94
95
96
97
98
99
100
101
102
103
104
105
106
107
108
109
110
111
112
113
114
115
116
|
# ArgoCD Helm Chart Values Override
# Following f3s cluster patterns: non-HA, single instance deployment
global:
domain: argocd.f3s.buetow.org
# Disable HA mode - following cluster pattern
redis-ha:
enabled: false
# Use standard Redis with authentication
redis:
enabled: true
# Controller configuration (manages k8s resources)
controller:
replicas: 1
# Enable metrics for Prometheus integration
metrics:
enabled: true
serviceMonitor:
enabled: true
namespace: cicd
additionalLabels:
release: prometheus
# Server configuration (API/Web UI)
server:
replicas: 1
# Run in insecure mode - TLS termination at ingress
insecure: true
# Disable built-in ingress - using separate manifest
ingress:
enabled: false
# Resource limits
resources:
limits:
cpu: 500m
memory: 512Mi
requests:
cpu: 250m
memory: 256Mi
# Enable metrics for Prometheus integration
metrics:
enabled: true
serviceMonitor:
enabled: true
namespace: cicd
additionalLabels:
release: prometheus
# Repo Server configuration (clones repos, generates manifests)
repoServer:
replicas: 1
# Increase liveness probe timeout to prevent restarts during slow health checks
livenessProbe:
timeoutSeconds: 5
failureThreshold: 5
readinessProbe:
timeoutSeconds: 5
failureThreshold: 5
# Enable persistence for repo cache - mount PVC at /home/argocd/repo-cache
volumes:
- name: repo-server-data
persistentVolumeClaim:
claimName: argocd-repo-server-pvc
volumeMounts:
- name: repo-server-data
mountPath: /home/argocd/repo-cache
# Configure repo-server to use the persistent cache directory
env:
- name: XDG_CACHE_HOME
value: /home/argocd/repo-cache
# Resource limits
resources:
limits:
cpu: 500m
memory: 512Mi
requests:
cpu: 250m
memory: 256Mi
# Enable metrics for Prometheus integration
metrics:
enabled: true
serviceMonitor:
enabled: true
namespace: cicd
additionalLabels:
release: prometheus
# ApplicationSet controller (multi-app management)
applicationSet:
replicas: 1
# Notifications controller - disabled
notifications:
enabled: false
# Dex (SSO/OAuth) - disabled for simplicity
dex:
enabled: false
# CRD installation
crds:
install: true
keep: true
# Server configuration parameters - run in insecure mode
configs:
params:
server.insecure: true
# Note: argocdServerAdminPassword is NOT set (left empty)
# This means:
# - helm install: Generates random password in argocd-initial-admin-secret
# - helm upgrade: Does NOT reset the password (preserves user changes)
# - helm uninstall: Deletes secret along with all resources
|
