k8s-deployments/app-files/apps.yaml

---
apiVersion: argoproj.io/v1alpha1
kind: Application
metadata:
  name: k8s-deployments-self
  namespace: argocd
spec:
  project: default
  source:
    repoURL: https://git.ar21.de/aaron/k8s-deployments.git
    targetRevision: HEAD
    path: "app-files"
  destination:
    server: https://kubernetes.default.svc
    namespace: argocd
  syncPolicy:
    automated:
      prune: false
---
apiVersion: argoproj.io/v1alpha1
kind: Application
metadata:
  name: argocd
  namespace: argocd
spec:
  project: default
  sources:
    - repoURL: https://argoproj.github.io/argo-helm
      chart: argo-cd
      targetRevision: 7.6.8
      helm:
        releaseName: argo
        valueFiles:
          - $values/argocd/values.yaml
    - repoURL: https://git.ar21.de/aaron/k8s-deployments.git
      targetRevision: HEAD
      ref: values
    - repoURL: https://git.ar21.de/aaron/k8s-deployments.git
      targetRevision: HEAD
      path: argocd
  destination:
    server: https://kubernetes.default.svc
    namespace: argocd
  syncPolicy:
    syncOptions:
      - CreateNamespace=true
    automated:
      selfHeal: true
      prune: false
---
apiVersion: argoproj.io/v1alpha1
kind: Application
metadata:
  name: drone-runner
  namespace: argocd
spec:
  project: default
  sources:
    - chart: drone-runner-kube
      repoURL: https://charts.drone.io
      targetRevision: 0.1.10
      helm:
        releaseName: drone-runner
        values: |
          extraSecretNamesForEnvFrom:
            - drone-secrets
          rbac:
            buildNamespaces:
              - drone
          env:
            DRONE_RPC_HOST: drone.ar21.de
            DRONE_RPC_PROTO: https
            DRONE_NAMESPACE_DEFAULT: drone          
    - repoURL: https://git.ar21.de/aaron/k8s-deployments.git
      targetRevision: HEAD
      path: drone
  destination:
    server: https://kubernetes.default.svc
    namespace: drone
  syncPolicy:
    syncOptions:
    - CreateNamespace=true
    automated:
      prune: false
---
apiVersion: argoproj.io/v1alpha1
kind: Application
metadata:
  name: hoylogo
  namespace: argocd
spec:
  project: default
  source:
    repoURL: https://git.ar21.de/aaron/k8s-deployments.git
    targetRevision: HEAD
    path: hoylogo/overlays/prod
  destination:
    server: https://kubernetes.default.svc
    namespace: hoylogo
  syncPolicy:
    syncOptions:
    - CreateNamespace=true
    automated:
      prune: true
---
apiVersion: argoproj.io/v1alpha1
kind: Application
metadata:
  name: hoylogo-staging
  namespace: argocd
spec:
  project: default
  source:
    repoURL: https://git.ar21.de/aaron/k8s-deployments.git
    targetRevision: HEAD
    path: hoylogo/overlays/staging
  destination:
    server: https://kubernetes.default.svc
    namespace: hoylogo-staging
  syncPolicy:
    syncOptions:
    - CreateNamespace=true
    automated:
      prune: true
---
apiVersion: argoproj.io/v1alpha1
kind: Application
metadata:
  name: surveybot
  namespace: argocd
spec:
  project: default
  source:
    repoURL: https://git.ar21.de/aaron/k8s-deployments.git
    targetRevision: HEAD
    path: surveybot
  destination:
    server: https://kubernetes.default.svc
    namespace: surveybot
  syncPolicy:
    syncOptions:
    - CreateNamespace=true
    automated:
      prune: true
---
apiVersion: argoproj.io/v1alpha1
kind: Application
metadata:
  name: cloudnative-pg
  namespace: argocd
spec:
  project: default
  sources:
    - chart: cloudnative-pg
      repoURL: https://cloudnative-pg.io/charts
      targetRevision: 0.22.1
      helm:
        releaseName: cloudnative-pg
  destination:
    server: https://kubernetes.default.svc
    namespace: cnpg
  syncPolicy:
    syncOptions:
    - CreateNamespace=true
    automated:
      prune: false
---
apiVersion: argoproj.io/v1alpha1
kind: Application
metadata:
  name: openproject
  namespace: argocd
spec:
  project: default
  sources:
    - repoURL: https://charts.openproject.org
      chart: openproject
      targetRevision: 8.3.2
      helm:
        releaseName: openproject
        values: |
          appInit:
            resources:
              limits:
                memory: "4Gi"
              requests:
                memory: "4Gi"
          clusterDomain: "project.aaronriedel.de"
          ingress:
            annotations:
              kubernetes.io/tls-acme: "true"
            host: "project.aaronriedel.de"
            tls:
              secretName: openproject-tls
          workers:
            default:
              replicas: 2
          openproject:
            oidc:
              enabled: true
              provider: "Keycloak"
              displayName: "aaronID"
              host: "auth.ar21.de"
              existingSecret: openproject-secret
              userinfoEndpoint: "https://auth.ar21.de/application/o/userinfo/"
              tokenEndpoint: "https://auth.ar21.de/application/o/token/"
              authorizationEndpoint: "https://auth.ar21.de/application/o/authorize/"
              endSessionEndpoint: "https://auth.ar21.de/application/o/openproject/end-session/"
          persistence:
            enabled: false
          s3:
            enabled: true
            auth:
              existingSecret: openproject-s3
            region: fsn1
            bucketName: openproject
            endpoint: https://fsn1.your-objectstorage.com
            pathStyle: true
            enableSignatureV4Streaming: false
            directUploads: false
          postgresql:
            bundled: false
            connection:
              host: openproject-rw.openproject.svc.cluster.local
              port: 5432
            auth:
              existingSecret: openproject-app
              secretKeys:
                adminPasswordKey: "password"
                userPasswordKey: "password"
              username: "app"
              database: "app"          
    - repoURL: https://git.ar21.de/aaron/k8s-deployments.git
      targetRevision: HEAD
      path: openproject
  destination:
    server: https://kubernetes.default.svc
    namespace: openproject
  syncPolicy:
    syncOptions:
      - CreateNamespace=true
    automated:
      selfHeal: true
      prune: false