- Add minio-s3-credentials ClusterExternalSecret - Auto-create secret in namespaces with minio-s3: enabled label - Add minio-s3 label to zot namespace via managedNamespaceMetadata - Credentials stored in Vault at secret/minio-s3-credentials
46 lines
1.0 KiB
YAML
46 lines
1.0 KiB
YAML
apiVersion: argoproj.io/v1alpha1
|
|
kind: Application
|
|
metadata:
|
|
name: zot
|
|
namespace: argocd
|
|
finalizers:
|
|
- resources-finalizer.argocd.argoproj.io
|
|
spec:
|
|
project: default
|
|
sources:
|
|
- repoURL: https://bjw-s-labs.github.io/helm-charts
|
|
chart: app-template
|
|
targetRevision: 3.6.1
|
|
helm:
|
|
valueFiles:
|
|
- $values/zot/helm-values.yaml
|
|
- repoURL: https://github.com/K3S-HOME/storage.git
|
|
targetRevision: main
|
|
ref: values
|
|
- repoURL: https://github.com/K3S-HOME/storage.git
|
|
targetRevision: main
|
|
path: zot
|
|
destination:
|
|
server: https://kubernetes.default.svc
|
|
namespace: zot
|
|
syncPolicy:
|
|
automated:
|
|
prune: true
|
|
selfHeal: true
|
|
allowEmpty: false
|
|
syncOptions:
|
|
- CreateNamespace=true
|
|
- PrunePropagationPolicy=foreground
|
|
- PruneLast=true
|
|
retry:
|
|
limit: 5
|
|
backoff:
|
|
duration: 5s
|
|
factor: 2
|
|
maxDuration: 3m
|
|
managedNamespaceMetadata:
|
|
labels:
|
|
goldilocks.fairwinds.com/enabled: 'true'
|
|
minio-s3: enabled
|
|
revisionHistoryLimit: 10
|