iac/kubernetes/hacks/helmfile.d/apps.yml at 71827e2d3c64adc3e3a6b40298eebee73b8b0f2d · chkpwd/iac · GitHub

1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41
42
43
44
45
46
47
48
49
50
51
52
53
54
55
56
57
58
59
60
61
62
63
64
65
66
67
68
69
70
71
72
73
---
# yaml-language-server: $schema=https://json.schemastore.org/helmfile
helmDefaults:
  timeout: 600
  force: true
  wait: true
  waitForJobs: true
repositories:
  - name: cilium
    url: https://helm.cilium.io
  - name: jetstack
    url: https://charts.jetstack.io
releases:
  - name: cilium
    namespace: kube-system
    chart: cilium/cilium
    version: 1.19.5
    values: ["../core/cilium/values.yml"]
    hooks:
      - # Wait for Cilium CRDs
        command: bash
        args:
          - -c
          - until kubectl get crd ciliumloadbalancerippools.cilium.io ciliumnetworkpolicies.cilium.io &>/dev/null; do sleep 5; done
        events:
          - postsync
        showlogs: true
  - name: coredns
    namespace: kube-system
    chart: oci://ghcr.io/coredns/charts/coredns
    version: 1.47.0
    values: ["../core/coredns/values.yml"]
    needs: ["kube-system/cilium"]
  - name: cert-manager
    namespace: security
    chart: jetstack/cert-manager
    version: v1.20.3
    values: ["../core/cert-manager/values.yml"]
    needs: ["kube-system/coredns"]
  - name: external-secrets
    namespace: security
    chart: oci://ghcr.io/external-secrets/charts/external-secrets
    version: 2.7.0
    values: ["../core/external-secrets/values.yml"]
    needs: ["security/cert-manager"]
    hooks:
      - events: ["postsync"]
        showlogs: true
        command: "kubectl"
        args:
          [
            "apply",
            "-f",
            "../core/external-secrets/bitwarden-secrets-manager.yml",
          ]
  - name: flux-operator
    namespace: flux-system
    chart: oci://ghcr.io/controlplaneio-fluxcd/charts/flux-operator
    version: 0.32.0
    values: ["../core/flux-operator/values.yml"]
    needs: ["security/cert-manager"]
  - name: flux-instance
    namespace: flux-system
    chart: oci://ghcr.io/controlplaneio-fluxcd/charts/flux-instance
    version: 0.32.0
    values: ["../core/flux-instance/values.yml"]
    needs: ["flux-system/flux-operator"]
  - name: spegel
    namespace: kube-system
    chart: oci://ghcr.io/spegel-org/helm-charts/spegel
    version: 0.7.2
    values: ["../core/spegel/values.yml"]
    needs: ["kube-system/cilium"]