feat: replace ansible templating with makejinja (#1156)

2024-01-14 23:03:02 -05:00
1 parent a4731906d9
commit f9481d6202
@@ -0,0 +1,59 @@
+{% if weave_gitops.enabled | default(false) %}
+---
+apiVersion: helm.toolkit.fluxcd.io/v2beta2
+kind: HelmRelease
+metadata:
+  name: weave-gitops
+spec:
+  interval: 30m
+  chart:
+    spec:
+      chart: weave-gitops
+      version: 4.0.36
+      sourceRef:
+        kind: HelmRepository
+        name: weave-gitops
+        namespace: flux-system
+  maxHistory: 2
+  install:
+    remediation:
+      retries: 3
+  upgrade:
+    cleanupOnFail: true
+    remediation:
+      retries: 3
+  uninstall:
+    keepHistory: false
+  values:
+    adminUser:
+      create: true
+      createSecret: false
+      username: admin
+    ingress:
+      enabled: true
+      className: internal
+      {% if homepage.enabled | default(false) %}
+      annotations:
+        gethomepage.dev/enabled: "true"
+        gethomepage.dev/group: Home
+        gethomepage.dev/name: Weave-gitops
+        gethomepage.dev/icon: flux-cd.png
+      {% endif %}
+      hosts:
+        - host: &host "gitops.${SECRET_DOMAIN}"
+          paths:
+            - path: /
+              pathType: Prefix
+      tls:
+        - hosts:
+            - *host
+    networkPolicy:
+      create: false
+    metrics:
+      enabled: true
+    rbac:
+      create: true
+      impersonationResourceNames: ["admin"]
+    podAnnotations:
+      secret.reloader.stakater.com/reload: cluster-user-auth
+{% endif %}
@@ -0,0 +1,8 @@
+{% if weave_gitops.enabled | default(false) %}
+---
+apiVersion: kustomize.config.k8s.io/v1beta1
+kind: Kustomization
+resources:
+  - ./secret.sops.yaml
+  - ./helmrelease.yaml
+{% endif %}
@@ -0,0 +1,11 @@
+{% if weave_gitops.enabled | default(false) %}
+---
+apiVersion: v1
+kind: Secret
+metadata:
+  name: cluster-user-auth
+type: Opaque
+stringData:
+  username: admin
+  password: "{{ weave_gitops.password | encrypt }}"
+{% endif %}