From a82193f0592f888444fbdd9770431df5c2cb070a Mon Sep 17 00:00:00 2001 From: rasmus Date: Sun, 15 Dec 2024 03:43:40 +0200 Subject: [PATCH] add argocd-image-updater --- argocd/README.md | 4 ++++ argocd/applications/argocd-image-updater.yaml | 20 +++++++++++++++++++ argocd/values.yaml | 4 ++++ 3 files changed, 28 insertions(+) create mode 100644 argocd/applications/argocd-image-updater.yaml diff --git a/argocd/README.md b/argocd/README.md index 50340e6..354278e 100644 --- a/argocd/README.md +++ b/argocd/README.md @@ -68,6 +68,10 @@ kind: Application metadata: name: $j namespace: argocd + annotations: + # Works with only Kustomize and Helm. Kustomize is easy, see https://github.com/argoproj-labs/argocd-image-updater/tree/master/manifests/base for an example. + argocd-image-updater.argoproj.io/image-list: TODO:^2 # semver 2.*.* + argocd-image-updater.argoproj.io/write-back-method: git spec: project: k-space.ee source: diff --git a/argocd/applications/argocd-image-updater.yaml b/argocd/applications/argocd-image-updater.yaml new file mode 100644 index 0000000..57c9f52 --- /dev/null +++ b/argocd/applications/argocd-image-updater.yaml @@ -0,0 +1,20 @@ +--- +apiVersion: argoproj.io/v1alpha1 +kind: Application +metadata: + name: argocd-image-updater + namespace: argocd +spec: + project: k-space.ee + source: + repoURL: 'https://github.com/argoproj-labs/argocd-image-updater.git' + path: manifests/base + targetRevision: stable + destination: + server: 'https://kubernetes.default.svc' + namespace: argocd + syncPolicy: + automated: + prune: true + syncOptions: + - CreateNamespace=true diff --git a/argocd/values.yaml b/argocd/values.yaml index eafa19d..108110b 100644 --- a/argocd/values.yaml +++ b/argocd/values.yaml @@ -69,6 +69,10 @@ configs: p, role:developers, applications, action/apps/Deployment/restart, default/camtiler, allow p, role:developers, applications, sync, default/camtiler, allow p, role:developers, applications, update, default/camtiler, allow + # argocd-image-updater + p, role:image-updater, applications, get, */*, allow + p, role:image-updater, applications, update, */*, allow + g, image-updater, role:image-updater cm: admin.enabled: "false" resource.customizations: |