✨ Add annotations for ArgoCD image updater and registry credentials. (#…

…202)

.vscode/extensions.json

@@ -1,7 +1,6 @@
 {
   "recommendations": [
     "HashiCorp.terraform",
-    "redhat.ansible",
     "ms-kubernetes-tools.vscode-kubernetes-tools",
     "github.vscode-pull-request-github"
   ]

apps/argocd-image-updater/kustomization.yaml

@@ -1,6 +1,8 @@
 apiVersion: kustomize.config.k8s.io/v1beta1
 kind: Kustomization
 namespace: argocd-image-updater
+resources:
+  - secrets.yaml
 helmCharts:
   - name: argocd-image-updater
     namespace: argocd-image-updater
@@ -14,3 +16,8 @@ helmCharts:
           serverAddress: argocd-server.argocd.svc.cluster.local
       serviceAccount:
         create: true
+      registries:
+        - name: gitea-registry
+          prefix: gitea.proompteng.ai
+          api_url: https://gitea.proompteng.ai
+          credentials: pullsecret:argocd-image-updater/gitea-registry

apps/argocd-image-updater/secrets.yaml

@@ -0,0 +1,16 @@
+---
+apiVersion: bitnami.com/v1alpha1
+kind: SealedSecret
+metadata:
+  creationTimestamp: null
+  name: gitea-registry
+  namespace: argocd-image-updater
+spec:
+  encryptedData:
+    .dockerconfigjson: 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
+  template:
+    metadata:
+      creationTimestamp: null
+      name: gitea-registry
+      namespace: argocd-image-updater
+    type: kubernetes.io/dockerconfigjson

apps/templates/_application.yaml

@@ -20,6 +20,10 @@ metadata:
   namespace: argocd
   finalizers:
     - resources-finalizer.argocd.argoproj.io
+  {{- if hasKey $application.metadata "annotations" }}
+  annotations:
+    {{- $application.metadata.annotations | nindent 4 }}
+  {{- end }}
 spec:
   project: default
   destination:

apps/values.yaml

@@ -11,6 +11,9 @@ applications:
   - name: ecran
     path: apps/ecran/kustomize
     namespace: ecran
+    annotations:
+      argocd-image-updater.argoproj.io/image-list: ecran=gitea.proompteng.ai/d/lab/ecran:main
+      argocd-image-updater.argoproj.io/ecran.update-strategy: digest
   - name: sealed-secrets
     path: apps/sealed-secrets
   - name: cert-manager