The module is not enabled by default in any bundles.
The module is configured using the ModuleConfig custom resource named delivery (learn more about setting up Deckhouse…).
Example of the ModuleConfig/delivery resource for configuring the module:
apiVersion: deckhouse.io/v1alpha1
kind: ModuleConfig
metadata:
name: delivery
spec:
version: 1
enabled: true
settings: # <-- Module parameters from the "Parameters" section below.
Parameters
Schema version: 1
- objectargocd
Argo CD configuration.
- objectargocd.admin
- booleanargocd.admin.enabled
Enables Argo CD
adminuser.Might be helpful when Dex is not used or for argocd CLI access (read the Usage article for more information).
Default:
false
- objecthttps
What certificate type to use with Argo CD web-interface.
This parameter completely overrides the
global.modules.httpssettings.Examples:
https: mode: CustomCertificate customCertificate: secretName: foobarhttps: mode: CertManager certManager: clusterIssuerName: letsencrypt- objecthttps.certManager
- stringhttps.certManager.clusterIssuerName
What ClusterIssuer to use for Argo CD web-interface.
Currently,
letsencrypt,letsencrypt-staging,selfsignedare available. Also, you can define your own.Default:
"letsencrypt"
- objecthttps.customCertificate
- stringhttps.customCertificate.secretName
The name of the secret in the
d8-systemnamespace to use with Argo CD web-interface.This secret must have the kubernetes.io/tls format.
Default:
"false"
- stringhttps.mode
The HTTPS usage mode:
Disabled— Argo CD web-interface will work over HTTP only;CertManager— Argo CD web-interface will use HTTPS and get a certificate from the clusterissuer defined in thecertManager.clusterIssuerNameparameter.CustomCertificate— Argo CD web-interface will use HTTPS using the certificate from thed8-systemnamespace.OnlyInURI— Argo CD web-interface will work over HTTP (thinking that there is an external HTTPS load balancer in front that terminates HTTPS traffic). All the links in theuser-authnwill be generated using the HTTPS scheme. Load balancer should provide a redirect from HTTP to HTTPS.
Default:
"Disabled"Allowed values:
Disabled,CertManager,CustomCertificate,OnlyInURI
- objectnodeSelector
Node selector for the Argo CD server. The same as in the Pods’
spec.nodeSelectorparameter in Kubernetes.If the parameter is omitted or
false, it will be determined automatically.Example:
nodeSelector: disktype: ssd - storageClass
The name of the StorageClass to use.
If omitted, the StorageClass of the existing PVC is used. If there is no PVC yet, either the global StorageClass or
global.discovery.defaultStorageClassis used, and if those are undefined, the emptyDir volume is used to store the data.global.discovery.defaultStorageClassis applied during module activation, changing default StorageClass in cluster won’t result in disk re-provisioning.CAUTION! Setting this value to one that differs from the current one (in the existing PVC) will result in disk re-provisioning and data loss.
Setting it to
falseforces the use of an emptyDir volume.Examples:
storageClass: falsestorageClass: default - array of objectstolerations
Node tolerations for the Argo CD server. The same as in the Pods’
spec.tolerationsparameter in Kubernetes;If the parameter is omitted or
false, it will be determined automatically.Example:
tolerations: - key: key1 operator: Equal value: value1 effect: NoSchedule- stringtolerations.effect
- stringtolerations.key
- stringtolerations.operator
- integertolerations.tolerationSeconds
- stringtolerations.value