k8s-and-chill/envs/env-data.ytt.yaml
Felix Wolf c7bfd4953c feat: Wire ArgoCD to Forgejo for GitOps management
Configure myks with global repoURL pointing to Forgejo, in-cluster
destination, and disabled placeholder cluster Secret. Implement App of
Apps pattern with a root Application that syncs all child apps.

Add argocd-deploy-key-init Job that generates an ed25519 SSH keypair,
registers it as a deploy key via Forgejo API, and creates the ArgoCD
repository secret with insecure host key verification (avoids
chicken-and-egg with ArgoCD managing its own known hosts ConfigMap).

Additional changes:
- Ignore /status field diffs globally (K8s 1.32 compat)
- Add Replace=true sync option on Jobs (immutable resource compat)
- Switch job images from bitnami/kubectl to alpine/k8s
- Update CLAUDE.md with ArgoCD status and no-bitnami rule

Co-Authored-By: Claude Opus 4.6 (1M context) <noreply@anthropic.com>
2026-03-30 23:09:50 +02:00

18 lines
363 B
YAML

#@data/values
---
argocd:
namespace: argocd
app:
prefix: app-
finalizers: []
source:
repoURL: ssh://git@git.tr1ceracop.de:222/gitea_admin/k8s-and-chill.git
destination:
server: https://kubernetes.default.svc
project:
prefix: env-
destination:
server: https://kubernetes.default.svc
env:
generateSecret: false