1efba5374d
[DO-1689] Add deploy with argocd Co-authored-by: Boris Shestov <shestov1989@mail.ru> Co-authored-by: Denis Patrakeev <denis.patrakeev@avroid.team> Co-authored-by: Rustam Tagaev <rustam.tagaev@avroid.team> Reviewed-on: https://git.avroid.tech/K8s/k8s-configs/pulls/135 Reviewed-by: Denis Patrakeev <denis.patrakeev@avroid.team> Reviewed-by: Rustam Tagaev <rustam.tagaev@avroid.team>
68 lines
1.7 KiB
YAML
68 lines
1.7 KiB
YAML
replicaCount: 2
|
|
|
|
image:
|
|
repository: ghcr.io/actual-devops/webhook-receiver
|
|
pullPolicy: IfNotPresent
|
|
tag: "0.2.0-1"
|
|
|
|
serviceAccount:
|
|
create: false
|
|
automount: true
|
|
annotations: {}
|
|
name: "vault"
|
|
|
|
ingress:
|
|
enabled: true
|
|
className: "nginx"
|
|
annotations:
|
|
kubernetes.io/ingress.class: nginx
|
|
hosts:
|
|
- host: webhook-receiver.avroid.tech
|
|
paths:
|
|
- path: /
|
|
pathType: ImplementationSpecific
|
|
tls: []
|
|
|
|
resources:
|
|
limits:
|
|
cpu: 200m
|
|
memory: 256Mi
|
|
requests:
|
|
cpu: 50m
|
|
memory: 64Mi
|
|
|
|
autoscaling:
|
|
enabled: false
|
|
minReplicas: 1
|
|
maxReplicas: 100
|
|
targetCPUUtilizationPercentage: 80
|
|
|
|
volumeMounts: []
|
|
|
|
configMap:
|
|
configPath: "/vault/secrets/config.yaml"
|
|
config: |
|
|
{{ with secret "team-devops/data/services/ci-cd/webhook-receiver" }}
|
|
server_port: 8081
|
|
jenkins:
|
|
url: "https://jenkins.avroid.tech"
|
|
user: {{ .Data.data.jenkins_user }}
|
|
pass: {{ .Data.data.jenkins_pass }}
|
|
token: {{ .Data.data.jenkins_token }}
|
|
allowed_webhooks:
|
|
- repo_name: 'ansible'
|
|
run_jobs:
|
|
- job_path: job/Automation/job/DevOps/job/vault-policies-and-roles-update
|
|
parameterized_job: false
|
|
- repo_name: 'jenkins-pipelines'
|
|
run_jobs:
|
|
- job_path: 'job/jobs-dsl/job/jobs-dsl'
|
|
parameterized_job: false
|
|
{{ end }}
|
|
annotations:
|
|
vault.security.banzaicloud.io/vault-addr: "https://vault.avroid.tech"
|
|
vault.security.banzaicloud.io/vault-role: "avroid-prod"
|
|
vault.security.banzaicloud.io/vault-skip-verify: "false"
|
|
vault.security.banzaicloud.io/vault-path: "avroid-office"
|
|
vault.security.banzaicloud.io/run-as-user: "100"
|