removed files
This commit is contained in:
Mukul Sharma
@@ -2,238 +2,86 @@ argo-cd:
|
||||
global:
|
||||
image:
|
||||
tag: "v2.13.8"
|
||||
additionalLabels:
|
||||
bu: infra
|
||||
team: devops
|
||||
podLabels:
|
||||
bu: infra
|
||||
team: devops
|
||||
nodeSelector:
|
||||
dedicated: devops
|
||||
tolerations:
|
||||
- key: "dedicated"
|
||||
operator: "Equal"
|
||||
value: "devops"
|
||||
effect: "NoSchedule"
|
||||
|
||||
# Single-node homelab VM (8GB RAM / 6 cores, see claude.md) — no dedicated
|
||||
# devops node pool here, so the GKE nodeSelector/toleration pair from the
|
||||
# fleet's admin cluster doesn't apply. Every component below is trimmed to
|
||||
# a single replica with small resource requests to fit the ~700MB total
|
||||
# budget claude.md tracks for ArgoCD.
|
||||
|
||||
# SSO deferred per claude.md ("not yet implemented") — Dex stays off until
|
||||
# that's picked back up. Revisit this file when it is.
|
||||
dex:
|
||||
enabled: true
|
||||
enabled: false
|
||||
|
||||
controller:
|
||||
replicas: 1
|
||||
resources:
|
||||
requests:
|
||||
cpu: 200m
|
||||
memory: 400Mi
|
||||
limits:
|
||||
cpu: 500m
|
||||
memory: 1Gi
|
||||
memory: 768Mi
|
||||
|
||||
redis-ha:
|
||||
enabled: false
|
||||
redis:
|
||||
resources:
|
||||
requests:
|
||||
cpu: 50m
|
||||
memory: 64Mi
|
||||
limits:
|
||||
memory: 128Mi
|
||||
|
||||
repoServer:
|
||||
replicas: 1
|
||||
resources:
|
||||
requests:
|
||||
cpu: 100m
|
||||
memory: 256Mi
|
||||
limits:
|
||||
cpu: 300m
|
||||
memory: 512Mi
|
||||
metrics:
|
||||
enabled: true
|
||||
podAnnotations:
|
||||
prometheus.io/scrape: true
|
||||
prometheus.io/path: /metrics
|
||||
prometheus.io/port: 5558
|
||||
controller:
|
||||
replicas: 2
|
||||
enableStatefulSet: true
|
||||
podAnnotations:
|
||||
prometheus.io/scrape: true
|
||||
prometheus.io/path: /metrics
|
||||
prometheus.io/port: 8082
|
||||
resources:
|
||||
limits:
|
||||
cpu: "7"
|
||||
memory: "12Gi"
|
||||
requests:
|
||||
cpu: "6"
|
||||
memory: "8Gi"
|
||||
env:
|
||||
- name: ARGOCD_CONTROLLER_REPLICAS
|
||||
value: '2'
|
||||
redis-ha:
|
||||
enabled: true
|
||||
repoServer:
|
||||
autoscaling:
|
||||
enabled: true
|
||||
maxReplicas: 15
|
||||
minReplicas: 3
|
||||
targetMemoryUtilizationPercentage: 70
|
||||
targetCPUUtilizationPercentage: 60
|
||||
metrics:
|
||||
enabled: true
|
||||
serviceMonitor:
|
||||
enabled: false
|
||||
interval: 60s
|
||||
podAnnotations:
|
||||
prometheus.io/scrape: true
|
||||
prometheus.io/path: /metrics
|
||||
prometheus.io/port: 8084
|
||||
resources:
|
||||
limits:
|
||||
cpu: 2500m
|
||||
memory: 4Gi
|
||||
requests:
|
||||
cpu: 1500m
|
||||
memory: 3Gi
|
||||
env:
|
||||
- name: ARGOCD_HELM_ALLOW_CONCURRENCY
|
||||
value: 'true'
|
||||
|
||||
server:
|
||||
ingress:
|
||||
annotations.nginx.ingress.kubernetes.io/force-ssl-redirect: false
|
||||
annotations.nginx.ingress.kubernetes.io/rewrite-target: /
|
||||
annotations.nginx.ingress.kubernetes.io/ssl-redirect: false
|
||||
enabled: true
|
||||
hostname: "argocd-prd.meeshogcp.in"
|
||||
ingressClassName: nginx-internal
|
||||
replicas: 3
|
||||
autoscaling:
|
||||
enabled: true
|
||||
minReplicas: 3
|
||||
maxReplicas: 15
|
||||
targetMemoryUtilizationPercentage: 60
|
||||
targetCPUUtilizationPercentage: 60
|
||||
replicas: 1
|
||||
extraArgs:
|
||||
- --insecure
|
||||
podAnnotations:
|
||||
prometheus.io/scrape: true
|
||||
prometheus.io/path: /metrics
|
||||
prometheus.io/port: 8083
|
||||
ingress:
|
||||
enabled: true
|
||||
ingressClassName: contour
|
||||
# LAN hostname, matching claude.md's documented access URL. Add the
|
||||
# Tailscale nip.io variant (argocd.100.90.248.118.nip.io) the same
|
||||
# way Gitea does it if remote access is needed later.
|
||||
hostname: "argocd.192.168.1.7.nip.io"
|
||||
resources:
|
||||
limits:
|
||||
cpu: 1500m
|
||||
memory: 4Gi
|
||||
requests:
|
||||
cpu: 1
|
||||
memory: 2Gi
|
||||
cpu: 50m
|
||||
memory: 128Mi
|
||||
limits:
|
||||
cpu: 200m
|
||||
memory: 256Mi
|
||||
|
||||
# Not used by this repo's Applications (plain Application manifests
|
||||
# rendered by generic-argo-apps-chart, not the ApplicationSet CRD) and
|
||||
# notifications has no configured trigger/service — both off to save RAM.
|
||||
applicationSet:
|
||||
replicaCount: 2
|
||||
resources:
|
||||
limits:
|
||||
cpu: 500m
|
||||
memory: 1Gi
|
||||
requests:
|
||||
cpu: 300m
|
||||
memory: 512Mi
|
||||
enabled: false
|
||||
notifications:
|
||||
resources:
|
||||
limits:
|
||||
cpu: 500m
|
||||
memory: 1Gi
|
||||
requests:
|
||||
cpu: 300m
|
||||
memory: 512Mi
|
||||
enabled: false
|
||||
|
||||
configs:
|
||||
cm:
|
||||
resource.customizations: |
|
||||
keda.sh/ScaledObject:
|
||||
health.lua: |
|
||||
local hs = {}
|
||||
local healthy = false
|
||||
local degraded = false
|
||||
local suspended = false
|
||||
|
||||
if obj.status ~= nil then
|
||||
if obj.status.conditions ~= nil then
|
||||
for i, condition in ipairs(obj.status.conditions) do
|
||||
if condition.status == "False" and condition.type == "Ready" then
|
||||
degraded = true
|
||||
hs.message = condition.message
|
||||
end
|
||||
if condition.status == "True" and condition.type == "Ready" then
|
||||
healthy = true
|
||||
hs.message = condition.message
|
||||
end
|
||||
if condition.status == "True" and condition.type == "Paused" then
|
||||
suspended = true
|
||||
hs.message = condition.message
|
||||
end
|
||||
end
|
||||
end
|
||||
end
|
||||
|
||||
if degraded == true then
|
||||
hs.status = "Degraded"
|
||||
return hs
|
||||
elseif healthy == true then
|
||||
hs.status = "Healthy"
|
||||
if suspended == true then
|
||||
hs.message = "ScaledObject is paused as part of normal operations."
|
||||
else
|
||||
hs.message = "ScaledObject is active."
|
||||
end
|
||||
return hs
|
||||
end
|
||||
|
||||
hs.status = "Progressing"
|
||||
hs.message = "Creating ScaledObject or waiting for conditions."
|
||||
return hs
|
||||
url: https://argocd-prd.meeshogcp.in
|
||||
url: "https://argocd.192.168.1.7.nip.io"
|
||||
timeout.reconciliation: 3m
|
||||
timeout.reconciliation.jitter: 60s
|
||||
statusbadge.enabled: "true"
|
||||
help.chatUrl: "https://meesho.slack.com/archives/C021QNS6JLV"
|
||||
help.chatText: "Chat now!"
|
||||
dex.config: |
|
||||
logger:
|
||||
level: error
|
||||
format: json
|
||||
connectors:
|
||||
- type: github
|
||||
id: github
|
||||
name: GitHub
|
||||
loadAllGroups: true
|
||||
admin.enabled: "true"
|
||||
config:
|
||||
clientID: 7f82547c0e671780cda5
|
||||
clientSecret: $github-sso-secret:dex.github.clientSecret
|
||||
orgs:
|
||||
- name: Meesho
|
||||
params:
|
||||
controller.sharding.algorithm: round-robin
|
||||
controller.status.processors: '40'
|
||||
controller.operation.processors: '20'
|
||||
controller.repo.server.timeout.seconds: '60'
|
||||
rbac:
|
||||
policy.csv: |
|
||||
p, role:admins, *, *, */*, allow
|
||||
## Policy for Admin-NoDelete role
|
||||
p, role:admin-nodelete, *, get, *, allow
|
||||
p, role:admin-nodelete, *, create, *, allow
|
||||
p, role:admin-nodelete, *, update, *, allow
|
||||
p, role:admin-nodelete, *, update, devops/argocd-*, deny
|
||||
p, role:admin-nodelete, applications, override, *, allow
|
||||
p, role:admin-nodelete, applications, sync, *, allow
|
||||
p, role:admin-nodelete, applications, action/*, *, allow
|
||||
p, role:admin-nodelete, applications, delete/*/Pod/*/*, */*, allow
|
||||
g, Meesho:devops-new, role:admin-nodelete
|
||||
|
||||
p, role:superstore, applications, *, farmiso/*, allow
|
||||
|
||||
p, role:backend, applications, get, */*, allow
|
||||
p, role:backend, applications, update, */*, allow
|
||||
p, role:backend, applications, sync, */*, allow
|
||||
|
||||
g, Meesho:devops, role:admins
|
||||
g, Meesho:superstore, role:superstore
|
||||
g, Meesho:backend, role:backend
|
||||
p, role:intern, *, get, *, allow
|
||||
g, Meesho:devops-interns, role:intern
|
||||
|
||||
## Policy: sync access to aurva apps
|
||||
p, role:aurva-sync, applications, get, devops/aurva-dataplane-*, allow
|
||||
p, role:aurva-sync, applications, sync, devops/aurva-dataplane-*, allow
|
||||
p, role:aurva-sync, applications, action/apps/*/restart, devops/aurva-dataplane-*, allow
|
||||
g, keshav.pandya@meesho.com, role:aurva-sync
|
||||
|
||||
# No custom RBAC policy: single-user homelab, the initial admin secret
|
||||
# (kubectl -n argocd get secret argocd-initial-admin-secret) is enough.
|
||||
# The fleet's role:admins / role:backend / GitHub-team policy.csv and
|
||||
# real teammate emails from the source cluster are dropped here.
|
||||
repositories:
|
||||
gcp-devops-admin:
|
||||
url: https://github.com/Meesho/gcp-devops-admin
|
||||
gcp-argocd-apps:
|
||||
url: https://github.com/Meesho/gcp-argocd-apps
|
||||
gcp-service-helmcharts:
|
||||
url: https://github.com/Meesho/gcp-service-helmcharts
|
||||
sre-argo-apps:
|
||||
url: https://github.com/Meesho/sre-argo-apps
|
||||
devops-infra-helm-charts:
|
||||
url: https://github.com/Meesho/devops-infra-helm-charts
|
||||
url: http://gitea.192.168.1.7.nip.io/mukul/devops-infra-helm-charts.git
|
||||
devops-infra-argo-config:
|
||||
url: https://github.com/Meesho/devops-infra-argo-config
|
||||
url: http://gitea.192.168.1.7.nip.io/mukul/devops-infra-argo-config.git
|
||||
|
||||
Reference in New Issue
Block a user