Ruben Hensen
134774509d
argocd: serve plain HTTP behind the ingress and the Gateway
...
With server.insecure, TLS ends at nginx or Envoy and argocd-server serves plain HTTP, which is how Argo CD documents the Gateway API setup. The nginx Ingress now talks HTTP to the http port; the ssl-passthrough annotation did nothing without the controller flag. argocd-folder diffs server-side for the new HTTPRoute.
2026-10-23 17:44:08 +02:00
Ruben Hensen
f174ddee8f
argocd: upgrade to v3.4.12
...
One minor at a time from v2.14.2 to v3.4.12, see docs/upgrade-k8s-1.33.md.
2026-10-22 23:31:54 +02:00
Ruben Hensen
62043940e8
argocd: upgrade to v3.3.18
...
One minor at a time from v2.14.2 to v3.4.12, see docs/upgrade-k8s-1.33.md.
2026-10-22 23:25:46 +02:00
Ruben Hensen
f9111bd17b
argocd: upgrade to v3.2.12
...
One minor at a time from v2.14.2 to v3.4.12, see docs/upgrade-k8s-1.33.md.
2026-10-22 23:20:57 +02:00
Ruben Hensen
0e6e9dc323
argocd: upgrade to v3.1.16
...
One minor at a time from v2.14.2 to v3.4.12, see docs/upgrade-k8s-1.33.md.
2026-10-22 23:17:51 +02:00
Ruben Hensen
288714af21
argocd: upgrade to v3.0.23
...
One minor at a time from v2.14.2 to v3.4.12, see docs/upgrade-k8s-1.33.md.
2026-10-22 23:14:17 +02:00
Ruben Hensen
fe678d4b4b
ca-bundle: also serve argocd, authentik and actual-budget
...
Those three namespaces had their own ~190KB copy of patched-ca-bundle.
Let the ca-bundle chart render them too, so the bundle lives in one file.
2026-10-22 09:26:43 +02:00
Ruben Hensen
a507282103
argocd: mount a CA bundle without the compromised eMudhra roots
...
The Argo CD v2.14.2 image (Ubuntu 24.04, ca-certificates 20240203) and the
dex image still trust the eMudhra intermediates whose keys leaked
(https://emudhra.we-have-a-problem.com ), and the repo server fetches git
and Helm repos over that trust store. A forged certificate there means
arbitrary manifests in the cluster.
patched-ca-bundle holds the bundle from Alpine ca-certificates-bundle
20261020-r0 and replaces /etc/ssl/certs in every Argo CD container except
redis. The whole directory goes, since OpenSSL and Go also read the
per-root files next to ca-certificates.crt. It uses server-side apply to
keep the bundle out of the last-applied annotation.
2026-10-21 12:09:41 +02:00
Ruben Hensen
dc85d89904
Add oidc secret for argocd
2026-04-06 18:52:21 +02:00
Ruben Hensen
0fd7bf1135
Add OIDC to argocd
2026-04-06 18:44:32 +02:00
Ruben Hensen
174fa1157e
Exclude velero backup resource in argocd 2
2025-03-04 14:13:32 +01:00
Ruben Hensen
8a01918922
Update argocd
2025-02-26 13:40:51 +01:00
Ruben Hensen
b5aa614bcb
Add immich helm with common probe(?)
2024-12-15 19:07:55 +01:00
Ruben Hensen
7161fe8612
Add patch to argocd 6
2024-12-14 22:09:05 +01:00
Ruben Hensen
3730aa6c80
Add patch to argocd 5
2024-12-14 22:08:37 +01:00
Ruben Hensen
b285253141
Add patch to argocd 4
2024-12-14 22:04:58 +01:00
Ruben Hensen
a5f48a393b
Add patch to argocd 3
2024-12-14 22:03:25 +01:00
Ruben Hensen
6ce1b96486
Add patch to argocd 2
2024-12-14 22:02:19 +01:00
Ruben Hensen
159467b8b2
Add patch to argocd
2024-12-14 22:01:38 +01:00
Ruben Hensen
8881f391f4
Update argocd
2024-12-14 19:22:33 +01:00
Ruben Hensen
e6ecb86a70
Re-add longhorn ingress with subdomain and basic auth
2024-12-14 19:15:01 +01:00
Ruben Hensen
56b42423a5
Change argocd version 2.14.2
2024-10-03 15:05:37 +02:00
Ruben Hensen
d9c8db718e
Change argocd version 2
2024-10-03 15:04:39 +02:00
Ruben Hensen
73e26b175d
Change argocd version
2024-10-03 15:02:25 +02:00
Ruben Hensen
45440b2a89
Add overlay patches 10
2024-09-14 21:51:09 +02:00
Ruben Hensen
efb5e52aaf
Add overlay patches 9
2024-09-14 21:50:22 +02:00
Ruben Hensen
d7aaa18677
Add overlay patches 8
2024-09-14 21:46:46 +02:00
Ruben Hensen
63c14604b8
Add overlay patches 4
2024-09-14 21:38:33 +02:00
Ruben Hensen
54c3674148
Add overlay patches 3
2024-09-14 21:38:10 +02:00
Ruben Hensen
6fdaaf90ff
Add overlay patches
2024-09-14 21:32:24 +02:00
Ruben Hensen
3f37cbff49
Add overlay patches
2024-09-14 21:30:33 +02:00
Ruben Hensen
211be7b592
Add overlay
2024-09-14 21:29:55 +02:00
Ruben Hensen
0fef80f22a
Add patch argocd
2024-09-14 21:13:05 +02:00
Ruben Hensen
38d4101c99
Remove plugin
2024-09-10 14:17:34 +02:00
Ruben Hensen
b20297789f
Re-add plugin
2024-09-10 14:03:36 +02:00
Ruben Hensen
7c6a608f69
Remove cmp plugin
2024-09-10 13:59:41 +02:00
Ruben Hensen
9c8d93a236
push
2024-09-10 12:12:26 +02:00
Ruben Hensen
ca7028e561
Add argo vault plugin
2024-09-10 12:04:26 +02:00
Ruben Hensen
e7efffedd9
Add ingress
2024-09-09 00:25:59 +02:00
Ruben Hensen
56a739daad
Change url argo
2024-09-09 00:22:47 +02:00
Ruben Hensen
f9603cdab9
Change argocd url
2024-09-09 00:20:33 +02:00
Ruben Hensen
d97ddb60c8
Remove type argocd
2024-09-09 00:15:19 +02:00
Ruben Hensen
2a7311150a
Remove argo plugin
2024-09-09 00:12:46 +02:00
Ruben Hensen
fe98630145
Remove namespace kustomization.yaml
2024-09-09 00:03:45 +02:00
Ruben Hensen
0ba18f37bc
Fix typo
2024-09-08 21:33:03 +02:00
Ruben Hensen
9701ce3243
Add argo cd vault plugin
2024-09-08 21:30:21 +02:00
Ruben Hensen
1d0bbc738b
Add argocd to self manage
2024-09-08 14:35:57 +02:00
Ruben Hensen