Automating Kubernetes Provisioning and GitOps Workflows with Service Foundry

use-argocd: true
argocd-app-prefix: "argo-"

#(1)
argocd:
  enabled: true
  release-name: argocd
  namespace: argocd
  replica-count: 2
  version: "8.1.2"
  repo-url: "https://argoproj.github.io/argo-helm"

  project: service-foundry
  git-ops-repo-url: "git@github.com:nsalexamy/service-foundry-argocd.git"
  git-ops-repo-name: service-foundry-argocd
  git-ops-ssh-key-path: /Users/young/.ssh/argocd_id_rsa
  git-ops-user-name: "nsa2-argocd"
  git-ops-user-email: "devops@company.com"
  need-to-wait: true

#(2)
sealed-secrets:
  enabled: true
  namespace: kube-system
  version: "0.30.0"

# 169
configs:

  credentialTemplates:
    ssh-creds:
      url: git@github.com:nsalexamy/service-foundry-argocd.git
      sshPrivateKey: |
        -----BEGIN OPENSSH PRIVATE KEY-----
        your-private-key-content-here
        -----END OPENSSH PRIVATE KEY-----

  repositories:
    service-foundry-argocd:
      name: service-foundry-argocd
      url: git@github.com:nsalexamy/service-foundry-argocd.git

server:
  replicas: 2
  podLabels:
    sf-component: "argocd.server"

  service:
    type: ClusterIP

apiVersion: argoproj.io/v1alpha1
kind: AppProject
metadata:
  name: service-foundry
  namespace: argocd
spec:
  description: Argo CD project using SSH-based Git repo

  # Important: use the SSH-formatted Git URL
  sourceRepos:
    - git@github.com:nsalexamy/service-foundry-argocd.git

  destinations:
    - namespace: '*'
      server: https://kubernetes.default.svc

  clusterResourceWhitelist:
    - group: '*'
      kind: '*'

  namespaceResourceWhitelist:
    - group: '*'
      kind: '*'

#!/bin/bash

echo "Deploying Argocd... "

K8S_NAMESPACE="argocd"
HELM_RELEASE_NAME="argocd"
CHART_VERSION="8.1.2"
HELM_REPOSITORY="helm-charts/argocd/argo-cd-${CHART_VERSION}.tgz"
CUSTOM_VALUES_FILE="helm-charts/argocd/custom-values-${CHART_VERSION}.yaml"


echo "K8S_NAMESPACE: $K8S_NAMESPACE"
echo "HELM_RELEASE_NAME: $HELM_RELEASE_NAME"
echo "CHART_VERSION: $CHART_VERSION"
echo "HELM_REPOSITORY: $HELM_REPOSITORY"
echo "CUSTOM_VALUES_FILE: $CUSTOM_VALUES_FILE"

echo "Creating namespace $K8S_NAMESPACE if it does not exist"
kubectl get namespace $K8S_NAMESPACE &> /dev/null || \
  kubectl create namespace $K8S_NAMESPACE


echo "Installing $HELM_RELEASE_NAME in $K8S_NAMESPACE namespace"

helm -n $K8S_NAMESPACE status $HELM_RELEASE_NAME &> /dev/null || \
helm install $HELM_RELEASE_NAME $HELM_REPOSITORY --version $CHART_VERSION \
  --namespace  $K8S_NAMESPACE --create-namespace -f $CUSTOM_VALUES_FILE

WAIT_TIMEOUT=${WAIT_TIMEOUT:-300} # default: 300 seconds
WAIT_INTERVAL=${WAIT_INTERVAL:-10} # default: 10 seconds
WAIT_SPENT=0

echo "Waiting for argocd to be ready for maximum ${WAIT_TIMEOUT} seconds..."

while ! kubectl -n "argocd" wait --for=condition=Ready pod -l sf-component=argocd.server --timeout=${WAIT_TIMEOUT}s ; do
    echo "Waiting for argocd to be created..."
    sleep $WAIT_INTERVAL

    WAIT_SPENT=$((WAIT_SPENT + WAIT_INTERVAL))

    if [ $WAIT_SPENT -ge $WAIT_TIMEOUT ]; then
        echo "Timeout waiting for Argocd to be ready after ${WAIT_TIMEOUT}s"
        exit 1
    fi
done

kubectl apply -k k8s/argocd/post/

apiVersion: v1
data:
  # changeme
  admin-password: aGVsbG93b3JsZA==
kind: Secret
metadata:
  name: keycloak-credentials
  namespace: keycloak

{
  "kind": "SealedSecret",
  "apiVersion": "bitnami.com/v1alpha1",
  "metadata": {
    "name": "keycloak-credentials",
    "namespace": "keycloak",
    "creationTimestamp": null
  },
  "spec": {
    "template": {
      "metadata": {
        "name": "keycloak-credentials",
        "namespace": "keycloak",
        "creationTimestamp": null
      }
    },
    "encryptedData": {
      "admin-password": "AgAseiJb...zR65TA=="
    }
  }
}