upgrade components - closes #430

Signed-off-by: Marcin Fabrykowski git@fabrykowski.pl

chart/templates/cert-manager/cert-manager.yml

@@ -3,20 +3,23 @@ kind: Application
 metadata:
   name: cert-manager
   namespace: argocd
-  finalizers:
-    - resources-finalizer.argocd.argoproj.io
 spec:
   project: exphost
   source:
     repoURL: 'https://charts.jetstack.io'
-    targetRevision: v1.11.0
+    targetRevision: v1.15.1
     chart: cert-manager
     helm:
       values: |
         global:
           leaderElection:
             namespace: cert-manager
-        installCRDs: true
+        crds:
+          enabled: true
+        prometheus:
+          enabled: true
+          servicemonitor:
+            enabled: true
 
 
   destination:

chart/templates/dex/dex-k8s-authenticator.yml

@@ -3,8 +3,6 @@ kind: Application
 metadata:
   name: dex-k8s-authenticator
   namespace: argocd
-  finalizers:
-    - resources-finalizer.argocd.argoproj.io
 spec:
   project: exphost
   source:

chart/templates/dex/dex.yml

@@ -3,13 +3,14 @@ kind: Application
 metadata:
   name: dex
   namespace: argocd
-  finalizers:
-    - resources-finalizer.argocd.argoproj.io
+  annotations:
+    argocd.argoproj.io/sync-options: Prune=true
+    argocd.argoproj.io/sync-wave: "-1"
 spec:
   project: exphost
   source:
     repoURL: 'https://charts.dexidp.io'
-    targetRevision: 0.13.0
+    targetRevision: 0.14.1
     chart: dex
     helm:
       values: |

chart/templates/dex/etcd.yml

@@ -3,8 +3,9 @@ kind: Application
 metadata:
   name: etcd
   namespace: argocd
-  finalizers:
-    - resources-finalizer.argocd.argoproj.io
+  annotations:
+    argocd.argoproj.io/sync-options: Prune=true
+    argocd.argoproj.io/sync-wave: "-1"
 spec:
   project: exphost
   source:

chart/templates/external-dns/external-dns.yml

@@ -3,14 +3,12 @@ kind: Application
 metadata:
   name: external-dns
   namespace: argocd
-  finalizers:
-    - resources-finalizer.argocd.argoproj.io
 spec:
   project: exphost
   source:
     repoURL: 'https://charts.bitnami.com/bitnami'
     chart: external-dns
-    targetRevision: 6.14.1
+    targetRevision: 8.2.3
     helm:
       values: |
         image:

chart/templates/grafana/grafana.yml

@@ -3,14 +3,11 @@ kind: Application
 metadata:
   name: grafana
   namespace: argocd
-  finalizers:
-    - resources-finalizer.argocd.argoproj.io
-  annotations:
 spec:
   project: exphost
   source:
     repoURL: 'https://charts.bitnami.com/bitnami'
-    targetRevision: 8.2.30
+    targetRevision: 8.4.5
     chart: grafana
     helm:
       values: |

chart/templates/longhorn/longhorn.yml

@@ -3,14 +3,16 @@ kind: Application
 metadata:
   name: longhorn
   namespace: argocd
-  finalizers:
-    - resources-finalizer.argocd.argoproj.io
+  annotations:
+    argocd.argoproj.io/sync-options: Prune=true
+    argocd.argoproj.io/sync-wave: "-10"
+    argocd.argoproj.io/sync-options: SkipDryRunOnMissingResource=true
 spec:
   project: exphost
   source:
     repoURL: 'https://charts.longhorn.io'
     chart: longhorn
-    targetRevision: 1.4.0
+    targetRevision: 1.6.2
     helm:
       values: |
         persistence:
@@ -27,13 +29,9 @@ spec:
         defaultSettings:
           defaultDataLocality: "best-effort"
           backupTargetCredentialSecret: longhorn-backup-credentials
-          priorityClass: high-priority
-        longhornManager:
-          priorityClass: high-priority
-        longhornDriver:
-          priorityClass: high-priority
-        longhornUI:
-          priorityClass: high-priority
+        metrics:
+          serviceMonitor:
+            enabled: true
 
   destination:
     server: 'https://kubernetes.default.svc'
@@ -42,5 +40,3 @@ spec:
     automated:
       prune: true
       selfHeal: true
-    syncOptions:
-      - CreateNamespace=true

chart/templates/longhorn/longhorn_namespace.yml

+---
+apiVersion: v1
+kind: Namespace
+metadata:
+  name: longhorn-system
+  labels:
+    pod-security.kubernetes.io/enforce: privileged
+  annotations:
+    argocd.argoproj.io/sync-wave: "-10"

chart/templates/longhorn/longhorn_oauth2.yml

@@ -3,8 +3,6 @@ kind: Application
 metadata:
   name: oauth2-longhorn
   namespace: argocd
-  finalizers:
-    - resources-finalizer.argocd.argoproj.io
 spec:
   project: exphost
   source:

chart/templates/metallb/metallb.yml

@@ -3,20 +3,25 @@ kind: Application
 metadata:
   name: metallb
   namespace: argocd
-  finalizers:
-    - resources-finalizer.argocd.argoproj.io
+  annotations:
+    argocd.argoproj.io/sync-wave: "-5"
 spec:
   project: exphost
   source:
     repoURL: 'https://charts.bitnami.com/bitnami'
-    targetRevision: 4.1.20
+    targetRevision: 6.3.8
     chart: metallb
     helm:
       values: |
         controller:
-          priorityClassName: high-priority
+          metrics:
+            enabled: true
+            serviceMonitor:
+              enabled: true
         speaker:
-          priorityClassName: high-priority
+            enabled: true
+            serviceMonitor:
+              enabled: true
 
   destination:
     server: 'https://kubernetes.default.svc'
@@ -25,5 +30,3 @@ spec:
     automated:
       prune: true
       selfHeal: true
-    syncOptions:
-      - CreateNamespace=true

chart/templates/metallb/metallb_namespace.yml

+---
+apiVersion: v1
+kind: Namespace
+metadata:
+  name: metallb-system
+  labels:
+    pod-security.kubernetes.io/enforce: privileged
+  annotations:
+    argocd.argoproj.io/sync-wave: "-5"

chart/templates/priorities/high_priority.yml

-apiVersion: scheduling.k8s.io/v1
-kind: PriorityClass
-metadata:
-  name: high-priority
-value: 1000000
-globalDefault: false
-description: "High priority"

chart/templates/prometheus/alertmanager_oauth2.yml

@@ -3,8 +3,6 @@ kind: Application
 metadata:
   name: oauth2-alertmanager
   namespace: argocd
-  finalizers:
-    - resources-finalizer.argocd.argoproj.io
 spec:
   project: exphost
   source:

chart/templates/prometheus/prometheus.yml

@@ -3,14 +3,14 @@ kind: Application
 metadata:
   name: prometheus
   namespace: argocd
-  finalizers:
-    - resources-finalizer.argocd.argoproj.io
+  annotations:
+    argocd.argoproj.io/sync-wave: "-4"
 spec:
   project: exphost
   source:
     repoURL: 'https://charts.bitnami.com/bitnami'
     chart: kube-prometheus
-    targetRevision: 8.3.11
+    targetRevision: 9.5.8
     helm:
       values: |
         prometheus:
@@ -23,7 +23,6 @@ spec:
             tls: true
             annotations:
               cert-manager.io/cluster-issuer: acme-issuer
-          priorityClassName: high-priority
         node-exporter:
           tolerations:
             - key: "node-role.kubernetes.io/master"
@@ -33,7 +32,7 @@ spec:
               operator: "Exists"
               effect: "NoSchedule"
           extraArgs:
-            collector.filesystem.ignored-mount-points: "^/(dev|proc|sys|var/lib/docker/.+|run/ns/.+|run/k3s/containerd|run|var/lib/kubelet/.+)($|/)"
+            #collector.filesystem.ignored-mount-points: "^/(dev|proc|sys|var/lib/docker/.+|run/ns/.+|run/k3s/containerd|run|var/lib/kubelet/.+)($|/)"
             path.rootfs: "/host/root"
             log.level: "debug"
           extraVolumes:
@@ -59,11 +58,6 @@ spec:
             matchLabels:
               alertmanagerConfig: prometheus-kube-prometheus-alertmanager
           externalConfig: true
-          priorityClassName: high-priority
-        operator:
-          priorityClassName: high-priority
-        node-exporter:
-          priorityClassName: high-priority
 
   destination:
     server: 'https://kubernetes.default.svc'
@@ -72,5 +66,3 @@ spec:
     automated:
       prune: true
       selfHeal: true
-    syncOptions:
-      - CreateNamespace=true

chart/templates/prometheus/prometheus_namespace.yml

+---
+apiVersion: v1
+kind: Namespace
+metadata:
+  name: prometheus-system
+  labels:
+    pod-security.kubernetes.io/enforce: privileged
+  annotations:
+    argocd.argoproj.io/sync-wave: "-4"