upgrade components - closes #430

Signed-off-by: Marcin Fabrykowski git@fabrykowski.pl

chart/templates/cilium/cilium_addresspool.yml

+{{ if .Values.cilium.lb_pools }}
+apiVersion: "cilium.io/v2alpha1"
+kind: CiliumLoadBalancerIPPool
+metadata:
+  name: "lb-pool-{{ .Release.Name }}"
+spec:
+  blocks:
+{{- range .Values.cilium.lb_pools }}
+  - cidr: "{{ . }}"
+{{- end }}
+{{- end }}

chart/templates/cilium/cilium_announcement_policy.yml

+apiVersion: "cilium.io/v2alpha1"
+kind: CiliumL2AnnouncementPolicy
+metadata:
+  name: policy1
+spec:
+  nodeSelector:
+    matchExpressions:
+      - key: node-role.kubernetes.io/control-plane
+        operator: DoesNotExist
+  interfaces:
+  - "enx*"
+  externalIPs: true
+  loadBalancerIPs: true

chart/templates/external-dns/external-dns.yml

@@ -11,13 +11,13 @@ spec:
     targetRevision: 8.2.3
     helm:
       values: |
-        image:
-          registry: registry.gitlab.exphost.pl
-          repository: torgiren/external-dns
-          tag: v1.0.0-mf
-          pullPolicy: Always
+        #image:
+        #  registry: registry.gitlab.exphost.pl
+        #  repository: torgiren/external-dns
+        #  tag: v1.0.0-mf
+        #  pullPolicy: Always
         sources:
-          - crd
+          #- crd
           - ingress
           - service
         provider: rfc2136
@@ -33,8 +33,8 @@ spec:
           serviceMonitor:
             enabled: true
         logLevel: debug
-        crd:
-          create: true
+        #crd:
+        #  create: true
         policy: sync
         publishHostIP: true
         txtOwnerId: "k8s_{{ .Values.domain }}"

chart/templates/longhorn/longhorn.yml

@@ -32,6 +32,8 @@ spec:
         metrics:
           serviceMonitor:
             enabled: true
+        preUpgradeChecker:
+          jobEnabled: false
 
   destination:
     server: 'https://kubernetes.default.svc'

chart/templates/metallb/metallb.yml

-apiVersion: argoproj.io/v1alpha1
-kind: Application
-metadata:
-  name: metallb
-  namespace: argocd
-  annotations:
-    argocd.argoproj.io/sync-wave: "-5"
-spec:
-  project: exphost
-  source:
-    repoURL: 'https://charts.bitnami.com/bitnami'
-    targetRevision: 6.3.8
-    chart: metallb
-    helm:
-      values: |
-        controller:
-          metrics:
-            enabled: true
-            serviceMonitor:
-              enabled: true
-        speaker:
-            enabled: true
-            serviceMonitor:
-              enabled: true
-
-  destination:
-    server: 'https://kubernetes.default.svc'
-    namespace: metallb-system
-  syncPolicy:
-    automated:
-      prune: true
-      selfHeal: true
+#apiVersion: argoproj.io/v1alpha1
+#kind: Application
+#metadata:
+#  name: metallb
+#  namespace: argocd
+#  annotations:
+#    argocd.argoproj.io/sync-wave: "-5"
+#spec:
+#  project: exphost
+#  source:
+#    repoURL: 'https://charts.bitnami.com/bitnami'
+#    targetRevision: 6.3.8
+#    chart: metallb
+#    helm:
+#      values: |
+#        controller:
+#          metrics:
+#            enabled: true
+#            serviceMonitor:
+#              enabled: true
+#        speaker:
+#            enabled: true
+#            serviceMonitor:
+#              enabled: true
+#
+#  destination:
+#    server: 'https://kubernetes.default.svc'
+#    namespace: metallb-system
+#  syncPolicy:
+#    automated:
+#      prune: true
+#      selfHeal: true

chart/templates/metallb/metallb_addresspool.yml

+#{{ if .Values.metallb.pools }}
+#{{- range .Values.metallb.pools }}
+#---
+#apiVersion: metallb.io/v1beta1
+#kind: IPAddressPool
+#metadata:
+#  name: {{ .name }}
+#  namespace: metallb-system
+#  annotations:
+#    argocd.argoproj.io/sync-options: SkipDryRunOnMissingResource=true
+#spec:
+#  addresses: {{ .addresses }}
+#{{- end }}
+#{{- end }}

chart/templates/metallb/metallb_namespace.yml

----
-apiVersion: v1
-kind: Namespace
-metadata:
-  name: metallb-system
-  labels:
-    pod-security.kubernetes.io/enforce: privileged
-  annotations:
-    argocd.argoproj.io/sync-wave: "-5"
+#---
+#apiVersion: v1
+#kind: Namespace
+#metadata:
+#  name: metallb-system
+#  labels:
+#    pod-security.kubernetes.io/enforce: privileged
+#  annotations:
+#    argocd.argoproj.io/sync-wave: "-5"

chart/templates/named/named.yml

@@ -13,6 +13,8 @@ spec:
       values: |
         domain: {{ .Values.domain }}
         {{- tpl (toYaml .Values.named) . | nindent 8 }}
+        image:
+          tag: "9.20"
   destination:
     server: 'https://kubernetes.default.svc'
     namespace: named

chart/templates/argocd.yml

@@ -28,24 +28,16 @@ spec:
               enabled: true
           ingress:
             enabled: true
-            hosts:
-              - argocd.{{ .Values.domain}}
-            tls:
-              - secretName: argocd-server-tls
-                hosts:
-                  - argocd.{{ .Values.domain}}
-            https: false
+            hostname: argocd.{{ .Values.domain}}
+            tls: true
+            #https: false
             annotations:
               cert-manager.io/cluster-issuer: acme-issuer
           ingressGrpc:
             enabled: false
-            hosts:
-              - argocd.{{ .Values.domain}}
-            tls:
-              - secretName: argocd-server-tls
-                hosts:
-                  - argocd.{{ .Values.domain}}
-            https: false
+            hostname: argocd.{{ .Values.domain}}
+            tls: true
+            #https: false
         config:
           cm:
             url: https://argocd.{{ .Values.domain }}

chart/templates/exphost-project.yml

@@ -57,6 +57,5 @@ spec:
     kind: PodSecurityPolicy
   - group: '*'
     kind: PriorityClass
-ggg
   sourceRepos:
   - '*'

chart/values.yaml

@@ -2,12 +2,14 @@ domain: dev.example.com
 persistent:
   nfs:
     size: 15Gi
+cilium:
+  lb_pools: []
+#   - cidr: "192.168.10.0/24"
 metallb:
   pools: []
-#    - name: default
-#      addresses:
-#        - 192.168.8.100-192.168.8.150
-#      protocol: layer2
+#   - name: my-ip-space
+#     addresses:
+#       - 192.168.10.0/24
 
 cloudflare:
   proxied: true
@@ -27,7 +29,7 @@ exphostConfigurator:
     tag:
 
 named:
-  version: v1.0.2
+  version: v1.0.2-1-g393f2c1
 
 config:
   k8sAdminGroup: oidc:k8s-admins