upgrade components - closes #430

Signed-off-by: Marcin Fabrykowski git@fabrykowski.pl

chart/templates/dex/dex-k8s-authenticator.yml

-apiVersion: argoproj.io/v1alpha1
-kind: Application
-metadata:
-  name: dex-k8s-authenticator
-  namespace: argocd
-spec:
-  project: exphost
-  source:
-    #repoURL: 'https://mintel.github.io/helm-charts'
-    repoURL: 'https://gitlab.exphost.pl/charts'
-    targetRevision: v1.2.0
-    chart: dex-k8s-authenticator
-    helm:
-      values: |
-        ingress:
-          enabled: true
-          hosts:
-            - auth.{{ .Values.domain }}
-          annotations:
-            cert-manager.io/cluster-issuer: acme-issuer
-          tls:
-            - hosts:
-                - auth.{{ .Values.domain }}
-              secretName: dex-acme.tls
-        dexK8sAuthenticator:
-          clusters:
-            - name: k8s-{{ .Values.domain }}-cluster
-              short_description: "K8s cluster"
-              client_secret: GiQBxaKyVNsNkWshSzuNN8Xa6qnbZLYt
-              #issuer: http://dex.dex.svc.cluster.local:5556/dex
-              issuer: https://auth.{{ .Values.domain }}/dex
-              k8s_master_uri: https://kube-api.{{ .Values.domain }}
-              client_id: kubernetes
-              redirect_uri: https://auth.{{ .Values.domain }}/callback
-              scopes:
-                - openid
-                - groups
-                - profile
-
-  destination:
-    server: 'https://kubernetes.default.svc'
-    namespace: dex
-  syncPolicy:
-    automated:
-      prune: true
-      selfHeal: true
-    syncOptions:
-      - CreateNamespace=true
+#apiVersion: argoproj.io/v1alpha1
+#kind: Application
+#metadata:
+#  name: dex-k8s-authenticator
+#  namespace: argocd
+#spec:
+#  project: exphost
+#  source:
+#    repoURL: 'https://mintel.github.io/helm-charts'
+#    #repoURL: 'https://gitlab.exphost.pl/charts'
+#    targetRevision: v1.2.0
+#    chart: dex-k8s-authenticator
+#    helm:
+#      values: |
+#        ingress:
+#          enabled: true
+#          hosts:
+#            - auth.{{ .Values.domain }}
+#          annotations:
+#            cert-manager.io/cluster-issuer: acme-issuer
+#          tls:
+#            - hosts:
+#                - auth.{{ .Values.domain }}
+#              secretName: dex-acme.tls
+#        dexK8sAuthenticator:
+#          clusters:
+#            - name: k8s-{{ .Values.domain }}-cluster
+#              short_description: "K8s cluster"
+#              client_secret: GiQBxaKyVNsNkWshSzuNN8Xa6qnbZLYt
+#              #issuer: http://dex.dex.svc.cluster.local:5556/dex
+#              issuer: https://auth.{{ .Values.domain }}/dex
+#              k8s_master_uri: https://kube-api.{{ .Values.domain }}
+#              client_id: kubernetes
+#              redirect_uri: https://auth.{{ .Values.domain }}/callback
+#              scopes:
+#                - openid
+#                - groups
+#                - profile
+#
+#  destination:
+#    server: 'https://kubernetes.default.svc'
+#    namespace: dex
+#  syncPolicy:
+#    automated:
+#      prune: true
+#      selfHeal: true
+#    syncOptions:
+#      - CreateNamespace=true

chart/templates/dex/dex.yml

@@ -10,7 +10,7 @@ spec:
   project: exphost
   source:
     repoURL: 'https://charts.dexidp.io'
-    targetRevision: 0.14.1
+    targetRevision: 0.19.1
     chart: dex
     helm:
       values: |
@@ -23,7 +23,7 @@ spec:
             - host: auth.{{ .Values.domain }}
               paths:
                 - path: /dex
-                  pathType: ImplementationSpecific
+                  pathType: Prefix
           tls:
             - hosts:
                 - auth.{{ .Values.domain }}

chart/templates/external-dns/external-dns.yml

@@ -8,7 +8,7 @@ spec:
   source:
     repoURL: 'https://charts.bitnami.com/bitnami'
     chart: external-dns
-    targetRevision: 8.3.4
+    targetRevision: 8.3.5
     helm:
       values: |
         #image:

chart/templates/prometheus/prometheus.yml

@@ -19,6 +19,7 @@ spec:
           ingress:
             enabled: true
             hostname: "prometheus.{{ .Values.domain }}"
+            pathType: Prefix
             certManager: true
             tls: true
             annotations:
@@ -48,6 +49,7 @@ spec:
             enabled: true
             hostname: "alertmanager.{{ .Values.domain }}"
             certManager: true
+            pathType: Prefix
             tls: true
             annotations:
               cert-manager.io/cluster-issuer: acme-issuer

chart/templates/apiserver-expose.yml

@@ -5,9 +5,7 @@ metadata:
   namespace: default
   annotations:
     cert-manager.io/cluster-issuer: acme-issuer
-    nginx.ingress.kubernetes.io/backend-protocol: "HTTPS"
-    nginx.ingress.kubernetes.io/proxy-read-timeout: "600"
-    nginx.ingress.kubernetes.io/proxy-send-timeout: "600"
+    ingress.cilium.io/tls-passthrough: "true"
 spec:
   rules:
   - host: kube-api.{{ .Values.domain }}
@@ -18,7 +16,8 @@ spec:
             name: kubernetes
             port:
               number: 443
-        pathType: ImplementationSpecific
+        pathType: Prefix
+        path: /
   tls:
   - hosts:
     - kube-api.{{ .Values.domain }}

chart/values.yaml

@@ -29,7 +29,7 @@ exphostConfigurator:
     tag:
 
 named:
-  version: v1.0.2-1-gf9248c2
+  version: v1.0.2-1-g65ca4e7
 
 config:
   k8sAdminGroup: oidc:k8s-admins
@@ -43,6 +43,8 @@ config:
       - id: kubernetes
         redirectURIs:
         - 'https://auth.{{ .Values.domain }}/callback'
+        - 'http://localhost:8000'
+        - 'http://localhost:18000'
         name: 'Kubernetes'
         secret: GiQBxaKyVNsNkWshSzuNN8Xa6qnbZLYt
       - id: argo