feat: use argocd helm chart instead

bootstrap/Makefile

@@ -1,16 +1,25 @@
 .POSIX:
 .EXPORT_ALL_VARIABLES:
 
-KUBECONFIG = ../metal/kubeconfig.yaml
+KUBECONFIG = $(shell pwd)/../metal/kubeconfig.yaml
 
 env ?= "prod"
 
-default: argocd app
+default: namespace argocd root
+
+argocd/charts: argocd/Chart.yaml
+	cd argocd \
+		&& helm dependency update
+
+namespace:
+	kubectl create namespace argocd --dry-run=client --output=yaml \
+		| kubectl apply -f -
 
 .PHONY: argocd
-argocd:
-	kustomize build ./argocd | kubectl apply -f -
+argocd: argocd/charts
+	cd argocd && \
+		./apply.sh
 
-.PHONY: app
-app:
-	kubectl apply -f ./app/root-${env}.yaml
+.PHONY: root
+root:
+	kubectl apply -f ./root/root-${env}.yaml

bootstrap/argocd/Chart.yaml

@@ -0,0 +1,8 @@
+apiVersion: v2
+name: argocd
+version: 0.0.0
+dependencies:
+  - name: argo-cd
+    version: 3.29.4
+    repository: https://argoproj.github.io/argo-helm
+

bootstrap/argocd/apply.sh

@@ -0,0 +1,11 @@
+#!/bin/sh
+
+helm template \
+    --include-crds \
+    --namespace argocd \
+    argocd . \
+    | kubectl apply -n argocd -f -
+
+kubectl -n argocd wait --timeout=60s --for condition=Established \
+       crd/applications.argoproj.io \
+       crd/applicationsets.argoproj.io

bootstrap/argocd/values.yaml

@@ -0,0 +1,62 @@
+argo-cd:
+  server:
+    extraArgs:
+      - --insecure
+    config:
+      statusbadge.enabled: 'true'
+      resource.customizations.health.argoproj.io_Application: |
+        hs = {}
+        hs.status = "Progressing"
+        hs.message = ""
+        if obj.status ~= nil then
+          if obj.status.health ~= nil then
+            hs.status = obj.status.health.status
+            if obj.status.health.message ~= nil then
+              hs.message = obj.status.health.message
+            end
+          end
+        end
+        return hs
+      resource.customizations.health.argoproj.io_ApplicationSet: |
+        hs = {}
+        if obj.status ~= nil then
+          if obj.status.conditions ~= nil then
+            for i, condition in pairs(obj.status.conditions) do
+              if condition.type == "ErrorOccurred" and condition.status == "True" then
+                hs.status = "Degraded"
+                hs.message = condition.message
+                return hs
+              end
+              if condition.type == "ResourcesUpToDate" and condition.status == "True" then
+                hs.status = "Healthy"
+                hs.message = condition.message
+                return hs
+              end
+            end
+          end
+        end
+        hs.status = "Progressing"
+        hs.message = ""
+        return hs
+      resource.customizations.ignoreDifferences.admissionregistration.k8s.io_MutatingWebhookConfiguration: |
+        jqPathExpressions:
+        - '.webhooks[]?.clientConfig.caBundle'
+      resource.customizations.ignoreDifferences.admissionregistration.k8s.io_ValidatingWebhookConfiguration: |
+        jqPathExpressions:
+        - '.webhooks[]?.failurePolicy'
+
+    ingress:
+      enabled: true
+      ingressClassName: nginx
+      annotations:
+        cert-manager.io/cluster-issuer: letsencrypt-prod
+      hosts:
+        - &host argocd.maibaloc.com
+      tls:
+        - secretName: argocd-tls-certificate
+          hosts:
+            - *host
+    metrics:
+      enabled: true
+      serviceMonitor:
+        enabled: true

bootstrap/app/templates/bootstrap.yaml → bootstrap/root/templates/bootstrap.yaml

@@ -46,4 +46,23 @@ spec:
     path: 'bootstrap/argocd'
     repoURL: https://github.com/locmai/humble.git
     targetRevision: "{{ .Values.bootstrap.targetRevision }}"
+    helm:
+      values: |
+        argocd:
+          targetRevision: {{ .Values.global.targetRevision }}
+
+        global:
+          domain: {{ .Values.global.domain }}
+
+        ingress:
+          enabled: true
+          ingressClassName: nginx
+          annotations:
+            cert-manager.io/cluster-issuer: letsencrypt-prod
+          hosts:
+            - &host argocd.{{ .Values.global.domain }}
+          tls:
+            - secretName: argocd-tls-certificate
+              hosts:
+                - *host
 {{- end }}