[STORY][ARGOCD] - TEST FOR HOMERUN HELM CHARTS

[patrick-hermann-sva]

DO THE WHOLE STORY ON A DEV MACHINE UNTIL CREATE HELM BASED APPLICATION

CREATE THREE APPLICATIONS FOR HOMERUN:

kubectl apply -f - <<EOF
---
apiVersion: argoproj.io/v1alpha1
kind: Application
metadata:
  name: homerun-redis-stack
  namespace: argocd
spec:
  destination:
    name: ''
    namespace: hoemrun
    server: ${SERVER_URL}
  source:
    path: ''
    repoURL: 
    targetRevision:
    chart:
    helm:
      values: |
        #....

# ...

https://github.com/stuttgart-things/stuttgart-things/blob/main/helm/homerun-base-stack/homerun-base.yaml

• name: homerun-redis-stack
• name: homerun-generic-pitcher
• name: homerun-text-catcher

you are not commiting them to git so if you are working with secrets- its ok for now to give them to the application manifest

[andre-ebert-sva]

homerun-redis-stack

apiVersion: argoproj.io/v1alpha1
kind: Application
metadata:
  name: homerun-redis-stack
  namespace: argocd
spec:
  destination:
    name: ''
    namespace: homerun
    server: https://10.31.103.47:34297
  source:
    path: ''
    repoURL: ghcr.io
    targetRevision: v0.6.0
    chart: stuttgart-things/homerun
    helm:
      values: |
        serviceType: ClusterIP
        enabled: true
        password:
        storageSize: 4Gi
        port: 6379
        serviceName: homerun-redis-stack-headless
        persistenceEabled: true
        storageClass: local-path
        stream: homerun
        searchIndex: homerun
        hostname: 10.31.103.47
        domain: nip.io
        issuerKind: ClusterIssuer
        issuerName: selfsigned
  sources: []
  project: maverick
  syncPolicy:
    syncOptions:
      - CreateNamespace=true
    automated: null

homerun-generic-pitcher

apiVersion: argoproj.io/v1alpha1
kind: Application
metadata:
  name: homerun-generic-pitcher
  namespace: argocd
spec:
  destination:
    name: ''
    namespace: homerun
    server: https://10.31.103.47:34297
  source:
    path: ''
    repoURL: ghcr.io
    targetRevision: v0.6.0
    chart: stuttgart-things/homerun
    helm:
      values: |
        enabled: true
        name: homerun-generic-pitcher
        port: 4000
        apiPath: generic
        token:
  sources: []
  project: maverick
  syncPolicy:
    syncOptions:
      - CreateNamespace=true
    automated: null

homerun-text-catcher

apiVersion: argoproj.io/v1alpha1
kind: Application
metadata:
  name: homerun-text-catcher
  namespace: argocd
spec:
  destination:
    name: ''
    namespace: homerun
    server: https://10.31.103.47:34297
  source:
    path: ''
    repoURL: ghcr.io
    targetRevision: v0.6.0
    chart: stuttgart-things/homerun
    helm:
      values: |
        enabled: true
        name: homerun-text-catcher
        logging: terminal
  sources: []
  project: maverick
  syncPolicy:
    syncOptions:
      - CreateNamespace=true
    automated: null

[patrick-hermann-sva]

this cannot work! habe a look at the major key. your application was green because based on the values no sub chart of the umbrella chart homerun was enabled - green but nothing was deployed..

[patrick-hermann-sva]

@andre-ebert-sva

test vault plugin

jump into container

nerdctl run -it ghcr.io/stuttgart-things/sthings-avp:1.18.1-1.32.3-3.17.2 -- bash

• create on /tmp/secret.yaml

apiVersion: v1
kind: Secret
metadata:
  name: example-secret
  namespace: default
stringData:
  password: <path:cloud/data/vsphere#password>
type: Opaque

• generate secret from /tmp/secret.yaml

export AVP_VAULT_ADDR=https://vault.172.18.0.4.nip.io
export AVP_TYPE=vault
export AVP_AUTH_TYPE=approle
export AVP_ROLE_ID=
export AVP_SECRET_ID=
export TYPE=vault
export VAULT_ADDR=https://vault.172.18.0.4.nip.io
export VAULT_NAMESPACE=root
export VAULT_SKIP_VERIFY=true

argocd-vault-plugin generate /tmp/secret.yaml

• Redeploy argocd (delete existing if exists) w/ vault plugin

• Test Secret app from git (create on your test repo)

apiVersion: argoproj.io/v1alpha1
kind: Application
metadata:
  name: secrets2
  namespace: argocd
spec:
  destination:
    name: ''
    namespace: default
    server: https://kubernetes.default.svc
  source:
    path: /path/to/secrets/
    repoURL: https://github.com/stuttgart-things/gamer.git
    targetRevision: HEAD
    plugin:
      name: argocd-vault-plugin
  sources: []
  project: in-cluster

[patrick-hermann-sva]

@andre-ebert-sva test the vault plugin with your homerun applicatiosn. shortend example below!

    plugin:
      name: argocd-vault-plugin-helm
      env:
        - name: HELM_VALUES
          value: |
            text-catcher:
              enabled: true
            redis-stack:
              enabled: true
              global:
                redis:
                  password: <path:apps/data/homerun#redisPassword>
              master:
                persistence:
                  enabled: true
                  storageClass: nfs4-csi
              replica:
                persistence:
                  enabled: true
                  storageClass: nfs4-csi