diff --git a/chart/templates/argocd/values.yaml b/chart/templates/argocd/values.yaml index 06c62b03e9bb107eecb5897a16e062d4e3d0f5bd..669ac88d0f212cb1c20b10eacd2795ee34cdc838 100644 --- a/chart/templates/argocd/values.yaml +++ b/chart/templates/argocd/values.yaml @@ -26,6 +26,17 @@ controller: imagePullPolicy: {{ .Values.imagePullPolicy }} imagePullSecrets: - name: private-registry + # conditional passes only for default istio: enabled, mTLS: SCRICT, istio injection: enabled + {{- if and $istioInjection (eq (dig "istio" "mtls" "mode" "STRICT" .Values.addons.argocd.values) "STRICT") }} + metrics: + serviceMonitor: + scheme: https + tlsConfig: + caFile: /etc/prom-certs/root-cert.pem + certFile: /etc/prom-certs/cert-chain.pem + keyFile: /etc/prom-certs/key.pem + insecureSkipVerify: true + {{- end }} dex: image: @@ -61,6 +72,16 @@ redis-bb: selector: app.kubernetes.io/name: redis-bb app.kubernetes.io/instance: argocd-argocd + # conditional passes only for default istio: enabled, mTLS: SCRICT, istio injection: enabled + {{- if and $istioInjection (eq (dig "istio" "mtls" "mode" "STRICT" .Values.addons.argocd.values) "STRICT") }} + scheme: https + tlsConfig: + caFile: /etc/prom-certs/root-cert.pem + certFile: /etc/prom-certs/cert-chain.pem + keyFile: /etc/prom-certs/key.pem + insecureSkipVerify: true + {{- end }} + prometheusRule: enabled: true namespace: monitoring @@ -80,10 +101,32 @@ server: config: # Must be enabled for plugins included in PlatformOne image. kustomize.buildOptions: "--enable-alpha-plugins" + # conditional passes only for default istio: enabled, mTLS: SCRICT, istio injection: enabled + {{- if and $istioInjection (eq (dig "istio" "mtls" "mode" "STRICT" .Values.addons.argocd.values) "STRICT") }} + metrics: + serviceMonitor: + scheme: https + tlsConfig: + caFile: /etc/prom-certs/root-cert.pem + certFile: /etc/prom-certs/cert-chain.pem + keyFile: /etc/prom-certs/key.pem + insecureSkipVerify: true + {{- end }} repoServer: image: imagePullPolicy: {{ .Values.imagePullPolicy }} + # conditional passes only for default istio: enabled, mTLS: SCRICT, istio injection: enabled + {{- if and $istioInjection (eq (dig "istio" "mtls" "mode" "STRICT" .Values.addons.argocd.values) "STRICT") }} + metrics: + serviceMonitor: + scheme: https + tlsConfig: + caFile: /etc/prom-certs/root-cert.pem + certFile: /etc/prom-certs/cert-chain.pem + keyFile: /etc/prom-certs/key.pem + insecureSkipVerify: true + {{- end }} istio: enabled: {{ .Values.istio.enabled }} diff --git a/chart/values.yaml b/chart/values.yaml index f373efbf18c4cf844480842c1916bd3a10498b35..a03f0e03ed1478827299f5faac74423e999f6b3b 100644 --- a/chart/values.yaml +++ b/chart/values.yaml @@ -745,7 +745,7 @@ addons: git: repo: https://repo1.dso.mil/platform-one/big-bang/apps/core/argocd.git path: "./chart" - tag: "5.5.7-bb.1" + tag: "5.5.7-bb.2" # -- Flux reconciliation overrides specifically for the ArgoCD Package flux: {}