feat: migrate GCP account and update cluster

.github/CODEOWNERS

@@ -0,0 +1,4 @@
+# Infrastructure
+/infrastructure/                                      @agaudreault @leoluz
+/argocd/overlays/production/argocd-rbac-cm.yaml       @agaudreault @leoluz
+/external-dns/values.yaml                             @agaudreault @leoluz

argo-events/kustomization.yaml

@@ -4,10 +4,10 @@ kind: Kustomization
 resources:
   - https://github.com/argoproj/argo-events/manifests/namespace-install
   - https://raw.githubusercontent.com/argoproj/argo-events/master/examples/eventbus/native.yaml
-  - operate-workflow-sa.yaml
-  - operate-wf-rbac.yaml
-  - calendar-eventsource.yaml
-  - workflow-sensor.yaml
-  - log-sensor.yaml
+  - base/operate-workflow-sa.yaml
+  - base/operate-wf-rbac.yaml
+  - base/calendar-eventsource.yaml
+  - base/workflow-sensor.yaml
+  - base/log-sensor.yaml
 
 namespace: argo

argo-rollouts/kustomization.yaml

@@ -2,4 +2,4 @@ apiVersion: kustomize.config.k8s.io/v1beta1
 kind: Kustomization
 
 resources:
-- https://github.com/argoproj/argo-rollouts/releases/download/v1.1.1/install.yaml
+  - https://github.com/argoproj/argo-rollouts/releases/download/v1.6.6/install.yaml

argo-workflows/resources/argo-server-ingress.yaml

@@ -5,10 +5,10 @@ metadata:
   annotations:
     # https://kubernetes.github.io/ingress-nginx/user-guide/nginx-configuration/annotations/
     ingress.kubernetes.io/proxy-body-size: 100M
-    kubernetes.io/ingress.class: "nginx"
     ingress.kubernetes.io/app-root: "/"
     nginx.ingress.kubernetes.io/backend-protocol: HTTPS
 spec:
+  ingressClassName: nginx
   tls:
   - hosts:
     - workflows.apps.argoproj.io

argo-workflows/resources/argo-workflows-certificate.yaml

@@ -1,4 +1,4 @@
-apiVersion: cert-manager.io/v1alpha2
+apiVersion: cert-manager.io/v1
 kind: Certificate
 metadata:
   name: argo-workflows-cert
@@ -9,4 +9,4 @@ spec:
     kind: Issuer
   commonName: workflows.apps.argoproj.io
   dnsNames:
-  - workflows.apps.argoproj.io
+    - workflows.apps.argoproj.io

argo-workflows/resources/argo-workflows-issuer.yaml

@@ -1,16 +1,16 @@
-apiVersion: cert-manager.io/v1alpha2
+apiVersion: cert-manager.io/v1
 kind: Issuer
 metadata:
   name: argo-workflows-issuer
 spec:
   acme:
     server: https://acme-v02.api.letsencrypt.org/directory
-    email: amatyushentsev@gmail.com
+    email: argoproj@gmail.com
     privateKeySecretRef:
       name: letsencrypt
     solvers:
-    # An empty 'selector' means that this solver matches all domains
-    - selector: {}
-      http01:
-        ingress:
-          class: nginx
+      # An empty 'selector' means that this solver matches all domains
+      - selector: {}
+        http01:
+          ingress:
+            class: nginx

argocd/.gitignore

@@ -0,0 +1 @@
+/argo-cd-auth-secret.yaml

argocd/base/argo-cd-issuer.yaml

@@ -5,12 +5,12 @@ metadata:
 spec:
   acme:
     server: https://acme-v02.api.letsencrypt.org/directory
-    email: amatyushentsev@gmail.com
+    email: argoproj@gmail.com
     privateKeySecretRef:
       name: letsencrypt
     solvers:
-    # An empty 'selector' means that this solver matches all domains
-    - selector: {}
-      http01:
-        ingress:
-          class: nginx
+      # An empty 'selector' means that this solver matches all domains
+      - selector: {}
+        http01:
+          ingress:
+            class: nginx

argocd/kustomization.yaml

@@ -4,24 +4,23 @@ kind: Kustomization
 namespace: argocd
 
 resources:
-- base/argo-cd-issuer.yaml
-- base/argo-cd-certificate.yaml
-- base/argo-cd-ui-ingress.yaml
-- base/jenkins-ingress.yaml
-- base/rollouts-extension.yaml
-- https://raw.githubusercontent.com/argoproj/argo-cd/master/manifests/ha/install.yaml
+  - base/argo-cd-issuer.yaml
+  - base/argo-cd-certificate.yaml
+  - base/argo-cd-ui-ingress.yaml
+  - base/rollouts-extension.yaml
+  - https://raw.githubusercontent.com/argoproj/argo-cd/master/manifests/ha/install.yaml
 
 components:
-- https://github.com/argoproj-labs/argocd-extensions/manifests
+  - https://github.com/argoproj-labs/argocd-extensions/manifests
 
-patchesStrategicMerge:
-- overlays/production/argo-cd-cm.yaml
-- overlays/production/argocd-server-service.yaml
-- overlays/production/argocd-repo-server-deploy.yaml
-- overlays/production/argocd-notifications-controller-deploy.yaml
-- overlays/production/argocd-notifications-cm.yaml
-- overlays/production/argocd-cmd-params-cm.yaml
-- https://raw.githubusercontent.com/argoproj/argo-cd/master/notifications_catalog/install.yaml
+patches:
+  - path: overlays/production/argo-cd-cm.yaml
+  - path: overlays/production/argocd-server-service.yaml
+  - path: overlays/production/argocd-notifications-controller-deploy.yaml
+  - path: overlays/production/argocd-notifications-cm.yaml
+  - path: overlays/production/argocd-cmd-params-cm.yaml
+  - path: overlays/production/argocd-rbac-cm.yaml
+  - path: https://raw.githubusercontent.com/argoproj/argo-cd/master/notifications_catalog/install.yaml
 
 images:
 - name: quay.io/argoproj/argocd

argocd/overlays/production/argo-cd-cm.yaml

@@ -18,7 +18,7 @@ data:
       name: GitHub
       config:
         clientID: fb563b3a8dd7ea52f683
-        clientSecret: $dex.github.clientSecret
+        clientSecret: $argocd-auth:dex.github.clientSecret
         orgs:
         - name: argoproj
           teams:

argocd/overlays/production/argocd-rbac-cm.yaml

@@ -0,0 +1,8 @@
+apiVersion: v1
+kind: ConfigMap
+metadata:
+  name: argocd-rbac-cm
+data:
+  policy.csv: |
+    g, argoproj:argo-cd-admins, role:admin
+  policy.default: role:readonly

argoproj/base/jenkins.yaml → argoproj/base/external-dns.yaml

@@ -1,18 +1,18 @@
 apiVersion: argoproj.io/v1alpha1
 kind: Application
 metadata:
-  name: jenkins
+  name: external-dns
 spec:
   source:
-    path: jenkins
+    path: external-dns
     repoURL: https://github.com/argoproj/argoproj-deployments
     targetRevision: HEAD
   destination:
     server: 'https://kubernetes.default.svc'
-    namespace: argocd
+    namespace: external-dns
   project: default
-  ignoreDifferences:
-  - group: ''
-    jsonPointers:
-    - /data/jenkins-admin-password
-    kind: Secret
+  syncPolicy:
+    syncOptions:
+      - CreateNamespace=true
+    automated:
+      prune: true

argoproj/base/ingress-nginx.yaml

@@ -10,19 +10,7 @@ spec:
   source:
     repoURL: https://kubernetes.github.io/ingress-nginx
     chart: ingress-nginx
-    targetRevision: 4.5.2
-    helm:
-      values: |
-        controller:
-          autoscaling:
-            enabled: true
-            minReplicas: 3
-            maxReplicas: 8
-  ignoreDifferences:
-  - group: autoscaling
-    kind: HorizontalPodAutoscaler
-    jsonPointers:
-    - /spec/metrics
+    targetRevision: 4.9.1
   syncPolicy:
     syncOptions:
-    - CreateNamespace=true
+      - CreateNamespace=true

argoproj/base/istio-addons.yaml

@@ -6,11 +6,11 @@ spec:
   source:
     path: samples/addons
     repoURL: https://github.com/istio/istio
-    targetRevision: release-1.7
+    targetRevision: release-1.20
   destination:
     server: https://kubernetes.default.svc
     namespace: istio-system
   project: default
   syncPolicy:
     syncOptions:
-    - CreateNamespace=true
+      - CreateNamespace=true

argoproj/base/istio-operator.yaml

@@ -6,15 +6,15 @@ spec:
   source:
     repoURL: https://github.com/istio/istio
     path: manifests/charts/istio-operator
-    targetRevision: release-1.7
+    targetRevision: release-1.20
     helm:
       parameters:
-      - name: enableCRDTemplates
-        value: 'true'
+        - name: enableCRDTemplates
+          value: 'true'
   destination:
     server: https://kubernetes.default.svc
     namespace: istio-operator
   project: default
   syncPolicy:
     syncOptions:
-    - CreateNamespace=true
+      - CreateNamespace=true

argoproj/kustomization.yaml

@@ -2,17 +2,17 @@ apiVersion: kustomize.config.k8s.io/v1beta1
 kind: Kustomization
 
 resources:
-- base/argo-workflows.yaml
-- base/argo-events.yaml
-- base/dex.yaml
-- base/argo-cd.yaml
-- base/argo-rollouts.yaml
-- base/cert-manager.yaml
-- base/ingress-nginx.yaml
-- base/jenkins.yaml
-- base/prometheus-operator.yaml
-- base/istio-operator.yaml
-- base/istio-controlplane.yaml
-- base/istio-addons.yaml
-- base/argocd-image-updater.yaml
-- base/governor.yaml
+  - base/argo-workflows.yaml
+  - base/argo-events.yaml
+  - base/dex.yaml
+  - base/argo-cd.yaml
+  - base/argo-rollouts.yaml
+  - base/cert-manager.yaml
+  - base/ingress-nginx.yaml
+  - base/prometheus-operator.yaml
+  - base/istio-operator.yaml
+  - base/istio-controlplane.yaml
+  - base/istio-addons.yaml
+  - base/argocd-image-updater.yaml
+  - base/governor.yaml
+  - base/external-dns.yaml