generated from validatedpatterns/multicloud-gitops
-
Notifications
You must be signed in to change notification settings - Fork 66
/
values-hub.yaml
191 lines (167 loc) · 4.88 KB
/
values-hub.yaml
1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41
42
43
44
45
46
47
48
49
50
51
52
53
54
55
56
57
58
59
60
61
62
63
64
65
66
67
68
69
70
71
72
73
74
75
76
77
78
79
80
81
82
83
84
85
86
87
88
89
90
91
92
93
94
95
96
97
98
99
100
101
102
103
104
105
106
107
108
109
110
111
112
113
114
115
116
117
118
119
120
121
122
123
124
125
126
127
128
129
130
131
132
133
134
135
136
137
138
139
140
141
142
143
144
145
146
147
148
149
150
151
152
153
154
155
156
157
158
159
160
161
162
163
164
165
166
167
168
169
170
171
172
173
174
175
176
177
178
179
180
181
182
183
184
185
186
187
188
189
190
storageSystem:
deploy: true
inventory:
useSpecificNodes: false
clusterGroup:
name: hub
isHubCluster: true
# Namespaces that are expected to be created.
# The pattern will apply these namespaces
# and creates an operator group for that namespace
namespaces:
- open-cluster-management
- vault
- golang-external-secrets
- rhacs-operator
- stackrox
- policies
- devsecops-ci
- openshift-storage
- quay-enterprise
# subscriptions: OpenShift Operator subscriptions from OLM/OperatorHub
# - name: the Operator package name (required)
# namespace: expected namespace as specified by Operator (defaults to openshift-operators)
# channel: operator channel from package manifest (required)
# csv: Operator CSV from package manifest.
# only used if global.options.useCSV: true in values-global.yaml
subscriptions:
# If specific channels are required then uncomment channel line and add the name of the channel
acm:
name: advanced-cluster-management
namespace: open-cluster-management
acs:
name: rhacs-operator #packageName
namespace: openshift-operators # operator namespace
odf:
name: odf-operator
namespace: openshift-storage
quay:
name: quay-operator
namespace: openshift-operators
# The following section is used by
# OpenShift GitOps (ArgoCD)
# Projects are just ArgoCD groupings that can be filtered on.
projects:
- hub
- opp
- external-secrets
sharedValueFiles:
- '/overrides/values-{{ $.Values.global.clusterPlatform }}.yaml'
- '/overrides/values-{{ $.Values.global.clusterPlatform }}-{{ $.Values.global.clusterVersion }}.yaml' # E: line too long (115 > 80 characters)
applications:
acm:
name: acm
namespace: open-cluster-management
project: opp
chart: acm
chartVersion: 0.1.*
ignoreDifferences:
- group: internal.open-cluster-management.io
kind: ManagedClusterInfo
jsonPointers:
- /spec/loggingCA
acs-central:
name: acs-central
namespace: stackrox
project: opp
path: charts/hub/acs/central
acs-secured:
name: acs-secured
namespace: stackrox
project: opp
path: charts/hub/acs/secured
storage:
name: storage
namespace: openshift-storage
chart: openshift-data-foundations
project: hub
chartVersion: 0.1.*
quay-registry:
name: quay-registry
namespace: quay-enterprise
project: opp
path: charts/hub/quay
opp-policy:
name: opp-policy
namespace: openshift
project: opp
path: charts/hub/opp
ignoreDifferences:
- group: operators.openshift.io
kind: Console
jsonPointers:
- /spec/plugins
vault:
name: vault
namespace: vault
project: hub
chart: hashicorp-vault
chartVersion: 0.1.*
golang-external-secrets:
name: golang-external-secrets
namespace: golang-external-secrets
project: hub
chart: golang-external-secrets
chartVersion: 0.1.*
external-secrets:
name: external-secrets
namespace: devsecops-ci
project: external-secrets
path: charts/hub/external-secrets
cli-tools:
name: cli-tools
namespace: openshift
project: hub
path: charts/hub/cli-tools
imperative: {}
# NOTE: We *must* use lists and not hashes. As hashes lose ordering once parsed by helm
# The default schedule is every 10 minutes: imperative.schedule
# Total timeout of all jobs is 1h: imperative.activeDeadlineSeconds
# imagePullPolicy is set to always: imperative.imagePullPolicy
# For additional overrides that apply to the jobs, please refer to
# https://hybrid-cloud-patterns.io/imperative-actions/#additional-job-customizations
#jobs:
#- name: regional-ca
# ansible playbook to be run
# playbook: common/ansible/playbooks/hello-world/hello-world.yaml
# per playbook timeout in seconds
# timeout: 234
# verbosity: "-v"
# This section is used by ACM
managedClusterGroups:
- name: development
helmOverrides:
- name: clusterGroup.isHubCluster
value: "false"
clusterSelector:
matchLabels:
clusterGroup: devel
matchExpressions:
- key: vendor
operator: In
values:
- OpenShift
- name: production
helmOverrides:
- name: clusterGroup.isHubCluster
value: "false"
clusterSelector:
matchLabels:
clusterGroup: prod
matchExpressions:
- key: vendor
operator: In
values:
- OpenShift
#
# Additional applications
# Be sure to include additional resources your apps will require
# +X machines
# +Y RAM
# +Z CPU
# - name: vendor-app
# namespace: default
# project: vendor
# path: path/to/myapp
# repoURL: https://github.com/vendor/applications.git
# targetRevision: main