duynguyen
c2c265c898
Drop .env/envsubst/bake-hash-into-values.yaml flow entirely. Chart's configs.secret block is removed for good, so the rendered manifest never declares admin.password/admin.passwordMtime. Password hash is set once directly on the live argocd-secret via kubectl patch, and survives every self-heal sync since ArgoCD never owns those fields.
24 lines
400 B
YAML
24 lines
400 B
YAML
nameOverride: argocd
|
|
|
|
crds:
|
|
install: true
|
|
keep: true
|
|
annotations:
|
|
argocd.argoproj.io/sync-options: ServerSideApply=true
|
|
|
|
global:
|
|
domain: argocd.fireflylab.local
|
|
image:
|
|
repository: quay.io/argoproj/argocd
|
|
pullPolicy: IfNotPresent
|
|
logging:
|
|
format: text
|
|
level: info
|
|
|
|
configs:
|
|
params:
|
|
server.insecure: true # TLS terminated at Envoy Gateway
|
|
|
|
server:
|
|
replicas: 1
|