argocd resources

For argo.kube-dev.incubateur.net

Apps of apps

app	purpose
kube-resource-report	kube-resource-report
manifests	various kubernetes resources in ./manifests
metabases	metabase deployments defined in ./metabases
oauth2-proxy	Shared oauth2-proxy server
oauth2-routes	oauth2-proxy as a service as defined in ./oauth2-routes
pgs	PostgreSQL instances defined in ./pgs

Conventions

Ingress

Add oauth2 protection with:

ingress:
  annotations:
    nginx.ingress.kubernetes.io/auth-response-headers:
      X-Auth-Request-Email,X-Auth-Request-Preferred-,X-Auth-Request-Access-Token,
      X-Auth-Request-Roles,X-Auth-Request-User,X-Auth-Request-Groups,X-Forwarded-Groups,
      Authorization
    nginx.ingress.kubernetes.io/auth-signin: https://oauth.[CLUSTER_HOST]/oauth2/start?rd=https%3A%2F%2F$host$escaped_request_uri
    nginx.ingress.kubernetes.io/auth-url: https://oauth.[CLUSTER_HOST]/oauth2/auth

matomo-to-pg CronJobs

Add a cronjob and associated secret somewhere :

kubectl create secret generic matomo-to-pg-xxx -n ns \
    --from-literal=SOURCE_DATABASE_URL='mysql://user:pass@host:3306/db' \
    --from-literal=TARGET_DATABASE_URL='postgresql://user:pass@host:5432/db' \
    --from-literal=SITE_ID='xxx'