feat: patch coredns not to be deployed in a non-master node

k8s/argo-apps/dcsi.yaml

@@ -19,16 +19,19 @@ spec:
           node:
             driver:
               image:
-                tag: "next@sha256:6b758d6faf96f0e96d4b8ac0e240fc290c7bace23c20d78a3eb93781652cb1f1"
+                tag: next
+                pullPolicy: Always
           controller:
             driver:
               image:
-                tag: "next@sha256:6b758d6faf96f0e96d4b8ac0e240fc290c7bace23c20d78a3eb93781652cb1f1"
+                tag: next
+                pullPolicy: Always
           csiDriver:
             name: org.dcsi.nfs
           driver:
             image:
               tag: next
+              pullPolicy: Always
             existingConfigSecret: secrets-dcsi
             config:
               driver: freenas-api-nfs

k8s/argo-apps/kube-system.yaml

@@ -0,0 +1,18 @@
+---
+apiVersion: argoproj.io/v1alpha1
+kind: Application
+metadata:
+  name: kube-system
+  namespace: argo-cd
+spec:
+  destination:
+    name: ''
+    namespace: kube-system
+    server: https://kubernetes.default.svc
+  sources:
+    - repoURL: https://git.roboces.dev/catalin/fukuops.git
+      path: k8s/services/kube-system
+      targetRevision: main
+  project: management
+  syncPolicy:
+    automated: {}

k8s/argo-apps/renovate.yaml

@@ -37,10 +37,7 @@ spec:
                   "fileMatch": ["k8s/services/.+\\.yaml$"]
                 }
               }
-          existingSecret: secrets-renovate
+          existingSecret: renovate
 
-    - repoURL: https://git.roboces.dev/catalin/fukuops.git
-      path: k8s/services/renovate
-      targetRevision: main
   syncPolicy:
     automated: {}

k8s/argo-apps/rustical.yaml

@@ -1,78 +0,0 @@
----
-apiVersion: argoproj.io/v1alpha1
-kind: Application
-metadata:
-  name: rustical
-  namespace: argo-cd
-spec:
-  destination:
-    name: ''
-    namespace: apps-roboces
-    server: https://kubernetes.default.svc
-  sources:
-    - repoURL: git.roboces.dev/catalin/fukuops
-      chart: rustical
-      targetRevision: 0.1.2
-      helm:
-        valuesObject:
-          replicaCount: 1
-          securityContext:
-            allowPrivilegeEscalation: false
-            readOnlyRootFilesystem: true
-            runAsUser: 10000
-            runAsGroup: 10000
-            capabilities:
-              drop:
-                - all
-          service:
-            type: LoadBalancer
-            port: 8001
-          ingress:
-            enabled: true
-            className: "traefik"
-            hosts:
-              - host: cal.roboces.dev
-                paths:
-                  - path: /
-                    pathType: Prefix
-          resources:
-            requests:
-              cpu: 100m
-              memory: 128Mi
-            limits:
-              cpu: 500m
-              memory: 256Mi
-          livenessProbe:
-            tcpSocket:
-              port: 4000
-            initialDelaySeconds: 10
-            timeoutSeconds: 15
-            successThreshold: 1
-            failureThreshold: 3
-            periodSeconds: 10
-          readinessProbe:
-            tcpSocket:
-              port: 4000
-            initialDelaySeconds: 5
-            timeoutSeconds: 2
-            successThreshold: 1
-            failureThreshold: 3
-            periodSeconds: 10
-          persistence:
-            enabled: true
-          rustical:
-            oidc:
-              name: "Authentik"
-              issuer: "https://auth.fukurokuju.dev/application/o/rustical/"
-              claim_userid: "preffered_username"
-              scopes: '["openid", "profile", "groups"]'
-              allow_sign_up: "true"
-            frontend:
-              allow_password_login: "false"
-          secret:
-            existingSecretName: rustical
-  project: roboces
-  syncPolicy:
-    automated:
-      prune: true
-      selfHeal: true