initial: yandex-prod gitops infrastructure

Gitea + ArgoCD + cert-manager + Traefik + CNPG + monitoring + loki + alloy
Matrix homeservers for mrt0rtikize.ru, t0rt1k.tech, roglog.space

bootstrap/argocd/ingress.yaml

@@ -0,0 +1,26 @@
+apiVersion: networking.k8s.io/v1
+kind: Ingress
+metadata:
+  name: argocd
+  namespace: argocd
+  annotations:
+    cert-manager.io/cluster-issuer: letsencrypt-production
+    traefik.ingress.kubernetes.io/router.entrypoints: websecure
+    traefik.ingress.kubernetes.io/router.tls: "true"
+spec:
+  ingressClassName: traefik
+  tls:
+    - hosts:
+        - argocd.prod.t01tt.tech
+      secretName: argocd-tls
+  rules:
+    - host: argocd.prod.t01tt.tech
+      http:
+        paths:
+          - path: /
+            pathType: Prefix
+            backend:
+              service:
+                name: argocd-server
+                port:
+                  number: 80

bootstrap/argocd/install.sh

@@ -0,0 +1,28 @@
+#!/bin/bash
+set -e
+
+export KUBECONFIG="$(dirname "$(realpath "$0")")/../../kubeconfig"
+
+echo "=== Installing ArgoCD ==="
+
+helm repo add argo https://argoproj.github.io/argo-helm 2>/dev/null || true
+helm repo update argo
+
+helm upgrade --install argocd argo/argo-cd \
+  --namespace argocd \
+  --create-namespace \
+  --values "$(dirname "$0")/values.yaml" \
+  --wait \
+  --timeout 300s
+
+echo ""
+echo "=== ArgoCD installed ==="
+echo ""
+echo "To access ArgoCD UI:"
+echo "  kubectl port-forward svc/argocd-server -n argocd 8080:80"
+echo ""
+echo "Admin password:"
+kubectl -n argocd get secret argocd-initial-admin-secret -o jsonpath="{.data.password}" | base64 -d
+echo ""
+echo ""
+echo "Login with username: admin"

bootstrap/argocd/values.yaml

@@ -0,0 +1,20 @@
+server:
+  extraArgs:
+    - --insecure
+
+configs:
+  params:
+    server.insecure: true
+  cm:
+    timeout.reconciliation: 180s
+    helm.timeoutSeconds: "300"
+    resource.customizations.health.networking.k8s.io_Ingress: |
+      hs = {}
+      hs.status = "Healthy"
+      hs.message = "Ingress is synced"
+      return hs
+
+redis:
+  image:
+    repository: docker.io/library/redis
+    tag: 7.4-alpine