deploy ESO via customize

cluster/temp/Chart.yaml

@@ -0,0 +1,30 @@
+apiVersion: v2
+name: external-secrets
+description: A Helm chart for Kubernetes
+
+# A chart can be either an 'application' or a 'library' chart.
+#
+# Application charts are a collection of templates that can be packaged into versioned archives
+# to be deployed.
+#
+# Library charts provide useful utilities or functions for the chart developer. They're included as
+# a dependency of application charts to inject those utilities and functions into the rendering
+# pipeline. Library charts do not define any templates and therefore cannot be deployed.
+type: application
+
+# This is the chart version. This version number should be incremented each time you make changes
+# to the chart and its templates, including the app version.
+# Versions are expected to follow Semantic Versioning (https://semver.org/)
+version: 0.1.0
+
+# This is the version number of the application being deployed. This version number should be
+# incremented each time you make changes to the application. Versions are not expected to
+# follow Semantic Versioning. They should reflect the version the application is using.
+# It is recommended to use it with quotes.
+appVersion: "0.16.1"
+
+dependencies:
+- name: external-secrets
+  version: "0.16.1"
+  repository: https://charts.external-secrets.io/
+  condition: external-secrets.enabled

cluster/temp/cluster-secret-store.yaml

@@ -1,13 +0,0 @@
-apiVersion: external-secrets.io/v1beta1
-kind: ClusterSecretStore
-metadata:
-  name: doppler-cluster
-spec:
-  provider:
-    doppler:
-      auth:
-        secretRef:
-          dopplerToken:
-            name: doppler-cluster-token
-            key: dopplerToken
-            namespace: external-secrets

cluster/temp/kustomization.yaml

@@ -1,14 +0,0 @@
----
-apiVersion: kustomize.config.k8s.io/v1beta1
-kind: Kustomization
-
-commonAnnotations:
-  argocd.argoproj.io/sync-options: SkipDryRunOnMissingResource=true
-
-resources:
-# Operator deployment
-- namespace.yaml
-- subscription.yaml
-- operatorconfig.yaml
-# Deploy cluster resources
-- cluster-secret-store.yaml

cluster/temp/namespace.yaml

@@ -1,14 +0,0 @@
----
-apiVersion: v1
-kind: Namespace
-metadata:
-  annotations:
-    argocd.argoproj.io/sync-options: SkipDryRunOnMissingResource=true
-    argocd.argoproj.io/tracking-id: 'external-secrets:/Namespace:openshift-operators/external-secrets'
-  name: external-secrets
-  labels:
-    argocd.argoproj.io/managed-by: openshift-gitops-operator
-    kubernetes.io/metadata.name: external-secrets
-spec:
-  finalizers:
-  - kubernetes

cluster/temp/operatorconfig.yaml

@@ -1,16 +0,0 @@
-apiVersion: operator.external-secrets.io/v1alpha1
-kind: OperatorConfig
-metadata:
-  name: cluster
-spec:
-  prometheus:
-    enabled: true
-    service:
-      port: 8080
-  resources:
-   requests:
-     cpu: 10m
-     memory: 96Mi
-   limits:
-     cpu: 100m
-     memory: 256Mi

cluster/temp/subscription.yaml

@@ -1,14 +0,0 @@
----
-apiVersion: operators.coreos.com/v1alpha1
-kind: Subscription
-metadata:
-  labels:
-    operators.coreos.com/external-secrets-operator.openshift-operators: ''
-  name: external-secrets-operator
-  namespace: openshift-operators
-spec:
-  channel: stable
-  installPlanApproval: Automatic
-  name: external-secrets-operator
-  source: community-operators
-  sourceNamespace: openshift-marketplace

cluster/temp/values-hub.yaml

@@ -0,0 +1,30 @@
+# https://github.com/external-secrets/external-secrets/blob/main/deploy/charts/external-secrets/values.yaml
+
+external-secrets:
+  enabled: false # Default: true
+
+resources:
+   requests:
+     cpu: 10m
+     memory: 32Mi
+
+# -- if true, the operator will process cluster external secret. Else, it will ignore them.
+processClusterExternalSecret: true
+
+# -- if true, the operator will process cluster push secret. Else, it will ignore them.
+processClusterPushSecret: false #true
+
+# -- if true, the operator will process cluster store. Else, it will ignore them.
+processClusterStore: false #true
+
+# -- if true, the operator will process push secret. Else, it will ignore them.
+processPushSecret: false #true
+
+webhook:
+  # -- Specifies whether a webhook deployment be created. If set to false, crds.conversion.enabled should also be set to false otherwise the kubeapi will be hammered because the conversion is looking for a webhook endpoint.
+  create: false #true
+
+certController:
+  # -- Specifies whether a certificate controller deployment be created.
+  create: false #true
+