helm deploy

cluster/external-secrets/external-secrets.yaml

@@ -1,38 +0,0 @@
----
-apiVersion: argoproj.io/v1alpha1
-kind: Application
-metadata:
-  name: external-secrets
-  namespace: openshift-gitops
-  finalizers:
-  - resources-finalizer.argocd.argoproj.io
-  annotations:
-    argocd.argoproj.io/sync-wave: "1"
-spec:
-  destination:
-    name: in-cluster
-    namespace: openshift-operators
-  project: default
-  source:
-    #path: cluster/external-secrets
-    path: cluster/external-secrets/overlays/hub
-    repoURL: https://github.com/rblundon/homelab.git
-    targetRevision: HEAD
-    # helm:
-    #   valueFiles:
-    #     - values-hub.yaml
-  syncPolicy:
-    automated:
-      prune: true
-      selfHeal: true
-    syncOptions:
-    - RespectIgnoreDifferences=true
-    - CreateNamespace=true
-    managedNamespaceMetadata:
-      labels:
-        argocd.argoproj.io/managed-by: openshift-gitops
-  ignoreDifferences:
-  - group: apps
-    kind: Deployment
-    jsonPointers:
-    - /spec/replicas

cluster/external-secrets/values-hub.yaml

@@ -3,28 +3,29 @@
 external-secrets:
   enabled: true # Default: true
 
-resources:
-   requests:
-     cpu: 10m
-     memory: 32Mi
+  resources:
+    requests:
+      cpu: 10m
+      memory: 32Mi
 
-# -- if true, the operator will process cluster external secret. Else, it will ignore them.
-processClusterExternalSecret: true
+  createOperator: true
+  # -- if true, the operator will process cluster external secret. Else, it will ignore them.
+  processClusterExternalSecret: true
 
-# -- if true, the operator will process cluster push secret. Else, it will ignore them.
-processClusterPushSecret: false #true
+  # -- if true, the operator will process cluster push secret. Else, it will ignore them.
+  processClusterPushSecret: false #true
 
-# -- if true, the operator will process cluster store. Else, it will ignore them.
-processClusterStore: false #true
+  # -- if true, the operator will process cluster store. Else, it will ignore them.
+  processClusterStore: false #true
 
-# -- if true, the operator will process push secret. Else, it will ignore them.
-processPushSecret: false #true
+  # -- if true, the operator will process push secret. Else, it will ignore them.
+  processPushSecret: false #true
 
-webhook:
-  # -- Specifies whether a webhook deployment be created. If set to false, crds.conversion.enabled should also be set to false otherwise the kubeapi will be hammered because the conversion is looking for a webhook endpoint.
-  create: false #true
+  webhook:
+    # -- Specifies whether a webhook deployment be created. If set to false, crds.conversion.enabled should also be set to false otherwise the kubeapi will be hammered because the conversion is looking for a webhook endpoint.
+    create: false #true
 
-certController:
-  # -- Specifies whether a certificate controller deployment be created.
-  create: false #true
+  certController:
+    # -- Specifies whether a certificate controller deployment be created.
+    create: false #true