deploy ESO via helm

cluster/external-secrets/Chart.yaml

@@ -0,0 +1,30 @@
+apiVersion: v2
+name: external-secrets
+description: A Helm chart for Kubernetes
+
+# A chart can be either an 'application' or a 'library' chart.
+#
+# Application charts are a collection of templates that can be packaged into versioned archives
+# to be deployed.
+#
+# Library charts provide useful utilities or functions for the chart developer. They're included as
+# a dependency of application charts to inject those utilities and functions into the rendering
+# pipeline. Library charts do not define any templates and therefore cannot be deployed.
+type: application
+
+# This is the chart version. This version number should be incremented each time you make changes
+# to the chart and its templates, including the app version.
+# Versions are expected to follow Semantic Versioning (https://semver.org/)
+version: 0.1.0
+
+# This is the version number of the application being deployed. This version number should be
+# incremented each time you make changes to the application. Versions are not expected to
+# follow Semantic Versioning. They should reflect the version the application is using.
+# It is recommended to use it with quotes.
+appVersion: "0.16.1"
+
+dependencies:
+- name: external-secrets
+  version: "0.16.1"
+  repository: https://charts.external-secrets.io/
+  condition: external-secrets.enabled

cluster/external-secrets/external-secrets.yaml

@@ -1,37 +0,0 @@
----
-apiVersion: argoproj.io/v1alpha1
-kind: Application
-metadata:
-  name: external-secrets
-  namespace: openshift-gitops
-  finalizers:
-  - resources-finalizer.argocd.argoproj.io
-  annotations:
-    argocd.argoproj.io/sync-wave: "1"
-spec:
-  destination:
-    name: in-cluster
-    namespace: external-secrets
-  project: default
-  source:
-    path: cluster/external-secrets/overlays/hub
-    repoURL: https://github.com/rblundon/homelab.git
-    targetRevision: HEAD
-  #  helm:
-  #    valueFiles:
-  #      - values-hub.yaml
-  syncPolicy:
-    automated:
-      prune: true
-      selfHeal: true
-    syncOptions:
-    - RespectIgnoreDifferences=true
-    - CreateNamespace=true
-    managedNamespaceMetadata:
-      labels:
-        argocd.argoproj.io/managed-by: openshift-gitops
-  ignoreDifferences:
-  - group: apps
-    kind: Deployment
-    jsonPointers:
-    - /spec/replicas

cluster/external-secrets/values-hub.yaml

@@ -0,0 +1,30 @@
+# https://github.com/external-secrets/external-secrets/blob/main/deploy/charts/external-secrets/values.yaml
+
+external-secrets:
+  enabled: true # Default: true
+
+resources:
+   requests:
+     cpu: 10m
+     memory: 32Mi
+
+# -- if true, the operator will process cluster external secret. Else, it will ignore them.
+processClusterExternalSecret: true
+
+# -- if true, the operator will process cluster push secret. Else, it will ignore them.
+processClusterPushSecret: false #true
+
+# -- if true, the operator will process cluster store. Else, it will ignore them.
+processClusterStore: false #true
+
+# -- if true, the operator will process push secret. Else, it will ignore them.
+processPushSecret: false #true
+
+webhook:
+  # -- Specifies whether a webhook deployment be created. If set to false, crds.conversion.enabled should also be set to false otherwise the kubeapi will be hammered because the conversion is looking for a webhook endpoint.
+  create: false #true
+
+certController:
+  # -- Specifies whether a certificate controller deployment be created.
+  create: false #true
+