diff --git a/k8s/argocd/apps/70-poimen.yaml b/k8s/argocd/apps/70-poimen.yaml index 6e63a15..ef903d4 100644 --- a/k8s/argocd/apps/70-poimen.yaml +++ b/k8s/argocd/apps/70-poimen.yaml @@ -16,7 +16,8 @@ metadata: argocd-image-updater.argoproj.io/workflows.allow-tags: regexp:^[0-9a-f]{7}$ argocd-image-updater.argoproj.io/frontend.update-strategy: newest-build argocd-image-updater.argoproj.io/frontend.allow-tags: regexp:^[0-9a-f]{7}$ - argocd-image-updater.argoproj.io/write-back-method: argocd + argocd-image-updater.argoproj.io/write-back-method: git + argocd-image-updater.argoproj.io/git-branch: main spec: project: homelab sources: diff --git a/k8s/infra/argocd-image-updater/values.yaml b/k8s/infra/argocd-image-updater/values.yaml index 361cfab..05a597c 100644 --- a/k8s/infra/argocd-image-updater/values.yaml +++ b/k8s/infra/argocd-image-updater/values.yaml @@ -20,10 +20,47 @@ config: insecure: true plaintext: true + # Git write-back configuration (for multi-source Applications) + git: + # Commit author for image updates + user: + name: "ArgoCD Image Updater" + email: "argocd-image-updater@riotpiao.com" + # Use SSH keys from ArgoCD's known hosts + credentials + # Image Updater inherits ArgoCD's git credentials (mounted via ArgoCD secret) + +# Mount ArgoCD's git credentials for write-back +extraVolumes: + - name: argocd-ssh-known-hosts-cm + configMap: + name: argocd-ssh-known-hosts-cm + defaultMode: 0644 + - name: argocd-gpg-keys-cm + configMap: + name: argocd-gpg-keys-cm + optional: true + defaultMode: 0644 + - name: argocd-gpg-pubring + configMap: + name: argocd-gpg-pubring-cm + optional: true + defaultMode: 0644 + +extraVolumeMounts: + - name: argocd-ssh-known-hosts-cm + mountPath: /etc/ssh/ssh_known_hosts.d/argocd-ssh-known-hosts + subPath: ssh_known_hosts + - name: argocd-gpg-keys-cm + mountPath: /etc/gpg/source + - name: argocd-gpg-pubring + mountPath: /etc/gpg/pubring + # Extra environment variables extraEnv: - name: ARGOCD_GRPC_WEB value: "true" + - name: GIT_SSH_KNOWN_HOSTS_CONFIG_MAP_ENABLED + value: "true" # Resources resources: