Gatekeeper migration to apps folder (#55)

* gatekeeper app migration to apps folder

* constraint sync-wave order fixed

apps/cluster-addons/kustomization.yaml

@@ -5,6 +5,5 @@ bases:
   - argo
   - argo-events
   - argo-rollouts
-  - gatekeeper-system
   - litmus
   - starboard-system

apps/gatekeeper-library/kustomization.yaml

@@ -0,0 +1,13 @@
+apiVersion: kustomize.config.k8s.io/v1beta1
+kind: Kustomization
+
+commonLabels:
+  k8s-app: gatekeeper-library
+
+commonAnnotations:
+  linkerd.io/inject: enabled
+
+# Issue: using app-of-apps pattern and orchestrating synchronization using sync waves
+# ref: https://argo-cd.readthedocs.io/en/stable/operator-manual/upgrading/1.7-1.8/#health-assessment-of-argoprojioapplication-crd-has-been-removed
+resources:
+  - github.com/open-policy-agent/gatekeeper-library/library/general

apps/cluster-addons/gatekeeper-system/kustomization.yaml → apps/gatekeeper-policy-manager/kustomization.yaml

@@ -10,7 +10,7 @@ commonAnnotations:
 bases:
   - github.com/sighupio/gatekeeper-policy-manager?ref=v0.5.1
 
+namespace: gatekeeper-system
+
 resources:
   - ingress.yaml
-
-namespace: gatekeeper-system

apps/kustomization.yaml

@@ -6,6 +6,8 @@ bases:
   - argocd
   - cert-manager
   - gatekeeper
+  - gatekeeper-library
+  - gatekeeper-policy-manager
   - cluster-addons
   - ingress-nginx
   - loki

gitops/cluster-addons.yaml

@@ -3,8 +3,6 @@ kind: ApplicationSet
 metadata:
   name: cluster-addons
   namespace: argocd
-  annotations:
-    argocd.argoproj.io/sync-wave: "1"
 spec:
   generators:
   - git:
@@ -15,6 +13,8 @@ spec:
   template:
     metadata:
       name: '{{path.basename}}'
+      annotations:
+        argocd.argoproj.io/sync-wave: "1"
     spec:
       project: default
       source:

gitops/gatekeeper-library.yaml

@@ -0,0 +1,18 @@
+apiVersion: argoproj.io/v1alpha1
+kind: Application
+metadata:
+  name: gatekeeper-library
+  namespace: argocd
+  finalizers:
+    - resources-finalizer.argocd.argoproj.io
+spec:
+  project: default
+  source:
+    repoURL: 'https://github.com/kevinobee/k8s-gitops.git'
+    targetRevision: HEAD
+    path: apps/gatekeeper-library
+  destination:
+    server: https://kubernetes.default.svc
+    namespace: gatekeeper-system
+  syncPolicy:
+    automated: {}

gitops/gatekeeper-policy-manager.yaml

@@ -0,0 +1,18 @@
+apiVersion: argoproj.io/v1alpha1
+kind: Application
+metadata:
+  name: gatekeeper-policy-manager
+  namespace: argocd
+  finalizers:
+    - resources-finalizer.argocd.argoproj.io
+spec:
+  project: default
+  source:
+    repoURL: 'https://github.com/kevinobee/k8s-gitops.git'
+    targetRevision: HEAD
+    path: apps/gatekeeper-policy-manager
+  destination:
+    server: https://kubernetes.default.svc
+    namespace: gatekeeper-system
+  syncPolicy:
+    automated: {}

gitops/policy.yaml

@@ -4,7 +4,7 @@ metadata:
   name: policy
   namespace: argocd
   annotations:
-    argocd.argoproj.io/sync-wave: "1"
+    argocd.argoproj.io/sync-wave: "2"
   finalizers:
     - resources-finalizer.argocd.argoproj.io
 spec:

policy/constraints/cluster-constraints.yaml

@@ -2,8 +2,6 @@ apiVersion: constraints.gatekeeper.sh/v1beta1
 kind: K8sBlockNodePort
 metadata:
   name: block-node-port
-  annotations:
-    argocd.argoproj.io/sync-wave: "2"
 spec:
   match:
     kinds:
@@ -16,8 +14,6 @@ apiVersion: constraints.gatekeeper.sh/v1beta1
 kind: K8sUniqueIngressHost
 metadata:
   name: unique-ingress-host
-  annotations:
-    argocd.argoproj.io/sync-wave: "2"
 spec:
   match:
     kinds:

policy/kustomization.yaml

@@ -4,13 +4,7 @@ kind: Kustomization
 commonLabels:
   k8s-app: policy
 
-commonAnnotations:
-  linkerd.io/inject: enabled
+namespace: gatekeeper-system
 
-# Issue: using app-of-apps pattern and orchestrating synchronization using sync waves
-# ref: https://argo-cd.readthedocs.io/en/stable/operator-manual/upgrading/1.7-1.8/#health-assessment-of-argoprojioapplication-crd-has-been-removed
 resources:
-  - github.com/open-policy-agent/gatekeeper-library/library/general
-  # - constraints/cluster-constraints.yaml
-
-namespace: gatekeeper-system
+  - constraints/cluster-constraints.yaml