argo-cd

# 添加 argo 仓库
helm repo add argo https://argoproj.github.io/argo-helm

# 创建并进入相关目录
mkdir -p helm/argo-cd/
cd helm/argo-cd

# 下载 argo-cd 图表
helm pull argo/argo-cd --version 9.3.7

# 选择并复制粘贴下面的 values 文件后，安装或更新 argo-cd
helm upgrade --install argocd ./argo-cd-9.3.7.tgz \
  -f values.yaml \
  --namespace argocd \
  --create-namespace

#  Redis 高可用
redis-ha:
  enabled: true
  # 禁用默认的单点 Redis
redis:
  enabled: false

# Controller 配置
controller:
  replicas: 1 # 注意：Controller 通常保持为 1，除非开启分片(Sharding)。中小规模保持 1 即可避免并发竞争。
  enableStatefulSet: true # 推荐开启，状态更稳定
  metrics:
    enabled: true
    serviceMonitor:
      enabled: true

# Server (API/UI) 配置
server:
  replicas: 3 # API/UI 服务，建议至少 3 个副本
  autoscaling:
    enabled: true
    minReplicas: 3
    maxReplicas: 10
  # 使用 NodePort 暴露服务
  service:
    type: NodePort
    nodePortHttp: null # 不指定，由 Kubernetes 自动分配
    nodePortHttps: 30001 # 固定端口，用于外部访问
  metrics:
    enabled: true
    serviceMonitor:
      enabled: true
  # 强制反亲和性，确保副本分散在不同节点
  affinity:
    podAntiAffinity:
      preferredDuringSchedulingIgnoredDuringExecution:
      - weight: 100
        podAffinityTerm:
          labelSelector:
            matchLabels:
              app.kubernetes.io/name: argocd-server
          topologyKey: kubernetes.io/hostname

# Repo Server 配置
repoServer:
  replicas: 3 # Repo Server 负责拉取代码和渲染，负载较高
  autoscaling:
    enabled: true
    minReplicas: 3
    maxReplicas: 10
  metrics:
    enabled: true
    serviceMonitor:
      enabled: true

#  安全加固
configs:
  params:
    server.insecure: false # 开启https

# 账号为admin，密码通过以下方式获取
kubectl -n argocd get secret argocd-initial-admin-secret -o jsonpath="{.data.password}" | base64 -d ; echo

# 从本地下载 argo-cd 客户端工具
curl -sk https://10.0.0.101:30001/download/argocd-linux-amd64 -o argocd

# 为 argo-cd 客户端工具添加可执行权限
chmod u+x argocd

# 验证安装结果
argocd version

# 配置 argo-cd 客户端工具
argocd login 10.0.0.101:30001 --insecure --username admin --password $(kubectl -n argocd get secret argocd-initial-admin-secret -o jsonpath="{.data.password}" | base64 -d ; echo)

apiVersion: apps/v1
kind: Deployment
metadata:
  name: myapp
  namespace: myapp
  labels:
    app: myapp
spec:
  replicas: 1
  selector:
    matchLabels:
      app: myapp
  template:
    metadata:
      labels:
        app: myapp
    spec:
      containers:
      - name: myapp
        image: ikubernetes/myapp:v1
        imagePullPolicy: IfNotPresent
        resources:
          limits:
            memory: "128Mi"
            cpu: "500m"
          requests:
            memory: "64Mi"
            cpu: "250m"
        ports:
        - containerPort: 80
          name: http

apiVersion: v1
kind: Service
metadata:
  name: myapp
  namespace: myapp
  labels:
    app: myapp
spec:
  type: ClusterIP
  selector:
    app: myapp
  ports:
  - name: http
    port: 80
    targetPort: 80
    protocol: TCP