Try fixing ArgoCD with Helm+Kustomize (#3)

Co-authored-by: Marcel Straub <m@straubs.eu>
Reviewed-on: #3

02-k8s/infra/application-set.yaml

@@ -4,7 +4,7 @@ metadata:
   name: infrastructure
   namespace: argocd
   labels:
-    dev.stonegarden: infrastructure
+    s5b.org: infrastructure
 spec:
   generators:
     - git:
@@ -16,7 +16,7 @@ spec:
     metadata:
       name: '{{ path.basename }}'
       labels:
-        dev.stonegarden: infrastructure
+        s5b.org: infrastructure
     spec:
       project: infrastructure
       source:

02-k8s/infra/controllers/argocd/values.yaml

@@ -13,6 +13,12 @@ configs:
 
   cmp:
     create: true
+    plugins:
+      kustomize-build-with-helm:
+        generate:
+          command: [ sh, -c ]
+          args: [ kustomize build --enable-helm ]
+
   params:
     controller.diff.server.side: true
     server.insecure: false
@@ -96,6 +102,28 @@ repoServer:
       memory: 256Mi
     limits:
       memory: 2Gi
+  extraContainers:
+    - name: kustomize-build-with-helm
+      command:
+        - argocd-cmp-server
+      image: '{{ default .Values.global.image.repository .Values.repoServer.image.repository }}:{{ default (include "argo-cd.defaultTag" .) .Values.repoServer.image.tag }}'
+      securityContext:
+        runAsNonRoot: true
+        runAsUser: 999
+        allowPrivilegeEscalation: false
+        readOnlyRootFilesystem: true
+        seccompProfile:
+          type: RuntimeDefault
+        capabilities:
+          drop: [ ALL ]
+      volumeMounts:
+        - name: plugins
+          mountPath: /home/argocd/cmp-server/plugins
+        - name: cmp-kustomize-build-with-helm
+          mountPath: /home/argocd/cmp-server/config/plugin.yaml
+          subPath: kustomize-build-with-helm.yaml
+        - mountPath: /tmp
+          name: cmp-tmp
 
 applicationSet:
   replicas: 2