Add Templates to pretty config

charts/network-base-workload/templates/issuer.yaml

@@ -1,6 +1,6 @@
 ---
 apiVersion: cert-manager.io/v1
-kind: Issuer
+kind: ClusterIssuer
 metadata:
   name: {{ include "network-base.fullname" . }}
   labels:

helmule/extensions/kubernetes-dashboard/config.yaml

@@ -0,0 +1,4 @@
+---
+url:
+  path: app.ingress.hosts
+  description: A hostname that will be used by ingress

helmule/helmule.yaml

@@ -151,6 +151,15 @@ charts:
 
   - name: kubernetes-dashboard
     repository: kubernetes-dashboard
+    extensions:
+      - name: add a pretty config mapper
+        source_dir: ./extensions/kubernetes-dashboard/
+        target_dir: config
+    patches:
+      - name: add a pretty config mapper
+        custom_command:
+          commands:
+            - mv ./config/config.yaml .
+            - rm -rf config
     mirrors:
-      - custom_command
+      - custom_command
-

workload/helmfile.yaml

@@ -77,6 +77,8 @@ releases:
       - kube-system/coredns
       - kube-system/cilium
     namespace: traefik-system
+    values:
+      - ./values/traefik.yaml
 
   - name: ippool
     namespace: metallb-system
@@ -107,8 +109,11 @@ releases:
 
   - name: kubernetes-dashboard 
     chart: zot/kubernetes-dashboard 
+    installed: false
     version: 7.3.2
     namespace: applications
+    values:
+      - ./values/kubernetes-dashboard.yaml
     needs: 
       - kube-system/namespaces
       - kube-system/coredns

workload/manifests/rbac.yaml

@@ -0,0 +1,18 @@
+apiVersion: rbac.authorization.k8s.io/v1
+kind: ClusterRoleBinding
+metadata:
+  name: test
+roleRef: # points to the Role
+  apiGroup: rbac.authorization.k8s.io
+  kind: ClusterRole
+  name: admin
+subjects: # points to the ServiceAccount
+- kind: ServiceAccount
+  name: test
+  namespace: default
+---
+apiVersion: v1
+kind: ServiceAccount
+metadata:
+  name: test
+  namespace: default

workload/values/kubernetes-dashboard.yaml

@@ -1,21 +1,16 @@
- ingress:
+app:
+  ingress:
     enabled: true
     hosts:
-      # Keep 'localhost' host only if you want to access Dashboard using 'kubectl port-forward ...' on:
+      - dashboard.fe85db5c-fa78-4951-9641-7382be9c5884.badhouseplants.net
-      # https://localhost:8443
-      - localhost
-    # - kubernetes.dashboard.domain.com
     ingressClassName: traefik
     pathType: ImplementationSpecific
     path: /
     issuer:
-      name: selfsigned
+      name: network-base
-      # Scope determines what kind of issuer annotation will be used on ingress resource
-      # - default - adds 'cert-manager.io/issuer'
-      # - cluster - adds 'cert-manager.io/cluster-issuer'
-      # - disabled - disables cert-manager annotations
       scope: cluster
     tls:
       secretName: ""
     labels: {}
-    annotations: {}
+    annotations:
+      traefik.ingress.kubernetes.io/router.tls: "true"

workload/values/traefik.yaml

@@ -0,0 +1,2 @@
+globalArguments:
+  - "--serversTransport.insecureSkipVerify=true"