diff --git a/charts/security-apps/Chart.yaml b/charts/security-apps/Chart.yaml index d6ac3e047..595598f97 100644 --- a/charts/security-apps/Chart.yaml +++ b/charts/security-apps/Chart.yaml @@ -3,8 +3,8 @@ name: security-apps description: Argo CD app-of-apps config for security applications type: application # version and appVersion are in sync in this chart! -version: 0.0.1 -appVersion: 0.0.1 +version: 0.1.0 +appVersion: 0.1.0 home: https://github.com/adfinis-sygroup/helm-charts/tree/master/charts/security-apps sources: - https://github.com/adfinis-sygroup/helm-charts diff --git a/charts/security-apps/README.md b/charts/security-apps/README.md index 82fc888e4..a734c6225 100644 --- a/charts/security-apps/README.md +++ b/charts/security-apps/README.md @@ -1,6 +1,6 @@ # security-apps -![Version: 0.0.1](https://img.shields.io/badge/Version-0.0.1-informational?style=flat-square) ![Type: application](https://img.shields.io/badge/Type-application-informational?style=flat-square) ![AppVersion: 0.0.1](https://img.shields.io/badge/AppVersion-0.0.1-informational?style=flat-square) +![Version: 0.1.0](https://img.shields.io/badge/Version-0.1.0-informational?style=flat-square) ![Type: application](https://img.shields.io/badge/Type-application-informational?style=flat-square) ![AppVersion: 0.1.0](https://img.shields.io/badge/AppVersion-0.1.0-informational?style=flat-square) Argo CD app-of-apps config for security applications @@ -32,6 +32,7 @@ This chart is maintained by [Adfinis](https://adfinis.com/?pk_campaign=github&pk | dex.values | object | [upstream values](https://github.com/helm/charts/tree/master/stable/dex/values.yaml) | Helm values | | falco | object | - | [falco](https://github.com/falcosecurity/falco/) ([example](./examples/falco.yaml)) | | falco.chart | string | `"falco"` | Chart | +| falco.destination.namespace | string | `"infra-falco"` | Namespace | | falco.enabled | bool | `false` | Enable falco | | falco.repoURL | string | [repo](https://falcosecurity.github.io/charts) | Repo URL | | falco.targetRevision | string | `"1.5.*"` | [falco Helm chart](https://github.com/falcosecurity/charts) version | @@ -43,6 +44,13 @@ This chart is maintained by [Adfinis](https://adfinis.com/?pk_campaign=github&pk | gangway.repoURL | string | [repo](https://charts.helm.sh/stable/) | Repo URL | | gangway.targetRevision | string | `"0.4.*"` | [gangway Helm chart](https://github.com/helm/charts/tree/master/stable/gangway/) version | | gangway.values | object | [upstream values](https://github.com/helm/charts/tree/master/stable/gangway/values.yaml) | Helm values | +| gatekeeper | object | - | [gatekeeper](https://github.com/open-policy-agent/gatekeeper) ([example](./examples/gatekeeper.yaml)) | +| gatekeeper.chart | string | `"gatekeeper"` | Chart | +| gatekeeper.destination.namespace | string | `"infra-gatekeeper"` | Namespace | +| gatekeeper.enabled | bool | `false` | Enable falco | +| gatekeeper.repoURL | string | [repo](https://open-policy-agent.github.io/gatekeeper/charts) | Repo URL | +| gatekeeper.targetRevision | string | `"3.2.2"` | [gatekeeper Helm chart](https://github.com/open-policy-agent/gatekeeper/tree/master/charts/gatekeeper) version | +| gatekeeper.values | object | [upstream values](https://github.com/open-policy-agent/gatekeeper/blob/master/charts/gatekeeper/values.yaml) | Helm values | | vault | object | - | [vault](https://github.com/hashicorp/vault/) ([example](./examples/vault.yaml)) | | vault.chart | string | `"vault"` | Chart | | vault.destination.namespace | string | `"infra-vault"` | Namespace | diff --git a/charts/security-apps/ci/default-values.yaml b/charts/security-apps/ci/default-values.yaml index 4f8a60c2c..c73baad58 100644 --- a/charts/security-apps/ci/default-values.yaml +++ b/charts/security-apps/ci/default-values.yaml @@ -13,3 +13,7 @@ vault: falco: enabled: true values: {} + +gatekeeper: + enabled: true + values: {} diff --git a/charts/security-apps/examples/gatekeeper.yaml b/charts/security-apps/examples/gatekeeper.yaml new file mode 100644 index 000000000..7e9197d7a --- /dev/null +++ b/charts/security-apps/examples/gatekeeper.yaml @@ -0,0 +1,5 @@ +gatekeeper: + enabled: true + project: infra-gatekeeper + values: + logLevel: INFO diff --git a/charts/security-apps/templates/gatekeeper.yaml b/charts/security-apps/templates/gatekeeper.yaml new file mode 100644 index 000000000..70da55a43 --- /dev/null +++ b/charts/security-apps/templates/gatekeeper.yaml @@ -0,0 +1,33 @@ +{{ if .Values.gatekeeper.enabled }} +{{ template "argoconfig.application" (list . "security-apps.gatekeeper") }} +{{ end }} + +{{- define "security-apps.gatekeeper" -}}{{- $app := unset .Values.gatekeeper "enabled" -}}{{- $name := default $app.destination.namespace $app.name -}} +metadata: + name: {{ template "common.fullname" . }}-{{ $name }} +spec: + {{- if $app.project }} + project: {{ $app.project | quote }} + {{- end }} + source: + repoURL: {{ $app.repoURL | quote }} + chart: {{ $app.chart | quote }} + targetRevision: {{ $app.targetRevision | quote }} + helm: + releaseName: {{ $name | quote }} + values: |- + nameOverride: {{ $name | quote }} + {{- $app.values | toYaml | nindent 8 }} + {{- if $app.destination }} + destination: + {{ $app.destination | toYaml | nindent 4 }} + {{- end }} + {{- if $app.syncPolicy }} + syncPolicy: + {{ $app.syncPolicy | toYaml | nindent 4 }} + {{- end }} + {{- if $app.ignoreDifferences }} + ignoreDifferences: + {{ $app.ignoreDifferences | toYaml | nindent 4 }} + {{- end }} +{{- end -}} diff --git a/charts/security-apps/values.yaml b/charts/security-apps/values.yaml index be508f75c..d5da9f1b0 100644 --- a/charts/security-apps/values.yaml +++ b/charts/security-apps/values.yaml @@ -65,7 +65,7 @@ falco: enabled: false name: falco destination: - # vault.destination.namespace -- Namespace + # falco.destination.namespace -- Namespace namespace: "infra-falco" # falco.repoURL -- Repo URL # @default -- [repo](https://falcosecurity.github.io/charts) @@ -77,3 +77,23 @@ falco: # falco.values -- Helm values # @default -- [upstream values](https://github.com/falcosecurity/charts/tree/master/values.yaml) values: {} + +# gatekeeper -- [gatekeeper](https://github.com/open-policy-agent/gatekeeper) ([example](./examples/gatekeeper.yaml)) +# @default -- - +gatekeeper: + # gatekeeper.enabled -- Enable falco + enabled: false + name: gatekeeper + destination: + # gatekeeper.destination.namespace -- Namespace + namespace: "infra-gatekeeper" + # gatekeeper.repoURL -- Repo URL + # @default -- [repo](https://open-policy-agent.github.io/gatekeeper/charts) + repoURL: "https://falcosecurity.github.io/charts" + # gatekeeper.chart -- Chart + chart: "gatekeeper" + # gatekeeper.targetRevision -- [gatekeeper Helm chart](https://github.com/open-policy-agent/gatekeeper/tree/master/charts/gatekeeper) version + targetRevision: "3.2.2" + # gatekeeper.values -- Helm values + # @default -- [upstream values](https://github.com/open-policy-agent/gatekeeper/blob/master/charts/gatekeeper/values.yaml) + values: {}