Changelog

Use app-diff.sh only in integration tests #546 (mcanevet)

Rename project camptocamp-devops-stack to devops-stack #548 (raphink)

Allow to disable wait for app of apps #553 (mcanevet)

Add local-path-provisioner app #552 (raphink)

Add account.manage-account client role to Keycloak admin user #539 (raphink)

Install aws-iam-authenticator in gitlab pipeline and github workflows #542 (ckaenzig)

Add outputs.tf to k3s example, as per documentation #538 (raphink)

Update doc with grafana admin password output #544 (fsismondi)

Add new main page to the website #549 (raphink)

Add dashboards snapshots to documentation #551 (fsismondi)

Generate Antora docs from tags #550 (raphink)

Wait for app of apps in Terraform #517 (mcanevet)

Allow to use arbitray OIDC issuer #504 (mcanevet)

Allow to pass ArgoCD’s Server SecretKey #505 (mcanevet)

Don’t use port-forward to show app diff #522 (mcanevet)

Making components to be enabled or not #526 (pburgisser)

Don’t lookup ArgoCD’s server secretkey to generate JWT token #524 (mcanevet)

Generate random admin password for Grafana #525 (mcanevet)

Persist Loki logs on Azure Blob Storage #513 (mcanevet)

Don’t use terraform.workspace variable in module #529 mcanevet)

Move ArgoCD’s insecure arg to specific values.yaml #447 mcanevet)

Install ArgoCD CLI in pipeline #518 (mcanevet)

Fix regressions introduced by #504 #527 (mcanevet)

Don’t depend on bash-ism #528 (mcanevet)

Pass all values when installing ArgoCD #534 (mcanevet)

Configure ArgoCD on install (except metrics) #536 (mcanevet)

Don’t use plaintext to connect to ArgoCD if not in insecure mode #535 (mcanevet)

Use default Antora generate parameters for avoiding 'EACCES: permission denied' #519 (fsismondi)

Proposed changes - purpose section #521 (modridi)

Upgrade ArgoCD to 1.8.7 #506 (mcanevet)

Update Kube-prometheus-stack values #516 (madridi91)

Set default repoURL and targetRevision to latest DevOps stack version #494 (mcanevet)

Get rid of outputs.json #508 (mcanevet)

Fix csi-secrets-store-provider-azure override #507 (mcanevet)

Use aws-iam-authenticator instead of the temporary token #509 (mcanevet)

Run Terraform workflow unless only doc modification #499 (mcanevet)

Lot of documentation improvements.

Upgrade Azure/aks/azurerm module to 4.7.0 #480 (mcanevet)

Upgrade ArgoCD to 1.8.5 #481 (mcanevet)

Upgrade hashicorp/azurerm provider to 2.48.0 #491 (mcanevet)

Upgrade AAD Pod Identity to 1.7.4 #492 (mcanevet)

Upgrade CSI secrets store provider Azure to 0.0.13 #493 (mcanevet)

Fix chicken and egg problem in Azure #486 (mcanevet)

Create Terraform workspace if it does not exist #489 (mcanevet)

Wait for app of apps in gitlab CI pipeline #490 (mcanevet)

Create LICENSE #488 (mcanevet)

Doc: Cleaning and restructuring #485 (mbornoz)

Upgrade Terraform to v0.14.6 #388 (mcanevet)

Upgrade cert-manager to 1.1.1 #466 (mcanevet)

Upgrade kube-prometheus-stack to 13.10.0 #470 (mcanevet)

Fix Terraform lint issue #457 (mcanevet)

Mark some outputs as sensitive #460 (mcanevet)

Don’t run helm dep update explicitely (workaround) #463 (mcanevet)

Set default values for tests #461 (mcanevet)

Remove Makefile (only brings confusion now) #464 (mcanevet)

Use Terraform wrapper in github workflowhttps://github.com/camptocamp/devops-stack/pull/468[#468] (mcanevet)

Set kubernetes.io/ingress.allow-http: "false" annotation for all ingresses #477 (mcanevet)

Improve EKS example #455 (mcanevet)

Use hashicorp/setup-terraform action in github workflow #456 (mcanevet)

Don’t upgrade dependencies when running terraform #458 (mcanevet)

Don’t set CLUSTER_NAME in tests #471 (mcanevet)

Update example github workflow #473 (mcanevet)

Don’t use script in Gitlab CI pipeline #474 (mcanevet)

Removing olm #436 (pburgisser)

[k3s/docker] Add registry mirror for registry.access.redhat.com #439 (mcanevet)

[k3s/docker] Add registry mirror for k8s.gcr.io #440 (mcanevet)

Install keycloak operator from github #443 (mcanevet)

Move github actions scripts to .github/scripts #448 (mcanevet)

Remove debug #449 (mcanevet)

Move jq and helm installation in provision.sh #450 (mcanevet)

Allow to override TF_ROOT #451 (mcanevet)

Simplify CI by using TF_ROOT #452 (mcanevet)

Refactor CI scripts #453 (mcanevet)

Install jq only if needed in script/plan.sh #454 (mcanevet)

Upgrade Kubernetes provider to v2.0.2 #437 (mcanevet)

Upgrade oauth2-proxy to 7.0.0 #441 (mcanevet)

Upgrade kube-prometheus-stack to v13.5.0 #438 (mcanevet)

Deploy new version of ArgOCD’s Grafana dashboard #444 (mcanevet)

Upgrade Terraform to 0.13.6 #445 (mcanevet)

Upgrade ArgoCD to 1.7.12 #446 (mcanevet)

Moving away from olm #431 (pburgisser)

Add output for prometheus identity #435 (mcanevet)

Integration of thanos together with minio S3 buckets #430 (pburgisser)

Add aadpodidentity to Prometheus #432 (mcanevet)

Allow to create SecretProviderClass for Prometheus #433 (mcanevet)

Upgrade ArgoCD helm chart #429 (mcanevet)

[k3s-docker] don’t use insecure connection in helm provider #426 (mcanevet)

Fix wait for app of apps script #428 (mcanevet)

AKS : Add missing providers pining #425 (mcanevet)

Rename k3os/libvirt to k3s/libvirt #404 (mcanevet)

Factorize Terraform code per distrib variant #405 (mcanevet)

Factorize more code #406 (mcanevet)

Adding redirect to ssl target #415 (pburgisser)

Expose kubernetes version for AKS #422 (mcanevet)

Expose cluster version for EKS #423 (mcanevet)

Upgrade camptocamp/k3s/docker module to 0.7.1 #416 (mcanevet)

Upgrade docker provider to 2.11.0 #417 (mcanevet)

Rollback ArgoCD to 1.7.11 #418 (mcanevet)

Upgrade Loki to 2.1.0 #419 (mcanevet)

Upgrade k3s to v1.18.15-k3s1 #420 (mcanevet)

Upgrade helm provider to 2.0.2 #421 (mcanevet)

Set default version for AKS to 1.18.14 #424 (mcanevet)

Change git repo URL to ssh #408 (saimonn)

K3s-libvirt : Extending default memory to 8Gb for better stability #410 (pburgisser)

k3s-libvirt : Show repo when cloning with https #412 (chornberger-c2c)

k3s-docker : Show repo when cloning with https #413 (chornberger-c2c)

Describe access to kube api for eks #409 (cryptobioz)

Refactor documentation and add information about how to test the DevOps Stack #411 (dabelenda)

Upgrade terraform helm provider to v2.0.1 #401 (mcanevet)

Use released version of Azure AKS module (4.5.0) #403 (mcanevet)

Prune app of apps only when syncPolicy is set #402 (mcanevet)

Enable automatic pruning of resources #400 (mcanevet)

Upgrade dependencies for eks-aws #397 (mcanevet)

Upgrade AAD Pod Identity to 1.7.1 #399 (mcanevet)

Don’t set provider version in generic module #396 (mcanevet)

Instantiate the app of apps inside the argocd-helm module #377 (raphink)

Check Terraform syntaxe on Pull Requests #379 (mcanevet)

Allow to set app domains #375 (raphink)

Hardcode AKS version to 1.18.10 #392 (mcanevet)

Upgrade k3s to v1.18.13 #393 (mcanevet)

Upgrade ArgoCD to v1.8.1 #387 (mcanevet)

Upgrade csi-secrets-store-provider-azure chart to 0.0.15 #395 (mcanevet)

Increase argocd helm release timeout #381 (mcanevet)

Update new_project when releasing #382 (raphink)

Add reference > authentication #383 (raphink)

Instantiate the app of apps inside the argocd-helm module #351 (raphink)

Scale traefik to 2 by default #369 (mcanevet)

Use Azure CNI network plugin #366 (mcanevet)

Upgrade camptocamp/k3s/docker to 0.6.0 #361 (mcanevet)

Run github workflow in container #352 (mcanevet)

Don’t use terraform workspace select with TF_WORKSPACE env var #345 (mcanevet)

Cleanup tests #349 (mcanevet)

Upgrade csi-secrets-store-provider-azure #367 (mcanevet)

Upgrade aad-pod-identity #365 (mcanevet)

Upgrade kube-prometheus-stack to v12.5.0 #364 (mcanevet)

Upgrade camptocamp/k3s/docker to 0.6.0 #361 (mcanevet)

Upgrade cert-manager to 1.1.0 #358 (mcanevet)

Upgrade to ArgoCD 1.7.10 #353 (mcanevet)

Fix AzureIdentity for cert-manager #368 (mcanevet)

Fix pipeline #357 (mcanevet)

Fix some issues with github workflow #356 (mcanevet)

Fix github workflow #355 (mcanevet)

Force destroy Loki’s bucket #374 (mcanevet)

Create key and cert for CA #314 (mcanevet)

Merge keycloak-operator and keycloak Applications #316 (mcanevet)

Enable Traefik access logs #321 (mcanevet)

[k3os-libvirt] Adding support RAM sizing #328 (pburgisser)

Enable minio metrics #330 (mcanevet)

Enable persistence for minio #333 (mcanevet)

Enable minio by default for k3s/k3os #334 (mcanevet)

Create bucket for loki #335 (mcanevet)

Add support for AKS #337 (mcanevet)

Allow to specify more than just values in extra apps' helm #341 (mcanevet)

Use a secret for ArgoCD’s OIDC’s client secret #342 (mcanevet)

Add Azure DNS label annotation to Traefik’s Load balancer #344 (mcanevet)

Add metrics-server application #308 (raphink)

Upgrade traefik helm chart version #321 (mcanevet)

Add missing dependencies pining #327 (mcanevet)

Reduce minio memory requests #331 (mcanevet)

Don’t declare minio values if not enabled #332 (mcanevet)

Use kube admin config for AKS #343 (mcanevet)

Mutualize most configuration #310 (mcanevet)

Configure Applications to use Keycloak #312 (mcanevet)

Fix cognito groups #307 (mcanevet)

Disable ArgoCD’s admin user for EKS #309 (mcanevet)

Fix IRSA for loki #306 (mcanevet)

Use token in EKS' kubeconfig #298 (mcanevet)

Rename loki Application to loki-stack and deploys it in its own namespace #300 (mcanevet)

Explicitly use "set" directive in shell scripts #302 (mcanevet)

Move common app of apps values in a template #303 (mcanevet)

Allow to deploy additional applications #304 (mcanevet)

Allow to override Applications' syncPolicy #292 (mcanevet)

Add common outputs to modules #293 (mcanevet)

Apply Applications object to have a more accurate diff on PR/MR #297 (mcanevet)

Sync app-of-apps and apps values.yaml #291 (mcanevet)

Use planned outputs instead of outputs for dry-run #294 (mcanevet)

Fix target branch for dry-run in tests #295 (mcanevet)

Rename test project from k3s-docker-demo-app to k3s-docker #280 (mcanevet)

Add k3os-libvirt test project #281 (mcanevet)

Use ubuntu-18.04 instead of ubuntu-latest for pipeline #282 (mcanevet)

Add strategy to github actions workflow #283 (mcanevet)

Use camptocamp/k3os/libvirt 0.2.4 #284 (mcanevet)

Deploy ArgoCD using argo-helm module #285 (mcanevet)

Create ArgoCD’s pipeline token with Terraform #286 (mcanevet)

Generate JWT token in Terraform #287 (mcanevet)

Get ARGOCD_AUTH_TOKEN and KUBECONFIG from terraform outputs #288 (mcanevet)

Don’t depend on jq #289 (mcanevet)

Enable minio #277 (pburgisser)

Fixing k3o #274 (pburgisser)

[eks-aws] Add support for creating a private NLB #268 (ckaenzig)

[pipeline] Variabilize version in gitlab-ci pipeline #269 (mcanevet)

Install jq and helm in gitlab-ci pipeline #266 (mcanevet)

[eks-aws] Due to the fact that a Cognito User Pool can have only one Cognito User Pool Domain attached, we had to remove the creation of the User Pool Domain from the DevOps Stack because it is incompatible with a clue/green or a prod/qa/int/dev/lab/whatever pattern. Hence, there is a new cognito_user_pool_domain mandatory parameter, and the previous user pool domain will be removed.

Use diff as differ #258 (mcanevet)

Apply modifications on pull requests in pipeline #262 (mcanevet)

Upgrade kube-prometheus-stack to v12.0.1 #256 (mcanevet)

Document how to release a new version #257 (mcanevet)

Fix release documentation #265 (mcanevet)

Fix devops-stack version in gitlab pipeline and example #255 (mcanevet)

Replace cognito_user_pool_domain resource with module argument #263 (ckaenzig)

Fix eks-aws example #264 (mcanevet)

Add OAuth to Grafana for EKS #230 (raphink)

Merge prometheus-operator and cluster-monitoring Applications into kube-prometheus-stack #237 (mcanevet)

Remove namespaces Application #238 (mcanevet)

Make pipeline less verbose #240 (mcanevet)

Update k3s/k3os modules to support local storage #245 (mcanevet)

Upgrade kube-prometheus-stack #229 (mcanevet)

Upgrade argocd chart to 2.9.5 #233 (mcanevet)

Upgrade cert-manager to 1.0.4 #239 (mcanevet)

Upgrade Traefik chart to 9.10.1 #241 (mcanevet)

Upgrade k3s to v1.18.12-k3s1 #246 (mcanevet)

Deploy OLM #243 (mcanevet)

Deploy Keycloak Operator #247 (mcanevet)

Deploy Keycloak #250 (mcanevet)

Enable ArgoCD metrics everywhere #231 (mcanevet)

Manage app of apps with itself #232 (mcanevet)

Fix bootstrap #235 (mcanevet)

Fix bootstrap #236 (mcanevet)

Use a dedicated secret for ingress tls certs #242 (raphink)

Update prometheus datasource to use kube-prometheus-stack svc #244 (raphink)

Add pipeline for Gitlab CI #203 (mcanevet)

Add Gitlab CI pipeline in examples #204 (mcanevet)

Allow to manipulate kubeconfig #205 (raphink)

Add example for EKS #206 (mcanevet)

Use TF_WORKSPACE environment variable #207 (mcanevet)

Add kubeconfig output to every modules #208 (mcanevet)

Add ArgoCD app diff in the pipeline #215 #216 (mcanevet)

Upgrade Loki to 2.0.2 #224 (mcanevet)

Add efs-provisioner to eks-aws module #222 (raphink)

Fix cert-manager deployment #209 (mcanevet)

Rename prometheus port and add web port again #210 (raphink)

Disable Vault and secrets store CSI driver for now #212 (mcanevet)

Fix race condition when updating kubeconfig #225 (mcanevet)

Don’t run plan with detailed-exit-code #226 (mcanevet)

Add provision.sh and destroy.sh scripts #170 (mcanevet)

Remove dependency on Docker #174 (mcanevet)

Add support for libvirt #175 (mcanevet)

Add example for libvirt #176 (mcanevet)

Improve GitHub actions workflow #182 (mcanevet)

Add support for EKS #184 (mcanevet)

Move distro specific configuration to distro’s values.yaml #187 (mcanevet)

Allow to override app of apps parameters #190 (mcanevet)

Create tests and use it for CI instead of examples #199 (mcanevet)

Use k3s v1.18 #189 (mcanevet)

Don’t validate certificate when using helm provider #171 (mcanevet)

Fix .gitignore #172 (mcanevet)

Fix scripts #173 (mcanevet)

Don’t manage app of apps with itself #179 (mcanevet)

Fix Terraform workspace create #180 (mcanevet)

Correct deprecation warning during Antora build #185 (acampergue-camptocamp)

Fix Cognito zone #191 (mcanevet)

Configure helm provider to not load config file #194 (mcanevet)

Use prod letsencrypt issuer #197 (raphink)

Don’t use kubernetes-alpha provider #198 (mcanevet)

Allow to instantiate the DevOps Stack (mcanevet)

Allow to disable every application #123 (mcanevet)

Pin docker provider version #125 (mcanevet)

Fetch kubeconfig from regular path #127 (mcanevet)

Always use current working dir in docker containers #130 (mcanevet)

Use absolute path for ARTIFACTS_DIR #131 (mcanevet)

Add abstraction to support for multiple distributions #134 (mcanevet)

Factorize Docker common args in a variable #136 (mcanevet)

Make get-kubeconfig distribution specific #141 (mcanevet)

Make get-base-domain distribution specific #142 (mcanevet)

Use terraform.tfstate instead of terraform.tfstate.json #143 (mcanevet)

Remove dependency between get-kubeconfig.sh and get-base-domain.sh #145 (mcanevet)

Don’t use user’s terraform plugin-cache dir #126, #129, #146 and #147 (mcanevet)

Document how to write documentation in this project #122 and #132 (acampergue-camptocamp), closes issue #107.

Add a link to the Github repo #138 (acampergue-camptocamp)

Don’t build and deploy the documentation on PR to master, since useless and might cause issues #128 (acampergue-camptocamp), closes issue #124

Always use network mode host #133 (mcanevet)

Add randomly generated exemple #100 (JGodin-C2C)

Use a local registry as a pull through cache #102 (mcanevet)

Add cache for quay.io, gcr.io and us.gcr.io registries #103 (mcanevet)

Update test workflow conditions #112 (mcanevet)

Destroy Terraform workspace for Vault on clean #117 (mcanevet)

Upgrade Terraform to 0.13.4 #104 (mcanevet)

Upgrade prometheus-operator to 10.0.1 #113 (mcanevet)

Upgrade secrets-store-csi-driver to 0.0.16 #115 (mcanevet)

Wait for argocd-repo-server before deploying the app of apps #116 (mcanevet)

Remove all pods before cleanup to release volumes mounted with rshared propagation #119 (mcanevet)

Deploy Vault #74 (mcanevet)

Deploy secret store csi driver #92 (mcanevet)

Deploy demo-app #93 (mcanevet)

Upgrade K3s to v1.19.2 #54 (mcanevet)

Upgrade ArgoCD to 1.7.6 #71 (mcanevet)

Upgrade cert-manager to 1.0.2 #72 (mcanevet)

Support deploying multiple cluster in parallel #61 (mcanevet)

Use docker cp to get Kubernetes context #64 (mcanevet)

Don’t create 2 vhost per service #66 (mcanevet)

Use Ingress instead of IngressRoute #70 (mcanevet)

Allow to scale agents #73 (mcanevet)

Configure kubernetes auth backend for vault #76 (mcanevet)

Automate Vault configuration #81 (mcanevet)

Improve Vault configuration #83 (mcanevet)

Show list of pods instead of list of apps in wait loop #85 (mcanevet)

Use mounts instead of tmpfs and volumes #90 (mcanevet)

Mount /var/lib/kubelet with propagation #91 (mcanevet)

Inject secret in demo-app using vault-injector #98 (mcanevet)

Inject secret in demo-app using secrets store csi driver #99 (mcanevet)

Fix Issue with some versions of Make (sbrunner)

Don’t delete Docker image on cleanup #65 (mcanevet)

Ignore Ingress status #69 (mcanevet)

Improve remote branch detection #84 (mcanevet)

Convert to asciidoc, integrate with Antora #63 (acampergue-camptocamp)

Use local directory for project’s reference instead of github link #67 (acampergue-camptocamp)

Convert CHANGELOG from md to adoc #68 (acampergue-camptocamp)

Integrate changelog page in antora doc #77 (acampergue-camptocamp)

Change of structure to match https://documentation.divio.com/ recommendations #79 (acampergue-camptocamp)

Use camptocamp’s version of Antora-ui, add Metadata, Antora always build current branch #80 (acampergue-camptocamp)

Start documenting Vault https://documentation.divio.com/ recommendations #87 (mcanevet)

Document how to develop https://documentation.divio.com/ recommendations #88 (mcanevet)

Add debug target to Makefile #30 (mcanevet)

Fetch repo URL and cluster name from remote #35 (mcanevet)

Don’t set ResourceQuota on demo #36 (mcanevet)

Enable Prometheus metrics for Traefik #38 (mcanevet)

Deploy prometheus-operator and kube-prometheus-stack #40 (mcanevet)

Add monitoring for ArgoCD and cert-manager #44 (mcanevet)

[grafana] Search for dashboard and datasource in all namespaces #49 (mcanevet)

Deploy Loki #50 (mcanevet)

Deploy K3s using Terraform (mcanevet)

Deploy ArgoCD using helm template …​ | kubectl apply -f- (mcanevet)

Deploy cert-manager using ArgoCD (mcanevet)

Deploy Traefik using ArgoCD (mcanevet)

Create initial github actions pipeline to prevent regressions (mcanevet)