feat: 🎸 add argocd dns

roles/argocd/tasks/main.yml

@@ -14,8 +14,32 @@
     /snap/bin/helm upgrade --install argocd argo/argo-cd
     --namespace argocd
     --create-namespace
-    --set server.service.type=NodePort
+    --set configs.params."server\.insecure"=true
     --wait
   become: false
   register: argocd_install
   changed_when: "'Release \"argocd\" does not exist' in argocd_install.stdout or 'Happy Helming' in argocd_install.stdout"
+
+- name: Create HTTPRoute for ArgoCD
+  kubernetes.core.k8s:
+    definition:
+      apiVersion: gateway.networking.k8s.io/v1
+      kind: HTTPRoute
+      metadata:
+        name: argocd-route
+        namespace: argocd
+      spec:
+        parentRefs:
+        - name: main-gateway
+          namespace: traefik
+          sectionName: argocd-https
+        hostnames:
+        - "argocd.svc.pguia.com"
+        rules:
+        - matches:
+          - path:
+              type: PathPrefix
+              value: /
+          backendRefs:
+          - name: argocd-server
+            port: 80

roles/cert_manager/tasks/main.yml

@@ -64,3 +64,19 @@
           kind: ClusterIssuer
         dnsNames:
         - git.svc.pguia.com
+
+- name: Create Certificate for ArgoCD
+  kubernetes.core.k8s:
+    definition:
+      apiVersion: cert-manager.io/v1
+      kind: Certificate
+      metadata:
+        name: argocd-svc-pguia-com-tls
+        namespace: traefik
+      spec:
+        secretName: argocd-svc-pguia-com-tls
+        issuerRef:
+          name: letsencrypt-prod
+          kind: ClusterIssuer
+        dnsNames:
+        - argocd.svc.pguia.com

roles/traefik_gateway/tasks/main.yml

@@ -100,3 +100,14 @@
           allowedRoutes:
             namespaces:
               from: All
+        - name: argocd-https
+          port: 443
+          protocol: HTTPS
+          hostname: argocd.svc.pguia.com
+          tls:
+            mode: Terminate
+            certificateRefs:
+            - name: argocd-svc-pguia-com-tls
+          allowedRoutes:
+            namespaces:
+              from: All