chore(deps): update helm release mailu to v2.6.0

Reviewed-on: #26

catalog-info.yaml

@@ -0,0 +1,26 @@
+---
+apiVersion: backstage.io/v1alpha1
+kind: Domain
+metadata:
+  name: dgse-cloud
+  description: "Infrastructure for DGSE Cloud services."
+spec:
+  owner: dgse-cloud
+---
+apiVersion: backstage.io/v1alpha1
+kind: Location
+metadata:
+  name: artemis-cluster
+  description: A collection of all entities running on the Artemis cluster
+spec:
+  targets:
+    - ./clusters/artemis/catalog.yaml
+    - ./clusters/artemis/apps/argocd/catalog.yaml
+    - ./clusters/artemis/apps/cnpg/catalog.yaml
+    - ./clusters/artemis/apps/digital-garden/catalog.yaml
+    - ./clusters/artemis/apps/external-secrets/catalog.yaml
+    - ./clusters/artemis/apps/gitea/catalog.yaml
+    - ./clusters/artemis/apps/gitea-runners/catalog.yaml
+    - ./clusters/artemis/apps/immich/catalog.yaml
+    - ./clusters/artemis/apps/mailu/catalog.yaml
+    - ./clusters/artemis/apps/nextcloud/catalog.yaml

clusters/artemis/apps/argocd/catalog.yaml

@@ -0,0 +1,18 @@
+---
+apiVersion: backstage.io/v1alpha1
+kind: Component
+metadata:
+  name: argocd
+  description: "ArgoCD is a declarative, GitOps continuous delivery tool for Kubernetes."
+  links:
+    - url: https://cd.dgse.cloud
+      title: Dashboard
+      icon: dashboard
+  annotations:
+    argocd/app-name: argocd
+    argocd/app-namespace: argocd
+spec:
+  type: service
+  lifecycle: production
+  owner: owners
+  system: artemis-cluster

clusters/artemis/apps/cnpg/catalog.yaml

@@ -0,0 +1,14 @@
+---
+apiVersion: backstage.io/v1alpha1
+kind: Component
+metadata:
+  name: cnpg
+  description: "CloudNativePG is a Kubernetes operator that manages PostgreSQL databases in a cloud-native way."
+  annotations:
+    argocd/app-name: cnpg
+    argocd/app-namespace: cnpg-system
+spec:
+  type: service
+  lifecycle: production
+  owner: owners
+  system: artemis-cluster

clusters/artemis/apps/digital-garden/catalog.yaml

@@ -0,0 +1,18 @@
+---
+apiVersion: backstage.io/v1alpha1
+kind: Component
+metadata:
+  name: digital-garden
+  description: "A collection of notes, essays, and other writing that is published on the web."
+  links:
+    - url: https://groothuis.io
+      title: Public Website
+      icon: web
+  annotations:
+    argocd/app-name: digital-garden
+    argocd/app-namespace: digital-garden
+spec:
+  type: website
+  lifecycle: production
+  owner: owners
+  system: artemis-cluster

clusters/artemis/apps/external-secrets/catalog.yaml

@@ -0,0 +1,14 @@
+---
+apiVersion: backstage.io/v1alpha1
+kind: Component
+metadata:
+  name: external-secrets
+  description: "Vault Secrets Operator to sync secrets from Vault to Kubernetes"
+  annotations:
+    argocd/app-name: external-secrets
+    argocd/app-namespace: external-secrets
+spec:
+  type: service
+  lifecycle: production
+  owner: owners
+  system: artemis-cluster

clusters/artemis/apps/gitea-runners/catalog.yaml

@@ -0,0 +1,16 @@
+---
+apiVersion: backstage.io/v1alpha1
+kind: Component
+metadata:
+  name: gitea-runners
+  description: "Gitea Action Runners"
+  annotations:
+    argocd/app-name: gitea-runners
+    argocd/app-namespace: gitea-runners
+spec:
+  type: service
+  lifecycle: production
+  owner: owners
+  system: artemis-cluster
+  dependencyOf:
+    - component:gitea

clusters/artemis/apps/gitea/catalog.yaml

@@ -0,0 +1,20 @@
+---
+apiVersion: backstage.io/v1alpha1
+kind: Component
+metadata:
+  name: gitea
+  description: "Self-hosted Git Server"
+  links:
+    - url: https://git.dgse.cloud
+      title: Git Server
+      icon: web
+  annotations:
+    argocd/app-name: gitea
+    argocd/app-namespace: gitea
+spec:
+  type: service
+  lifecycle: production
+  owner: owners
+  system: artemis-cluster
+  dependsOn:
+    - Component:gitea-runners

clusters/artemis/apps/immich/catalog.yaml

@@ -0,0 +1,18 @@
+---
+apiVersion: backstage.io/v1alpha1
+kind: Component
+metadata:
+  name: immich
+  description: "Self-hosted photo and video backup solution directly from your mobile phone."
+  links:
+    - url: https://photos.dgse.cloud
+      title: Git Server
+      icon: web
+  annotations:
+    argocd/app-name: immich
+    argocd/app-namespace: immich
+spec:
+  type: service
+  lifecycle: production
+  owner: owners
+  system: artemis-cluster

clusters/artemis/apps/kener/app-project.yaml

@@ -1,17 +0,0 @@
----
-apiVersion: argoproj.io/v1alpha1
-kind: AppProject
-metadata:
-  name: kener
-spec:
-  description: Monitoring tool
-  sourceRepos:
-    - '*'
-  sourceNamespaces:
-    - '*'
-  destinations:
-    - namespace: 'kener'
-      server: '*'
-  clusterResourceWhitelist:
-    - group: '*'
-      kind: '*'

clusters/artemis/apps/kener/application.yaml

@@ -1,24 +0,0 @@
-apiVersion: argoproj.io/v1alpha1
-kind: Application
-metadata:
-  name: kener
-  namespace: kener
-  labels:
-    platform.dgse.cloud/cluster: artemis
-  finalizers:
-    - resources-finalizer.argocd.argoproj.io
-spec:
-  project: kener
-  source:
-    repoURL: 'https://git.dgse.cloud/DGSE/kubernetes.git'
-    path: manifests/artemis/kener
-    targetRevision: main
-  destination:
-    namespace: kener
-    name: in-cluster
-  syncPolicy:
-    syncOptions:
-      - CreateNamespace=true
-    automated:
-      prune: true
-      selfHeal: true

clusters/artemis/apps/kener/kustomization.yaml

@@ -1,7 +0,0 @@
----
-apiVersion: kustomize.config.k8s.io/v1beta1
-kind: Kustomization
-
-resources:
-  - app-project.yaml
-  - application.yaml

clusters/artemis/apps/mailu/catalog.yaml

@@ -0,0 +1,18 @@
+---
+apiVersion: backstage.io/v1alpha1
+kind: Component
+metadata:
+  name: mailu
+  description: "Self-hosted mail server"
+  links:
+    - url: https://mail.dgse.cloud
+      title: Mail Server
+      icon: web
+  annotations:
+    argocd/app-name: mailu
+    argocd/app-namespace: mailu
+spec:
+  type: service
+  lifecycle: production
+  owner: owners
+  system: artemis-cluster

clusters/artemis/apps/nextcloud/catalog.yaml

@@ -0,0 +1,19 @@
+---
+apiVersion: backstage.io/v1alpha1
+kind: Component
+metadata:
+  name: nextcloud
+  description: "Self-hosted photo and video backup solution directly from your mobile phone."
+  links:
+    - url: https://nextcloud.dgse.cloud
+      title: Git Server
+      icon: web
+  annotations:
+    argocd/app-name: nextcloud
+    argocd/app-namespace: nextcloud
+    backstage.io/techdocs-ref: value
+spec:
+  type: service
+  lifecycle: production
+  owner: owners
+  system: artemis-cluster

clusters/artemis/catalog.yaml

@@ -0,0 +1,9 @@
+---
+apiVersion: backstage.io/v1alpha1
+kind: System
+metadata:
+  name: artemis-cluster
+  description: "The Artemis cluster is a Kubernetes cluster hosting all infra for DGSE Cloud."
+spec:
+  owner: owners
+  domain: dgse-cloud

manifests/artemis/argocd/backstage-rbac.yaml

@@ -0,0 +1,13 @@
+---
+apiVersion: rbac.authorization.k8s.io/v1
+kind: ClusterRoleBinding
+metadata:
+  name: backstage-argocd-server-access
+subjects:
+  - kind: ServiceAccount
+    name: backstage-argocd
+    namespace: argocd
+roleRef:
+  apiGroup: rbac.authorization.k8s.io
+  kind: ClusterRole
+  name: argocd-server

manifests/artemis/argocd/backstage-sa.yaml

@@ -0,0 +1,6 @@
+---
+apiVersion: v1
+kind: ServiceAccount
+metadata:
+  name: backstage-argocd
+  namespace: argocd

manifests/artemis/argocd/kustomization.yaml

@@ -5,9 +5,11 @@ metadata:
   name: argocd
 
 resources:
-  - github.com/argoproj/argo-cd/manifests/cluster-install?ref=v3.1.9
+  - github.com/argoproj/argo-cd/manifests/cluster-install?ref=v3.2.0
   - ingressRoute.yaml
   - certificate.yaml
+  - backstage-sa.yaml
+  - backstage-rbac.yaml
 
 patches:
   - target:
@@ -45,7 +47,8 @@ patches:
       metadata:
         name: argocd-cm
       data:
-        admin.enabled: "false"
+        accounts.admin: "apiKey, login"
+        admin.enabled: "true"
         kustomize.buildOptions: --enable-helm
         url: https://cd.dgse.cloud
         oidc.config: |
@@ -118,3 +121,23 @@ patches:
         apiGroup: rbac.authorization.k8s.io
         kind: ClusterRole
         name: argocd-server
+
+  # Map Backstage SA to Argo CD role:admin (full Argo CD permissions)
+  - target:
+      kind: ConfigMap
+      name: argocd-rbac-cm
+    patch: |-
+      apiVersion: v1
+      kind: ConfigMap
+      metadata:
+        name: argocd-rbac-cm
+        namespace: argocd
+      data:
+        policy.csv: |
+          g, argocd_admins, role:admin
+          p, argocd_users, applications, list, *, allow
+          p, argocd_users, applications, sync, *, allow
+          p, argocd_users, applications, refresh, *, allow
+          p, argocd_users, applications, get, *, allow
+          g, system:serviceaccount:argocd:backstage-argocd, role:admin
+          p, system:serviceaccount:argocd:backstage-argocd, applications, *, */*, allow

manifests/artemis/mailu/kustomization.yaml

@@ -10,7 +10,7 @@ resources:
 helmCharts:
   - name: mailu
     repo: https://mailu.github.io/helm-charts/
-    version: 2.1.2
+    version: 2.6.0
     releaseName: mailu
     namespace: mailu
     valuesFile: values.yaml