Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

Sign up for GitHub

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Jump to bottom

refactor: use a single app for linkerd control plane + crds #34

Merged
merged 2 commits into from
Jul 5, 2024
Merged

refactor: use a single app for linkerd control plane + crds #34

merged 2 commits into from
Jul 5, 2024

Conversation

d3adb5
Copy link
Owner

@d3adb5 d3adb5 commented Jul 5, 2024

  • refactor: move everything out of subdirectory
  • refactor: move linkerd extra resources to own dir

d3adb5 added 2 commits July 2, 2024 23:46
@d3adb5
refactor: move everything out of subdirectory
9988c9a 
Move all applications out of the applications subdirectory now that this
repository no longer contains extra Helm charts.
@d3adb5
refactor: move linkerd extra resources to own dir
94ac09d 
Move extra Linkerd related resources (such as the trust anchor) to their
own directory at the root of this repository. Similarly values are now
obtained from a file within that directory instead of being passed
directly to the chart in the Application.
@d3adb5 d3adb5 added the enhancement New feature or request label Jul 5, 2024
@d3adb5 d3adb5 self-assigned this Jul 5, 2024
@github-actions GitHub Actions
Copy link

github-actions bot commented Jul 5, 2024 

===== /Namespace /linkerd ======
1,32d0
< apiVersion: v1
< kind: Namespace
< metadata:
<   annotations:
<     kubectl.kubernetes.io/last-applied-configuration: |
<       {"apiVersion":"v1","kind":"Namespace","metadata":{"annotations":{},"labels":{"argocd.argoproj.io/instance":"app-of-apps"},"name":"linkerd"}}
<   labels:
<     argocd.argoproj.io/instance: app-of-apps
<     kubernetes.io/metadata.name: linkerd
<   managedFields:
<   - apiVersion: v1
<     fieldsType: FieldsV1
<     fieldsV1:
<       f:metadata:
<         f:annotations:
<           .: {}
<           f:kubectl.kubernetes.io/last-applied-configuration: {}
<         f:labels:
<           .: {}
<           f:argocd.argoproj.io/instance: {}
<           f:kubernetes.io/metadata.name: {}
<     manager: argocd-controller
<     operation: Update
<     time: "2024-04-03T02:29:37Z"
<   name: linkerd
<   resourceVersion: "6937044"
<   uid: d9872d7c-2bf3-411b-83cb-452df0c4a74a
< spec:
<   finalizers:
<   - kubernetes
< status:
<   phase: Active

===== argoproj.io/AppProject argo-cd/linkerd-control-plane ======
1,56d0
< apiVersion: argoproj.io/v1alpha1
< kind: AppProject
< metadata:
<   annotations:
<     kubectl.kubernetes.io/last-applied-configuration: |
<       {"apiVersion":"argoproj.io/v1alpha1","kind":"AppProject","metadata":{"annotations":{},"finalizers":["resources-finalizer.argocd.argoproj.io"],"labels":{"argocd.argoproj.io/instance":"app-of-apps"},"name":"linkerd-control-plane","namespace":"argo-cd"},"spec":{"clusterResourceWhitelist":[{"group":"","kind":"Namespace"},{"group":"rbac.authorization.k8s.io","kind":"ClusterRole"},{"group":"rbac.authorization.k8s.io","kind":"ClusterRoleBinding"},{"group":"admissionregistration.k8s.io","kind":"ValidatingWebhookConfiguration"},{"group":"admissionregistration.k8s.io","kind":"MutatingWebhookConfiguration"}],"description":"The Linkerd control plane","destinations":[{"namespace":"linkerd","server":"https://kubernetes.default.svc"}],"sourceRepos":["https://helm.linkerd.io/stable"]}}
<   finalizers:
<   - resources-finalizer.argocd.argoproj.io
<   generation: 2
<   labels:
<     argocd.argoproj.io/instance: app-of-apps
<   managedFields:
<   - apiVersion: argoproj.io/v1alpha1
<     fieldsType: FieldsV1
<     fieldsV1:
<       f:metadata:
<         f:annotations:
<           .: {}
<           f:kubectl.kubernetes.io/last-applied-configuration: {}
<         f:finalizers:
<           .: {}
<           v:"resources-finalizer.argocd.argoproj.io": {}
<         f:labels:
<           .: {}
<           f:argocd.argoproj.io/instance: {}
<       f:spec:
<         .: {}
<         f:clusterResourceWhitelist: {}
<         f:description: {}
<         f:destinations: {}
<         f:sourceRepos: {}
<     manager: argocd-controller
<     operation: Update
<     time: "2024-04-03T02:45:00Z"
<   name: linkerd-control-plane
<   namespace: argo-cd
<   resourceVersion: "6942269"
<   uid: 4f956c7c-beeb-4caa-8f3b-fa19e573ca11
< spec:
<   clusterResourceWhitelist:
<   - group: ""
<     kind: Namespace
<   - group: rbac.authorization.k8s.io
<     kind: ClusterRole
<   - group: rbac.authorization.k8s.io
<     kind: ClusterRoleBinding
<   - group: admissionregistration.k8s.io
<     kind: ValidatingWebhookConfiguration
<   - group: admissionregistration.k8s.io
<     kind: MutatingWebhookConfiguration
<   description: The Linkerd control plane
<   destinations:
<   - namespace: linkerd
<     server: https://kubernetes.default.svc
<   sourceRepos:
<   - https://helm.linkerd.io/stable

===== argoproj.io/AppProject argo-cd/linkerd-crds ======
1,48d0
< apiVersion: argoproj.io/v1alpha1
< kind: AppProject
< metadata:
<   annotations:
<     kubectl.kubernetes.io/last-applied-configuration: |
<       {"apiVersion":"argoproj.io/v1alpha1","kind":"AppProject","metadata":{"annotations":{},"finalizers":["resources-finalizer.argocd.argoproj.io"],"labels":{"argocd.argoproj.io/instance":"app-of-apps"},"name":"linkerd-crds","namespace":"argo-cd"},"spec":{"clusterResourceWhitelist":[{"group":"apiextensions.k8s.io","kind":"CustomResourceDefinition"}],"description":"The Linkerd CRDs","destinations":[{"namespace":"linkerd","server":"https://kubernetes.default.svc"}],"sourceRepos":["https://helm.linkerd.io/stable"]}}
<   finalizers:
<   - resources-finalizer.argocd.argoproj.io
<   generation: 1
<   labels:
<     argocd.argoproj.io/instance: app-of-apps
<   managedFields:
<   - apiVersion: argoproj.io/v1alpha1
<     fieldsType: FieldsV1
<     fieldsV1:
<       f:metadata:
<         f:annotations:
<           .: {}
<           f:kubectl.kubernetes.io/last-applied-configuration: {}
<         f:finalizers:
<           .: {}
<           v:"resources-finalizer.argocd.argoproj.io": {}
<         f:labels:
<           .: {}
<           f:argocd.argoproj.io/instance: {}
<       f:spec:
<         .: {}
<         f:clusterResourceWhitelist: {}
<         f:description: {}
<         f:destinations: {}
<         f:sourceRepos: {}
<     manager: argocd-controller
<     operation: Update
<     time: "2024-04-03T02:42:08Z"
<   name: linkerd-crds
<   namespace: argo-cd
<   resourceVersion: "6941194"
<   uid: 9e8d0a4b-9a21-4ea2-8291-7d7022750db2
< spec:
<   clusterResourceWhitelist:
<   - group: apiextensions.k8s.io
<     kind: CustomResourceDefinition
<   description: The Linkerd CRDs
<   destinations:
<   - namespace: linkerd
<     server: https://kubernetes.default.svc
<   sourceRepos:
<   - https://helm.linkerd.io/stable

===== argoproj.io/Application argo-cd/app-of-apps ======
137c137
<     path: applications/app-of-apps
---
>     path: app-of-apps

===== argoproj.io/Application argo-cd/keycloak ======
121c121
<     path: applications/keycloak
---
>     path: keycloak

===== argoproj.io/Application argo-cd/linkerd-control-plane ======
1,653d0
< apiVersion: argoproj.io/v1alpha1
< kind: Application
< metadata:
<   annotations:
<     kubectl.kubernetes.io/last-applied-configuration: |
<       {"apiVersion":"argoproj.io/v1alpha1","kind":"Application","metadata":{"annotations":{},"finalizers":["resources-finalizer.argocd.argoproj.io"],"labels":{"argocd.argoproj.io/instance":"app-of-apps"},"name":"linkerd-control-plane","namespace":"argo-cd"},"spec":{"destination":{"namespace":"linkerd","server":"https://kubernetes.default.svc"},"ignoreDifferences":[{"group":"","jsonPointers":["/data/tls.crt","/data/tls.key"],"kind":"Secret","name":"linkerd-proxy-injector-k8s-tls"},{"group":"","jsonPointers":["/data/tls.crt","/data/tls.key"],"kind":"Secret","name":"linkerd-sp-validator-k8s-tls"},{"group":"","jsonPointers":["/data/tls.crt","/data/tls.key"],"kind":"Secret","name":"linkerd-policy-validator-k8s-tls"},{"group":"admissionregistration.k8s.io/v1","jsonPointers":["/webhooks/0/clientConfig/caBundle"],"kind":"MutatingWebhookConfiguration","name":"linkerd-proxy-injector-webhook-config"},{"group":"admissionregistration.k8s.io/v1","jsonPointers":["/webhooks/0/clientConfig/caBundle"],"kind":"ValidatingWebhookConfiguration","name":"linkerd-sp-validator-webhook-config"},{"group":"admissionregistration.k8s.io/v1","jsonPointers":["/webhooks/0/clientConfig/caBundle"],"kind":"ValidatingWebhookConfiguration","name":"linkerd-policy-validator-webhook-config"}],"project":"linkerd-control-plane","source":{"chart":"linkerd-control-plane","helm":{"valuesObject":{"identity":{"issuer":{"scheme":"kubernetes.io/tls"}},"identityTrustAnchorsPEM":"-----BEGIN CERTIFICATE-----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\nxmzLng6l/Y18scw8DdDS8iQ=\n-----END CERTIFICATE-----\n"}},"repoURL":"https://helm.linkerd.io/stable","targetRevision":"1.16.11"},"syncPolicy":{"automated":{"prune":true,"selfHeal":true},"syncOptions":["CreateNamespace=true"]}}}
<   finalizers:
<   - resources-finalizer.argocd.argoproj.io
<   generation: 6708
<   labels:
<     argocd.argoproj.io/instance: app-of-apps
<   managedFields:
<   - apiVersion: argoproj.io/v1alpha1
<     fieldsType: FieldsV1
<     fieldsV1:
<       f:metadata:
<         f:annotations:
<           .: {}
<           f:kubectl.kubernetes.io/last-applied-configuration: {}
<         f:finalizers:
<           .: {}
<           v:"resources-finalizer.argocd.argoproj.io": {}
<         f:labels:
<           .: {}
<           f:argocd.argoproj.io/instance: {}
<       f:spec:
<         .: {}
<         f:destination:
<           .: {}
<           f:namespace: {}
<           f:server: {}
<         f:ignoreDifferences: {}
<         f:project: {}
<         f:source:
<           .: {}
<           f:chart: {}
<           f:helm:
<             .: {}
<             f:valuesObject:
<               .: {}
<               f:identity:
<                 .: {}
<                 f:issuer:
<                   .: {}
<                   f:scheme: {}
<               f:identityTrustAnchorsPEM: {}
<           f:repoURL: {}
<           f:targetRevision: {}
<         f:syncPolicy:
<           .: {}
<           f:automated:
<             .: {}
<             f:prune: {}
<             f:selfHeal: {}
<           f:syncOptions: {}
<     manager: argocd-controller
<     operation: Update
<     time: "2024-07-04T10:13:44Z"
<   - apiVersion: argoproj.io/v1alpha1
<     fieldsType: FieldsV1
<     fieldsV1:
<       f:status:
<         .: {}
<         f:controllerNamespace: {}
<         f:health:
<           .: {}
<           f:status: {}
<         f:history: {}
<         f:operationState:
<           .: {}
<           f:finishedAt: {}
<           f:message: {}
<           f:operation:
<             .: {}
<             f:initiatedBy:
<               .: {}
<               f:automated: {}
<             f:retry:
<               .: {}
<               f:limit: {}
<             f:sync:
<               .: {}
<               f:prune: {}
<               f:resources: {}
<               f:revision: {}
<               f:syncOptions: {}
<           f:phase: {}
<           f:startedAt: {}
<           f:syncResult:
<             .: {}
<             f:resources: {}
<             f:revision: {}
<             f:source:
<               .: {}
<               f:chart: {}
<               f:helm:
<                 .: {}
<                 f:valuesObject:
<                   .: {}
<                   f:identity:
<                     .: {}
<                     f:issuer:
<                       .: {}
<                       f:scheme: {}
<                   f:identityTrustAnchorsPEM: {}
<               f:repoURL: {}
<               f:targetRevision: {}
<         f:reconciledAt: {}
<         f:resources: {}
<         f:sourceType: {}
<         f:summary:
<           .: {}
<           f:images: {}
<         f:sync:
<           .: {}
<           f:comparedTo:
<             .: {}
<             f:destination:
<               .: {}
<               f:namespace: {}
<               f:server: {}
<             f:ignoreDifferences: {}
<             f:source:
<               .: {}
<               f:chart: {}
<               f:helm:
<                 .: {}
<                 f:valuesObject:
<                   .: {}
<                   f:identity:
<                     .: {}
<                     f:issuer:
<                       .: {}
<                       f:scheme: {}
<                   f:identityTrustAnchorsPEM: {}
<               f:repoURL: {}
<               f:targetRevision: {}
<           f:revision: {}
<           f:status: {}
<     manager: argocd-application-controller
<     operation: Update
<     time: "2024-07-05T05:48:17Z"
<   name: linkerd-control-plane
<   namespace: argo-cd
<   resourceVersion: "52323201"
<   uid: 5488a758-3755-4b3d-8a94-a48bbbe6680d
< spec:
<   destination:
<     namespace: linkerd
<     server: https://kubernetes.default.svc
<   ignoreDifferences:
<   - group: ""
<     jsonPointers:
<     - /data/tls.crt
<     - /data/tls.key
<     kind: Secret
<     name: linkerd-proxy-injector-k8s-tls
<   - group: ""
<     jsonPointers:
<     - /data/tls.crt
<     - /data/tls.key
<     kind: Secret
<     name: linkerd-sp-validator-k8s-tls
<   - group: ""
<     jsonPointers:
<     - /data/tls.crt
<     - /data/tls.key
<     kind: Secret
<     name: linkerd-policy-validator-k8s-tls
<   - group: admissionregistration.k8s.io/v1
<     jsonPointers:
<     - /webhooks/0/clientConfig/caBundle
<     kind: MutatingWebhookConfiguration
<     name: linkerd-proxy-injector-webhook-config
<   - group: admissionregistration.k8s.io/v1
<     jsonPointers:
<     - /webhooks/0/clientConfig/caBundle
<     kind: ValidatingWebhookConfiguration
<     name: linkerd-sp-validator-webhook-config
<   - group: admissionregistration.k8s.io/v1
<     jsonPointers:
<     - /webhooks/0/clientConfig/caBundle
<     kind: ValidatingWebhookConfiguration
<     name: linkerd-policy-validator-webhook-config
<   project: linkerd-control-plane
<   source:
<     chart: linkerd-control-plane
<     helm:
<       valuesObject:
<         identity:
<           issuer:
<             scheme: kubernetes.io/tls
<         identityTrustAnchorsPEM: |
<           -----BEGIN CERTIFICATE-----
<           MIIBjTCCATOgAwIBAgIQIvht8hmkwHraoV7BtVvwgjAKBggqhkjOPQQDAjAlMSMw
<           IQYDVQQDExpyb290LmxpbmtlcmQuY2x1c3Rlci5sb2NhbDAeFw0yNDA0MDMwMTIw
<           NTJaFw0yOTA0MDIwMTIwNTJaMCUxIzAhBgNVBAMTGnJvb3QubGlua2VyZC5jbHVz
<           dGVyLmxvY2FsMFkwEwYHKoZIzj0CAQYIKoZIzj0DAQcDQgAE4EeQn8MUtU3UBWeW
<           dg3YaBncGPGAzO/hDh2zZ/uHkH47O8Q3V7lhwPUYDBG5WDe0DIad6Mz/4VgArI1L
<           0SI7BqNFMEMwDgYDVR0PAQH/BAQDAgEGMBIGA1UdEwEB/wQIMAYBAf8CAQEwHQYD
<           VR0OBBYEFKrK/huKsXPuF5Eoqo8Zy97yI9+WMAoGCCqGSM49BAMCA0gAMEUCIBCj
<           JBT2hrqrkmgO1bXlTE6cnyvJw+/v/bcGuOSO90EyAiEA6QKMzMi5S1nybawDYTuC
<           xmzLng6l/Y18scw8DdDS8iQ=
<           -----END CERTIFICATE-----
<     repoURL: https://helm.linkerd.io/stable
<     targetRevision: 1.16.11
<   syncPolicy:
<     automated:
<       prune: true
<       selfHeal: true
<     syncOptions:
<     - CreateNamespace=true
< status:
<   controllerNamespace: argo-cd
<   health:
<     status: Healthy
<   history:
<   - deployStartedAt: "2024-06-21T01:44:55Z"
<     deployedAt: "2024-06-21T01:44:58Z"
<     id: 0
<     initiatedBy:
<       automated: true
<     revision: 1.16.11
<     source:
<       chart: linkerd-control-plane
<       helm:
<         valuesObject:
<           identity:
<             issuer:
<               scheme: kubernetes.io/tls
<           identityTrustAnchorsPEM: |
<             -----BEGIN CERTIFICATE-----
<             MIIBjTCCATOgAwIBAgIQIvht8hmkwHraoV7BtVvwgjAKBggqhkjOPQQDAjAlMSMw
<             IQYDVQQDExpyb290LmxpbmtlcmQuY2x1c3Rlci5sb2NhbDAeFw0yNDA0MDMwMTIw
<             NTJaFw0yOTA0MDIwMTIwNTJaMCUxIzAhBgNVBAMTGnJvb3QubGlua2VyZC5jbHVz
<             dGVyLmxvY2FsMFkwEwYHKoZIzj0CAQYIKoZIzj0DAQcDQgAE4EeQn8MUtU3UBWeW
<             dg3YaBncGPGAzO/hDh2zZ/uHkH47O8Q3V7lhwPUYDBG5WDe0DIad6Mz/4VgArI1L
<             0SI7BqNFMEMwDgYDVR0PAQH/BAQDAgEGMBIGA1UdEwEB/wQIMAYBAf8CAQEwHQYD
<             VR0OBBYEFKrK/huKsXPuF5Eoqo8Zy97yI9+WMAoGCCqGSM49BAMCA0gAMEUCIBCj
<             JBT2hrqrkmgO1bXlTE6cnyvJw+/v/bcGuOSO90EyAiEA6QKMzMi5S1nybawDYTuC
<             xmzLng6l/Y18scw8DdDS8iQ=
<             -----END CERTIFICATE-----
<       repoURL: https://helm.linkerd.io/stable
<       targetRevision: 1.16.11
<   operationState:
<     finishedAt: "2024-07-04T10:13:44Z"
<     message: successfully synced (all tasks run)
<     operation:
<       initiatedBy:
<         automated: true
<       retry:
<         limit: 5
<       sync:
<         prune: true
<         resources:
<         - group: apps
<           kind: Deployment
<           name: linkerd-destination
<         - group: admissionregistration.k8s.io
<           kind: ValidatingWebhookConfiguration
<           name: linkerd-sp-validator-webhook-config
<         - group: admissionregistration.k8s.io
<           kind: ValidatingWebhookConfiguration
<           name: linkerd-policy-validator-webhook-config
<         - group: admissionregistration.k8s.io
<           kind: MutatingWebhookConfiguration
<           name: linkerd-proxy-injector-webhook-config
<         - group: batch
<           kind: CronJob
<           name: linkerd-heartbeat
<         - group: apps
<           kind: Deployment
<           name: linkerd-proxy-injector
<         revision: 1.16.11
<         syncOptions:
<         - CreateNamespace=true
<     phase: Succeeded
<     startedAt: "2024-07-04T10:13:41Z"
<     syncResult:
<       resources:
<       - group: apps
<         hookPhase: Running
<         kind: Deployment
<         message: deployment.apps/linkerd-proxy-injector configured
<         name: linkerd-proxy-injector
<         namespace: linkerd
<         status: Synced
<         syncPhase: Sync
<         version: v1
<       - group: apps
<         hookPhase: Running
<         kind: Deployment
<         message: deployment.apps/linkerd-destination configured
<         name: linkerd-destination
<         namespace: linkerd
<         status: Synced
<         syncPhase: Sync
<         version: v1
<       - group: batch
<         hookPhase: Running
<         kind: CronJob
<         message: cronjob.batch/linkerd-heartbeat configured
<         name: linkerd-heartbeat
<         namespace: linkerd
<         status: Synced
<         syncPhase: Sync
<         version: v1
<       - group: admissionregistration.k8s.io
<         hookPhase: Running
<         kind: ValidatingWebhookConfiguration
<         message: validatingwebhookconfiguration.admissionregistration.k8s.io/linkerd-policy-validator-webhook-config
<           configured
<         name: linkerd-policy-validator-webhook-config
<         namespace: linkerd
<         status: Synced
<         syncPhase: Sync
<         version: v1
<       - group: admissionregistration.k8s.io
<         hookPhase: Running
<         kind: MutatingWebhookConfiguration
<         message: mutatingwebhookconfiguration.admissionregistration.k8s.io/linkerd-proxy-injector-webhook-config
<           configured
<         name: linkerd-proxy-injector-webhook-config
<         namespace: linkerd
<         status: Synced
<         syncPhase: Sync
<         version: v1
<       - group: admissionregistration.k8s.io
<         hookPhase: Running
<         kind: ValidatingWebhookConfiguration
<         message: validatingwebhookconfiguration.admissionregistration.k8s.io/linkerd-sp-validator-webhook-config
<           configured
<         name: linkerd-sp-validator-webhook-config
<         namespace: linkerd
<         status: Synced
<         syncPhase: Sync
<         version: v1
<       revision: 1.16.11
<       source:
<         chart: linkerd-control-plane
<         helm:
<           valuesObject:
<             identity:
<               issuer:
<                 scheme: kubernetes.io/tls
<             identityTrustAnchorsPEM: |
<               -----BEGIN CERTIFICATE-----
<               MIIBjTCCATOgAwIBAgIQIvht8hmkwHraoV7BtVvwgjAKBggqhkjOPQQDAjAlMSMw
<               IQYDVQQDExpyb290LmxpbmtlcmQuY2x1c3Rlci5sb2NhbDAeFw0yNDA0MDMwMTIw
<               NTJaFw0yOTA0MDIwMTIwNTJaMCUxIzAhBgNVBAMTGnJvb3QubGlua2VyZC5jbHVz
<               dGVyLmxvY2FsMFkwEwYHKoZIzj0CAQYIKoZIzj0DAQcDQgAE4EeQn8MUtU3UBWeW
<               dg3YaBncGPGAzO/hDh2zZ/uHkH47O8Q3V7lhwPUYDBG5WDe0DIad6Mz/4VgArI1L
<               0SI7BqNFMEMwDgYDVR0PAQH/BAQDAgEGMBIGA1UdEwEB/wQIMAYBAf8CAQEwHQYD
<               VR0OBBYEFKrK/huKsXPuF5Eoqo8Zy97yI9+WMAoGCCqGSM49BAMCA0gAMEUCIBCj
<               JBT2hrqrkmgO1bXlTE6cnyvJw+/v/bcGuOSO90EyAiEA6QKMzMi5S1nybawDYTuC
<               xmzLng6l/Y18scw8DdDS8iQ=
<               -----END CERTIFICATE-----
<         repoURL: https://helm.linkerd.io/stable
<         targetRevision: 1.16.11
<   reconciledAt: "2024-07-05T05:48:15Z"
<   resources:
<   - kind: ConfigMap
<     name: linkerd-config
<     namespace: linkerd
<     status: Synced
<     version: v1
<   - kind: ConfigMap
<     name: linkerd-identity-trust-roots
<     namespace: linkerd
<     status: Synced
<     version: v1
<   - kind: Secret
<     name: linkerd-policy-validator-k8s-tls
<     namespace: linkerd
<     status: Synced
<     version: v1
<   - kind: Secret
<     name: linkerd-proxy-injector-k8s-tls
<     namespace: linkerd
<     status: Synced
<     version: v1
<   - kind: Secret
<     name: linkerd-sp-validator-k8s-tls
<     namespace: linkerd
<     status: Synced
<     version: v1
<   - health:
<       status: Healthy
<     kind: Service
<     name: linkerd-dst
<     namespace: linkerd
<     status: Synced
<     version: v1
<   - health:
<       status: Healthy
<     kind: Service
<     name: linkerd-dst-headless
<     namespace: linkerd
<     status: Synced
<     version: v1
<   - health:
<       status: Healthy
<     kind: Service
<     name: linkerd-identity
<     namespace: linkerd
<     status: Synced
<     version: v1
<   - health:
<       status: Healthy
<     kind: Service
<     name: linkerd-identity-headless
<     namespace: linkerd
<     status: Synced
<     version: v1
<   - health:
<       status: Healthy
<     kind: Service
<     name: linkerd-policy
<     namespace: linkerd
<     status: Synced
<     version: v1
<   - health:
<       status: Healthy
<     kind: Service
<     name: linkerd-policy-validator
<     namespace: linkerd
<     status: Synced
<     version: v1
<   - health:
<       status: Healthy
<     kind: Service
<     name: linkerd-proxy-injector
<     namespace: linkerd
<     status: Synced
<     version: v1
<   - health:
<       status: Healthy
<     kind: Service
<     name: linkerd-sp-validator
<     namespace: linkerd
<     status: Synced
<     version: v1
<   - kind: ServiceAccount
<     name: linkerd-destination
<     namespace: linkerd
<     status: Synced
<     version: v1
<   - kind: ServiceAccount
<     name: linkerd-heartbeat
<     namespace: linkerd
<     status: Synced
<     version: v1
<   - kind: ServiceAccount
<     name: linkerd-identity
<     namespace: linkerd
<     status: Synced
<     version: v1
<   - kind: ServiceAccount
<     name: linkerd-proxy-injector
<     namespace: linkerd
<     status: Synced
<     version: v1
<   - group: admissionregistration.k8s.io
<     kind: MutatingWebhookConfiguration
<     name: linkerd-proxy-injector-webhook-config
<     status: Synced
<     version: v1
<   - group: admissionregistration.k8s.io
<     kind: ValidatingWebhookConfiguration
<     name: linkerd-policy-validator-webhook-config
<     status: Synced
<     version: v1
<   - group: admissionregistration.k8s.io
<     kind: ValidatingWebhookConfiguration
<     name: linkerd-sp-validator-webhook-config
<     status: Synced
<     version: v1
<   - group: apps
<     health:
<       status: Healthy
<     kind: Deployment
<     name: linkerd-destination
<     namespace: linkerd
<     status: Synced
<     version: v1
<   - group: apps
<     health:
<       status: Healthy
<     kind: Deployment
<     name: linkerd-identity
<     namespace: linkerd
<     status: Synced
<     version: v1
<   - group: apps
<     health:
<       status: Healthy
<     kind: Deployment
<     name: linkerd-proxy-injector
<     namespace: linkerd
<     status: Synced
<     version: v1
<   - group: batch
<     kind: CronJob
<     name: linkerd-heartbeat
<     namespace: linkerd
<     status: Synced
<     version: v1
<   - group: rbac.authorization.k8s.io
<     kind: ClusterRole
<     name: linkerd-heartbeat
<     status: Synced
<     version: v1
<   - group: rbac.authorization.k8s.io
<     kind: ClusterRole
<     name: linkerd-linkerd-destination
<     status: Synced
<     version: v1
<   - group: rbac.authorization.k8s.io
<     kind: ClusterRole
<     name: linkerd-linkerd-identity
<     status: Synced
<     version: v1
<   - group: rbac.authorization.k8s.io
<     kind: ClusterRole
<     name: linkerd-linkerd-proxy-injector
<     status: Synced
<     version: v1
<   - group: rbac.authorization.k8s.io
<     kind: ClusterRole
<     name: linkerd-policy
<     status: Synced
<     version: v1
<   - group: rbac.authorization.k8s.io
<     kind: ClusterRoleBinding
<     name: linkerd-destination-policy
<     status: Synced
<     version: v1
<   - group: rbac.authorization.k8s.io
<     kind: ClusterRoleBinding
<     name: linkerd-heartbeat
<     status: Synced
<     version: v1
<   - group: rbac.authorization.k8s.io
<     kind: ClusterRoleBinding
<     name: linkerd-linkerd-destination
<     status: Synced
<     version: v1
<   - group: rbac.authorization.k8s.io
<     kind: ClusterRoleBinding
<     name: linkerd-linkerd-identity
<     status: Synced
<     version: v1
<   - group: rbac.authorization.k8s.io
<     kind: ClusterRoleBinding
<     name: linkerd-linkerd-proxy-injector
<     status: Synced
<     version: v1
<   - group: rbac.authorization.k8s.io
<     kind: Role
<     name: ext-namespace-metadata-linkerd-config
<     namespace: linkerd
<     status: Synced
<     version: v1
<   - group: rbac.authorization.k8s.io
<     kind: Role
<     name: linkerd-heartbeat
<     namespace: linkerd
<     status: Synced
<     version: v1
<   - group: rbac.authorization.k8s.io
<     kind: Role
<     name: remote-discovery
<     namespace: linkerd
<     status: Synced
<     version: v1
<   - group: rbac.authorization.k8s.io
<     kind: RoleBinding
<     name: linkerd-destination-remote-discovery
<     namespace: linkerd
<     status: Synced
<     version: v1
<   - group: rbac.authorization.k8s.io
<     kind: RoleBinding
<     name: linkerd-heartbeat
<     namespace: linkerd
<     status: Synced
<     version: v1
<   sourceType: Helm
<   summary:
<     images:
<     - cr.l5d.io/linkerd/controller:stable-2.14.10
<     - cr.l5d.io/linkerd/policy-controller:stable-2.14.10
<     - cr.l5d.io/linkerd/proxy-init:v2.2.3
<     - cr.l5d.io/linkerd/proxy:stable-2.14.10
<   sync:
<     comparedTo:
<       destination:
<         namespace: linkerd
<         server: https://kubernetes.default.svc
<       ignoreDifferences:
<       - jsonPointers:
<         - /data/tls.crt
<         - /data/tls.key
<         kind: Secret
<         name: linkerd-proxy-injector-k8s-tls
<       - jsonPointers:
<         - /data/tls.crt
<         - /data/tls.key
<         kind: Secret
<         name: linkerd-sp-validator-k8s-tls
<       - jsonPointers:
<         - /data/tls.crt
<         - /data/tls.key
<         kind: Secret
<         name: linkerd-policy-validator-k8s-tls
<       - group: admissionregistration.k8s.io/v1
<         jsonPointers:
<         - /webhooks/0/clientConfig/caBundle
<         kind: MutatingWebhookConfiguration
<         name: linkerd-proxy-injector-webhook-config
<       - group: admissionregistration.k8s.io/v1
<         jsonPointers:
<         - /webhooks/0/clientConfig/caBundle
<         kind: ValidatingWebhookConfiguration
<         name: linkerd-sp-validator-webhook-config
<       - group: admissionregistration.k8s.io/v1
<         jsonPointers:
<         - /webhooks/0/clientConfig/caBundle
<         kind: ValidatingWebhookConfiguration
<         name: linkerd-policy-validator-webhook-config
<       source:
<         chart: linkerd-control-plane
<         helm:
<           valuesObject:
<             identity:
<               issuer:
<                 scheme: kubernetes.io/tls
<             identityTrustAnchorsPEM: |
<               -----BEGIN CERTIFICATE-----
<               MIIBjTCCATOgAwIBAgIQIvht8hmkwHraoV7BtVvwgjAKBggqhkjOPQQDAjAlMSMw
<               IQYDVQQDExpyb290LmxpbmtlcmQuY2x1c3Rlci5sb2NhbDAeFw0yNDA0MDMwMTIw
<               NTJaFw0yOTA0MDIwMTIwNTJaMCUxIzAhBgNVBAMTGnJvb3QubGlua2VyZC5jbHVz
<               dGVyLmxvY2FsMFkwEwYHKoZIzj0CAQYIKoZIzj0DAQcDQgAE4EeQn8MUtU3UBWeW
<               dg3YaBncGPGAzO/hDh2zZ/uHkH47O8Q3V7lhwPUYDBG5WDe0DIad6Mz/4VgArI1L
<               0SI7BqNFMEMwDgYDVR0PAQH/BAQDAgEGMBIGA1UdEwEB/wQIMAYBAf8CAQEwHQYD
<               VR0OBBYEFKrK/huKsXPuF5Eoqo8Zy97yI9+WMAoGCCqGSM49BAMCA0gAMEUCIBCj
<               JBT2hrqrkmgO1bXlTE6cnyvJw+/v/bcGuOSO90EyAiEA6QKMzMi5S1nybawDYTuC
<               xmzLng6l/Y18scw8DdDS8iQ=
<               -----END CERTIFICATE-----
<         repoURL: https://helm.linkerd.io/stable
<         targetRevision: 1.16.11
<     revision: 1.16.11
<     status: Synced

===== argoproj.io/Application argo-cd/linkerd-crds ======
1,225d0
< apiVersion: argoproj.io/v1alpha1
< kind: Application
< metadata:
<   annotations:
<     kubectl.kubernetes.io/last-applied-configuration: |
<       {"apiVersion":"argoproj.io/v1alpha1","kind":"Application","metadata":{"annotations":{},"finalizers":["resources-finalizer.argocd.argoproj.io"],"labels":{"argocd.argoproj.io/instance":"app-of-apps"},"name":"linkerd-crds","namespace":"argo-cd"},"spec":{"destination":{"namespace":"linkerd","server":"https://kubernetes.default.svc"},"project":"linkerd-crds","source":{"chart":"linkerd-crds","repoURL":"https://helm.linkerd.io/stable","targetRevision":"1.8.0"},"syncPolicy":{"automated":{"prune":true,"selfHeal":true}}}}
<   finalizers:
<   - resources-finalizer.argocd.argoproj.io
<   generation: 43907
<   labels:
<     argocd.argoproj.io/instance: app-of-apps
<   managedFields:
<   - apiVersion: argoproj.io/v1alpha1
<     fieldsType: FieldsV1
<     fieldsV1:
<       f:metadata:
<         f:annotations:
<           .: {}
<           f:kubectl.kubernetes.io/last-applied-configuration: {}
<         f:finalizers:
<           .: {}
<           v:"resources-finalizer.argocd.argoproj.io": {}
<         f:labels:
<           .: {}
<           f:argocd.argoproj.io/instance: {}
<       f:spec:
<         .: {}
<         f:destination:
<           .: {}
<           f:namespace: {}
<           f:server: {}
<         f:project: {}
<         f:source:
<           .: {}
<           f:chart: {}
<           f:repoURL: {}
<           f:targetRevision: {}
<         f:syncPolicy:
<           .: {}
<           f:automated:
<             .: {}
<             f:prune: {}
<             f:selfHeal: {}
<     manager: argocd-controller
<     operation: Update
<     time: "2024-04-03T02:43:00Z"
<   - apiVersion: argoproj.io/v1alpha1
<     fieldsType: FieldsV1
<     fieldsV1:
<       f:status:
<         .: {}
<         f:controllerNamespace: {}
<         f:health:
<           .: {}
<           f:status: {}
<         f:history: {}
<         f:operationState:
<           .: {}
<           f:finishedAt: {}
<           f:message: {}
<           f:operation:
<             .: {}
<             f:initiatedBy:
<               .: {}
<               f:automated: {}
<             f:retry:
<               .: {}
<               f:limit: {}
<             f:sync:
<               .: {}
<               f:prune: {}
<               f:resources: {}
<               f:revision: {}
<           f:phase: {}
<           f:startedAt: {}
<           f:syncResult:
<             .: {}
<             f:resources: {}
<             f:revision: {}
<             f:source:
<               .: {}
<               f:chart: {}
<               f:repoURL: {}
<               f:targetRevision: {}
<         f:reconciledAt: {}
<         f:resources: {}
<         f:sourceType: {}
<         f:summary: {}
<         f:sync:
<           .: {}
<           f:comparedTo:
<             .: {}
<             f:destination:
<               .: {}
<               f:namespace: {}
<               f:server: {}
<             f:source:
<               .: {}
<               f:chart: {}
<               f:repoURL: {}
<               f:targetRevision: {}
<           f:revision: {}
<           f:status: {}
<     manager: argocd-application-controller
<     operation: Update
<     time: "2024-07-05T05:48:17Z"
<   name: linkerd-crds
<   namespace: argo-cd
<   resourceVersion: "52323205"
<   uid: 21c17474-5ef3-4ae7-8ad8-afb1c995576d
< spec:
<   destination:
<     namespace: linkerd
<     server: https://kubernetes.default.svc
<   project: linkerd-crds
<   source:
<     chart: linkerd-crds
<     repoURL: https://helm.linkerd.io/stable
<     targetRevision: 1.8.0
<   syncPolicy:
<     automated:
<       prune: true
<       selfHeal: true
< status:
<   controllerNamespace: argo-cd
<   health:
<     status: Healthy
<   history:
<   - deployStartedAt: "2024-04-03T02:43:00Z"
<     deployedAt: "2024-04-03T02:43:02Z"
<     id: 0
<     revision: 1.8.0
<     source:
<       chart: linkerd-crds
<       repoURL: https://helm.linkerd.io/stable
<       targetRevision: 1.8.0
<   operationState:
<     finishedAt: "2024-04-03T02:43:11Z"
<     message: successfully synced (all tasks run)
<     operation:
<       initiatedBy:
<         automated: true
<       retry:
<         limit: 5
<       sync:
<         prune: true
<         resources:
<         - group: apiextensions.k8s.io
<           kind: CustomResourceDefinition
<           name: httproutes.policy.linkerd.io
<         revision: 1.8.0
<     phase: Succeeded
<     startedAt: "2024-04-03T02:43:09Z"
<     syncResult:
<       resources:
<       - group: apiextensions.k8s.io
<         hookPhase: Running
<         kind: CustomResourceDefinition
<         message: customresourcedefinition.apiextensions.k8s.io/httproutes.policy.linkerd.io
<           configured
<         name: httproutes.policy.linkerd.io
<         namespace: linkerd
<         status: Synced
<         syncPhase: Sync
<         version: v1
<       revision: 1.8.0
<       source:
<         chart: linkerd-crds
<         repoURL: https://helm.linkerd.io/stable
<         targetRevision: 1.8.0
<   reconciledAt: "2024-07-05T05:48:15Z"
<   resources:
<   - group: apiextensions.k8s.io
<     kind: CustomResourceDefinition
<     name: authorizationpolicies.policy.linkerd.io
<     status: Synced
<     version: v1
<   - group: apiextensions.k8s.io
<     kind: CustomResourceDefinition
<     name: httproutes.gateway.networking.k8s.io
<     status: Synced
<     version: v1
<   - group: apiextensions.k8s.io
<     kind: CustomResourceDefinition
<     name: httproutes.policy.linkerd.io
<     status: Synced
<     version: v1
<   - group: apiextensions.k8s.io
<     kind: CustomResourceDefinition
<     name: meshtlsauthentications.policy.linkerd.io
<     status: Synced
<     version: v1
<   - group: apiextensions.k8s.io
<     kind: CustomResourceDefinition
<     name: networkauthentications.policy.linkerd.io
<     status: Synced
<     version: v1
<   - group: apiextensions.k8s.io
<     kind: CustomResourceDefinition
<     name: serverauthorizations.policy.linkerd.io
<     status: Synced
<     version: v1
<   - group: apiextensions.k8s.io
<     kind: CustomResourceDefinition
<     name: servers.policy.linkerd.io
<     status: Synced
<     version: v1
<   - group: apiextensions.k8s.io
<     kind: CustomResourceDefinition
<     name: serviceprofiles.linkerd.io
<     status: Synced
<     version: v1
<   sourceType: Helm
<   summary: {}
<   sync:
<     comparedTo:
<       destination:
<         namespace: linkerd
<         server: https://kubernetes.default.svc
<       source:
<         chart: linkerd-crds
<         repoURL: https://helm.linkerd.io/stable
<         targetRevision: 1.8.0
<     revision: 1.8.0
<     status: Synced

===== argoproj.io/Application argo-cd/longhorn ======
220c220
<     path: applications/longhorn
---
>     path: longhorn

===== bitnami.com/SealedSecret linkerd/linkerd-trust-anchor ======
1,74d0
< apiVersion: bitnami.com/v1alpha1
< kind: SealedSecret
< metadata:
<   annotations:
<     kubectl.kubernetes.io/last-applied-configuration: |
<       {"apiVersion":"bitnami.com/v1alpha1","kind":"SealedSecret","metadata":{"annotations":{},"labels":{"argocd.argoproj.io/instance":"app-of-apps"},"name":"linkerd-trust-anchor","namespace":"linkerd"},"spec":{"encryptedData":{"tls.crt":"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","tls.key":"AgBMXsplaS2/z/llM4rwVaSumFGwB04VovtjiE2HJTlSz/Hqj3dWWY5jW87oZIUeGni/dErRt9mqGEpLeAzZsvQtC1JE1P30mF4XCBnLGnNWOSLf3ffwZIFJtRydRFh6PHlQHjKrMP8xL++OJ7phVnUdASTT++rbyTRhlxtKsg+o4RPreSao6JzcG0qe3RqUqGJRoTY5EI0tbyStqUN5qDBE/F2M7CA5GKNWFbUqJwZ0hSsT1KEpHHVvsWdxY/3BVKAir04EVGVBuh3qGNwneGRfWoY5o7L0YB5JoEeAIghoac5AFa10iT5MHSRo83QpUSHtKXF6x2ixVQPZeFvHA/z9NDXRO1PTgtVvXzQr4EuEMz5lJaR/sH3BfrxSLbUGAYIRJFe48gMSMTUn04nmraV0l4CuMyi2cpkqVVy2bNcXhPtHof4Gy1m1phl2nNy9f3KxNpNK79FFlzcmqoYGFI2j/UA8CYgwC7GK+k9xB/KLTzTeOERO6mCw6LGNrscthgotC2Z7kdOoGYiqDaoxBsNG/S1ajWFQBgzucAfYWhcqdyF9Fu+pZkOcZmo6sVejHbjtAwmqiyLAOdRaYaq0wPOtWVMtvksNtXe/NI9eeY3xML+5Ug8SdN2vF4roDyOsV1D0FOmQgsuzxA8wi3oZfuEAyKR4XCPe4UI1w4P4cQclZrIpVIQ0+aJdGYU3wkOC1r0EZ4u+7B0AWnxt6fQM3b19BBNbFLRxxwsIS27rkwwBTpVU/u4QKPgLH2FsBmRyWYvYSg3sruHJ2m6fcYKfjASISdTiXPF/TrvxR12CP8uPJykTHXF1SDetbmMduIMKQxIRjls4IVW//opgWQ7FRGdXqd3h9PG7EvIEppRrewJAx5MpyKLMkBMK2jIE5IzABKbf+NBjWwQw59NDMnE9RCsEXqZSSmPjvUXXJeRvRJmaNdP6xOh/UJouinFFF30D2Y6LD7vGoNe86yuNpNVYROTX6TATeYkezC/ZLv1PoQQpG6zE+Q=="},"template":{"metadata":{"labels":{"linkerd.io/control-plane-component":"identity","linkerd.io/control-plane-ns":"linkerd"},"name":"linkerd-trust-anchor","namespace":"linkerd"},"type":"kubernetes.io/tls"}}}
<   generation: 1
<   labels:
<     argocd.argoproj.io/instance: app-of-apps
<   managedFields:
<   - apiVersion: bitnami.com/v1alpha1
<     fieldsType: FieldsV1
<     fieldsV1:
<       f:metadata:
<         f:annotations:
<           .: {}
<           f:kubectl.kubernetes.io/last-applied-configuration: {}
<         f:labels:
<           .: {}
<           f:argocd.argoproj.io/instance: {}
<       f:spec:
<         .: {}
<         f:encryptedData:
<           .: {}
<           f:tls.crt: {}
<           f:tls.key: {}
<         f:template:
<           .: {}
<           f:metadata:
<             .: {}
<             f:labels:
<               .: {}
<               f:linkerd.io/control-plane-component: {}
<               f:linkerd.io/control-plane-ns: {}
<             f:name: {}
<             f:namespace: {}
<           f:type: {}
<     manager: argocd-controller
<     operation: Update
<     time: "2024-04-03T02:29:38Z"
<   - apiVersion: bitnami.com/v1alpha1
<     fieldsType: FieldsV1
<     fieldsV1:
<       f:status:
<         .: {}
<         f:conditions: {}
<         f:observedGeneration: {}
<     manager: controller
<     operation: Update
<     subresource: status
<     time: "2024-04-03T02:29:38Z"
<   name: linkerd-trust-anchor
<   namespace: linkerd
<   resourceVersion: "6937088"
<   uid: 5add1457-2b02-4a78-9786-dc28c16a4369
< spec:
<   encryptedData:
<     tls.crt: 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
<     tls.key: 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
<   template:
<     metadata:
<       labels:
<         linkerd.io/control-plane-component: identity
<         linkerd.io/control-plane-ns: linkerd
<       name: linkerd-trust-anchor
<       namespace: linkerd
<     type: kubernetes.io/tls
< status:
<   conditions:
<   - lastTransitionTime: "2024-04-03T02:29:38Z"
<     lastUpdateTime: "2024-04-03T02:29:38Z"
<     status: "True"
<     type: Synced
<   observedGeneration: 1

===== cert-manager.io/Certificate linkerd/linkerd-identity-issuer ======
1,102d0
< apiVersion: cert-manager.io/v1
< kind: Certificate
< metadata:
<   annotations:
<     kubectl.kubernetes.io/last-applied-configuration: |
<       {"apiVersion":"cert-manager.io/v1","kind":"Certificate","metadata":{"annotations":{},"labels":{"argocd.argoproj.io/instance":"app-of-apps"},"name":"linkerd-identity-issuer","namespace":"linkerd"},"spec":{"dnsNames":["identity.linkerd.cluster.local"],"duration":"730h0m0s","isCA":true,"issuerRef":{"kind":"Issuer","name":"linkerd-trust-anchor"},"privateKey":{"algorithm":"ECDSA"},"renewBefore":"1h0m0s","secretName":"linkerd-identity-issuer","usages":["cert sign","crl sign","server auth","client auth"]}}
<   generation: 1
<   labels:
<     argocd.argoproj.io/instance: app-of-apps
<   managedFields:
<   - apiVersion: cert-manager.io/v1
<     fieldsType: FieldsV1
<     fieldsV1:
<       f:metadata:
<         f:annotations:
<           .: {}
<           f:kubectl.kubernetes.io/last-applied-configuration: {}
<         f:labels:
<           .: {}
<           f:argocd.argoproj.io/instance: {}
<       f:spec:
<         .: {}
<         f:dnsNames: {}
<         f:duration: {}
<         f:isCA: {}
<         f:issuerRef:
<           .: {}
<           f:kind: {}
<           f:name: {}
<         f:privateKey:
<           .: {}
<           f:algorithm: {}
<         f:renewBefore: {}
<         f:secretName: {}
<         f:usages: {}
<     manager: argocd-controller
<     operation: Update
<     time: "2024-04-03T02:29:38Z"
<   - apiVersion: cert-manager.io/v1
<     fieldsType: FieldsV1
<     fieldsV1:
<       f:status:
<         f:revision: {}
<     manager: cert-manager-certificates-issuing
<     operation: Update
<     subresource: status
<     time: "2024-07-03T05:29:43Z"
<   - apiVersion: cert-manager.io/v1
<     fieldsType: FieldsV1
<     fieldsV1:
<       f:status:
<         .: {}
<         f:conditions:
<           .: {}
<           k:{"type":"Ready"}:
<             .: {}
<             f:lastTransitionTime: {}
<             f:message: {}
<             f:observedGeneration: {}
<             f:reason: {}
<             f:status: {}
<             f:type: {}
<         f:notAfter: {}
<         f:notBefore: {}
<         f:renewalTime: {}
<     manager: cert-manager-certificates-readiness
<     operation: Update
<     subresource: status
<     time: "2024-07-03T05:29:43Z"
<   name: linkerd-identity-issuer
<   namespace: linkerd
<   resourceVersion: "51176122"
<   uid: 7a4a6f59-4567-4590-acf8-92c0d919cd62
< spec:
<   dnsNames:
<   - identity.linkerd.cluster.local
<   duration: 730h0m0s
<   isCA: true
<   issuerRef:
<     kind: Issuer
<     name: linkerd-trust-anchor
<   privateKey:
<     algorithm: ECDSA
<   renewBefore: 1h0m0s
<   secretName: linkerd-identity-issuer
<   usages:
<   - cert sign
<   - crl sign
<   - server auth
<   - client auth
< status:
<   conditions:
<   - lastTransitionTime: "2024-04-03T02:29:43Z"
<     message: Certificate is up to date and has not expired
<     observedGeneration: 1
<     reason: Ready
<     status: "True"
<     type: Ready
<   notAfter: "2024-08-02T15:29:43Z"
<   notBefore: "2024-07-03T05:29:43Z"
<   renewalTime: "2024-08-02T14:29:43Z"
<   revision: 4

===== cert-manager.io/Issuer linkerd/linkerd-trust-anchor ======
1,62d0
< apiVersion: cert-manager.io/v1
< kind: Issuer
< metadata:
<   annotations:
<     kubectl.kubernetes.io/last-applied-configuration: |
<       {"apiVersion":"cert-manager.io/v1","kind":"Issuer","metadata":{"annotations":{},"labels":{"argocd.argoproj.io/instance":"app-of-apps"},"name":"linkerd-trust-anchor","namespace":"linkerd"},"spec":{"ca":{"secretName":"linkerd-trust-anchor"}}}
<   generation: 1
<   labels:
<     argocd.argoproj.io/instance: app-of-apps
<   managedFields:
<   - apiVersion: cert-manager.io/v1
<     fieldsType: FieldsV1
<     fieldsV1:
<       f:metadata:
<         f:annotations:
<           .: {}
<           f:kubectl.kubernetes.io/last-applied-configuration: {}
<         f:labels:
<           .: {}
<           f:argocd.argoproj.io/instance: {}
<       f:spec:
<         .: {}
<         f:ca:
<           .: {}
<           f:secretName: {}
<     manager: argocd-controller
<     operation: Update
<     time: "2024-04-03T02:29:38Z"
<   - apiVersion: cert-manager.io/v1
<     fieldsType: FieldsV1
<     fieldsV1:
<       f:status:
<         .: {}
<         f:conditions:
<           .: {}
<           k:{"type":"Ready"}:
<             .: {}
<             f:lastTransitionTime: {}
<             f:message: {}
<             f:observedGeneration: {}
<             f:reason: {}
<             f:status: {}
<             f:type: {}
<     manager: cert-manager-issuers
<     operation: Update
<     subresource: status
<     time: "2024-04-03T02:29:43Z"
<   name: linkerd-trust-anchor
<   namespace: linkerd
<   resourceVersion: "6937123"
<   uid: c7495da0-7734-4e30-be33-5536abfd8def
< spec:
<   ca:
<     secretName: linkerd-trust-anchor
< status:
<   conditions:
<   - lastTransitionTime: "2024-04-03T02:29:43Z"
<     message: Signing CA verified
<     observedGeneration: 1
<     reason: KeyPairVerified
<     status: "True"
<     type: Ready

===== argoproj.io/Application argo-cd/linkerd ======
0a1,68
> apiVersion: argoproj.io/v1alpha1
> kind: Application
> metadata:
>   finalizers:
>   - resources-finalizer.argocd.argoproj.io
>   labels:
>     argocd.argoproj.io/instance: app-of-apps
>   name: linkerd
>   namespace: argo-cd
> spec:
>   destination:
>     namespace: linkerd
>     server: https://kubernetes.default.svc
>   ignoreDifferences:
>   - group: ""
>     jsonPointers:
>     - /data/tls.crt
>     - /data/tls.key
>     kind: Secret
>     name: linkerd-proxy-injector-k8s-tls
>   - group: ""
>     jsonPointers:
>     - /data/tls.crt
>     - /data/tls.key
>     kind: Secret
>     name: linkerd-sp-validator-k8s-tls
>   - group: ""
>     jsonPointers:
>     - /data/tls.crt
>     - /data/tls.key
>     kind: Secret
>     name: linkerd-policy-validator-k8s-tls
>   - group: admissionregistration.k8s.io/v1
>     jsonPointers:
>     - /webhooks/0/clientConfig/caBundle
>     kind: MutatingWebhookConfiguration
>     name: linkerd-proxy-injector-webhook-config
>   - group: admissionregistration.k8s.io/v1
>     jsonPointers:
>     - /webhooks/0/clientConfig/caBundle
>     kind: ValidatingWebhookConfiguration
>     name: linkerd-sp-validator-webhook-config
>   - group: admissionregistration.k8s.io/v1
>     jsonPointers:
>     - /webhooks/0/clientConfig/caBundle
>     kind: ValidatingWebhookConfiguration
>     name: linkerd-policy-validator-webhook-config
>   project: linkerd
>   sources:
>   - path: linkerd
>     ref: extraResources
>     repoURL: https://github.com/d3adb5/app-of-apps
>     targetRevision: HEAD
>   - chart: linkerd-crds
>     repoURL: https://helm.linkerd.io/stable
>     targetRevision: 1.8.0
>   - chart: linkerd-control-plane
>     helm:
>       valueFiles:
>       - $extraResources/linkerd/values.yaml
>     repoURL: https://helm.linkerd.io/stable
>     targetRevision: 1.16.11
>   syncPolicy:
>     automated:
>       prune: true
>       selfHeal: true
>     syncOptions:
>     - CreateNamespace=true

===== argoproj.io/AppProject argo-cd/linkerd ======
0a1,30
> apiVersion: argoproj.io/v1alpha1
> kind: AppProject
> metadata:
>   finalizers:
>   - resources-finalizer.argocd.argoproj.io
>   labels:
>     argocd.argoproj.io/instance: app-of-apps
>   name: linkerd
>   namespace: argo-cd
> spec:
>   clusterResourceWhitelist:
>   - group: ""
>     kind: Namespace
>   - group: apiextensions.k8s.io
>     kind: CustomResourceDefinition
>   - group: rbac.authorization.k8s.io
>     kind: ClusterRole
>   - group: rbac.authorization.k8s.io
>     kind: ClusterRoleBinding
>   - group: admissionregistration.k8s.io
>     kind: ValidatingWebhookConfiguration
>   - group: admissionregistration.k8s.io
>     kind: MutatingWebhookConfiguration
>   description: A minimal service mesh for Kubernetes
>   destinations:
>   - namespace: linkerd
>     server: https://kubernetes.default.svc
>   sourceRepos:
>   - https://helm.linkerd.io/stable
>   - https://github.com/d3adb5/app-of-apps

@d3adb5 d3adb5 merged commit a631c61 into master Jul 5, 2024
1 check passed
@d3adb5 d3adb5 deleted the refactor/linkerd-single-app branch July 5, 2024 05:51
@d3adb5 d3adb5 mentioned this pull request Jul 13, 2024
Closed
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Reviewers
No reviews
Assignees

@d3adb5 d3adb5

Labels
enhancement New feature or request
Projects
None yet
Milestone
No milestone
Development

Successfully merging this pull request may close these issues.
1 participant
@d3adb5