Update-upp-proxy-role (#176)

* dev

* app-proxy cm generator: added env variable 'env=production'

* add literal resource 'env=production' when context.url is the default url (g.codefresh)

* bump app-proxy

* bump

* added argoWorkflowsInsecure to app-proxy env vars

* bump

* bump

Author: rotem-codefresh

Makefile

@@ -1,4 +1,4 @@
-VERSION=v0.0.164
+VERSION=v0.0.165
 
 OUT_DIR=dist
 YEAR?=$(shell date +"%Y")

cmd/commands/runtime.go

@@ -1039,13 +1039,22 @@ func configureAppProxy(ctx context.Context, opts *RuntimeInstallOptions, rt *run
 		return err
 	}
 
+	literalResources := []string{
+		fmt.Sprintf("cfHost=%s", cfConfig.GetCurrentContext().URL),
+		"argoWorkflowsInsecure=true",
+	}
+
+	if cfConfig.GetCurrentContext().IsProduction() {
+		literalResources = append(literalResources, "env=production")
+	}
+
 	// configure codefresh host
 	kust.ConfigMapGenerator = append(kust.ConfigMapGenerator, kusttypes.ConfigMapArgs{
 		GeneratorArgs: kusttypes.GeneratorArgs{
 			Name:     store.Get().AppProxyServiceName + "-cm",
 			Behavior: "merge",
 			KvPairSources: kusttypes.KvPairSources{
-				LiteralSources: []string{fmt.Sprintf("cfHost=%s", cfConfig.GetCurrentContext().URL)},
+				LiteralSources: literalResources,
 			},
 		},
 	})

docs/releases/release_notes.md

@@ -23,7 +23,7 @@ cf version
 
 ```bash
 # download and extract the binary
-curl -L --output - https://github.com/codefresh-io/cli-v2/releases/download/v0.0.164/cf-linux-amd64.tar.gz | tar zx
+curl -L --output - https://github.com/codefresh-io/cli-v2/releases/download/v0.0.165/cf-linux-amd64.tar.gz | tar zx
 
 # move the binary to your $PATH
 mv ./cf-linux-amd64 /usr/local/bin/cf
@@ -36,7 +36,7 @@ cf version
 
 ```bash
 # download and extract the binary
-curl -L --output - https://github.com/codefresh-io/cli-v2/releases/download/v0.0.164/cf-darwin-amd64.tar.gz | tar zx
+curl -L --output - https://github.com/codefresh-io/cli-v2/releases/download/v0.0.165/cf-darwin-amd64.tar.gz | tar zx
 
 # move the binary to your $PATH
 mv ./cf-darwin-amd64 /usr/local/bin/cf

manifests/app-proxy/app-proxy.deploy.yaml

@@ -35,6 +35,12 @@ spec:
                   name: cap-app-proxy-cm
                   key: env
                   optional: true
+            - name: ARGO_WORKFLOWS_INSECURE
+              valueFrom:
+                configMapKeyRef:
+                  name: cap-app-proxy-cm
+                  key: argoWorkflowsInsecure
+                  optional: true
             - name: RUNTIME_TOKEN
               valueFrom:
                 secretKeyRef:

manifests/app-proxy/app-proxy.role.yaml

@@ -17,3 +17,15 @@ rules:
       - patch
       - list
       - watch
+  - apiGroups:
+    - argoproj.io
+    resources:
+    - workflows
+    verbs:
+      - get
+      - create
+      - delete
+      - update
+      - patch
+      - list
+      - watch

manifests/app-proxy/kustomization.yaml

@@ -3,7 +3,7 @@ kind: Kustomization
 images:
   - name: quay.io/codefresh/cap-app-proxy
     newName: quay.io/codefresh/cap-app-proxy
-    newTag: v0.0.8
+    newTag: v0.0.9
 resources:
   - app-proxy.deploy.yaml
   - app-proxy.svc.yaml

manifests/runtime.yaml

@@ -5,7 +5,7 @@ metadata:
     namespace: '{{ namespace }}'
 spec:
     defVersion: 1.0.0
-    version: 0.0.164
+    version: 0.0.165
     bootstrapSpecifier: github.com/codefresh-io/cli-v2/manifests/argo-cd
     components:
         - name: events

pkg/config/config.go

@@ -35,6 +35,7 @@ import (
 	"github.com/spf13/viper"
 
 	"github.com/codefresh-io/cli-v2/pkg/log"
+	"github.com/codefresh-io/cli-v2/pkg/store"
 	"github.com/codefresh-io/cli-v2/pkg/util"
 	"github.com/codefresh-io/go-sdk/pkg/codefresh"
 )
@@ -80,6 +81,10 @@ type AuthContext struct {
 	DefaultRuntime string `mapstructure:"defaultRuntime" json:"defaultRuntime"`
 }
 
+func (ac *AuthContext) IsProduction() bool {
+	return ac.URL == store.Get().DefaultAPI
+}
+
 func AddFlags(f *pflag.FlagSet) *Config {
 	conf := &Config{path: defaultPath}