argocd: add --enable-helm to kustomize ; enable shell from web ui

ansible/arcodange/factory/playbooks/01_system.yml

@@ -116,6 +116,12 @@
         type: collection
         name: git+https://github.com/k3s-io/k3s-ansible
       run_once: true
+    
+    - name: Install socat for kubectl port forwarding
+      ansible.builtin.apt:
+        name: socat
+        state: present
+        update_cache: yes
 
 - name: k3s
   tags: never,k3s

ansible/arcodange/factory/playbooks/03_cicd.yml

@@ -228,6 +228,10 @@
           global:
             domain: argocd.arcodange.duckdns.org
           configs:
+            cm:
+              kustomize.buildOptions: "--enable-helm"
+              helm.enablePostRenderer: "true"
+              exec.enabled: "true"
             params:
               server.insecure: true # let k3s traefik do TLS termination
       ansible.builtin.copy:

ansible/arcodange/factory/playbooks/tools/roles/crowdsec/tasks/main.yml

@@ -107,6 +107,7 @@
 
 - name: Inject captcha.html into Traefik PVC
   include_tasks: inject_captcha_html.yml
+  tags: never
 
 - name: Créer le Middleware Traefik pour CrowdSec
   kubernetes.core.k8s:
@@ -140,4 +141,8 @@
             captchaProvider: turnstile
             captchaSiteKey: "{{ crowdsec_captcha_secret.resources[0].data.sitekey | b64decode }}"
             captchaSecretKey: "{{ crowdsec_captcha_secret.resources[0].data.secret | b64decode }}"
-            captchaHTMLFilePath: "/data/captcha.html"
+            captchaHTMLFilePath: "/data/captcha.html"
+            redisCacheEnabled: true
+            redisCacheHost: "redis.tools:6379"
+            redisCacheDatabase: "0"
+            redisCacheUnreachableBlock: false