feat(argocd-image-updater): Add missing config values, webhook support, and controller flags

[DrFaust92]

Checklist:

• I have bumped the chart version according to versioning
• I have updated the documentation according to documentation
• I have updated the chart changelog with all the changes that come with this pull request according to changelog.
• Any new values are backwards compatible and/or have sensible default.
• I have signed off all my commits as required by DCO.
• I have created a separate pull request for each chart according to pull requests
• My build is green (troubleshooting builds).

Summary

This PR adds (per maintainer review, the config: value additions were dropped — only template wiring remains):

• New webhook secrets — ALIYUN_ACR_WEBHOOK_SECRET and CLOUDEVENTS_WEBHOOK_SECRET (new in v1.1.0 for ECR CloudEvents support) are now wired in the deployment template
• Controller flags — metricsSecure and enableHTTP2 are now first-class values instead of requiring extraArgs
• Health probe — --health-probe-bind-address is now wired to containerPorts.health instead of being hardcoded

Boolean flags default to nil, so the CLI args are omitted entirely unless explicitly set — fully backwards compatible.

Test plan

• helm template with defaults renders correctly (no extra args)
• helm template with metricsSecure=false and enableHTTP2=true renders correct CLI args
• New env vars (ALIYUN_ACR_WEBHOOK_SECRET, CLOUDEVENTS_WEBHOOK_SECRET) appear in deployment
• Deploy with webhook enabled and verify CloudEvents webhook receives ECR events

[tico24]

Put this PR into draft. Re add the PR checklist that you allowed your LLM to delete and follow it please.

[tico24]

https://github.com/argoproj/argoproj/blob/main/community/genai.md

[DrFaust92]

Thanks for flagging the GenAI policy — I've read through it.

I used Claude Code as a coding assistant, but the changes are based on my own review of the argocd-image-updater controller source where I identified gaps between upstream CLI flags/ConfigMap keys and what values.yaml exposes. I verified each change against the upstream code and tested with helm template. I've also updated the PR to include the proper checklist from the PR template and regenerated the README via helm-docs.

I've put the PR in draft for now — happy to mark it ready for review whenever you're comfortable with it.

[yu-croco]

Missing config values — log.format, interval, max_concurrent_apps, max_concurrent_reconciles, argocd.namespace are all read via env vars from the ConfigMap but had no corresponding values.yaml entries

Due to the following reasons, shall we follow as argo-cd's way instead of adding all configs?

• Values under Values.config, everything goes through in configmap.
  • Ref https://github.com/argoproj/argo-helm/blob/main/charts/argocd-image-updater/templates/configmap.yaml#L15-L17
• It's hard for us to catch up the configs (added, edited, removed)

WDYT? 😄 @mkilchhofer @jmeridth @tico24

[mkilchhofer]

Due to the following reasons, shall we follow as argo-cd's way instead of adding all configs?

* Values under `Values.config`, everything goes through in configmap.
  
  * Ref https://github.com/argoproj/argo-helm/blob/main/charts/argocd-image-updater/templates/configmap.yaml#L15-L17

* It's hard for us to catch up the configs (added, edited, removed)

WDYT? 😄 @mkilchhofer @jmeridth @tico24

Yep, that was our / my idea when I upgraded the AIU to 1.0 (PR was created by Renovate):

• chore(argocd-image-updater): Update dependency argoproj-labs/argocd-image-updater to v1 #3579

[DrFaust92]

I can rebase this but what are the next steps? similar PR for rollouts was merged. i can close this or make other changes if needed

[mkilchhofer]

I can rebase this but what are the next steps? similar PR for rollouts was merged. i can close this or make other changes if needed

I'd like to drop the changes in the config: section. Rest works for me 👍

[DrFaust92]

Done — dropped all config: section additions in 7791168. Kept template wiring for webhook secrets (ALIYUN_ACR_WEBHOOK_SECRET, CLOUDEVENTS_WEBHOOK_SECRET), the metricsSecure/enableHTTP2 controller flags, and --health-probe-bind-address. Updated Chart.yaml changelog accordingly.