feat(poimen): consolidate into single multi-source ArgoCD app

- Merge poimen-workflows + poimen-memory + db + frontend into one app
- Delete duplicate apps: poimen-workflows, poimen-memory-app (kubectl done)
- Delete poimen-memory ArgoCD app file (replaced by multi-source source 2)
- Delete poimen-memory-database (replaced by source 3 → k8s/infra/poimen/)
- Move memory-db CNPG cluster to k8s/infra/poimen/ (isolated from other tenants)
- Remove memory-db from k8s/infra/databases/kustomization.yaml
- Add frontend manifests (Deployment, Service, Ingress) to k8s/apps/poimen/
- Add frontend NetworkPolicy: egress to api-gw (api:8080), memory (poimen:8080),
  Gotify (notifications:80), Authentik (iam:9000/9443), DNS (kube-system:53)
- Sync-wave -1 on CNPG cluster ensures DB ready before app pods (wave 0)
- Image updater: workflows + memory + frontend tracked in one annotation block
- poimen-toolkit stays separate (CRD management, independent rollback)

This commit is contained in:

rock

2026-09-28 08:51:31 +08:00

parent 8ed60c8b55

commit 227839c27a

10 changed files with 347 additions and 52 deletions

									
										k8s/infra/databases/kustomization.yaml
									
		-1
	
												View File
												
				@@ -8,5 +8,4 @@ resources:

				  - namespaces.yaml

				  - authentik-db.yaml

				  - temporal-db.yaml

				  - memory-db.yaml

				  - paperless-db.yaml