diff --git a/k8s/argocd/apps/72-azhi-riotpiao.yaml b/k8s/argocd/apps/72-azhi-riotpiao.yaml deleted file mode 100644 index 784eeaa..0000000 --- a/k8s/argocd/apps/72-azhi-riotpiao.yaml +++ /dev/null @@ -1,36 +0,0 @@ -apiVersion: argoproj.io/v1alpha1 -kind: Application -metadata: - name: azhi-riotpiao - namespace: argocd - annotations: - argocd.argoproj.io/sync-wave: '8' -spec: - project: homelab - source: - # Private GitHub. The read-only credential is Secret azhi-infra-github in - # namespace argocd, created out-of-band. - repoURL: https://github.com/ToyoGlobal/azhi-infra.git - # The repository's default branch. It is not `main`: this repo's work - # happens on the staging slice branch, and `main` is behind it. - targetRevision: feat/azi-riotpiao-cnpg - # One directory, because ArgoCD reads a single path per source. That - # directory is a root kustomization over foundation, postgres and - # azhi-server. - path: k8s/overlays/azi-riotpiao - destination: - server: https://kubernetes.default.svc - namespace: azi-riotpiao - syncPolicy: - automated: - prune: true - selfHeal: true - syncOptions: - - CreateNamespace=true - # The two Secrets this namespace needs are credentials, so they are created - # by hand and NOT by this Application: - # acr-pull — the private Alibaba ACR pull credential - # azhi-riotpiao-app-env — DB credentials, JWT secrets, AES key - # A missing imagePullSecret fails the pod outright and a missing app-env - # Secret leaves it in CreateContainerConfigError, which is the intended - # loud failure rather than a pod that runs against unknown values. diff --git a/k8s/argocd/projects/homelab-project.yaml b/k8s/argocd/projects/homelab-project.yaml index eeb1e25..bc38dce 100644 --- a/k8s/argocd/projects/homelab-project.yaml +++ b/k8s/argocd/projects/homelab-project.yaml @@ -16,12 +16,6 @@ spec: - https://github.com/Riotpiaole/Poimen-memory.git - https://github.com/Riotpiaole/Poimen-workflows.git - https://github.com/Riotpiaole/poimen*.git - # ToyoGlobal (GitHub, private). The azhi-infra Application reads its - # manifests from here, so the URL must be listed or ArgoCD rejects the - # Application with "repository not permitted". A read-only credential for - # this repo lives in Secret azhi-infra-github in namespace argocd; it is - # created out-of-band and is not committed, because it is a credential. - - https://github.com/ToyoGlobal/azhi-infra.git # In-cluster Forgejo repos — explicit allowlist (no wildcard) - https://forgejo.riotpiao.com/riotpiao-poimen/homelab.git - https://forgejo.riotpiao.com/riotpiao-poimen/homelab-frontend.git