rock
227839c27a
- Merge poimen-workflows + poimen-memory + db + frontend into one app - Delete duplicate apps: poimen-workflows, poimen-memory-app (kubectl done) - Delete poimen-memory ArgoCD app file (replaced by multi-source source 2) - Delete poimen-memory-database (replaced by source 3 → k8s/infra/poimen/) - Move memory-db CNPG cluster to k8s/infra/poimen/ (isolated from other tenants) - Remove memory-db from k8s/infra/databases/kustomization.yaml - Add frontend manifests (Deployment, Service, Ingress) to k8s/apps/poimen/ - Add frontend NetworkPolicy: egress to api-gw (api:8080), memory (poimen:8080), Gotify (notifications:80), Authentik (iam:9000/9443), DNS (kube-system:53) - Sync-wave -1 on CNPG cluster ensures DB ready before app pods (wave 0) - Image updater: workflows + memory + frontend tracked in one annotation block - poimen-toolkit stays separate (CRD management, independent rollback)
12 lines
459 B
YAML
12 lines
459 B
YAML
apiVersion: kustomize.config.k8s.io/v1beta1
|
|
kind: Kustomization
|
|
# Dedicated per-app CNPG clusters. NO top-level `namespace:` — each Cluster
|
|
# carries its own ns (iam / temporal / poimen / paperless); a transformer would
|
|
# wrongly collapse them. poimen ns created by poimen-root app, memory-db
|
|
# deployed into it. paperless ns declared in namespaces.yaml above.
|
|
resources:
|
|
- namespaces.yaml
|
|
- authentik-db.yaml
|
|
- temporal-db.yaml
|
|
- paperless-db.yaml
|