90 lines
3.9 KiB
YAML
90 lines
3.9 KiB
YAML
# Poimen — unified ArgoCD Application (wave 7).
|
|
#
|
|
# Consolidates what was previously five separate apps:
|
|
# poimen → source 1 (poimen-workflows workers)
|
|
# poimen-workflows → duplicate of source 1 (deleted)
|
|
# poimen-memory → source 2 (memory service + redis)
|
|
# poimen-memory-app → duplicate of source 2 (deleted)
|
|
# poimen-memory-database → source 3 (CNPG cluster, moved to k8s/infra/poimen)
|
|
#
|
|
# poimen-toolkit is intentionally kept as a separate Application because it
|
|
# manages cluster-scoped CRDs (ToolDefinition). A bad CRD can affect the
|
|
# whole cluster; keeping it separate means it has its own sync history,
|
|
# independent rollback, and can be paused without touching app workloads.
|
|
#
|
|
# Sync ordering via argocd sync-wave annotations:
|
|
# wave -1 → DB (CNPG Cluster) — must be Ready before app pods start
|
|
# wave 0 → all application Deployments (default)
|
|
#
|
|
# Image Updater tracks all four images. Write-back via argocd (in-cluster
|
|
# annotation patch — no git commit per image update).
|
|
apiVersion: argoproj.io/v1alpha1
|
|
kind: Application
|
|
metadata:
|
|
name: poimen
|
|
namespace: argocd
|
|
labels:
|
|
app.kubernetes.io/part-of: poimen
|
|
annotations:
|
|
argocd.argoproj.io/sync-wave: "7"
|
|
# ── Image Updater ─────────────────────────────────────────────────────────
|
|
argocd-image-updater.argoproj.io/image-list: "workflows=forgejo.riotpiao.com/riotpiao-poimen/poimen-workflows,memory=forgejo.riotpiao.com/riotpiao-poimen/poimen-memory,frontend=forgejo.riotpiao.com/riotpiao-poimen/poimen-frontend"
|
|
argocd-image-updater.argoproj.io/workflows.update-strategy: digest
|
|
argocd-image-updater.argoproj.io/workflows.allow-tags: regexp:^latest$
|
|
argocd-image-updater.argoproj.io/memory.update-strategy: digest
|
|
argocd-image-updater.argoproj.io/memory.allow-tags: regexp:^latest$
|
|
argocd-image-updater.argoproj.io/frontend.update-strategy: digest
|
|
argocd-image-updater.argoproj.io/frontend.allow-tags: regexp:^latest$
|
|
argocd-image-updater.argoproj.io/write-back-method: argocd
|
|
spec:
|
|
project: homelab
|
|
# Multi-source: each repo owns its own k8s manifests.
|
|
# ArgoCD syncs all sources in parallel; sync-wave annotations on individual
|
|
# resources control ordering within the sync operation.
|
|
sources:
|
|
# 1. Workers — Temporal activity + workflow workers, pi-worker pool
|
|
- repoURL: https://forgejo.riotpiao.com/riotpiao-poimen/poimen-workflows.git
|
|
targetRevision: main
|
|
path: k8s
|
|
|
|
# 2. Memory service — poimen-memory API, Redis cache, NetworkPolicies
|
|
- repoURL: https://forgejo.riotpiao.com/riotpiao-poimen/poimen-memory.git
|
|
targetRevision: main
|
|
path: k8s/app
|
|
|
|
# 3. Database infrastructure — CNPG Postgres cluster (wave -1)
|
|
# Moved from k8s/infra/databases to isolate poimen DB from other tenants.
|
|
- repoURL: https://forgejo.riotpiao.com/riotpiao-poimen/homelab.git
|
|
targetRevision: main
|
|
path: k8s/infra/poimen
|
|
|
|
# 4. Frontend app manifests — Deployment, Service, NetworkPolicy.
|
|
# Each repo owns its own k8s/ (same pattern as homelab-frontend for api-gw).
|
|
- repoURL: https://forgejo.riotpiao.com/riotpiao-poimen/poimen-frontend.git
|
|
targetRevision: main
|
|
path: k8s
|
|
|
|
# 5. Frontend ingress — poimen.riotpiao.com edge route.
|
|
# Lives in homelab (same pattern as k8s/apps/api/ for api-gw).
|
|
- repoURL: https://forgejo.riotpiao.com/riotpiao-poimen/homelab.git
|
|
targetRevision: main
|
|
path: k8s/apps/poimen-frontend
|
|
|
|
destination:
|
|
server: https://kubernetes.default.svc
|
|
namespace: poimen
|
|
|
|
syncPolicy:
|
|
automated:
|
|
prune: true
|
|
selfHeal: true
|
|
syncOptions:
|
|
- CreateNamespace=true
|
|
- SkipDryRunOnMissingResource=true
|
|
retry:
|
|
limit: 5
|
|
backoff:
|
|
duration: 5s
|
|
factor: 2
|
|
maxDuration: 3m
|