feat(gitops): migrate domain to riotpiao.com, add CNPG + Forgejo HA on Redis/Postgres, wire ArgoCD apps — enables cluster rebuild after etcd wipe and unblocks the git-source chicken-egg via standalone Helm-source Applications

k8s/applications/sqs/argocd/apps/01-kafka-cluster.yaml

@@ -8,7 +8,7 @@ metadata:
 spec:
   project: kmsvc
   source:
-    repoURL: https://forgejo.riotpiao.homelab.com/rock/kafaka-management-service.git
+    repoURL: https://forgejo.riotpiao.com/rock/kafaka-management-service.git
     targetRevision: main
     path: k8s/charts/kafka-cluster
     helm:

k8s/applications/sqs/argocd/apps/03-queue-crd.yaml

@@ -8,7 +8,7 @@ metadata:
 spec:
   project: kmsvc
   source:
-    repoURL: https://forgejo.riotpiao.homelab.com/rock/kafaka-management-service.git
+    repoURL: https://forgejo.riotpiao.com/rock/kafaka-management-service.git
     targetRevision: main
     path: k8s/charts/queue-crd
     helm:
@@ -17,7 +17,7 @@ spec:
         kafkaBrokers: "kmsvc-kafka-bootstrap.sqs.svc.cluster.local:9092"
         redisAddr: "kmsvc-redis-master.sqs.svc.cluster.local:6379"
         image:
-          repository: forgejo.riotpiao.homelab.com/rock/kafka-management-service-queue-operator
+          repository: forgejo.riotpiao.com/rock/kafka-management-service-queue-operator
           # CI (.forgejo/workflows/release.yaml) writes the released git tag
           # here and pushes the commit -- ArgoCD picks it up on its next sync.
           tag: latest

k8s/applications/sqs/argocd/apps/04-management-service.yaml

@@ -8,25 +8,25 @@ metadata:
 spec:
   project: kmsvc
   source:
-    repoURL: https://forgejo.riotpiao.homelab.com/rock/kafaka-management-service.git
+    repoURL: https://forgejo.riotpiao.com/rock/kafaka-management-service.git
     targetRevision: main
     path: k8s/charts/management-service
     helm:
       values: |
         namespace: sqs
         image:
-          repository: forgejo.riotpiao.homelab.com/rock/kafka-management-service
+          repository: forgejo.riotpiao.com/rock/kafka-management-service
           # CI (.forgejo/workflows/release.yaml) writes the released git tag
           # here and pushes the commit -- ArgoCD picks it up on its next sync.
           tag: latest
         env:
           kafkaBrokers: "kmsvc-kafka-bootstrap.sqs.svc.cluster.local:9092"
           redisAddr: "kmsvc-redis-master.sqs.svc.cluster.local:6379"
-          authentikIssuerURL: "https://authentik.riotpiao.homelab.com/application/o/kafaka/"
+          authentikIssuerURL: "https://authentik.riotpiao.com/application/o/kafaka/"
           authentikAudience: "QI0gPtR99ar8VvhK8Tqox4SDkTKzbNU7lbgwBNSc"
         ingress:
           enabled: true
-          host: kmsvc.riotpiao.homelab.com
+          host: kmsvc.riotpiao.com
           clusterIssuer: homelab-ca
   destination:
     server: https://kubernetes.default.svc

k8s/applications/sqs/argocd/project.yaml

@@ -6,7 +6,7 @@ metadata:
 spec:
   description: Kafka Management Service (design.md) -- Strimzi/Kafka, Redis, queue-operator, message-plane server
   sourceRepos:
-    - https://forgejo.riotpiao.homelab.com/rock/kafaka-management-service.git
+    - https://forgejo.riotpiao.com/rock/kafaka-management-service.git
     - https://strimzi.io/charts/
     - https://charts.bitnami.com/bitnami
   destinations:

k8s/applications/sqs/argocd/root.yaml

@@ -6,7 +6,7 @@ metadata:
 spec:
   project: kmsvc
   source:
-    repoURL: https://forgejo.riotpiao.homelab.com/rock/kafaka-management-service.git
+    repoURL: https://forgejo.riotpiao.com/rock/kafaka-management-service.git
     targetRevision: main
     path: k8s/argocd/apps
     directory: