feat(gitops): migrate domain to riotpiao.com, add CNPG + Forgejo HA on Redis/Postgres, wire ArgoCD apps — enables cluster rebuild after etcd wipe and unblocks the git-source chicken-egg via standalone Helm-source Applications

2026-08-18 15:08:02 -07:00
parent 491e88e493
commit 54bfb5ade6
86 changed files with 889 additions and 446 deletions
@@ -8,7 +8,7 @@ metadata:
 spec:
  project: kmsvc
  source:
-    repoURL: https://forgejo.riotpiao.homelab.com/rock/kafaka-management-service.git
+    repoURL: https://forgejo.riotpiao.com/rock/kafaka-management-service.git
    targetRevision: main
    path: k8s/charts/kafka-cluster
    helm:
@@ -8,7 +8,7 @@ metadata:
 spec:
  project: kmsvc
  source:
-    repoURL: https://forgejo.riotpiao.homelab.com/rock/kafaka-management-service.git
+    repoURL: https://forgejo.riotpiao.com/rock/kafaka-management-service.git
    targetRevision: main
    path: k8s/charts/queue-crd
    helm:
@@ -17,7 +17,7 @@ spec:
        kafkaBrokers: "kmsvc-kafka-bootstrap.sqs.svc.cluster.local:9092"
        redisAddr: "kmsvc-redis-master.sqs.svc.cluster.local:6379"
        image:
-          repository: forgejo.riotpiao.homelab.com/rock/kafka-management-service-queue-operator
+          repository: forgejo.riotpiao.com/rock/kafka-management-service-queue-operator
          # CI (.forgejo/workflows/release.yaml) writes the released git tag
          # here and pushes the commit -- ArgoCD picks it up on its next sync.
          tag: latest
@@ -8,25 +8,25 @@ metadata:
 spec:
  project: kmsvc
  source:
-    repoURL: https://forgejo.riotpiao.homelab.com/rock/kafaka-management-service.git
+    repoURL: https://forgejo.riotpiao.com/rock/kafaka-management-service.git
    targetRevision: main
    path: k8s/charts/management-service
    helm:
      values: |
        namespace: sqs
        image:
-          repository: forgejo.riotpiao.homelab.com/rock/kafka-management-service
+          repository: forgejo.riotpiao.com/rock/kafka-management-service
          # CI (.forgejo/workflows/release.yaml) writes the released git tag
          # here and pushes the commit -- ArgoCD picks it up on its next sync.
          tag: latest
        env:
          kafkaBrokers: "kmsvc-kafka-bootstrap.sqs.svc.cluster.local:9092"
          redisAddr: "kmsvc-redis-master.sqs.svc.cluster.local:6379"
-          authentikIssuerURL: "https://authentik.riotpiao.homelab.com/application/o/kafaka/"
+          authentikIssuerURL: "https://authentik.riotpiao.com/application/o/kafaka/"
          authentikAudience: "QI0gPtR99ar8VvhK8Tqox4SDkTKzbNU7lbgwBNSc"
        ingress:
          enabled: true
-          host: kmsvc.riotpiao.homelab.com
+          host: kmsvc.riotpiao.com
          clusterIssuer: homelab-ca
  destination:
    server: https://kubernetes.default.svc