fix(argocd): CPU limit throttling repo-server, skip non-manifest .enc.yaml docs, add grafana-admin admin-user key

repoServer CPU limit (500m) was too tight once the SOPS sidecar added real
decrypt work under the liveness probe's 1s timeout — repo-server kept
getting killed mid-sync. Raised to 1000m (node has 23+ idle cores, no
scarcity). Separately, the generate script's doc-separator fix exposed
that several .enc.yaml files (cloudflared, temporal, authentik, loki) are
raw Helm-values snippets, not K8s manifests — ArgoCD hard-failed the whole
batch on the first one missing 'kind:'. Script now skips those, so
correctly-shaped Secrets (grafana-admin included) sync independently.
grafana-admin also needed an admin-user key alongside admin-password —
the chart looks up both from the same existingSecret.

This commit is contained in:

Story Crater Bot

2026-08-11 14:41:32 -07:00

parent f06cefabc4

commit 88e73a885a

3 changed files with 23 additions and 16 deletions

									
										k8s/bootstrap/phase4-argocd/argocd-values.yaml
									
		+1
		-1
	
												View File
												
				@@ -45,7 +45,7 @@ repoServer:

				      cpu: 100m

				      memory: 256Mi

				    limits:

				      cpu: 500m

				      cpu: 1000m

				      memory: 1Gi

				  # Tolerations for control-plane