refactor(argocd): replace wave/layer/phase schemes with two-phase bootstrap + app-of-apps and document both CD scopes — fixes self-hosted-git chicken-egg and stale paths

2026-08-18 15:08:02 -07:00
parent 5b34e71111
commit 8f86a03828
13 changed files with 774 additions and 13 deletions
@@ -140,7 +140,11 @@ spec:
    server: https://kubernetes.default.svc
    namespace: cicd
  syncPolicy:
-    syncOptions:
-      - CreateNamespace=true
+    # NO CreateNamespace — cicd must be pre-created and labelled
+    # pod-security.kubernetes.io/enforce=privileged (DinD/runner needs it);
+    # ArgoCD's CreateNamespace would make it with the cluster-default baseline.
+    # The Phase 0 runbook creates+labels cicd before this app is applied.
+    #
    # NO automated sync — Forgejo is what CI uses to push commits; auto-sync
    # would let a bad CI commit break the system CI depends on. Manual only.
+    syncOptions: []