mirror of
https://github.com/hanzoai/deploy.git
synced 2026-10-07 08:44:50 +00:00
zeekayandHanzo Dev
446e343a3d
Two corrections on top of the naming pass, both found by checking the live cluster rather than the source. The rename had silently changed the user-facing annotation key from argocd.argoproj.io/sync-wave to cd.argoproj.io/sync-wave — 63 live Applications carry the old key, so deploying that would have ignored every sync-wave and broken fleet deploy ordering. The key is now cd.hanzo.ai/*, and universe 575650286 moves the ApplicationSet template that stamps it, so the controller regenerates all 63 consistently. The API group in code said argoproj.io/v1alpha1 in 157 places while the cluster has served apps.hanzo.ai/v1alpha1 since 2026-07-23 (the CRDs are applications.apps.hanzo.ai). Code now matches what is actually served. The legacy applications.argoproj.io/app-name label had ZERO live users, so it went with the rest. foo.argoproj.io test fixtures became foo.example.com — arbitrary test domains should not carry a vendor name. go build ./... exit 0. Co-authored-by: Hanzo Dev <[email protected]>
81 lines
2.1 KiB
YAML
81 lines
2.1 KiB
YAML
apiVersion: apps.hanzo.ai/v1alpha1
|
|
kind: Application
|
|
metadata:
|
|
annotations:
|
|
cd.hanzo.ai/tracking-id: 'app-of-apps:apps.hanzo.ai/Application:cd/argo-workflows'
|
|
name: argo-workflows
|
|
namespace: cd
|
|
spec:
|
|
destination:
|
|
name: in-cluster
|
|
namespace: argo-workflows
|
|
project: default
|
|
revisionHistoryLimit: 1
|
|
source:
|
|
chart: argo-workflows
|
|
helm:
|
|
valuesObject:
|
|
controller:
|
|
podSecurityContext:
|
|
runAsGroup: 1000
|
|
runAsUser: 1000
|
|
seccompProfile:
|
|
type: RuntimeDefault
|
|
resources:
|
|
requests:
|
|
cpu: 12m
|
|
memory: 70M
|
|
volumeMounts:
|
|
- mountPath: /tmp
|
|
name: tmp
|
|
volumes:
|
|
- emptyDir: {}
|
|
name: tmp
|
|
crds:
|
|
keep: false
|
|
executor:
|
|
securityContext:
|
|
allowPrivilegeEscalation: false
|
|
capabilities:
|
|
drop:
|
|
- ALL
|
|
runAsGroup: 1000
|
|
runAsNonRoot: true
|
|
runAsUser: 1000
|
|
server:
|
|
extraArgs:
|
|
- '--auth-mode=server'
|
|
ingress:
|
|
annotations:
|
|
cert-manager.io/cluster-issuer: letsencrypt-dns01-issuer
|
|
enabled: true
|
|
hosts:
|
|
- argo-workflows.hankeln.work
|
|
ingressClassName: nginx
|
|
tls:
|
|
- hosts:
|
|
- argo-workflows.hankeln.work
|
|
secretName: argo-workflows-cert
|
|
podSecurityContext:
|
|
runAsGroup: 1000
|
|
runAsUser: 1000
|
|
seccompProfile:
|
|
type: RuntimeDefault
|
|
resources:
|
|
requests:
|
|
cpu: 12m
|
|
memory: 50M
|
|
securityContext:
|
|
allowPrivilegeEscalation: false
|
|
readOnlyRootFilesystem: true
|
|
runAsNonRoot: true
|
|
workflow:
|
|
serviceAccount:
|
|
create: true
|
|
repoURL: 'https://argoproj.github.io/argo-helm'
|
|
targetRevision: 0.45.27
|
|
syncPolicy:
|
|
automated:
|
|
allowEmpty: true
|
|
prune: true
|