mirror of
https://github.com/hanzoai/deploy.git
synced 2026-10-07 08:44:50 +00:00
zeekayandHanzo Dev
446e343a3d
Two corrections on top of the naming pass, both found by checking the live cluster rather than the source. The rename had silently changed the user-facing annotation key from argocd.argoproj.io/sync-wave to cd.argoproj.io/sync-wave — 63 live Applications carry the old key, so deploying that would have ignored every sync-wave and broken fleet deploy ordering. The key is now cd.hanzo.ai/*, and universe 575650286 moves the ApplicationSet template that stamps it, so the controller regenerates all 63 consistently. The API group in code said argoproj.io/v1alpha1 in 157 places while the cluster has served apps.hanzo.ai/v1alpha1 since 2026-07-23 (the CRDs are applications.apps.hanzo.ai). Code now matches what is actually served. The legacy applications.argoproj.io/app-name label had ZERO live users, so it went with the rest. foo.argoproj.io test fixtures became foo.example.com — arbitrary test domains should not carry a vendor name. go build ./... exit 0. Co-authored-by: Hanzo Dev <[email protected]>
101 lines
2.5 KiB
YAML
101 lines
2.5 KiB
YAML
# Git repositories configure Hanzo CD with (optional).
|
|
# This list is updated when configuring/removing repos from the UI/CLI
|
|
# Note: the last example in the list would use a repository credential template, configured under "cd-repo-creds.yaml".
|
|
apiVersion: v1
|
|
kind: Secret
|
|
metadata:
|
|
name: my-private-https-repo
|
|
namespace: cd
|
|
labels:
|
|
cd.hanzo.ai/secret-type: repository
|
|
stringData:
|
|
url: https://github.com/argoproj/argocd-example-apps
|
|
password: my-password
|
|
username: my-username
|
|
bearerToken: my-token
|
|
project: my-project
|
|
insecure: "true" # Ignore validity of server's TLS certificate. Defaults to "false"
|
|
forceHttpBasicAuth: "true" # Skip auth method negotiation and force usage of HTTP basic auth. Defaults to "false"
|
|
enableLfs: "true" # Enable git-lfs for this repository. Defaults to "false"
|
|
---
|
|
apiVersion: v1
|
|
kind: Secret
|
|
metadata:
|
|
name: my-private-ssh-repo
|
|
namespace: cd
|
|
labels:
|
|
cd.hanzo.ai/secret-type: repository
|
|
stringData:
|
|
url: ssh://[email protected]/argoproj/argocd-example-apps
|
|
sshPrivateKey: |
|
|
-----BEGIN OPENSSH PRIVATE KEY-----
|
|
...
|
|
-----END OPENSSH PRIVATE KEY-----
|
|
insecure: "true" # Do not perform a host key check for the server. Defaults to "false"
|
|
enableLfs: "true" # Enable git-lfs for this repository. Defaults to "false"
|
|
---
|
|
apiVersion: v1
|
|
kind: Secret
|
|
metadata:
|
|
name: istio-helm-repo
|
|
namespace: cd
|
|
labels:
|
|
cd.hanzo.ai/secret-type: repository
|
|
stringData:
|
|
url: https://storage.googleapis.com/istio-prerelease/daily-build/master-latest-daily/charts
|
|
name: istio.io
|
|
project: my-project
|
|
type: helm
|
|
---
|
|
apiVersion: v1
|
|
kind: Secret
|
|
metadata:
|
|
name: private-helm-repo
|
|
namespace: cd
|
|
labels:
|
|
cd.hanzo.ai/secret-type: repository
|
|
stringData:
|
|
url: https://my-private-chart-repo.internal
|
|
name: private-repo
|
|
type: helm
|
|
password: my-password
|
|
username: my-username
|
|
---
|
|
apiVersion: v1
|
|
kind: Secret
|
|
metadata:
|
|
name: private-repo
|
|
namespace: cd
|
|
labels:
|
|
cd.hanzo.ai/secret-type: repository
|
|
stringData:
|
|
url: https://github.com/argoproj/private-repo
|
|
---
|
|
apiVersion: v1
|
|
kind: Secret
|
|
metadata:
|
|
name: aci-private-repo
|
|
namespace: cd
|
|
labels:
|
|
cd.hanzo.ai/secret-type: repository
|
|
stringData:
|
|
type: helm
|
|
url: contoso.azurecr.io/charts
|
|
name: contosocharts
|
|
enableOCI: "true"
|
|
useAzureWorkloadIdentity: "true"
|
|
---
|
|
apiVersion: v1
|
|
kind: Secret
|
|
metadata:
|
|
name: private-oci-repo
|
|
namespace: cd
|
|
labels:
|
|
cd.hanzo.ai/secret-type: repository
|
|
stringData:
|
|
username: my-username
|
|
password: my-password
|
|
project: myproject
|
|
type: oci
|
|
url: oci://my.registry.com/namespace/service
|