Files
deploy/manifests/base/commit-server/hanzocd-commit-server-sa.yaml
zeekay ebfbd67854 refactor(manifests): finish apps.hanzo.ai group + hanzocd-* object naming
The server image expects the apps.hanzo.ai API group (register.go), hanzocd-*
config object names (common.go ArgoCDConfigMapName=hanzocd-cm, ...), and a
settings informer that selects app.kubernetes.io/part-of=hanzocd. The base
manifests still emitted argocd-* object names, part-of: argocd, and the stock
quay.io/argoproj/argocd image, so a fresh render produced config/RBAC the
running server cannot find (informer misses part-of=argocd config; server reads
hanzocd-cm but manifest creates argocd-cm) and would run the upstream image.

- Rename every object name and file argocd-* -> hanzocd-* (SA/Role/RoleBinding/
  ClusterRole/ClusterRoleBinding/Service/Deployment/StatefulSet/ConfigMap/Secret/
  NetworkPolicy), referential integrity preserved (roleRef/subjects/selectors/
  configMapRef).
- Flip app.kubernetes.io/part-of: argocd -> hanzocd so the settings informer
  finds the config objects.
- Point the image at ghcr.io/hanzoai/deploy (kustomize image transform +
  container image refs).
- Match the hanzocd-cm ignoreResourceUpdates keys for the CD's own Application to
  apps.hanzo.ai (argoproj.io_Application -> apps.hanzo.ai_Application; refresh/
  hydrate annotation domains). External argoproj.io_Rollout / rollout.argoproj.io
  / notifications refs are left as-is.
- Drop the vestigial argoproj.io workflows create grant from hanzocd-server
  ClusterRole (no Argo Workflows in this install).
- Regenerate the flat install manifests (install/namespace-install/core-install
  and hydrator variants) from the corrected overlays.

RBAC now grants apps.hanzo.ai on applications/applicationsets/appprojects for
hanzocd-server and hanzocd-application-controller, so a fresh deploy keeps the
running apps.hanzo.ai server up. CRDs unchanged in group/kind/version (match the
live apps.hanzo.ai CRDs). Image-internal paths (/home/argocd, /usr/local/bin/
argocd) match the built image and are unchanged.
2026-07-22 20:33:31 -07:00

9 lines
222 B
YAML

apiVersion: v1
kind: ServiceAccount
metadata:
labels:
app.kubernetes.io/name: hanzocd-commit-server
app.kubernetes.io/part-of: hanzocd
app.kubernetes.io/component: commit-server
name: hanzocd-commit-server