gitea_admin/Homelabv4
1
0
Fork 0
mirror of https://gitlab.kube.huskypup.net/Scooby/Homelabv4.git synced 2026-08-21 05:26:49 +00:00
Code Issues Packages Projects Releases Wiki Activity
25 Commits 1 Branch 0 Tags
f7cb1c69866bf380e3028da432142c9821ea5689
Commit Graph
11 Commits
Author SHA1 Message Date
Scooby HuskyandClaude Opus 4.6 f7cb1c6986 Disable auto-sync for envoy-gateway (ArgoCD OCI bug) 
ArgoCD v3.3.3 has a bug where OCI chart revision resolution
doesn't include the chart name in the Docker Hub API path,
causing 401 errors. The chart is already deployed at v1.6.3.

Co-Authored-By: Claude Opus 4.6 <noreply@anthropic.com>
 2026-03-10 19:08:56 -05:00
Scooby HuskyandClaude Opus 4.6 c87abdf17a Revert envoy-gateway chart format to use chart field 
ArgoCD requires the chart field for OCI sources. The repoURL
contains the registry/org path, and chart specifies the chart name.

Co-Authored-By: Claude Opus 4.6 <noreply@anthropic.com>
 2026-03-10 19:03:38 -05:00
Scooby HuskyandClaude Opus 4.6 8a0b64203d Fix envoy-gateway OCI chart reference 
Move chart name into repoURL for OCI registry compatibility.
ArgoCD resolves OCI chart references differently from HTTP repos.

Co-Authored-By: Claude Opus 4.6 <noreply@anthropic.com>
 2026-03-10 18:19:29 -05:00
Scooby HuskyandClaude Opus 4.6 131cbca4a6 Fix ArgoCD ServerSideDiff permanent OutOfSync diffs 
Add explicit CRD/API defaults to manifests that were causing ArgoCD's
SSA dry-run to produce results different from live state:

- HTTPRoutes: add group, kind, weight defaults to parentRefs/backendRefs
- Kyverno ClusterPolicies: add skipBackgroundRequests, allowExistingViolations
- Tetragon TracingPolicies: add return, maxData, resolve, returnCopy defaults
- Gateway certificateRefs: add group="" default
- Guacamole Gateway: add group="" to certificateRefs

Add ignoreDifferences for resources that legitimately differ:
- Cilium cert Secrets (auto-generated, data always differs)
- Istio ValidatingWebhookConfiguration failurePolicy (istiod mutates)
- Crowdsec LAPI Secrets (randomly generated)
- ServiceMonitor/PodMonitor relabeling action defaults
- StatefulSet volumeClaimTemplates apiVersion/kind defaults

Persist argocd-cm ignoreDifferences config in ArgoCD Helm values.

Co-Authored-By: Claude Opus 4.6 <noreply@anthropic.com>
 2026-03-10 17:32:59 -05:00
Scooby HuskyandClaude Opus 4.6 4270309224 Add RespectIgnoreDifferences=true to all Application CRDs 
Works with the ignoreDifferences config in argocd-cm to prevent
auto-sync from triggering on controller-managed field changes
(ESO finalizers, HTTPRoute annotations, etc.)

Co-Authored-By: Claude Opus 4.6 <noreply@anthropic.com>
 2026-03-10 07:12:58 -05:00
Scooby HuskyandClaude Opus 4.6 0ac21eae47 Add ServerSideDiff=true to all Application CRDs 
Apps using ServerSideApply without ServerSideDiff causes ArgoCD to
compute diffs client-side, which detects controller-added fields
(finalizers, defaults, annotations) as changes and keeps apps
permanently OutOfSync. ServerSideDiff uses dry-run SSA for accurate
diff computation.

Co-Authored-By: Claude Opus 4.6 <noreply@anthropic.com>
 2026-03-10 07:03:01 -05:00
Scooby HuskyandClaude Opus 4.6 6ffce07230 Disable auto-sync for rook-ceph-operator ArgoCD app 
The Rook operator reconciles OSD deployments and removes the
expand-bluefs=/bin/true workaround patches needed for BlueStore UUID
mismatch. Keep operator scaled to 0 with manual sync only until the
underlying issue is resolved.

Co-Authored-By: Claude Opus 4.6 <noreply@anthropic.com>
 2026-03-10 06:37:44 -05:00
Scooby HuskyandClaude Opus 4.6 2446acc82e Fix envoy-gateway and netbird-operator chart repo URLs 
Envoy Gateway moved to OCI registry (docker.io/envoyproxy).
NetBird operator charts moved to https://netbirdio.github.io/helms
with chart name kubernetes-operator.

Co-Authored-By: Claude Opus 4.6 <noreply@anthropic.com>
 2026-03-10 05:08:57 -05:00
Scooby HuskyandClaude Opus 4.6 7640fb895b Fix degraded ArgoCD applications 
- frigate: Remove duplicate PVCs (Helm manages them), update config size to 15Gi
- gitlab: Fix sync-admin-job secretKeyRef schema error, fetch password via kubectl
- nextcloud: Remove duplicate PVC, remove invalid pod-level securityContext
- rook-ceph: Update cephfs-smb-pvc to 50Gi, remove unsupported dashboard.config
- nessus: Add privileged PSS label for NET_ADMIN/NET_RAW capabilities
- scylla-manager: Add privileged PSS label for SYS_NICE capability
- n8n: Create missing n8n-main-persistence PVC
- projects: Add authentik namespace to applications project destinations

Co-Authored-By: Claude Opus 4.6 <noreply@anthropic.com>
 2026-03-10 00:05:29 -05:00
Scooby Husky 11eddf4971 Set GitLab repo URL and update ArgoCD hostAliases 2026-03-09 22:18:26 -05:00
Scooby Husky aacb8eebbe Initial commit 2026-03-09 20:21:35 -05:00