K3S-HOME/platform
1
0
Fork 0
Code Issues Pull Requests Actions Packages Projects Releases Wiki Activity
33 Commits 1 Branch 0 Tags
82781cb4f1fa3390cb227b6626ec97d3e894c3ff
Commit Graph

10 Commits

Author SHA1 Message Date
Mayne0213
f62c02a152 REVERT(repo): remove unused controllers yaml 
- ArgoCD deployments are not managed by this repo
- Use 'kubectl scale' to disable unused controllers instead
 2026-01-04 23:28:29 +09:00
Mayne0213
00dcd5aeea CHORE(argocd): disable unused ArgoCD controllers 
- notifications: Not using alerts
- applicationset: Not using ApplicationSet templates
- dex: Using Authelia SSO instead
- Saves ~200-300 MiB memory and removes 3-minute reconciliation loop
 2026-01-04 23:28:29 +09:00
Mayne0213
bce82706d3 CHORE(argocd): set argocd reconciliation interval 
- to 24h
- Reduce memory usage from frequent reconciliation (was 3min default)
- 53 applications checked every 3min caused ~1GiB memory fluctuation
- Manual Refresh/Sync still available when needed
 2026-01-04 23:28:29 +09:00
Mayne0213
408f1cc16b FEAT(authelia): add SSO to Vault and ArgoCD 
- Add Authelia SSO to vault and argocd ingress
- Enable single sign-on authentication
 2026-01-04 23:28:29 +09:00
Mayne0213
d80a212e6e REFACTOR(traefik): switch from HAProxy 
- to Traefik ingress controller
- Update all ingress files to use ingressClassName: traefik
- Update cert-manager ClusterIssuer to use traefik class
- Remove haproxy.org annotations from ingress files
- Update vault helm-values to use traefik
 2026-01-04 23:28:29 +09:00
Mayne0213
a3f5f038b2 FIX(argocd): restore namespace.yaml for ArgoCD 
- Restore namespace configuration for ArgoCD
- Special case for ArgoCD namespace
 2026-01-04 23:28:29 +09:00
Mayne0213
1d7970a42f REFACTOR(goldilocks): use managedNS for labels 
- Remove namespace.yaml files
- Add managedNamespaceMetadata with Goldilocks label
- Set CreateNamespace=true in syncOptions
- Update kustomization.yaml to remove namespace.yaml references
 2026-01-04 23:28:29 +09:00
Mayne0213
ce2ee8d39e REFACTOR(repo): restructure infra folder structure 
- Remove argocd/, helm-values/, ingress/ subdirectories
- Move files to parent directory with standardized names
- Add namespace.yaml to all apps with Goldilocks labels
- Preserve vault/ subdirectories (falco, velero)
- Update main kustomization.yaml to reference argocd.yaml files directly
- Comment out argocd.yaml in each app's kustomization.yaml to prevent
  circular reference

Applications restructured:
- cert-manager (2 ArgoCD apps)
- external-secrets
- reloader
- vault (2 ArgoCD apps)
- velero (2 ArgoCD apps)
- falco
- cnpg
- haproxy
- metallb
- vpa
- argocd
 2025-12-29 02:21:00 +09:00
Mayne0213
157e69d9cb CHORE(traefik): split centralized ingress to per-application 
- Moved ArgoCD ingress to argocd/ingress/
- Moved Velero ingress to velero/ingress/
- Removed centralized ingress/ingresses.yaml
- Each application now manages its own ingress independently
 2025-12-25 20:20:35 +09:00
Mayne0213
bdf974ac3e FEAT(argocd): add argocd insecure mode config 
- Created argocd-cmd-params-cm ConfigMap
- Set server.insecure: true to fix redirect loop
- ArgoCD will run in insecure mode (ingress handles TLS)
 2025-12-25 20:01:19 +09:00