feat(bootstrap): Add healthcheck before moving forward

applications/add-ons/cert-manager.yaml

@@ -3,6 +3,8 @@ kind: Application
 metadata:
   name: cert-manager
   namespace: argocd
+  annotations:
+    argocd.argoproj.io/sync-wave: "1"
 spec:
   project: default
   sources:

applications/add-ons/cnpg.yaml

@@ -3,6 +3,8 @@ kind: Application
 metadata:
   name: cnpg
   namespace: argocd
+  annotations:
+    argocd.argoproj.io/sync-wave: "0"
 spec:
   project: default
   sources:

applications/add-ons/sealed-secrets.yaml

@@ -3,6 +3,8 @@ kind: Application
 metadata:
   name: sealed-secrets
   namespace: argocd
+  annotations:
+    argocd.argoproj.io/sync-wave: "0"
 spec:
   project: default
   source:

applications/add-ons/traefik.yaml

@@ -3,10 +3,12 @@ kind: Application
 metadata:
   name: traefik
   namespace: argocd
+  annotations:
+    argocd.argoproj.io/sync-wave: "2"
 spec:
   project: default
-  source:
-    repoURL: https://traefik.github.io/charts
+  sources:
+    - repoURL: https://traefik.github.io/charts
       chart: traefik
       targetRevision: v39.0.2
       helm:
@@ -36,6 +38,9 @@ spec:
                   - kind: Secret
                     name: wildcard-whyredfire-dev
                     group: ""
+    - repoURL: https://gitea.whyredfire.dev/whyredfire/gitops.git
+      targetRevision: main
+      path: extras/add-ons/traefik
   destination:
     server: https://kubernetes.default.svc
     namespace: traefik

applications/services/app-argocd-repos.yaml

@@ -3,6 +3,8 @@ kind: Application
 metadata:
   name: argocd-repos
   namespace: argocd
+  annotations:
+    argocd.argoproj.io/sync-wave: "1"
 spec:
   project: default
   source:

applications/services/app-autoregexbot.yaml

@@ -2,6 +2,8 @@ apiVersion: argoproj.io/v1alpha1
 kind: Application
 metadata:
   name: telegram-autoregexbot
+  annotations:
+    argocd.argoproj.io/sync-wave: "3"
   namespace: argocd
 spec:
   project: default

applications/services/app-betterslcm.yaml

@@ -2,6 +2,8 @@ apiVersion: argoproj.io/v1alpha1
 kind: Application
 metadata:
   name: betterslcm
+  annotations:
+    argocd.argoproj.io/sync-wave: "3"
   namespace: argocd
 spec:
   project: default

applications/services/app-jellyfin.yaml

@@ -2,6 +2,8 @@ apiVersion: argoproj.io/v1alpha1
 kind: Application
 metadata:
   name: jellyfin
+  annotations:
+    argocd.argoproj.io/sync-wave: "3"
   namespace: argocd
 spec:
   project: default

applications/services/app-legislative-summarization.yaml

@@ -2,6 +2,8 @@ apiVersion: argoproj.io/v1alpha1
 kind: Application
 metadata:
   name: legislative-summarization
+  annotations:
+    argocd.argoproj.io/sync-wave: "3"
   namespace: argocd
 spec:
   project: default

applications/services/app-qbit.yaml

@@ -2,6 +2,8 @@ apiVersion: argoproj.io/v1alpha1
 kind: Application
 metadata:
   name: qbit
+  annotations:
+    argocd.argoproj.io/sync-wave: "3"
   namespace: argocd
 spec:
   project: default

applications/services/app-scriptscribe.yaml

@@ -2,6 +2,8 @@ apiVersion: argoproj.io/v1alpha1
 kind: Application
 metadata:
   name: scriptscribe
+  annotations:
+    argocd.argoproj.io/sync-wave: "3"
   namespace: argocd
 spec:
   project: default

applications/services/app-seaweedfs.yaml

@@ -2,6 +2,8 @@ apiVersion: argoproj.io/v1alpha1
 kind: Application
 metadata:
   name: seaweedfs
+  annotations:
+    argocd.argoproj.io/sync-wave: "3"
   namespace: argocd
 spec:
   project: default

applications/services/app-stirling-pdf.yaml

@@ -2,6 +2,8 @@ apiVersion: argoproj.io/v1alpha1
 kind: Application
 metadata:
   name: stirling-pdf
+  annotations:
+    argocd.argoproj.io/sync-wave: "3"
   namespace: argocd
 spec:
   project: default

bootstrap/argocd-cm-application-health-patch.yaml

@@ -0,0 +1,18 @@
+apiVersion: v1
+kind: ConfigMap
+metadata:
+  name: argocd-cm
+data:
+  resource.customizations.health.argoproj.io_Application: |
+    hs = {}
+    hs.status = "Progressing"
+    hs.message = ""
+    if obj.status ~= nil then
+      if obj.status.health ~= nil then
+        hs.status = obj.status.health.status
+        if obj.status.health.message ~= nil then
+          hs.message = obj.status.health.message
+        end
+      end
+    end
+    return hs

bootstrap/kustomization.yaml

@@ -9,3 +9,7 @@ patches:
       kind: Service
       name: argocd-server
     path: argocd-server-nodeport-patch.yaml
+  - target:
+      kind: ConfigMap
+      name: argocd-cm
+    path: argocd-cm-application-health-patch.yaml

extras/add-ons/cert-manager/cluster-issuer.yaml

@@ -2,6 +2,8 @@ apiVersion: cert-manager.io/v1
 kind: ClusterIssuer
 metadata:
   name: letsencrypt-prod
+  annotations:
+    argocd.argoproj.io/sync-wave: "1"
 spec:
   acme:
     server: https://acme-v02.api.letsencrypt.org/directory

extras/services/jellyfin/httproute-local.yaml

@@ -3,6 +3,8 @@ kind: HTTPRoute
 metadata:
   name: jellyfin-local
   namespace: jellyfin
+  annotations:
+    argocd.argoproj.io/sync-wave: "1"
 spec:
   parentRefs:
     - name: traefik-gateway

extras/services/jellyfin/httproute.yaml

@@ -3,6 +3,8 @@ kind: HTTPRoute
 metadata:
   name: jellyfin
   namespace: jellyfin
+  annotations:
+    argocd.argoproj.io/sync-wave: "1"
 spec:
   parentRefs:
     - name: traefik-gateway

extras/services/seaweedfs/httproute-filer.yaml

@@ -3,6 +3,8 @@ kind: HTTPRoute
 metadata:
   name: seaweedfs-filer
   namespace: seaweedfs
+  annotations:
+    argocd.argoproj.io/sync-wave: "1"
 spec:
   parentRefs:
     - group: gateway.networking.k8s.io

extras/services/seaweedfs/httproute-master.yaml

@@ -3,6 +3,8 @@ kind: HTTPRoute
 metadata:
   name: seaweedfs-master
   namespace: seaweedfs
+  annotations:
+    argocd.argoproj.io/sync-wave: "1"
 spec:
   parentRefs:
     - group: gateway.networking.k8s.io

extras/services/stirling-pdf/httproute.yaml

@@ -3,6 +3,8 @@ kind: HTTPRoute
 metadata:
   name: stirling-pdf
   namespace: stirling-pdf
+  annotations:
+    argocd.argoproj.io/sync-wave: "1"
 spec:
   parentRefs:
     - name: traefik-gateway
@@ -10,7 +12,7 @@ spec:
       kind: Gateway
       sectionName: websecure
   hostnames:
-    - stirling-pdf.whyredfire.dev
+    - pdf.whyredfire.dev
   rules:
     - matches:
         - path: