feat(bootstrap): Add healthcheck before moving forward

applications/add-ons/cert-manager.yaml

@@ -3,6 +3,8 @@ kind: Application
 metadata:
   name: cert-manager
   namespace: argocd
+  annotations:
+    argocd.argoproj.io/sync-wave: "1"
 spec:
   project: default
   sources:

applications/add-ons/cnpg.yaml

@@ -3,6 +3,8 @@ kind: Application
 metadata:
   name: cnpg
   namespace: argocd
+  annotations:
+    argocd.argoproj.io/sync-wave: "0"
 spec:
   project: default
   sources:

applications/add-ons/sealed-secrets.yaml

@@ -3,6 +3,8 @@ kind: Application
 metadata:
   name: sealed-secrets
   namespace: argocd
+  annotations:
+    argocd.argoproj.io/sync-wave: "0"
 spec:
   project: default
   source:

applications/add-ons/traefik.yaml

@@ -3,39 +3,44 @@ kind: Application
 metadata:
   name: traefik
   namespace: argocd
+  annotations:
+    argocd.argoproj.io/sync-wave: "2"
 spec:
   project: default
-  source:
+  sources:
-    repoURL: https://traefik.github.io/charts
+    - repoURL: https://traefik.github.io/charts
-    chart: traefik
+      chart: traefik
-    targetRevision: v39.0.2
+      targetRevision: v39.0.2
-    helm:
+      helm:
-      values: |
+        values: |
-        providers:
+          providers:
-          kubernetesGateway:
+            kubernetesGateway:
-            enabled: true
+              enabled: true
-          kubernetesIngress:
+            kubernetesIngress:
-            enabled: false
+              enabled: false
-        service:
+          service:
-          type: ClusterIP
+            type: ClusterIP
-          externalIPs:
+            externalIPs:
-            - 192.168.2.5
+              - 192.168.2.5
-        gateway:
+          gateway:
-          listeners:
+            listeners:
-            web:
+              web:
-              namespacePolicy:
+                namespacePolicy:
-                from: All
+                  from: All
-            websecure:
+              websecure:
-              port: 8443
+                port: 8443
-              protocol: HTTPS
+                protocol: HTTPS
-              mode: Terminate
+                mode: Terminate
-              hostname: "*.whyredfire.dev"
+                hostname: "*.whyredfire.dev"
-              namespacePolicy:
+                namespacePolicy:
-                from: All
+                  from: All
-              certificateRefs:
+                certificateRefs:
-                - kind: Secret
+                  - kind: Secret
-                  name: wildcard-whyredfire-dev
+                    name: wildcard-whyredfire-dev
-                  group: ""
+                    group: ""
+    - repoURL: https://gitea.whyredfire.dev/whyredfire/gitops.git
+      targetRevision: main
+      path: extras/add-ons/traefik
   destination:
     server: https://kubernetes.default.svc
     namespace: traefik

applications/kustomization.yaml

@@ -15,3 +15,4 @@ resources:
   - services/app-scriptscribe.yaml
   - services/app-seaweedfs.yaml
   - services/app-qbit.yaml
+  - services/app-stirling-pdf.yaml

applications/services/app-argocd-repos.yaml

@@ -3,12 +3,14 @@ kind: Application
 metadata:
   name: argocd-repos
   namespace: argocd
+  annotations:
+    argocd.argoproj.io/sync-wave: "1"
 spec:
   project: default
   source:
     repoURL: https://gitea.whyredfire.dev/whyredfire/gitops.git
     targetRevision: main
-    path: add-ons/argocd-repos
+    path: extras/add-ons/argocd-repos
   destination:
     server: https://kubernetes.default.svc
     namespace: argocd

applications/services/app-autoregexbot.yaml

@@ -2,6 +2,8 @@ apiVersion: argoproj.io/v1alpha1
 kind: Application
 metadata:
   name: telegram-autoregexbot
+  annotations:
+    argocd.argoproj.io/sync-wave: "3"
   namespace: argocd
 spec:
   project: default

applications/services/app-betterslcm.yaml

@@ -2,6 +2,8 @@ apiVersion: argoproj.io/v1alpha1
 kind: Application
 metadata:
   name: betterslcm
+  annotations:
+    argocd.argoproj.io/sync-wave: "3"
   namespace: argocd
 spec:
   project: default

applications/services/app-jellyfin.yaml

@@ -2,6 +2,8 @@ apiVersion: argoproj.io/v1alpha1
 kind: Application
 metadata:
   name: jellyfin
+  annotations:
+    argocd.argoproj.io/sync-wave: "3"
   namespace: argocd
 spec:
   project: default

applications/services/app-legislative-summarization.yaml

@@ -2,6 +2,8 @@ apiVersion: argoproj.io/v1alpha1
 kind: Application
 metadata:
   name: legislative-summarization
+  annotations:
+    argocd.argoproj.io/sync-wave: "3"
   namespace: argocd
 spec:
   project: default

applications/services/app-qbit.yaml

@@ -2,6 +2,8 @@ apiVersion: argoproj.io/v1alpha1
 kind: Application
 metadata:
   name: qbit
+  annotations:
+    argocd.argoproj.io/sync-wave: "3"
   namespace: argocd
 spec:
   project: default

applications/services/app-scriptscribe.yaml

@@ -2,6 +2,8 @@ apiVersion: argoproj.io/v1alpha1
 kind: Application
 metadata:
   name: scriptscribe
+  annotations:
+    argocd.argoproj.io/sync-wave: "3"
   namespace: argocd
 spec:
   project: default

applications/services/app-seaweedfs.yaml

@@ -2,6 +2,8 @@ apiVersion: argoproj.io/v1alpha1
 kind: Application
 metadata:
   name: seaweedfs
+  annotations:
+    argocd.argoproj.io/sync-wave: "3"
   namespace: argocd
 spec:
   project: default

applications/services/app-stirling-pdf.yaml

@@ -0,0 +1,40 @@
+apiVersion: argoproj.io/v1alpha1
+kind: Application
+metadata:
+  name: stirling-pdf
+  annotations:
+    argocd.argoproj.io/sync-wave: "3"
+  namespace: argocd
+spec:
+  project: default
+  sources:
+    - repoURL: https://docs.stirlingpdf.com/Stirling-PDF-chart
+      chart: stirling-pdf-chart
+      targetRevision: "3.1.0"
+      helm:
+        values: |
+          fullnameOverride: stirling-pdf
+          persistence:
+            enabled: true
+            size: 512Mi
+          deployment:
+            extraVolumeMounts:
+              - name: storage-volume
+                mountPath: /configs
+          probes:
+            liveness:
+              initialDelaySeconds: 90
+            readiness:
+              initialDelaySeconds: 60
+    - repoURL: https://gitea.whyredfire.dev/whyredfire/gitops.git
+      targetRevision: main
+      path: extras/services/stirling-pdf
+  destination:
+    server: https://kubernetes.default.svc
+    namespace: stirling-pdf
+  syncPolicy:
+    automated:
+      prune: true
+      selfHeal: true
+    syncOptions:
+      - CreateNamespace=true

bootstrap/argocd-cm-application-health-patch.yaml

@@ -0,0 +1,18 @@
+apiVersion: v1
+kind: ConfigMap
+metadata:
+  name: argocd-cm
+data:
+  resource.customizations.health.argoproj.io_Application: |
+    hs = {}
+    hs.status = "Progressing"
+    hs.message = ""
+    if obj.status ~= nil then
+      if obj.status.health ~= nil then
+        hs.status = obj.status.health.status
+        if obj.status.health.message ~= nil then
+          hs.message = obj.status.health.message
+        end
+      end
+    end
+    return hs

bootstrap/kustomization.yaml

@@ -9,3 +9,7 @@ patches:
       kind: Service
       name: argocd-server
     path: argocd-server-nodeport-patch.yaml
+  - target:
+      kind: ConfigMap
+      name: argocd-cm
+    path: argocd-cm-application-health-patch.yaml

extras/add-ons/cert-manager/cluster-issuer.yaml

@@ -2,6 +2,8 @@ apiVersion: cert-manager.io/v1
 kind: ClusterIssuer
 metadata:
   name: letsencrypt-prod
+  annotations:
+    argocd.argoproj.io/sync-wave: "1"
 spec:
   acme:
     server: https://acme-v02.api.letsencrypt.org/directory

extras/services/jellyfin/httproute-local.yaml

@@ -3,6 +3,8 @@ kind: HTTPRoute
 metadata:
   name: jellyfin-local
   namespace: jellyfin
+  annotations:
+    argocd.argoproj.io/sync-wave: "1"
 spec:
   parentRefs:
     - name: traefik-gateway

extras/services/jellyfin/httproute.yaml

@@ -3,6 +3,8 @@ kind: HTTPRoute
 metadata:
   name: jellyfin
   namespace: jellyfin
+  annotations:
+    argocd.argoproj.io/sync-wave: "1"
 spec:
   parentRefs:
     - name: traefik-gateway

extras/services/seaweedfs/httproute-filer.yaml

@@ -3,6 +3,8 @@ kind: HTTPRoute
 metadata:
   name: seaweedfs-filer
   namespace: seaweedfs
+  annotations:
+    argocd.argoproj.io/sync-wave: "1"
 spec:
   parentRefs:
     - group: gateway.networking.k8s.io

extras/services/seaweedfs/httproute-master.yaml

@@ -3,6 +3,8 @@ kind: HTTPRoute
 metadata:
   name: seaweedfs-master
   namespace: seaweedfs
+  annotations:
+    argocd.argoproj.io/sync-wave: "1"
 spec:
   parentRefs:
     - group: gateway.networking.k8s.io

extras/services/stirling-pdf/httproute.yaml

@@ -0,0 +1,24 @@
+apiVersion: gateway.networking.k8s.io/v1
+kind: HTTPRoute
+metadata:
+  name: stirling-pdf
+  namespace: stirling-pdf
+  annotations:
+    argocd.argoproj.io/sync-wave: "1"
+spec:
+  parentRefs:
+    - name: traefik-gateway
+      namespace: traefik
+      kind: Gateway
+      sectionName: websecure
+  hostnames:
+    - pdf.whyredfire.dev
+  rules:
+    - matches:
+        - path:
+            type: PathPrefix
+            value: /
+      backendRefs:
+        - name: stirling-pdf
+          port: 8080
+