[REVERTME] bootstrap: Switch argocd remote to local

{"grpc.code":"Unknown","grpc.component":"server","grpc.error":"failed to list refs: unexpected client error: unexpected requesting \"https://gitlab.com/whyredfire/gitops/info/refs?service=git-upload-pack\" status code: 301","grpc.method":"GenerateManifest","grpc.method_type":"unary","grpc.request.deadline":"2026-01-26T14:31:42Z","grpc.service":"repository.RepoServerService","grpc.start_time":"2026-01-26T14:30:42Z","grpc.time_ms":"883.443","level":"error","msg":"finished call","peer.address":"10.42.0.30:49920","protocol":"grpc","time":"2026-01-26T14:30:43Z"}

applications/kustomization.yaml

@@ -2,5 +2,4 @@ apiVersion: kustomize.config.k8s.io/v1beta1
 kind: Kustomization
 
 resources:
-  - deployment.yaml
+  - services
-  - service.yaml

applications/services/app-autoregexbot.yaml

@@ -6,12 +6,12 @@ metadata:
 spec:
   project: default
   source:
-    repoURL: https://gitea.whyredfire.tech/whyredfire/telegram-autoregexbot
+    repoURL: https://github.com/santarl/telegram-autoregexbot
     targetRevision: main
     path: k8s
   destination:
     server: https://kubernetes.default.svc
-    namespace: telegram
+    namespace: telegram-bot
   syncPolicy:
     automated:
       prune: true

applications/services/app-betterslcm.yaml

@@ -1,17 +1,17 @@
 apiVersion: argoproj.io/v1alpha1
 kind: Application
 metadata:
-  name: nginx
+  name: betterslcm
   namespace: argocd
 spec:
   project: default
   source:
-    repoURL: https://gitea.whyredfire.tech/whyredfire/gitops
+    repoURL: https://github.com/DK10WS/SLCM_APP.git
-    targetRevision: main
+    targetRevision: web
-    path: manifests/nginx
+    path: k8s
   destination:
     server: https://kubernetes.default.svc
-    namespace: nginx
+    namespace: slcm
   syncPolicy:
     automated:
       prune: true

applications/services/kustomization.yaml

@@ -0,0 +1,5 @@
+apiVersion: kustomize.config.k8s.io/v1beta1
+kind: Kustomization
+
+resources:
+  - app-autoregexbot.yaml

apps/cert-manager.yaml

@@ -1,17 +0,0 @@
-apiVersion: argoproj.io/v1alpha1
-kind: Application
-metadata:
-  name: cert-manager
-  namespace: argocd
-spec:
-  project: default
-  source:
-    repoURL: https://gitea.whyredfire.tech/whyredfire/gitops
-    targetRevision: main
-    path: infra/cert-manager
-  destination:
-    server: https://kubernetes.default.svc
-  syncPolicy:
-    automated:
-      prune: true
-      selfHeal: true

apps/kustomization.yaml

@@ -1,9 +0,0 @@
-apiVersion: kustomize.config.k8s.io/v1beta1
-kind: Kustomization
-
-resources:
-  - nginx-app.yaml
-  - scriptscribe.yaml
-  - sealed-secrets.yaml
-  - cert-manager.yaml
-  - telegram-autoregexbot.yaml

apps/sealed-secrets.yaml

@@ -1,17 +0,0 @@
-apiVersion: argoproj.io/v1alpha1
-kind: Application
-metadata:
-  name: sealed-secrets
-  namespace: argocd
-spec:
-  project: default
-  source:
-    repoURL: https://gitea.whyredfire.tech/whyredfire/gitops
-    targetRevision: main
-    path: infra/sealed-secrets
-  destination:
-    server: https://kubernetes.default.svc
-  syncPolicy:
-    automated:
-      prune: true
-      selfHeal: true

bootstrap/argocd-root-app/kustomization.yaml

@@ -4,4 +4,3 @@ kind: Kustomization
 resources:
   - namespace.yaml
   - root-app.yaml
-  - ssh-known-hosts-cm.yaml

bootstrap/argocd-root-app/root-app.yaml

@@ -6,9 +6,9 @@ metadata:
 spec:
   project: default
   source:
-    repoURL: https://gitea.whyredfire.tech/whyredfire/gitops
+    repoURL: https://gitea.whyredfire.tech/whyredfire/gitops.git
     targetRevision: main
-    path: apps
+    path: applications
   destination:
     server: https://kubernetes.default.svc
     namespace: argocd

bootstrap/argocd-server-nodeport-patch.yaml

@@ -0,0 +1,12 @@
+apiVersion: v1
+kind: Service
+metadata:
+  name: argocd-server
+spec:
+  type: NodePort
+  ports:
+    - name: https
+      port: 443
+      protocol: TCP
+      targetPort: 8080
+      nodePort: 30443

bootstrap/argocd/ssh-known-hosts-cm.yaml

@@ -1,16 +0,0 @@
-apiVersion: v1
-kind: ConfigMap
-metadata:
-  name: argocd-ssh-known-hosts-c
-  namespace: argocd
-data:
-  known_hosts: |
-    # gitea-ssh.whyredfire.tech:22 SSH-2.0-OpenSSH_10.0
-    gitea-ssh.whyredfire.tech ssh-ed25519 AAAAC3NzaC1lZDI1NTE5AAAAIANyEkbFQN5Yl8Vb6EAwzh2EveEj3yKXirFfXyuFqIV+
-    # gitea-ssh.whyredfire.tech:22 SSH-2.0-OpenSSH_10.0
-    gitea-ssh.whyredfire.tech ssh-rsa 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
-    # gitea-ssh.whyredfire.tech:22 SSH-2.0-OpenSSH_10.0
-    gitea-ssh.whyredfire.tech ecdsa-sha2-nistp256 AAAAE2VjZHNhLXNoYTItbmlzdHAyNTYAAAAIbmlzdHAyNTYAAABBBDLoFqTU09bU6ONUr9XvJT8G3zfwOviHw+ZM1EwPWVL5HEotYssWEjyteZGws5I0mXIuNJljL0BY1QSPoJaeAU8=
-    # gitea-ssh.whyredfire.tech:22 SSH-2.0-OpenSSH_10.0
-    # gitea-ssh.whyredfire.tech:22 SSH-2.0-OpenSSH_10.0
-

bootstrap/kustomization.yaml

@@ -4,5 +4,11 @@ kind: Kustomization
 namespace: argocd
 
 resources:
-  - https://raw.githubusercontent.com/argoproj/argo-cd/v3.2.0/manifests/install.yaml
+  - https://raw.githubusercontent.com/argoproj/argo-cd/v3.2.6/manifests/install.yaml
-  - argocd
+  - argocd-root-app
+
+patches:
+  - target:
+      kind: Service
+      name: argocd-server
+    path: argocd-server-nodeport-patch.yaml

infra/cert-manager/kustomization.yaml

@@ -1,6 +0,0 @@
-apiVersion: kustomize.config.k8s.io/v1beta1
-kind: Kustomization
-
-resources:
-  - https://github.com/cert-manager/cert-manager/releases/download/v1.19.2/cert-manager.yaml
-  - letsencrypt-issuer.yaml

infra/cert-manager/letsencrypt-issuer.yaml

@@ -1,14 +0,0 @@
-apiVersion: cert-manager.io/v1
-kind: ClusterIssuer
-metadata:
-  name: letsencrypt-prod
-spec:
-  acme:
-    server: https://acme-v02.api.letsencrypt.org/directory
-    email: [email protected]
-    privateKeySecretRef:
-      name: letsencrypt-prod
-    solvers:
-      - http01:
-          ingress:
-            class: traefik

infra/sealed-secrets/kustomization.yaml

@@ -1,6 +0,0 @@
-apiVersion: kustomize.config.k8s.io/v1beta1
-kind: Kustomization
-
-resources:
-  - https://github.com/bitnami-labs/sealed-secrets/releases/download/v0.33.1/controller.yaml
-

manifests/nginx/deployment.yaml

@@ -1,21 +0,0 @@
-apiVersion: apps/v1
-kind: Deployment
-metadata:
-  name: nginx
-  labels:
-    app: nginx
-spec:
-  replicas: 2
-  selector:
-    matchLabels:
-      app: nginx
-  template:
-    metadata:
-      labels:
-        app: nginx
-    spec:
-      containers:
-      - name: nginx
-        image: nginx:1.29-alpine-slim
-        ports:
-        - containerPort: 80

manifests/nginx/service.yaml

@@ -1,11 +0,0 @@
-apiVersion: v1
-kind: Service
-metadata:
-  name: nginx
-spec:
-  selector:
-    app: nginx
-  ports:
-  - port: 80
-    targetPort: 80
-  type: ClusterIP