Nik Afiq
fd13b8aedb
Some checks failed
validate / lint (push) Has been cancelled
The public domain is unreachable while moving, and the cluster had no Traefik route to Gitea at all (public or internal), leaving every Argo CD Application stuck in Unknown sync. Add a gitea.home.arpa Certificate/IngressRoute, repoint Argo CD's repoURL, Gitea's own DOMAIN/ROOT_URL/SSH_DOMAIN, the container registry references, the Gitea Actions runner, and the watch-party clone URL at the internal hostname. Co-Authored-By: Claude Sonnet 5 <noreply@anthropic.com>
32 lines
983 B
YAML
32 lines
983 B
YAML
# targetRevision below is confirmed against the live deployment's
|
|
# helm.sh/chart=authentik-2026.2.1 label on the authentik-server pod (checked
|
|
# 2026-07-23) -- not a guess. Sync is still left manual (no `automated:`
|
|
# block): diff with `kubectl diff` / `argocd app diff` before enabling
|
|
# automated sync, since Authentik is the SSO IdP gating Argo CD/Grafana/Gitea
|
|
# logins.
|
|
apiVersion: argoproj.io/v1alpha1
|
|
kind: Application
|
|
metadata:
|
|
name: authentik
|
|
namespace: argocd
|
|
annotations:
|
|
argocd.argoproj.io/sync-wave: "-1"
|
|
spec:
|
|
project: default
|
|
sources:
|
|
- repoURL: https://charts.goauthentik.io
|
|
chart: authentik
|
|
targetRevision: "2026.2.1"
|
|
helm:
|
|
valueFiles:
|
|
- $values/values/authentik.yaml
|
|
- repoURL: https://gitea.home.arpa/nik/homelab.git
|
|
targetRevision: main
|
|
ref: values
|
|
destination:
|
|
server: https://kubernetes.default.svc
|
|
namespace: authentik
|
|
syncPolicy:
|
|
syncOptions:
|
|
- CreateNamespace=true
|