7e66d1edf3
Build and Deploy Platform / build-and-deploy (push) Failing after 20m1s
- Workflow now pushes image tags to the separate cloud-host-gitops repo
(no more CI loop risk) and authenticates via CI_TOKEN secret
- Fix undefined ${REGISTRY} in Kaniko jobs, add concurrency group,
targeted tag update, and mounted kaniko-harbor-auth docker config
- Argo CD Application is now multi-source (chart from cloud-host,
values from cloud-host-gitops)
- Remove plaintext runner token and proxy credentials from manifests;
secrets are now SealedSecrets in the gitops repo
Co-authored-by: Cursor <cursoragent@cursor.com>
30 lines
901 B
YAML
30 lines
901 B
YAML
# Source of truth for this file: cloud-host-gitops repo (argocd/application-platform.yaml).
|
|
# Kept here as a mirror for bootstrap convenience.
|
|
apiVersion: argoproj.io/v1alpha1
|
|
kind: Application
|
|
metadata:
|
|
name: abrban-platform
|
|
namespace: argocd
|
|
spec:
|
|
project: default
|
|
# Multi-source: chart lives in the app repo, values (GitOps state) live in cloud-host-gitops.
|
|
sources:
|
|
- repoURL: https://git.abrban.com/abrban/cloud-host.git
|
|
targetRevision: main
|
|
path: backend/helm/cloudhost-platform
|
|
helm:
|
|
valueFiles:
|
|
- $values/platform/values-abrban.yaml
|
|
- repoURL: https://git.abrban.com/abrban/cloud-host-gitops.git
|
|
targetRevision: main
|
|
ref: values
|
|
destination:
|
|
server: https://kubernetes.default.svc
|
|
namespace: cloudhost
|
|
syncPolicy:
|
|
automated:
|
|
prune: true
|
|
selfHeal: true
|
|
syncOptions:
|
|
- CreateNamespace=false
|