ce7cb702218693d08ea6d83464d2457c9250027c

clusters/main/workloads/README.md

@@ -0,0 +1,5 @@
+# Workload Wiring
+
+This directory should contain Flux `Kustomization` resources for workload manifests under `vendor/workloads/`.
+
+`canary/` is a temporary migration exception because it was previously applied directly by the root reconciliation. Move it to `vendor/workloads/canary` only after the root inventory has reconciled safely or with an explicit inventory migration.

clusters/main/workloads/canary/configmap.yaml

@@ -0,0 +1,7 @@
+apiVersion: v1
+kind: ConfigMap
+metadata:
+  name: flux-canary
+  namespace: flux-canary
+data:
+  status: reconciled

clusters/main/workloads/canary/kustomization.yaml

@@ -0,0 +1,5 @@
+apiVersion: kustomize.config.k8s.io/v1beta1
+kind: Kustomization
+resources:
+  - namespace.yaml
+  - configmap.yaml

clusters/main/workloads/canary/namespace.yaml

@@ -0,0 +1,4 @@
+apiVersion: v1
+kind: Namespace
+metadata:
+  name: flux-canary

clusters/main/workloads/forgejo-public.yaml

@@ -0,0 +1,23 @@
+apiVersion: kustomize.toolkit.fluxcd.io/v1
+kind: Kustomization
+metadata:
+  name: platform-forgejo-public
+  namespace: flux-system
+spec:
+  interval: 15m
+  dependsOn:
+    - name: platform-longhorn-config
+    - name: platform-postgres-config
+    - name: platform-vault-config
+    - name: platform-zitadel
+    - name: platform-dragonfly
+    - name: platform-kyverno
+    - name: platform-kyverno-policies
+  sourceRef:
+    kind: GitRepository
+    name: flux-system
+  path: ./vendor/workloads/forgejo-public
+  prune: true
+  deletionPolicy: Orphan
+  wait: true
+  timeout: 10m

clusters/main/workloads/frigate.yaml

@@ -0,0 +1,24 @@
+apiVersion: kustomize.toolkit.fluxcd.io/v1
+kind: Kustomization
+metadata:
+  name: application-frigate
+  namespace: flux-system
+spec:
+  interval: 15m
+  dependsOn:
+    - name: platform-versitygw
+    - name: platform-openebs
+    - name: platform-nvidia
+    - name: platform-vault-config
+    - name: platform-cilium-config
+    - name: platform-zitadel
+    - name: platform-kyverno
+    - name: platform-kyverno-policies
+  sourceRef:
+    kind: GitRepository
+    name: flux-system
+  path: ./vendor/workloads/frigate
+  prune: true
+  deletionPolicy: Orphan
+  wait: true
+  timeout: 15m

clusters/main/workloads/grafana.yaml

@@ -0,0 +1,23 @@
+apiVersion: kustomize.toolkit.fluxcd.io/v1
+kind: Kustomization
+metadata:
+  name: application-grafana
+  namespace: flux-system
+spec:
+  interval: 15m
+  dependsOn:
+    - name: platform-grafana-operator
+    - name: platform-victoriametrics
+    - name: platform-victorialogs
+    - name: platform-postgres-config
+    - name: platform-vault-config
+    - name: platform-kyverno
+    - name: platform-kyverno-policies
+  sourceRef:
+    kind: GitRepository
+    name: flux-system
+  path: ./vendor/workloads/grafana
+  prune: true
+  deletionPolicy: Orphan
+  wait: true
+  timeout: 15m

clusters/main/workloads/hf-chat-ui.yaml

@@ -0,0 +1,24 @@
+apiVersion: kustomize.toolkit.fluxcd.io/v1
+kind: Kustomization
+metadata:
+  name: application-hf-chat-ui
+  namespace: flux-system
+spec:
+  interval: 15m
+  dependsOn:
+    - name: ca-sync
+    - name: platform-agentgateway
+    - name: platform-agentgateway-model-catalog-sync
+    - name: platform-postgres-config
+    - name: platform-vault-config
+    - name: platform-zitadel
+    - name: platform-kyverno
+    - name: platform-kyverno-policies
+  sourceRef:
+    kind: GitRepository
+    name: flux-system
+  path: ./vendor/workloads/hf-chat-ui
+  prune: true
+  deletionPolicy: Delete
+  wait: true
+  timeout: 15m

clusters/main/workloads/kustomization.yaml

@@ -0,0 +1,11 @@
+apiVersion: kustomize.config.k8s.io/v1beta1
+kind: Kustomization
+resources:
+  - forgejo-public.yaml
+  - frigate.yaml
+  - grafana.yaml
+  - canary
+  - tier-o-canary.yaml
+  - mta-sts.yaml
+  - hf-chat-ui.yaml
+  - minecraft.yaml

clusters/main/workloads/minecraft.yaml

@@ -0,0 +1,19 @@
+apiVersion: kustomize.toolkit.fluxcd.io/v1
+kind: Kustomization
+metadata:
+  name: app-minecraft
+  namespace: flux-system
+spec:
+  interval: 15m
+  dependsOn:
+    - name: platform-openebs
+    - name: platform-vault-config
+    - name: platform-cilium-config
+  sourceRef:
+    kind: GitRepository
+    name: flux-system
+  path: ./services/minecraft
+  prune: true
+  deletionPolicy: Orphan
+  wait: true
+  timeout: 15m

clusters/main/workloads/mta-sts.yaml

@@ -0,0 +1,21 @@
+apiVersion: kustomize.toolkit.fluxcd.io/v1
+kind: Kustomization
+metadata:
+  name: application-mta-sts
+  namespace: flux-system
+spec:
+  interval: 15m
+  dependsOn:
+    - name: platform-cloudflare-tunnel
+    - name: platform-gvisor
+    - name: platform-cilium-config
+    - name: platform-kyverno
+    - name: platform-kyverno-policies
+  sourceRef:
+    kind: GitRepository
+    name: flux-system
+  path: ./vendor/workloads/mta-sts
+  prune: true
+  deletionPolicy: Orphan
+  wait: true
+  timeout: 10m

clusters/main/workloads/tier-o-canary.yaml

@@ -0,0 +1,21 @@
+apiVersion: kustomize.toolkit.fluxcd.io/v1
+kind: Kustomization
+metadata:
+  name: application-tier-o-canary
+  namespace: flux-system
+spec:
+  interval: 15m
+  dependsOn:
+    - name: platform-cloudflare-tunnel
+    - name: platform-gvisor
+    - name: platform-cilium-config
+    - name: platform-kyverno
+    - name: platform-kyverno-policies
+  sourceRef:
+    kind: GitRepository
+    name: flux-system
+  path: ./vendor/workloads/tier-o-canary
+  prune: true
+  deletionPolicy: Orphan
+  wait: true
+  timeout: 10m