Adopt five PHP sites with Argo CD

2026-10-18 15:39:03 +02:00
parent f6fee28484
commit cc0679772e
23 changed files with 282 additions and 1 deletions
@@ -12,8 +12,12 @@ container images and then commits the selected image tag here; it never receives
  cluster's L2 address pool.
 - `apps/argocd/` wraps the pinned upstream Argo CD chart with this cluster's
  ingress, Authentik OIDC, RBAC, and secret-reference configuration.
+- `apps/brgkepler-com/`, `apps/gschissenes-equipment/`,
+  `apps/immich-crack/`, `apps/pfostendynamics-com/`, and
+  `apps/watschn-studio/` pin the shared PHP homepage chart and reference their
+  existing CephFS content claims.
 - `bootstrap/` contains Argo CD projects and Applications, including the
-  upstream Sealed Secrets controller.
+  upstream Sealed Secrets controller and the five PHP sites above.
 - `scripts/update-immich-sync-image.sh` is the single image-promotion interface used by CI.
 - `scripts/update-immichframe-chart.sh` is the chart-promotion interface used
  by ImmichFrame chart CI.
@@ -0,0 +1,2 @@
+Chart.lock
+charts/
@@ -0,0 +1,8 @@
+apiVersion: v2
+name: brgkepler-com
+type: application
+version: 0.1.0
+dependencies:
+- name: php-homepage
+  version: 0.10.1
+  repository: https://brunner.ninja/charts
@@ -0,0 +1,23 @@
+php-homepage:
+  fullnameOverride: brgkepler-com
+  apache:
+    serverAdmin: daniel@brunner.ninja
+  metrics:
+    enabled: true
+    serviceMonitor:
+      enabled: true
+    prometheusRule:
+      enabled: true
+  persistence:
+    existingClaim: brgkepler-com
+  ingress:
+    enabled: true
+    hosts:
+    - host: brgkepler.com
+      paths:
+      - path: /
+        pathType: Prefix
+    tls:
+    - hosts:
+      - brgkepler.com
+      secretName: brgkepler-com-tls
@@ -0,0 +1,2 @@
+Chart.lock
+charts/
@@ -0,0 +1,8 @@
+apiVersion: v2
+name: gschissenes-equipment
+type: application
+version: 0.1.0
+dependencies:
+- name: php-homepage
+  version: 0.10.1
+  repository: https://brunner.ninja/charts
@@ -0,0 +1,23 @@
+php-homepage:
+  fullnameOverride: gschissenes-equipment
+  apache:
+    serverAdmin: daniel@brunner.ninja
+  metrics:
+    enabled: true
+    serviceMonitor:
+      enabled: true
+    prometheusRule:
+      enabled: true
+  persistence:
+    existingClaim: gschissenes-equipment
+  ingress:
+    enabled: true
+    hosts:
+    - host: gschissenes.equipment
+      paths:
+      - path: /
+        pathType: Prefix
+    tls:
+    - hosts:
+      - gschissenes.equipment
+      secretName: gschissenes-equipment-tls
@@ -0,0 +1,2 @@
+Chart.lock
+charts/
@@ -0,0 +1,8 @@
+apiVersion: v2
+name: immich-crack
+type: application
+version: 0.1.0
+dependencies:
+- name: php-homepage
+  version: 0.10.1
+  repository: https://brunner.ninja/charts
@@ -0,0 +1,20 @@
+php-homepage:
+  fullnameOverride: immich-crack
+  apache:
+    serverAdmin: daniel@brunner.ninja
+  metrics:
+    enabled: true
+    serviceMonitor:
+      enabled: true
+    prometheusRule:
+      enabled: true
+  persistence:
+    existingClaim: immich-crack
+  ingress:
+    enabled: true
+    hosts:
+    - host: immich-crack.brunner.ninja
+      paths:
+      - path: /
+        pathType: Prefix
+    tls: []
@@ -0,0 +1,2 @@
+Chart.lock
+charts/
@@ -0,0 +1,8 @@
+apiVersion: v2
+name: pfostendynamics-com
+type: application
+version: 0.1.0
+dependencies:
+- name: php-homepage
+  version: 0.10.1
+  repository: https://brunner.ninja/charts
@@ -0,0 +1,14 @@
+php-homepage:
+  fullnameOverride: pfostendynamics-com
+  apache:
+    serverAdmin: daniel@brunner.ninja
+  metrics:
+    enabled: true
+    serviceMonitor:
+      enabled: true
+    prometheusRule:
+      enabled: true
+  persistence:
+    existingClaim: pfostendynamics-com
+  ingress:
+    enabled: false
@@ -0,0 +1,2 @@
+Chart.lock
+charts/
@@ -0,0 +1,8 @@
+apiVersion: v2
+name: watschn-studio
+type: application
+version: 0.1.0
+dependencies:
+- name: php-homepage
+  version: 0.10.1
+  repository: https://brunner.ninja/charts
@@ -0,0 +1,23 @@
+php-homepage:
+  fullnameOverride: watschn-studio
+  apache:
+    serverAdmin: daniel@brunner.ninja
+  metrics:
+    enabled: true
+    serviceMonitor:
+      enabled: true
+    prometheusRule:
+      enabled: true
+  persistence:
+    existingClaim: watschn-studio
+  ingress:
+    enabled: true
+    hosts:
+    - host: watschn.studio
+      paths:
+      - path: /
+        pathType: Prefix
+    tls:
+    - hosts:
+      - watschn.studio
+      secretName: watschn-studio-tls
@@ -0,0 +1,21 @@
+apiVersion: argoproj.io/v1alpha1
+kind: Application
+metadata:
+  name: brgkepler-com
+  namespace: argocd
+spec:
+  project: homelab
+  source:
+    repoURL: https://code.brunner.ninja/feedc0de/homelab-gitops.git
+    targetRevision: main
+    path: apps/brgkepler-com
+    helm:
+      releaseName: brgkepler-com
+  destination:
+    server: https://kubernetes.default.svc
+    namespace: default
+  syncPolicy:
+    automated:
+      enabled: true
+      prune: false
+      selfHeal: true
@@ -0,0 +1,21 @@
+apiVersion: argoproj.io/v1alpha1
+kind: Application
+metadata:
+  name: gschissenes-equipment
+  namespace: argocd
+spec:
+  project: homelab
+  source:
+    repoURL: https://code.brunner.ninja/feedc0de/homelab-gitops.git
+    targetRevision: main
+    path: apps/gschissenes-equipment
+    helm:
+      releaseName: gschissenes-equipment
+  destination:
+    server: https://kubernetes.default.svc
+    namespace: default
+  syncPolicy:
+    automated:
+      enabled: true
+      prune: false
+      selfHeal: true
@@ -0,0 +1,21 @@
+apiVersion: argoproj.io/v1alpha1
+kind: Application
+metadata:
+  name: immich-crack
+  namespace: argocd
+spec:
+  project: homelab
+  source:
+    repoURL: https://code.brunner.ninja/feedc0de/homelab-gitops.git
+    targetRevision: main
+    path: apps/immich-crack
+    helm:
+      releaseName: immich-crack
+  destination:
+    server: https://kubernetes.default.svc
+    namespace: default
+  syncPolicy:
+    automated:
+      enabled: true
+      prune: false
+      selfHeal: true
@@ -41,3 +41,17 @@ kubectl --namespace argocd wait application/argocd \
 kubectl --namespace argocd wait application/argocd \
  --for=jsonpath='{.status.health.status}'=Healthy \
  --timeout=10m
+for application in \
+  brgkepler-com \
+  gschissenes-equipment \
+  immich-crack \
+  pfostendynamics-com \
+  watschn-studio
+do
+  kubectl --namespace argocd wait "application/${application}" \
+    --for=jsonpath='{.status.sync.status}'=Synced \
+    --timeout=5m
+  kubectl --namespace argocd wait "application/${application}" \
+    --for=jsonpath='{.status.health.status}'=Healthy \
+    --timeout=5m
+done
@@ -10,3 +10,8 @@ resources:
 - immichframe.yaml
 - metallb-project.yaml
 - metallb.yaml
+- brgkepler-com.yaml
+- gschissenes-equipment.yaml
+- immich-crack.yaml
+- pfostendynamics-com.yaml
+- watschn-studio.yaml
@@ -0,0 +1,21 @@
+apiVersion: argoproj.io/v1alpha1
+kind: Application
+metadata:
+  name: pfostendynamics-com
+  namespace: argocd
+spec:
+  project: homelab
+  source:
+    repoURL: https://code.brunner.ninja/feedc0de/homelab-gitops.git
+    targetRevision: main
+    path: apps/pfostendynamics-com
+    helm:
+      releaseName: pfostendynamics-com
+  destination:
+    server: https://kubernetes.default.svc
+    namespace: default
+  syncPolicy:
+    automated:
+      enabled: true
+      prune: false
+      selfHeal: true
@@ -0,0 +1,21 @@
+apiVersion: argoproj.io/v1alpha1
+kind: Application
+metadata:
+  name: watschn-studio
+  namespace: argocd
+spec:
+  project: homelab
+  source:
+    repoURL: https://code.brunner.ninja/feedc0de/homelab-gitops.git
+    targetRevision: main
+    path: apps/watschn-studio
+    helm:
+      releaseName: watschn-studio
+  destination:
+    server: https://kubernetes.default.svc
+    namespace: default
+  syncPolicy:
+    automated:
+      enabled: true
+      prune: false
+      selfHeal: true