Skip to content

Conversation

@justgithubaccount
Copy link
Owner

Summary

  • Add base ArgoCD Application template for chat-api with Image Updater annotations
  • Configure Kustomize overlays for dev, tst, stg, prd environments
  • Fix clusters/dev reference: point to overlays/dev instead of base
  • Each environment has specific resource limits and ingress hosts

Environment Configuration

Env Replicas CPU Limit Memory Host
dev 2 1000m 1Gi chat-dev.syncjob.ru
tst 1 500m 512Mi chat-tst.syncjob.ru
stg 2 1000m 1Gi chat-stg.syncjob.ru
prd 3 2000m 2Gi chat.syncjob.ru

Architecture (CNCF/OpenGitOps)

tenants/product-team/apps/chat/
├── base/
│   ├── application.yaml      # Base template (DRY)
│   └── kustomization.yaml
└── overlays/
    ├── dev/   (secrets + patches)
    ├── tst/   (patches only, TODO: secrets)
    ├── stg/   (patches only, TODO: secrets)
    └── prd/   (patches only, TODO: secrets)

Test plan

  • Verify kustomize build for each overlay
  • Check ArgoCD syncs chat-api Application correctly
  • Validate Image Updater annotations work

🤖 Generated with Claude Code

justgithubaccount and others added 6 commits December 6, 2025 09:45
Add base/application.yaml with:
- ArgoCD Application for chat-api
- Image Updater annotations for automatic semver updates
- Helm source pointing to app-poly-gitops-helm
- Automated sync policy with selfHeal and prune

🤖 Generated with [Claude Code](https://claude.com/claude-code)

Co-Authored-By: Claude <[email protected]>
Add application.yaml to base kustomization resources.

🤖 Generated with [Claude Code](https://claude.com/claude-code)

Co-Authored-By: Claude <[email protected]>
Add Kustomize patches for dev environment:
- env: dev label
- Inline Helm values with dev-specific configuration
- 2 replicas, 1Gi memory, chat-dev.syncjob.ru host

🤖 Generated with [Claude Code](https://claude.com/claude-code)

Co-Authored-By: Claude <[email protected]>
Configure environment-specific patches for all environments:
- tst: 1 replica, 512Mi memory, minimal resources
- stg: 2 replicas, 1Gi memory, pre-prod config
- prd: 3 replicas, 2Gi memory, production-grade

TODO: Create SealedSecrets for tst, stg, prd

🤖 Generated with [Claude Code](https://claude.com/claude-code)

Co-Authored-By: Claude <[email protected]>
Fix cluster/dev reference: base -> overlays/dev
This ensures dev cluster gets dev-specific configuration
including secrets and environment patches.

🤖 Generated with [Claude Code](https://claude.com/claude-code)

Co-Authored-By: Claude <[email protected]>
Changes:
- Add cluster-scoped kinds list (Namespace, ClusterRole, etc.)
- Add ArgoCD kinds list (Application, ApplicationSet, AppProject)
- Skip namespace check for cluster-scoped and ArgoCD resources
- Improve error messages with [Kind/Name] prefix
- Make probes check production-only (env=prd label)
- Disable overly strict checks (runAsNonRoot, OTEL, chat-api model)
- Add new policies: labels, SealedSecrets namespace, Ingress TLS, HPA limits

🤖 Generated with [Claude Code](https://claude.com/claude-code)

Co-Authored-By: Claude <[email protected]>
@justgithubaccount justgithubaccount merged commit 6b66a6c into main Dec 6, 2025
1 check passed
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

2 participants