add lovely argocd plugin, argo-rollout, and argocd-image-updater

2026-05-11 11:31:05 +01:00
parent 9af2fe900d
commit e610f6df86
6 changed files with 70 additions and 2 deletions
@@ -0,0 +1,27 @@
+# argocd
+
+GitOps source for the cluster Argo CD installation. This app is self-managed by
+Argo CD and intentionally uses a conservative sync policy.
+
+## Current deployment
+
+- Bootstrap: `enabled: true`, applied from `main`
+- Argo application: `argocd-production`
+- Target namespace: `argocd`
+- Render path: `manifest/overlays/production`
+- Repo URL used by Argo CD: `http://gitea-ha-http.apps:3000/olb42/argocd.git`
+- Config management plugin: `ksops`
+
+## Runtime
+
+The base installs upstream Argo CD `v3.3.6` from the official install manifest.
+The production overlay adds the Traefik route for `argocd.olb42.com`, KSOPS CMP
+configuration, repo credentials, notifications, Redis credentials, and patches
+for Argo CD config, RBAC, command parameters, repo-server behavior, and bundled
+Redis disablement.
+
+## Sync policy
+
+Automated sync is disabled for the Argo CD application itself. Prune and
+self-heal are also disabled so a bad self-management change cannot remove the
+control plane that would be needed to repair it.