homelab/k8s-ng/core-state/values.yaml

# Per-cluster variables. Override them in k8s-ng/bootstrap/root.yaml
# (spec.source.helm.valuesObject) when the state is deployed to another cluster.
repoURL: https://gt.hexor.cy/ab/homelab.git
targetRevision: main
destinationServer: https://kubernetes.default.svc
project: core

# Core applications. Lower waves are synced first and must be Healthy before the
# next wave starts. Every path is a kustomize (or plain manifest) directory.
#   wave 0: Argo CD itself and its projects
#   wave 1: operators (their CRDs are used by the later waves)
#   wave 2: the database cluster and its databases/users
#   wave 3: services that need the database and secrets
apps:
  - name: argocd
    path: k8s-ng/core/argocd
    namespace: argocd
    wave: 0
  - name: cnpg
    path: k8s-ng/core/cnpg
    namespace: cnpg-system
    wave: 1
  - name: traefik-config
    path: k8s-ng/core/traefik-config
    namespace: kube-system
    wave: 1
  - name: reloader
    path: k8s-ng/core/reloader
    namespace: reloader
    wave: 1
  - name: gpu-system
    path: k8s-ng/core/gpu
    namespace: gpu-system
    wave: 1
  - name: cert-manager
    path: k8s-ng/core/cert-manager
    namespace: cert-manager
    wave: 1
    skipDryRunOnMissingResource: true # ClusterIssuers need the cert-manager CRDs
  - name: external-secrets
    path: k8s-ng/core/external-secrets
    namespace: external-secrets
    wave: 1
  - name: postgresql
    path: k8s-ng/core/postgresql
    namespace: psql
    wave: 2
    prune: false # never delete databases because of a manifest change
    skipDryRunOnMissingResource: true # CRDs come from the cnpg and external-secrets apps
  - name: vaultwarden
    path: k8s-ng/core/vaultwarden
    namespace: vaultwarden
    wave: 3
    skipDryRunOnMissingResource: true
  - name: keycloak
    path: k8s-ng/core/keycloak
    namespace: keycloak
    wave: 3
    skipDryRunOnMissingResource: true # ExternalSecret/Certificate CRDs come from earlier waves
  # Not a core service: lives in k8s-ng/apps and belongs to the "apps" project.
  - name: furumi
    project: apps
    path: k8s-ng/apps/furumi
    namespace: furumi
    wave: 5 # pinned to the music node; must not hold back the other waves
    skipDryRunOnMissingResource: true
  - name: web-petting
    project: apps
    path: k8s-ng/apps/web-petting
    namespace: web-petting
    wave: 5
    skipDryRunOnMissingResource: true
  - name: llamacpp
    project: apps
    path: k8s-ng/apps/llamacpp
    namespace: llamacpp
    wave: 5 # pinned to the ai node (GPU); must not hold back the other waves
    skipDryRunOnMissingResource: true
  - name: secret-stores
    path: k8s-ng/core/secret-stores
    namespace: external-secrets
    wave: 4 # reads the Vaultwarden vault, so it comes after vaultwarden
    skipDryRunOnMissingResource: true # ClusterSecretStore CRD comes from the external-secrets app