Stéphane Tailland
023a89bf71
catalog-agent was one rename too aggressive: 'catalogue' is accepted, and the Keycloak client, its audience scope and the Vault key that names it were never renamed to match — leaving an inconsistency between what Kubernetes and Keycloak call the same agent. Keycloak carries more weight to move, so this side moves back. k8s/namespace.yaml is out of this Kustomization's inventory. It was in 2026-08-31 when renaming the Kustomization pruned the old one — which owned the namespace three agents share — and took all three down. A namespace shared across repos should not be owned by any one of them. Co-Authored-By: Claude Opus 5 <noreply@anthropic.com>
34 lines
1.3 KiB
YAML
34 lines
1.3 KiB
YAML
# Watches ./dev, so the GitRepository and the Kustomization below it reconcile
|
|
# from git like any other manifest. It lives in ./dev itself, so it also manages
|
|
# itself — the arrangement `flux bootstrap` sets up, which flux-operator does
|
|
# not create, and the same one the platform repos use.
|
|
#
|
|
# It sits in the agents namespace, not flux-system: a sourceRef resolves in the
|
|
# Kustomization's own namespace, and this is the agent team's to own.
|
|
#
|
|
# Three manual applies, once, to close the loop — nothing can watch ./dev until
|
|
# the namespace and the source that serves it exist:
|
|
#
|
|
# kubectl apply -f k8s/namespace.yaml
|
|
# kubectl apply -f dev/gitrepository.yaml
|
|
# kubectl apply -f dev/bootstrap-kustomization.yaml
|
|
#
|
|
# After that every file in this repo, this one included, reconciles from git.
|
|
#
|
|
# Sharp edge: with prune enabled, deleting flux-kustomization.yaml from git
|
|
# deletes the Kustomization it defines, and that Kustomization's own prune then
|
|
# removes the whole deployment. Correct GitOps behaviour, blast radius two
|
|
# levels deep.
|
|
apiVersion: kustomize.toolkit.fluxcd.io/v1
|
|
kind: Kustomization
|
|
metadata:
|
|
name: catalogue-agent-bootstrap
|
|
namespace: agents
|
|
spec:
|
|
interval: 10m
|
|
sourceRef:
|
|
kind: GitRepository
|
|
name: catalogue-agent
|
|
path: ./dev
|
|
prune: true
|