up

Author: mitchross

infrastructure/controllers/1passwordconnect/kustomization.yaml

@@ -1,6 +1,10 @@
 apiVersion: kustomize.config.k8s.io/v1beta1
 kind: Kustomization
 namespace: 1passwordconnect
+
+commonAnnotations:
+  argocd.argoproj.io/sync-wave: "0"
+
 helmCharts:
 - name: connect
   repo: https://1password.github.io/connect-helm-charts

infrastructure/controllers/argocd/apps/infrastructure-appset.yaml

@@ -4,7 +4,7 @@ metadata:
   name: infrastructure
   namespace: argocd
   annotations:
-    argocd.argoproj.io/sync-wave: "2"
+    argocd.argoproj.io/sync-wave: "4"
 spec:
   generators:
   - git:
@@ -28,7 +28,10 @@ spec:
       - path: infrastructure/storage/csi-driver-nfs
       - path: infrastructure/storage/csi-driver-smb
       - path: infrastructure/storage/local-storage
+      - path: infrastructure/storage/longhorn
       - path: infrastructure/storage/openebs
+      - path: infrastructure/storage/snapshot-controller
+      - path: infrastructure/storage/volsync
       - path: infrastructure/database/*/*
       - path: infrastructure/crds
   template:

infrastructure/controllers/argocd/apps/monitoring-appset.yaml

@@ -4,7 +4,7 @@ metadata:
   name: monitoring
   namespace: argocd
   annotations:
-    argocd.argoproj.io/sync-wave: "3"
+    argocd.argoproj.io/sync-wave: "5"
 spec:
   generators:
   - git:

infrastructure/controllers/argocd/apps/my-apps-appset.yaml

@@ -4,7 +4,7 @@ metadata:
   name: my-apps
   namespace: argocd
   annotations:
-    argocd.argoproj.io/sync-wave: "4"
+    argocd.argoproj.io/sync-wave: "6"
 spec:
   generators:
   - git:

infrastructure/controllers/external-secrets/kustomization.yaml

@@ -1,6 +1,10 @@
 apiVersion: kustomize.config.k8s.io/v1beta1
 kind: Kustomization
 namespace: external-secrets
+
+commonAnnotations:
+  argocd.argoproj.io/sync-wave: "1"
+
 resources:
 - external-secret.yaml
 - cluster-secret-store.yaml

infrastructure/networking/cilium/values.yaml

@@ -1,4 +1,8 @@
 # Cilium Helm Values for Talos Proxmox Production Cluster
+# ArgoCD Sync Wave: 0 (Foundation - must deploy before everything else)
+annotations:
+  argocd.argoproj.io/sync-wave: "0"
+
 # Cluster Configuration
 cluster:
   name: talos-prod-cluster
@@ -54,14 +58,14 @@ socketLB:
 # Enable Bandwidth Manager for better TCP performance
 bandwidthManager:
   enabled: true
-  bbr: true  # Enable BBR congestion control
+  bbr: true # Enable BBR congestion control
 
 # BPF Host Routing
 bpf:
   masquerade: true
   # Connection tracking improvements for better session handling
-  ctTcpTimeout: 21600  # 6 hours (default is 6 hours but explicit is better)
-  ctAnyTimeout: 3600   # 1 hour for non-TCP connections
+  ctTcpTimeout: 21600 # 6 hours (default is 6 hours but explicit is better)
+  ctAnyTimeout: 3600 # 1 hour for non-TCP connections
 
 # L2 Announcements for LoadBalancer Services
 l2announcements:
@@ -92,7 +96,7 @@ gatewayAPI:
   externalTrafficPolicy: Local
   # Enable session affinity for consistent routing
   sessionAffinity: true
-  sessionAffinityTimeoutSeconds: 10800  # 3 hours
+  sessionAffinityTimeoutSeconds: 10800 # 3 hours
 
 # Hubble (Observability)
 hubble:
@@ -113,4 +117,4 @@ operator:
       - labelSelector:
           matchLabels:
             io.cilium/app: operator
-        topologyKey: kubernetes.io/hostname
+        topologyKey: kubernetes.io/hostname

infrastructure/storage/csi-driver-nfs/namespace.yaml

@@ -2,7 +2,9 @@ apiVersion: v1
 kind: Namespace
 metadata:
   name: csi-driver-nfs
+  annotations:
+    argocd.argoproj.io/sync-wave: "2"
   labels:
     pod-security.kubernetes.io/enforce: privileged
     pod-security.kubernetes.io/audit: privileged
-    pod-security.kubernetes.io/warn: privileged
+    pod-security.kubernetes.io/warn: privileged

infrastructure/storage/csi-driver-smb/namespace.yaml

@@ -2,7 +2,9 @@ apiVersion: v1
 kind: Namespace
 metadata:
   name: csi-driver-smb
+  annotations:
+    argocd.argoproj.io/sync-wave: "2"
   labels:
     pod-security.kubernetes.io/enforce: privileged
     pod-security.kubernetes.io/audit: privileged
-    pod-security.kubernetes.io/warn: privileged
+    pod-security.kubernetes.io/warn: privileged

infrastructure/storage/longhorn/namespace.yaml

@@ -2,5 +2,7 @@ apiVersion: v1
 kind: Namespace
 metadata:
   name: longhorn-system
+  annotations:
+    argocd.argoproj.io/sync-wave: "2"
   labels:
     pod-security.kubernetes.io/enforce: privileged

infrastructure/storage/openebs/namespace.yaml

@@ -2,6 +2,8 @@ apiVersion: v1
 kind: Namespace
 metadata:
   name: openebs
+  annotations:
+    argocd.argoproj.io/sync-wave: "2"
   labels:
     pod-security.kubernetes.io/audit: privileged
     pod-security.kubernetes.io/enforce: privileged