Sync the self-hosting stack

2026-08-30 09:58:08 +02:00
parent cd7d807a4f
commit 9b5020dea0
12 changed files with 392 additions and 2 deletions
@@ -1,6 +1,11 @@
 apiVersion: v1
 kind: Namespace
 metadata:
+  # First, alone. Everything below is namespaced, and a sync that applied them in parallel
+  # would race the namespace's own creation — including the Pod Security labels above, which
+  # decide whether any of these pods are admitted at all.
+  annotations:
+    argocd.argoproj.io/sync-wave: "-3"
  name: jarvis
  labels:
    # Both images run unprivileged and drop every capability, so the strictest profile applies