68b6aa8313
Full migration off Scaleway Container Registry to internal GitLab registry backed by MinIO S3. All 4 images (ci-builder, ci-builder-cpu, foxhunt-runtime, foxhunt-training-runtime) rebuilt in internal registry. Registry & images: - All image refs → gitlab-registry.foxhunt.svc.cluster.local:5000/root/foxhunt/ - imagePullSecrets: scw-registry → gitlab-registry - Kaniko build template: two-step DAG (git-clone → kaniko-build) with shared PVC - Kaniko layer cache enabled at root/foxhunt/cache - AWS_ACCESS_KEY_ID: $SCW_ACCESS_KEY → $MINIO_ACCESS_KEY in .gitlab-ci.yml Network policies: - ci-pipeline: add HTTP/80, registry/5000, webservice/8181 egress rules DNS & Tailscale proxy cleanup: - Remove ci, prometheus, monitor DNS records (no longer exposed) - Rename s3 → minio DNS record - Remove Argo UI, Prometheus, monitor nginx server blocks - Remove argo-htpasswd volume mount - Tailscale proxy nodeSelector: infra → platform Terraform cleanup: - Delete infra/modules/registry/ (SCW CR namespace) - Delete infra/modules/object-storage/ (SCW S3 buckets) - Delete infra/modules/secrets/ (SCW secrets) - Delete corresponding live configs - TF state backend: S3 → GitLab HTTP Argo workflows: - Add events/ (GitLab push eventsource + ci-pipeline sensor) - ci-pipeline + training templates: SCW → internal registry - Delete obsolete compile-training-template.yaml Co-Authored-By: Claude Opus 4.6 <noreply@anthropic.com>
71 lines
1.5 KiB
YAML
71 lines
1.5 KiB
YAML
# Argo Workflows Helm values — foxhunt cluster
|
|
# Chart: argo/argo-workflows (v0.45.x maps to Argo v3.6.x)
|
|
# Install: helm install argo-workflows argo/argo-workflows -n foxhunt -f infra/k8s/argo/values.yaml
|
|
|
|
# Controller runs on platform node (low overhead, ~100Mi idle)
|
|
controller:
|
|
nodeSelector:
|
|
k8s.scaleway.com/pool-name: infra
|
|
resources:
|
|
requests:
|
|
cpu: 50m
|
|
memory: 128Mi
|
|
limits:
|
|
cpu: 200m
|
|
memory: 256Mi
|
|
# Only watch foxhunt namespace (not cluster-wide)
|
|
workflowNamespaces:
|
|
- foxhunt
|
|
|
|
# Argo Server — UI + API
|
|
server:
|
|
nodeSelector:
|
|
k8s.scaleway.com/pool-name: infra
|
|
resources:
|
|
requests:
|
|
cpu: 25m
|
|
memory: 64Mi
|
|
limits:
|
|
cpu: 100m
|
|
memory: 128Mi
|
|
# No external ingress — exposed via tailscale proxy
|
|
ingress:
|
|
enabled: false
|
|
# Server mode — nginx proxy handles auth via htpasswd
|
|
extraArgs:
|
|
- --auth-mode=server
|
|
- --secure=false
|
|
|
|
# Default artifact repository — MinIO (in-cluster)
|
|
artifactRepository:
|
|
s3:
|
|
endpoint: minio.foxhunt.svc.cluster.local:9000
|
|
insecure: true
|
|
bucket: foxhunt-training-results
|
|
accessKeySecret:
|
|
name: minio-credentials
|
|
key: access-key
|
|
secretKeySecret:
|
|
name: minio-credentials
|
|
key: secret-key
|
|
|
|
# Executor resources
|
|
executor:
|
|
resources:
|
|
requests:
|
|
cpu: 10m
|
|
memory: 32Mi
|
|
limits:
|
|
cpu: 100m
|
|
memory: 64Mi
|
|
|
|
# Workflow service account
|
|
workflow:
|
|
serviceAccount:
|
|
create: true
|
|
name: argo-workflow
|
|
|
|
# CRDs — install with Helm
|
|
crds:
|
|
install: true
|