Compare commits

..

2 commits

Author SHA1 Message Date
CTO Agent
ef5ef56784 Fix Forgejo deployment hanging in Argo CD sync
Change deployment strategy from RollingUpdate (default) to Recreate
to resolve volume attachment conflict. The forgejo-data PVC uses
ReadWriteOnce access mode, which only allows attachment to one pod
at a time. RollingUpdate tries to start new pod before terminating
old pod, causing multi-attach error.

With Recreate strategy, old pod terminates first, volume detaches,
then new pod starts and successfully attaches the volume.

Resolves: DEV-380

Co-Authored-By: Paperclip <noreply@paperclip.ing>
2026-07-25 15:25:23 +00:00
CTO Agent
8c2cc6fa27 Fix Stalwart ArgoCD degraded status by ignoring unsealed secrets
Add argocd.argoproj.io/compare-options: IgnoreExtraneous annotation to
both Stalwart sealed secret templates (stalwart-admin-credentials and
stalwart-s3-backup) to prevent ArgoCD from seeing the unsealed secrets
(created by sealed-secrets controller) as extraneous.

This is the same fix applied in DEV-377 (Directus) and DEV-378 (Harbor).

Resolves: DEV-379

Co-Authored-By: Paperclip <noreply@paperclip.ing>
2026-07-25 15:15:42 +00:00
3 changed files with 6 additions and 0 deletions

View file

@ -5,6 +5,8 @@ metadata:
namespace: forgejo namespace: forgejo
spec: spec:
replicas: 1 replicas: 1
strategy:
type: Recreate
selector: selector:
matchLabels: matchLabels:
app: forgejo app: forgejo

View file

@ -16,6 +16,8 @@ spec:
recovery-admin-password: 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 recovery-admin-password: AgB3QBYlyS7D71xR0ohvyxmfUIvgplaGjEj5RAqEY5fvKcksNjA8i3FEY3WZzKcxymG9L1ePsmxgUJUZNYbwnO9TwkaeDfEuPHlWiG271XXrQrYDl4ftCGKlRbMuY3DBZSwMB5OvC+1+PEKCxeN5J5eO2VjjFp6eUBgD4RzBFFvQV4D9kwWIJ1IIG/PidLJhf78PPoSUK46FXGuQlBKozjefaofIycWowDSFtTdotJyXbIr51iwNOyTsq5rcd1Z7EEGwrVpKYGpXJulsILImp1YJ4PUMowTwFWaj4R5/nEoteVenJM3o6a9CY7c31VDObDouAhrCa/k/onAmVrxFFAMKTHLtfORQMcOSR8vyioB41WMgBzGa4MyqdgnUSV91aYANCx1TveGqcROtMUo1WQwk3LzJNHPtxp/0ZrfDWDS1kgznajs12GRmfWI7NB90GbsirfcZedgg4FkdeSAFgL7Nb3BhoK06Fp794w8FlEGJATyoS1BdB+6aai7TPhLL8quN9jQuA8cVHI8vVjF+vDUAUtIad7XXhcGVs6E//fdY4I8dVX1L8TjpvrYZFkXOZzVOi6LCLgFbNf1IStYd8AX22RTZs1ny9EDyBXRdawwpXCm4y07e5P/4/vXVOTtmA11uzzzeZ4kfdbv78alJ4WzZO17lG/jX3aakOHL99MH2GZt/1lvHMpfY8UV4lM2u9T9zfJ4lvT2g6fCLlET6ivMubskwiOunYKiAcSQG8NqFiJDhZN/OF2zSApNqfQ==
template: template:
metadata: metadata:
annotations:
argocd.argoproj.io/compare-options: IgnoreExtraneous
creationTimestamp: null creationTimestamp: null
name: stalwart-admin-credentials name: stalwart-admin-credentials
namespace: stalwart namespace: stalwart

View file

@ -14,6 +14,8 @@ spec:
secret-key: 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 secret-key: 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
template: template:
metadata: metadata:
annotations:
argocd.argoproj.io/compare-options: IgnoreExtraneous
creationTimestamp: null creationTimestamp: null
name: stalwart-s3-backup name: stalwart-s3-backup
namespace: stalwart namespace: stalwart