feat(deploy): give Unleash its own Argo Application (hybrid-Argo) - #346
Merged
Conversation
Unleash was fully implemented but folded into the umbrella `fuzefront` chart/Argo Application. Per the hybrid-Argo standard, an independently-lifecycled service (external image, own release cadence, family-wide flag server FuzeFront hosts) gets its own Application. - New standalone chart deploy/helm/unleash (Deployment+Service+optional admin Ingress, gated by unleash.enabled; pre-install DB-bootstrap Job), extracted verbatim from the umbrella chart's unleash.yaml / unleash-db-bootstrap-job.yaml templates. - New Argo Application deploy/argocd/applications/unleash.yaml (path deploy/helm/unleash, values-prod.yaml, namespace fuzefront, automated prune+selfHeal) — discovered by the existing app-of-apps. - Reuses the existing unleash-secrets SealedSecret and the umbrella chart's fuzefront-secrets (Postgres superuser password) as-is; no new secrets sealed. - Removed the now-superseded unleash templates/values blocks from the umbrella fuzefront chart so it no longer double-renders Unleash. - Still disabled by default (unleash.enabled: false) — go-live remains a deliberate flip in a deploy window, unchanged. Co-Authored-By: Claude Opus 4.8 <noreply@anthropic.com> Claude-Session-Id: f636c22e-1cd7-401e-8843-97e3e3a4ba01
Contributor
Automated code review (gate-code-review)Credit balance is too low Report-only — this check never blocks merge. |
This file contains hidden or bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
Sign up for free
to join this conversation on GitHub.
Already have an account?
Sign in to comment
1 participant
Add this suggestion to a batch that can be applied as a single commit.This suggestion is invalid because no changes were made to the code.Suggestions cannot be applied while the pull request is closed.Suggestions cannot be applied while viewing a subset of changes.Only one suggestion per line can be applied in a batch.Add this suggestion to a batch that can be applied as a single commit.Applying suggestions on deleted lines is not supported.You must change the existing code in this line in order to create a valid suggestion.Outdated suggestions cannot be applied.This suggestion has been applied or marked resolved.Suggestions cannot be applied from pending reviews.Suggestions cannot be applied on multi-line comments.Suggestions cannot be applied while the pull request is queued to merge.Suggestion cannot be applied right now. Please check back later.
Summary
fuzefrontHelm chart/Argo Application. Per CLAUDE.md's hybrid-Argo rule, an independently-lifecycled service (external image, own release cadence) should get its own Argo Application — this PR does that extraction.deploy/helm/unleash/(Deployment + Service + optional admin Ingress, gated byunleash.enabled; pre-install DB-bootstrap Job) — templates copied verbatim from the umbrella chart'stemplates/unleash.yaml/templates/unleash-db-bootstrap-job.yaml.deploy/argocd/applications/unleash.yaml(path: deploy/helm/unleash,values-prod.yaml,namespace: fuzefront, automated prune+selfHeal) — auto-discovered by the existing app-of-apps (deploy/argocd/app-of-apps.yamlrecursesdeploy/argocd/applications/).unleash-secretsSealedSecret (deploy/contabo/sealed/unleash-secrets.yaml, already sealed 2026-07-13) and the umbrella chart'sfuzefront-secrets(Postgres superuser password) as-is — no new secrets sealed.fuzefrontchart (templates/unleash.yaml,templates/unleash-db-bootstrap-job.yaml, and theunleash:values blocks invalues.yaml/values-prod.yaml) so it no longer double-renders Unleash.unleash.enabled: falsein bothvalues.yamlandvalues-prod.yaml) — go-live remains a deliberate GitOps flip in a deploy window, unchanged from before this PR.Validation
helm lint deploy/helm/unleash -f deploy/helm/unleash/values-prod.yaml→ 0 failedhelm lint deploy/helm/fuzefront -f deploy/helm/fuzefront/values-prod.yaml→ 0 failed (umbrella still lints clean after Unleash extraction)helm templateboth charts (enabled + disabled) — renders as expected; disabled = zero resources; umbrella no longer renders any Unleash resourceskubeconform -strict -ignore-missing-schemas: unleash chart → 3/3 valid; umbrella chart → 33/33 valid (3 skipped, expected for unschematized CRDs)Test plan
enabled: false)unleash.enabled: trueindeploy/helm/unleash/values-prod.yamlin a deploy window, after confirmingunleash-secretsholds real (non-placeholder) valuesCo-Authored-By: Claude Opus 4.8 noreply@anthropic.com