Skip to content

Learn/cloud and gitops - #5

Merged
notsubash merged 3 commits into
mainfrom
learn/cloud-and-gitops
Jul 22, 2026
Merged

Learn/cloud and gitops#5
notsubash merged 3 commits into
mainfrom
learn/cloud-and-gitops

Conversation

@notsubash

@notsubash notsubash commented Jul 22, 2026

Copy link
Copy Markdown
Owner

Summary

  • Provisions the hobby Hetzner VPS with cloud-init that installs single-node k3s, and tightens SSH firewall to a specific source CIDR (DNS/Cloudflare left disabled for now).
  • Adds GitOps: Argo CD Application for helm/api, values-hobby.yaml (GHCR image + imagePullSecrets), and gitops/README.md bootstrap/runbook.
  • Updates root README and lessons-learned with the CI → GHCR → Argo → k3s path, screenshots, and pause/resume (terraform destroy) cost notes. targetRevision is main for post-merge sync.

Test plan

  • terraform plan / apply in infrastructure/terraform/environments/hobby creates the VPS; k3s node is Ready
  • Argo CD installs; Application api Syncs from this repo (helm/api + values-hobby.yaml) into ai-platform
  • ghcr-pull docker-registry secret uses a GitHub PAT with read:packages (not an image tag)
  • kubectl -n ai-platform get pods shows API pods; port-forward svc/api and curl /health
  • After merge: Argo Refresh/Sync against main still works
  • Optional cost check: terraform destroy removes the VPS and stops Hetzner billing

- Updated the Hetzner Cloud provider version from 1.66.0 to 1.66.1 in the Terraform lock file.
- Introduced a new cloud-init template for setting up a single-node k3s cluster.
- Modified the main Terraform configuration to utilize the new cloud-init template for user data.
- Adjusted the SSH source CIDR to a specific IP address for enhanced security.
- Commented out the DNS module configuration and Cloudflare provider to reflect current deployment status.

These changes streamline the setup process and improve security for the hobby environment.
- Updated the README to reflect the integration of Argo CD for GitOps on the Hetzner VPS, detailing the deployment process and architecture.
- Added new GitOps documentation outlining the setup and usage of Argo CD for managing the API Helm chart.
- Introduced `values-hobby.yaml` for cloud-specific configurations, including image repository settings and pull policies.
- Enhanced lessons learned documentation with insights on GitOps practices, Terraform usage, and managing cloud resources effectively.
- Added screenshots to the README for better visualization of the deployed infrastructure.

These changes improve the clarity and usability of the documentation while introducing a robust GitOps workflow for the AI platform.
@notsubash
notsubash merged commit 0e38c9e into main Jul 22, 2026
3 checks passed
@notsubash
notsubash deleted the learn/cloud-and-gitops branch July 22, 2026 07:10
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

1 participant