A

manifests/browser/deployment.yaml

@@ -1,39 +1,39 @@
 apiVersion: apps/v1
 kind: Deployment
-metadata: { name: browser, namespace: ai }
+metadata: { name: browser, namespace: argocd }
 spec:
-  replicas: 1
-  selector: { matchLabels: { app: browser } }
-  template:
-    metadata: { labels: { app: browser } }
-    spec:
-      containers:
-        - name: browser
-          image: docker.io/ion606/browser:latest
-          ports: [{ containerPort: 7788 }]
-          env:
-            - { name: WEBUI_IP, value: "0.0.0.0" }
-            - { name: WEBUI_PORT, value: "7788" }
-          resources:
-            requests: { cpu: "250m", memory: "256Mi" }
-            limits: { cpu: "1", memory: "1Gi" } # hard cap
-          readinessProbe:
-            httpGet: { path: "/", port: 7788 }
-            initialDelaySeconds: 5
-            periodSeconds: 10
-          livenessProbe:
-            httpGet: { path: "/", port: 7788 }
-            initialDelaySeconds: 15
-            periodSeconds: 20
+    replicas: 1
+    selector: { matchLabels: { app: browser } }
+    template:
+        metadata: { labels: { app: browser } }
+        spec:
+            containers:
+                - name: browser
+                  image: docker.io/ion606/browser:latest
+                  ports: [{ containerPort: 7788 }]
+                  env:
+                      - { name: WEBUI_IP, value: "0.0.0.0" }
+                      - { name: WEBUI_PORT, value: "7788" }
+                  resources:
+                      requests: { cpu: "250m", memory: "256Mi" }
+                      limits: { cpu: "1", memory: "1Gi" } # hard cap
+                  readinessProbe:
+                      httpGet: { path: "/", port: 7788 }
+                      initialDelaySeconds: 5
+                      periodSeconds: 10
+                  livenessProbe:
+                      httpGet: { path: "/", port: 7788 }
+                      initialDelaySeconds: 15
+                      periodSeconds: 20
 ---
 apiVersion: v1
 kind: Service
-metadata: { name: browser, namespace: ai }
+metadata: { name: browser, namespace: argocd }
 spec:
-  selector: { app: browser }
-  ports:
-    - name: http
-      port: 7788
-      targetPort: 7788
-      nodePort: 30788
-  type: NodePort
+    selector: { app: browser }
+    ports:
+        - name: http
+          port: 7788
+          targetPort: 7788
+          nodePort: 30788
+    type: NodePort

manifests/coderunner/deployment.yaml

@@ -1,6 +1,6 @@
 apiVersion: apps/v1
 kind: Deployment
-metadata: { name: coderunner, namespace: ai }
+metadata: { name: coderunner, namespace: argocd }
 spec:
     replicas: 1
     selector: { matchLabels: { app: coderunner } }
@@ -32,7 +32,7 @@ spec:
 ---
 apiVersion: v1
 kind: Service
-metadata: { name: coderunner, namespace: ai }
+metadata: { name: coderunner, namespace: argocd }
 spec:
     selector: { app: coderunner }
     ports:

manifests/coderunner/rbac.yaml

@@ -1,10 +1,10 @@
 apiVersion: v1
 kind: ServiceAccount
-metadata: { name: coderunner-sa, namespace: ai }
+metadata: { name: coderunner-sa, namespace: argocd }
 ---
 apiVersion: rbac.authorization.k8s.io/v1
 kind: Role
-metadata: { name: coderunner-job-role, namespace: ai }
+metadata: { name: coderunner-job-role, namespace: argocd }
 rules:
     - apiGroups: ["batch"]
       resources: ["jobs"]
@@ -16,11 +16,11 @@ rules:
 ---
 apiVersion: rbac.authorization.k8s.io/v1
 kind: RoleBinding
-metadata: { name: coderunner-job-rb, namespace: ai }
+metadata: { name: coderunner-job-rb, namespace: argocd }
 subjects:
     - kind: ServiceAccount
       name: coderunner-sa
-      namespace: ai
+      namespace: argocd
 roleRef:
     apiGroup: rbac.authorization.k8s.io
     kind: Role

manifests/debug/netshoot.yaml

@@ -2,7 +2,7 @@ apiVersion: apps/v1
 kind: Deployment
 metadata:
     name: netshoot
-    namespace: ai
+    namespace: argocd
 spec:
     replicas: 1
     selector:

manifests/policy/allow-browser-ingress.yaml

@@ -2,7 +2,7 @@ apiVersion: networking.k8s.io/v1
 kind: NetworkPolicy
 metadata:
     name: allow-browser-ingress
-    namespace: ai
+    namespace: argocd
 spec:
     podSelector:
         matchLabels:
@@ -14,4 +14,3 @@ spec:
                     cidr: 0.0.0.0/0
           ports:
               - { protocol: TCP, port: 7788 }
-

manifests/policy/allow-common-egress.yaml

@@ -2,7 +2,7 @@ apiVersion: networking.k8s.io/v1
 kind: NetworkPolicy
 metadata:
     name: allow-common-egress
-    namespace: ai
+    namespace: argocd
 spec:
     podSelector: {}
     policyTypes: ["Egress"]
@@ -23,4 +23,3 @@ spec:
                         kubernetes.io/metadata.name: ai
           ports:
               - { protocol: TCP, port: 5432 }
-

manifests/policy/allow-https-egress.yaml

@@ -2,7 +2,7 @@ apiVersion: networking.k8s.io/v1
 kind: NetworkPolicy
 metadata:
     name: allow-https-egress
-    namespace: ai
+    namespace: argocd
 spec:
     podSelector: {}
     policyTypes: ["Egress"]

manifests/policy/allow-openwebui-ingress.yaml

@@ -2,7 +2,7 @@ apiVersion: networking.k8s.io/v1
 kind: NetworkPolicy
 metadata:
     name: allow-openwebui-ingress
-    namespace: ai
+    namespace: argocd
 spec:
     # Select the Open WebUI pods deployed by the Helm release "openwebui"
     podSelector:
@@ -17,4 +17,3 @@ spec:
               # Open WebUI typically listens on 8080 (chart default), sometimes 80
               - { protocol: TCP, port: 8080 }
               - { protocol: TCP, port: 80 }
-

manifests/policy/default-deny.yaml

@@ -2,7 +2,7 @@ apiVersion: networking.k8s.io/v1
 kind: NetworkPolicy
 metadata:
     name: default-deny-all
-    namespace: ai
+    namespace: argocd
 spec:
     podSelector: {} # die
     policyTypes: ["Ingress", "Egress"]

manifests/rag-server/deployment.yaml

@@ -1,6 +1,6 @@
 apiVersion: apps/v1
 kind: Deployment
-metadata: { name: rag-server, namespace: ai }
+metadata: { name: rag-server, namespace: argocd }
 spec:
     replicas: 1
     selector: { matchLabels: { app: rag-server } }
@@ -30,7 +30,7 @@ spec:
 ---
 apiVersion: v1
 kind: Service
-metadata: { name: rag-server, namespace: ai }
+metadata: { name: rag-server, namespace: argocd }
 spec:
     selector: { app: rag-server }
     ports:

manifests/tools/deployment.yaml

@@ -1,37 +1,37 @@
 apiVersion: apps/v1
 kind: Deployment
-metadata: { name: tools, namespace: ai }
+metadata: { name: tools, namespace: argocd }
 spec:
-  replicas: 1
-  selector: { matchLabels: { app: tools } }
-  template:
-    metadata: { labels: { app: tools } }
-    spec:
-      containers:
-        - name: tools
-          image: docker.io/ion606/tools:latest
-          ports: [{ containerPort: 1331 }]
-          env:
-            - { name: HOST, value: "0.0.0.0" }
-            - { name: PORT, value: "1331" }
-            - { name: ROKU_IP, value: "192.0.2.10" }
-          readinessProbe:
-            httpGet: { path: "/roku/openapi.json", port: 1331 }
-          livenessProbe:
-            httpGet: { path: "/roku/openapi.json", port: 1331 }
-            initialDelaySeconds: 10
-          resources:
-            requests: { cpu: "100m", memory: "128Mi" }
-            limits: { cpu: "500m", memory: "512Mi" }
+    replicas: 1
+    selector: { matchLabels: { app: tools } }
+    template:
+        metadata: { labels: { app: tools } }
+        spec:
+            containers:
+                - name: tools
+                  image: docker.io/ion606/tools:latest
+                  ports: [{ containerPort: 1331 }]
+                  env:
+                      - { name: HOST, value: "0.0.0.0" }
+                      - { name: PORT, value: "1331" }
+                      - { name: ROKU_IP, value: "192.0.2.10" }
+                  readinessProbe:
+                      httpGet: { path: "/roku/openapi.json", port: 1331 }
+                  livenessProbe:
+                      httpGet: { path: "/roku/openapi.json", port: 1331 }
+                      initialDelaySeconds: 10
+                  resources:
+                      requests: { cpu: "100m", memory: "128Mi" }
+                      limits: { cpu: "500m", memory: "512Mi" }
 ---
 apiVersion: v1
 kind: Service
-metadata: { name: tools, namespace: ai }
+metadata: { name: tools, namespace: argocd }
 spec:
-  selector: { app: tools }
-  ports:
-    - name: http
-      port: 1331
-      targetPort: 1331
-      nodePort: 31331
-  type: NodePort
+    selector: { app: tools }
+    ports:
+        - name: http
+          port: 1331
+          targetPort: 1331
+          nodePort: 31331
+    type: NodePort