A

apps/0-project-and-root.yaml

@@ -6,7 +6,7 @@ metadata:
 spec:
     destinations:
         - server: https://kubernetes.default.svc
-          namespace: ai
+          namespace: argocd
         - server: https://kubernetes.default.svc
           namespace: argo
         # # only add if need to deploy into argocd (ehhhhh)
@@ -24,7 +24,7 @@ spec:
     project: ai-stack
     destination:
         server: https://kubernetes.default.svc
-        namespace: ai
+        namespace: argocd
     source:
         repoURL: https://git.ion606.com/ion606/ollama-plus
         targetRevision: argo

apps/argo-templates.yaml

@@ -2,7 +2,7 @@ apiVersion: argoproj.io/v1alpha1
 kind: Application
 metadata:
     name: argo-templates
-    namespace: ai
+    namespace: argocd
 spec:
     project: ai-stack
     destination:
@@ -10,7 +10,7 @@ spec:
         namespace: argo
     source:
         repoURL: https://git.ion606.com/ion606/ollama-plus
-        targetRevision: main
+        targetRevision: argo
         path: apps/argo-templates
     syncPolicy:
         automated:

apps/children/browser.yaml

@@ -2,15 +2,15 @@ apiVersion: argoproj.io/v1alpha1
 kind: Application
 metadata:
     name: browser
-    namespace: ai
+    namespace: argocd
 spec:
     project: ai-stack
     destination:
         server: https://kubernetes.default.svc
-        namespace: ai
+        namespace: argocd
     source:
         repoURL: https://git.ion606.com/ion606/ollama-plus.git
-        targetRevision: main
+        targetRevision: argo
         path: manifests/browser
     syncPolicy:
         automated:

apps/children/coderunner.yaml

@@ -2,17 +2,17 @@ apiVersion: argoproj.io/v1alpha1
 kind: Application
 metadata:
     name: coderunner
-    namespace: ai
+    namespace: argocd
     labels:
         repo.ion606.com/ollama-plus: "true"
 spec:
     project: ai-stack
     destination:
         server: https://kubernetes.default.svc
-        namespace: ai
+        namespace: argocd
     source:
         repoURL: https://git.ion606.com/ion606/ollama-plus
-        targetRevision: main
+        targetRevision: argo
         path: manifests/coderunner
     syncPolicy:
         automated:

apps/children/debug.yaml

@@ -2,20 +2,19 @@ apiVersion: argoproj.io/v1alpha1
 kind: Application
 metadata:
     name: debug-netshoot
-    namespace: ai
+    namespace: argocd
     labels:
         repo.ion606.com/ollama-plus: "true"
 spec:
     project: ai-stack
     destination:
         server: https://kubernetes.default.svc
-        namespace: ai
+        namespace: argocd
     source:
         repoURL: https://git.ion606.com/ion606/ollama-plus
-        targetRevision: main
+        targetRevision: argo
         path: manifests/debug
     syncPolicy:
         automated:
             prune: true
             selfHeal: true
-

apps/children/ollama-scheduler.yaml

@@ -2,7 +2,7 @@ apiVersion: argoproj.io/v1alpha1
 kind: Application
 metadata:
     name: ollama-scheduler
-    namespace: ai
+    namespace: argocd
     labels:
         repo.ion606.com/ollama-plus: "true"
 spec:
@@ -12,7 +12,7 @@ spec:
         namespace: argo
     source:
         repoURL: https://git.ion606.com/ion606/ollama-plus
-        targetRevision: main
+        targetRevision: argo
         path: manifests/argo-schedules-api
     syncPolicy:
         automated:

apps/children/openwebui.yaml

@@ -2,14 +2,14 @@ apiVersion: argoproj.io/v1alpha1
 kind: Application
 metadata:
     name: openwebui
-    namespace: ai
+    namespace: argocd
     annotations:
         argocd.argoproj.io/sync-wave: "0"
 spec:
     project: ai-stack
     destination:
         server: https://kubernetes.default.svc
-        namespace: ai
+        namespace: argocd
     source:
         repoURL: https://helm.openwebui.com
         chart: open-webui

apps/children/policy-argo.yaml

@@ -2,7 +2,7 @@ apiVersion: argoproj.io/v1alpha1
 kind: Application
 metadata:
     name: policy-argo
-    namespace: ai
+    namespace: argocd
     labels:
         repo.ion606.com/ollama-plus: "true"
 spec:
@@ -12,10 +12,9 @@ spec:
         namespace: argo
     source:
         repoURL: https://git.ion606.com/ion606/ollama-plus
-        targetRevision: main
+        targetRevision: argo
         path: manifests/policy-argo
     syncPolicy:
         automated:
             prune: true
             selfHeal: true
-

apps/children/policy.yaml

@@ -2,20 +2,19 @@ apiVersion: argoproj.io/v1alpha1
 kind: Application
 metadata:
     name: policy
-    namespace: ai
+    namespace: argocd
     labels:
         repo.ion606.com/ollama-plus: "true"
 spec:
     project: ai-stack
     destination:
         server: https://kubernetes.default.svc
-        namespace: ai
+        namespace: argocd
     source:
         repoURL: https://git.ion606.com/ion606/ollama-plus
-        targetRevision: main
+        targetRevision: argo
         path: manifests/policy
     syncPolicy:
         automated:
             prune: true
             selfHeal: true
-

apps/children/postgresql.yaml

@@ -2,14 +2,14 @@ apiVersion: argoproj.io/v1alpha1
 kind: Application
 metadata:
     name: postgresql
-  namespace: ai
+    namespace: argocd
     annotations:
         argocd.argoproj.io/sync-wave: "-10"
 spec:
     project: ai-stack
     destination:
         server: https://kubernetes.default.svc
-        namespace: ai
+        namespace: argocd
     source:
         repoURL: https://charts.bitnami.com/bitnami
         chart: postgresql

apps/children/rag-server.yaml

@@ -2,17 +2,17 @@ apiVersion: argoproj.io/v1alpha1
 kind: Application
 metadata:
     name: rag-server
-    namespace: ai
+    namespace: argocd
     labels:
         repo.ion606.com/ollama-plus: "true"
 spec:
     project: ai-stack
     destination:
         server: https://kubernetes.default.svc
-        namespace: ai
+        namespace: argocd
     source:
         repoURL: https://git.ion606.com/ion606/ollama-plus
-        targetRevision: main
+        targetRevision: argo
         path: manifests/rag-server
     syncPolicy:
         automated:

apps/children/searxng.yaml

@@ -2,12 +2,12 @@ apiVersion: argoproj.io/v1alpha1
 kind: Application
 metadata:
     name: searxng
-    namespace: ai
+    namespace: argocd
 spec:
     project: ai-stack
     destination:
         server: https://kubernetes.default.svc
-        namespace: ai
+        namespace: argocd
     source:
         repoURL: https://charts.kubito.dev
         chart: searxng

apps/children/tools.yaml

@@ -2,17 +2,17 @@ apiVersion: argoproj.io/v1alpha1
 kind: Application
 metadata:
     name: tools
-    namespace: ai
+    namespace: argocd
     labels:
         repo.ion606.com/ollama-plus: "true"
 spec:
     project: ai-stack
     destination:
         server: https://kubernetes.default.svc
-        namespace: ai
+        namespace: argocd
     source:
         repoURL: https://git.ion606.com/ion606/ollama-plus
-        targetRevision: main
+        targetRevision: argo
         path: manifests/tools
     syncPolicy:
         automated:

manifests/browser/deployment.yaml

@@ -1,6 +1,6 @@
 apiVersion: apps/v1
 kind: Deployment
-metadata: { name: browser, namespace: ai }
+metadata: { name: browser, namespace: argocd }
 spec:
     replicas: 1
     selector: { matchLabels: { app: browser } }
@@ -28,7 +28,7 @@ spec:
 ---
 apiVersion: v1
 kind: Service
-metadata: { name: browser, namespace: ai }
+metadata: { name: browser, namespace: argocd }
 spec:
     selector: { app: browser }
     ports:

manifests/coderunner/deployment.yaml

@@ -1,6 +1,6 @@
 apiVersion: apps/v1
 kind: Deployment
-metadata: { name: coderunner, namespace: ai }
+metadata: { name: coderunner, namespace: argocd }
 spec:
     replicas: 1
     selector: { matchLabels: { app: coderunner } }
@@ -32,7 +32,7 @@ spec:
 ---
 apiVersion: v1
 kind: Service
-metadata: { name: coderunner, namespace: ai }
+metadata: { name: coderunner, namespace: argocd }
 spec:
     selector: { app: coderunner }
     ports:

manifests/coderunner/rbac.yaml

@@ -1,10 +1,10 @@
 apiVersion: v1
 kind: ServiceAccount
-metadata: { name: coderunner-sa, namespace: ai }
+metadata: { name: coderunner-sa, namespace: argocd }
 ---
 apiVersion: rbac.authorization.k8s.io/v1
 kind: Role
-metadata: { name: coderunner-job-role, namespace: ai }
+metadata: { name: coderunner-job-role, namespace: argocd }
 rules:
     - apiGroups: ["batch"]
       resources: ["jobs"]
@@ -16,11 +16,11 @@ rules:
 ---
 apiVersion: rbac.authorization.k8s.io/v1
 kind: RoleBinding
-metadata: { name: coderunner-job-rb, namespace: ai }
+metadata: { name: coderunner-job-rb, namespace: argocd }
 subjects:
     - kind: ServiceAccount
       name: coderunner-sa
-      namespace: ai
+      namespace: argocd
 roleRef:
     apiGroup: rbac.authorization.k8s.io
     kind: Role

manifests/debug/netshoot.yaml

@@ -2,7 +2,7 @@ apiVersion: apps/v1
 kind: Deployment
 metadata:
     name: netshoot
-    namespace: ai
+    namespace: argocd
 spec:
     replicas: 1
     selector:

manifests/policy/allow-browser-ingress.yaml

@@ -2,7 +2,7 @@ apiVersion: networking.k8s.io/v1
 kind: NetworkPolicy
 metadata:
     name: allow-browser-ingress
-    namespace: ai
+    namespace: argocd
 spec:
     podSelector:
         matchLabels:
@@ -14,4 +14,3 @@ spec:
                     cidr: 0.0.0.0/0
           ports:
               - { protocol: TCP, port: 7788 }
-

manifests/policy/allow-common-egress.yaml

@@ -2,7 +2,7 @@ apiVersion: networking.k8s.io/v1
 kind: NetworkPolicy
 metadata:
     name: allow-common-egress
-    namespace: ai
+    namespace: argocd
 spec:
     podSelector: {}
     policyTypes: ["Egress"]
@@ -23,4 +23,3 @@ spec:
                         kubernetes.io/metadata.name: ai
           ports:
               - { protocol: TCP, port: 5432 }
-

manifests/policy/allow-https-egress.yaml

@@ -2,7 +2,7 @@ apiVersion: networking.k8s.io/v1
 kind: NetworkPolicy
 metadata:
     name: allow-https-egress
-    namespace: ai
+    namespace: argocd
 spec:
     podSelector: {}
     policyTypes: ["Egress"]

manifests/policy/allow-openwebui-ingress.yaml

@@ -2,7 +2,7 @@ apiVersion: networking.k8s.io/v1
 kind: NetworkPolicy
 metadata:
     name: allow-openwebui-ingress
-    namespace: ai
+    namespace: argocd
 spec:
     # Select the Open WebUI pods deployed by the Helm release "openwebui"
     podSelector:
@@ -17,4 +17,3 @@ spec:
               # Open WebUI typically listens on 8080 (chart default), sometimes 80
               - { protocol: TCP, port: 8080 }
               - { protocol: TCP, port: 80 }
-

manifests/policy/default-deny.yaml

@@ -2,7 +2,7 @@ apiVersion: networking.k8s.io/v1
 kind: NetworkPolicy
 metadata:
     name: default-deny-all
-    namespace: ai
+    namespace: argocd
 spec:
     podSelector: {} # die
     policyTypes: ["Ingress", "Egress"]

manifests/rag-server/deployment.yaml

@@ -1,6 +1,6 @@
 apiVersion: apps/v1
 kind: Deployment
-metadata: { name: rag-server, namespace: ai }
+metadata: { name: rag-server, namespace: argocd }
 spec:
     replicas: 1
     selector: { matchLabels: { app: rag-server } }
@@ -30,7 +30,7 @@ spec:
 ---
 apiVersion: v1
 kind: Service
-metadata: { name: rag-server, namespace: ai }
+metadata: { name: rag-server, namespace: argocd }
 spec:
     selector: { app: rag-server }
     ports:

manifests/tools/deployment.yaml

@@ -1,6 +1,6 @@
 apiVersion: apps/v1
 kind: Deployment
-metadata: { name: tools, namespace: ai }
+metadata: { name: tools, namespace: argocd }
 spec:
     replicas: 1
     selector: { matchLabels: { app: tools } }
@@ -26,7 +26,7 @@ spec:
 ---
 apiVersion: v1
 kind: Service
-metadata: { name: tools, namespace: ai }
+metadata: { name: tools, namespace: argocd }
 spec:
     selector: { app: tools }
     ports: