refactor: restructure services layout, retire oceanus, add aether scaffolding
- Move flat service manifests into structured subdirs (apps/, bootstrap-jobs/,
repair-jobs/, migration-jobs/, validation-jobs/, node-ops/, networking/)
- Retire oneoffs/ directories across services
- Remove oceanus cluster and its host roles; add aether cluster + terraform scaffolding
- Reorganize scripts/ into ops/, render/, sync/, manual-tests/
- Add Makefile with render/validate/test/flux targets and repo-structure tests
- Update flux-system application CRs to the new paths
- Add hermes-automated-triage-24h-plan knowledge doc (+ comms mirror)
- Refresh knowledge catalogs, dashboards, vmalert rules, quality contract
Co-Authored-By: Claude Fable 5 <noreply@anthropic.com>
2026-08-05 16:21:36 -03:00
|
|
|
# services/maintenance/bootstrap/image.yaml
|
2026-01-19 19:02:14 -03:00
|
|
|
apiVersion: image.toolkit.fluxcd.io/v1beta2
|
|
|
|
|
kind: ImageRepository
|
|
|
|
|
metadata:
|
|
|
|
|
name: ariadne
|
|
|
|
|
namespace: maintenance
|
|
|
|
|
spec:
|
|
|
|
|
image: registry.bstein.dev/bstein/ariadne
|
|
|
|
|
interval: 1m0s
|
2026-01-22 15:33:08 -03:00
|
|
|
secretRef:
|
|
|
|
|
name: harbor-regcred
|
2026-01-19 19:02:14 -03:00
|
|
|
---
|
|
|
|
|
apiVersion: image.toolkit.fluxcd.io/v1beta2
|
|
|
|
|
kind: ImagePolicy
|
|
|
|
|
metadata:
|
|
|
|
|
name: ariadne
|
|
|
|
|
namespace: maintenance
|
|
|
|
|
spec:
|
|
|
|
|
imageRepositoryRef:
|
|
|
|
|
name: ariadne
|
|
|
|
|
policy:
|
|
|
|
|
semver:
|
|
|
|
|
range: ">=0.1.0-0"
|
2026-03-31 14:07:17 -03:00
|
|
|
---
|
|
|
|
|
apiVersion: image.toolkit.fluxcd.io/v1beta2
|
|
|
|
|
kind: ImageRepository
|
|
|
|
|
metadata:
|
|
|
|
|
name: metis
|
|
|
|
|
namespace: maintenance
|
|
|
|
|
spec:
|
|
|
|
|
image: registry.bstein.dev/bstein/metis
|
|
|
|
|
interval: 1m0s
|
|
|
|
|
secretRef:
|
|
|
|
|
name: harbor-regcred
|
|
|
|
|
---
|
|
|
|
|
apiVersion: image.toolkit.fluxcd.io/v1beta2
|
|
|
|
|
kind: ImagePolicy
|
|
|
|
|
metadata:
|
2026-04-24 12:55:47 -03:00
|
|
|
name: metis-amd64
|
|
|
|
|
namespace: maintenance
|
|
|
|
|
spec:
|
|
|
|
|
imageRepositoryRef:
|
|
|
|
|
name: metis
|
|
|
|
|
filterTags:
|
|
|
|
|
pattern: '^(?P<version>0\.1\.0-\d+)-amd64$'
|
|
|
|
|
extract: '$version'
|
|
|
|
|
policy:
|
|
|
|
|
semver:
|
|
|
|
|
range: ">=0.1.0-0"
|
|
|
|
|
---
|
|
|
|
|
apiVersion: image.toolkit.fluxcd.io/v1beta2
|
|
|
|
|
kind: ImagePolicy
|
|
|
|
|
metadata:
|
|
|
|
|
name: metis-arm64
|
2026-03-31 14:07:17 -03:00
|
|
|
namespace: maintenance
|
|
|
|
|
spec:
|
|
|
|
|
imageRepositoryRef:
|
|
|
|
|
name: metis
|
2026-04-24 12:55:47 -03:00
|
|
|
filterTags:
|
|
|
|
|
pattern: '^(?P<version>0\.1\.0-\d+)-arm64$'
|
|
|
|
|
extract: '$version'
|
2026-03-31 14:07:17 -03:00
|
|
|
policy:
|
|
|
|
|
semver:
|
|
|
|
|
range: ">=0.1.0-0"
|
|
|
|
|
---
|
|
|
|
|
apiVersion: image.toolkit.fluxcd.io/v1beta2
|
|
|
|
|
kind: ImageRepository
|
|
|
|
|
metadata:
|
|
|
|
|
name: metis-sentinel
|
|
|
|
|
namespace: maintenance
|
|
|
|
|
spec:
|
|
|
|
|
image: registry.bstein.dev/bstein/metis-sentinel
|
|
|
|
|
interval: 1m0s
|
|
|
|
|
secretRef:
|
|
|
|
|
name: harbor-regcred
|
|
|
|
|
---
|
|
|
|
|
apiVersion: image.toolkit.fluxcd.io/v1beta2
|
|
|
|
|
kind: ImagePolicy
|
|
|
|
|
metadata:
|
2026-04-24 12:55:47 -03:00
|
|
|
name: metis-sentinel-amd64
|
|
|
|
|
namespace: maintenance
|
|
|
|
|
spec:
|
|
|
|
|
imageRepositoryRef:
|
|
|
|
|
name: metis-sentinel
|
|
|
|
|
filterTags:
|
|
|
|
|
pattern: '^(?P<version>0\.1\.0-\d+)-amd64$'
|
|
|
|
|
extract: '$version'
|
|
|
|
|
policy:
|
|
|
|
|
semver:
|
|
|
|
|
range: ">=0.1.0-0"
|
|
|
|
|
---
|
|
|
|
|
apiVersion: image.toolkit.fluxcd.io/v1beta2
|
|
|
|
|
kind: ImagePolicy
|
|
|
|
|
metadata:
|
|
|
|
|
name: metis-sentinel-arm64
|
2026-03-31 14:07:17 -03:00
|
|
|
namespace: maintenance
|
|
|
|
|
spec:
|
|
|
|
|
imageRepositoryRef:
|
|
|
|
|
name: metis-sentinel
|
2026-04-24 12:55:47 -03:00
|
|
|
filterTags:
|
|
|
|
|
pattern: '^(?P<version>0\.1\.0-\d+)-arm64$'
|
|
|
|
|
extract: '$version'
|
2026-03-31 14:07:17 -03:00
|
|
|
policy:
|
|
|
|
|
semver:
|
|
|
|
|
range: ">=0.1.0-0"
|
|
|
|
|
---
|
|
|
|
|
apiVersion: image.toolkit.fluxcd.io/v1beta2
|
|
|
|
|
kind: ImageRepository
|
|
|
|
|
metadata:
|
|
|
|
|
name: soteria
|
|
|
|
|
namespace: maintenance
|
|
|
|
|
spec:
|
|
|
|
|
image: registry.bstein.dev/bstein/soteria
|
|
|
|
|
interval: 1m0s
|
|
|
|
|
secretRef:
|
|
|
|
|
name: harbor-regcred
|
|
|
|
|
---
|
|
|
|
|
apiVersion: image.toolkit.fluxcd.io/v1beta2
|
|
|
|
|
kind: ImagePolicy
|
|
|
|
|
metadata:
|
|
|
|
|
name: soteria
|
|
|
|
|
namespace: maintenance
|
|
|
|
|
spec:
|
|
|
|
|
imageRepositoryRef:
|
|
|
|
|
name: soteria
|
|
|
|
|
policy:
|
|
|
|
|
semver:
|
|
|
|
|
range: ">=0.1.0-0"
|