fix(myorg-assistant): fix CronJob image references to use Gitea registry image

CronJobs were referencing 'myorg-assistant:latest' (a local image that doesn't exist in the cluster), causing ImagePullBackOff on all 4 active CronJob pods. Updated all 5 CronJob manifests to use the same image as the Deployment (git.rogi.casa/roger/myorg-assistant/myorg-assistant:fcf79bf) and added imagePullSecrets: gitea-registry for authentication.
fix(argocd): add RBAC ConfigMap granting platform-engineer account read+sync access
2026-07-06 03:41:25 +00:00 · 2026-07-06 00:40:28 +00:00 · 2026-07-05 23:30:51 +02:00
6 changed files with 20 additions and 5 deletions
--- a/argocd/argocd-rbac-cm.yaml
+++ b/argocd/argocd-rbac-cm.yaml
@@ -0,0 +1,15 @@
+apiVersion: v1
+kind: ConfigMap
+metadata:
+  name: argocd-rbac-cm
+  namespace: argocd
+  labels:
+    app.kubernetes.io/name: argocd-rbac-cm
+    app.kubernetes.io/part-of: argocd
+data:
+  policy.default: ""
+  policy.csv: |
+    p, role:platform-engineer, applications, get, */*, allow
+    p, role:platform-engineer, applications, sync, */*, allow
+    p, role:platform-engineer, projects, get, *, allow
+    g, platform-engineer, role:platform-engineer
--- a/myorg-assistant/cronjobs/deadline-checker.yaml
+++ b/myorg-assistant/cronjobs/deadline-checker.yaml
@@ -27,7 +27,7 @@ spec:
          containers:
          - name: deadline-checker
            image: git.rogi.casa/roger/myorg-assistant/myorg-assistant:fcf79bf
-            imagePullPolicy: Always
+            imagePullPolicy: IfNotPresent
            command:
            - python
            - run_job.py
--- a/myorg-assistant/cronjobs/evening-summary.yaml
+++ b/myorg-assistant/cronjobs/evening-summary.yaml
@@ -27,7 +27,7 @@ spec:
          containers:
          - name: evening-summary
            image: git.rogi.casa/roger/myorg-assistant/myorg-assistant:fcf79bf
-            imagePullPolicy: Always
+            imagePullPolicy: IfNotPresent
            command:
            - python
            - run_job.py
--- a/myorg-assistant/cronjobs/git-sync.yaml
+++ b/myorg-assistant/cronjobs/git-sync.yaml
@@ -27,7 +27,7 @@ spec:
          containers:
          - name: git-sync
            image: git.rogi.casa/roger/myorg-assistant/myorg-assistant:fcf79bf
-            imagePullPolicy: Always
+            imagePullPolicy: IfNotPresent
            command:
            - python
            - run_job.py
--- a/myorg-assistant/cronjobs/morning-briefing.yaml
+++ b/myorg-assistant/cronjobs/morning-briefing.yaml
@@ -27,7 +27,7 @@ spec:
          containers:
          - name: morning-briefing
            image: git.rogi.casa/roger/myorg-assistant/myorg-assistant:fcf79bf
-            imagePullPolicy: Always
+            imagePullPolicy: IfNotPresent
            command:
            - python
            - run_job.py
--- a/myorg-assistant/cronjobs/waiting-followup.yaml
+++ b/myorg-assistant/cronjobs/waiting-followup.yaml
@@ -27,7 +27,7 @@ spec:
          containers:
          - name: waiting-followup
            image: git.rogi.casa/roger/myorg-assistant/myorg-assistant:fcf79bf
-            imagePullPolicy: Always
+            imagePullPolicy: IfNotPresent
            command:
            - python
            - run_job.py