69 lines
2.9 KiB
Markdown
69 lines
2.9 KiB
Markdown
# Infrastructure Blocker: bf-22vc5 - acb-enrichment Deployment
|
|
|
|
## Problem
|
|
The `acb-enrichment-deployment.yml` is disabled because it contains a placeholder SHA:
|
|
```yaml
|
|
image: ronaldraygun/acb-enrichment@sha256:placeholder
|
|
```
|
|
|
|
## Root Cause
|
|
The `acb-enrichment` Docker image has never been built. Docker Hub repository exists but has no tags:
|
|
```bash
|
|
curl -sk https://hub.docker.com/v2/repositories/ronaldraygun/acb-enrichment/tags/
|
|
# Returns: {"count":0,"next":null,"previous":null,"results":[]}
|
|
```
|
|
|
|
## Infrastructure Blocker
|
|
Cannot trigger the acb-build workflow on iad-ci because:
|
|
- The iad-ci kubeconfig (`/home/coding/.kube/iad-ci.kubeconfig`) is missing
|
|
- The rs-manager kubeconfig (`/home/coding/.kube/rs-manager.kubeconfig`) is also missing
|
|
- The kubectl-proxy on `traefik-iad-ci:8001` is read-only (ServiceAccount: `devpod-observer:devpod-observer`)
|
|
- Cannot create workflows via read-only proxy
|
|
|
|
## Checked Alternatives (2024-06-04)
|
|
1. **Docker runtime**: Not available on this Hetzner server
|
|
2. **Podman runtime**: Not available on this Hetzner server
|
|
3. **GitHub Actions**: Disabled across all repos per CLAUDE.md
|
|
4. **ArgoCD read-only API**: Cannot submit workflows via read-only access
|
|
5. **Argo UI**: Available at https://argo-ci.ardenone.com but requires Google SSO (not programmatic)
|
|
|
|
## Available Access
|
|
- Read-only kubectl-proxy: `kubectl --server=http://traefik-iad-ci:8001` works
|
|
- Argo UI: `https://argo-ci.ardenone.com` (requires Google SSO)
|
|
- rs-manager cluster: Available via traefik-rs-manager:8001 (no Argo Workflows CRDs)
|
|
|
|
## Expected Workflow
|
|
The `acb-build` WorkflowTemplate in `declarative-config/k8s/iad-ci/argo-workflows/acb-build-workflowtemplate.yml` includes:
|
|
1. Run Go tests
|
|
2. Build all ACB images including `acb-enrichment` (line 93-102)
|
|
3. Update deployment manifests with the new digest (line 103-108, 216-262)
|
|
|
|
The workflow should be triggered with:
|
|
```bash
|
|
kubectl --kubeconfig=/home/coding/.kube/iad-ci.kubeconfig create -f - <<EOF
|
|
apiVersion: argoproj.io/v1alpha1
|
|
kind: Workflow
|
|
metadata:
|
|
generateName: acb-build-manual-
|
|
namespace: argo-workflows
|
|
spec:
|
|
workflowTemplateRef:
|
|
name: acb-build
|
|
EOF
|
|
```
|
|
|
|
## Resolution Options
|
|
1. **Obtain iad-ci kubeconfig**: Get the kubeconfig from Rackspace Spot console or OpenBao
|
|
2. **Use rs-manager**: If rs-manager can execute workflows on iad-ci (multi-cluster setup)
|
|
3. **Manual build**: Build image locally and push to Docker Hub (requires Docker/Kaniko - not available)
|
|
4. **Manual UI trigger**: Access https://argo-ci.ardenone.com via browser and trigger manually
|
|
5. **Request manual trigger**: Ask someone with access to trigger the workflow
|
|
|
|
## Status
|
|
**BLOCKED**: Waiting for iad-ci kubeconfig or alternative workflow trigger method.
|
|
|
|
## Next Steps
|
|
- [ ] Obtain iad-ci.kubeconfig with cluster-admin ServiceAccount credentials
|
|
- [ ] Submit acb-build workflow manually
|
|
- [ ] Verify image builds successfully
|
|
- [ ] Confirm deployment manifest is updated with real SHA
|