refactor(immich): fold seed-immich into the immich KS (stage 2) #405

Merged
k.renner merged 1 commits from immich-dedicated-fold into master 2026-07-25 09:08:29 +00:00
1 Commits
Author SHA1 Message Date
claude-botandClaude Opus 4.8 ab65898234 refactor(immich): fold seed-immich into the immich KS (stage 2)
ci/woodpecker/pr/pr-review Pipeline was successful
ci/woodpecker/pr/ci-scripts-test Pipeline was successful
Completes the immich seed->apps move (same single-transfer pattern as paperless
#400). Restore-test passed first (im-pg backup restorable: 33316 rows in asset).

- git mv seed/immich/{cluster,objectstore,scheduled-backup,barman-creds-
  externalsecret,hetzner-creds-externalsecret,pvcs}.yaml -> apps/immich/, add to
  apps/immich/kustomization.yaml.
- immich KS: drop 'dependsOn: seed-immich', add
  'dependsOn: infrastructure-cnpg-barman', add the CNPG Cluster healthCheckExprs.
- Delete clusters/homelab/seed-immich.yaml and the now-empty seed/immich/.
- e2e-test.sh: drop seed-immich, add immich to the app-KS readiness checks
  (immich was previously only covered via seed-immich).
- Fix the last stale seed/immich comment path in
  infrastructure/openbao/snapshot-pvc.yaml (seed/immich -> apps/immich).

Safe ownership transfer (nothing pruned): all 7 seed/immich objects carry
prune: disabled (5 CNPG from stage 1 #401, 2 PVCs pre-existing), so deleting
seed-immich skips them in GC and the immich KS adopts them in place. No CNPG
restart, no app restart.

Verified: kubectl kustomize apps/immich builds 17 objects incl. Cluster/im-pg,
exactly 7 prune-protected; bash -n e2e-test.sh OK; seed/immich fully removed.

Left intentionally: the hetzner-creds ExternalSecret still reads OpenBao key
seed/immich/... (vault path, not a repo path).

Co-Authored-By: Claude Bot <claude-bot@renner.uno>
Co-Authored-By: Claude Opus 4.8 (1M context) <noreply@anthropic.com>
2026-07-25 10:45:46 +02:00