C1: migrate cv + docs from minikube to indri-native #342

Merged

eblume merged 3 commits from migrate-cv-docs-to-indri into main

2026-04-29 14:55:12 -07:00

eblume commented

2026-04-29 14:38:31 -07:00

Owner

Summary

Replace the cv (cv.eblu.me) and docs (docs.eblu.me) minikube Deployments with indri-native ansible roles. Caddy serves the extracted release tarballs directly via a new kind: static service-block — no daemon, no nginx pod, no ProxyGroup ingress on the request path. Mirrors the rationale of the recent devpi migration; part of the broader minikube wind-down.

What's in this commit

ansible/roles/{cv,docs} — sentinel-gated tarball download + extract into ~/{cv,docs}/content/
ansible/roles/caddy/ — new kind: static branch in the Caddyfile template (encoded gzip, immutable cache headers for fingerprinted assets, optional try_html for Quartz-style clean URLs, optional per-path download_paths for the resume PDF's Content-Disposition)
ansible/playbooks/indri.yml — wires cv and docs roles before caddy
service-versions.yaml — both services flip to type: ansible. docs.current-version stays at 1.28.2 for this commit so container-version-check keeps passing while containers/quartz/Dockerfile still exists; it moves to the docs release tag in the cleanup commit
.forgejo/workflows/{cv-deploy,build-blumeops}.yaml — deploy step now bumps cv_version/docs_version in the role defaults and pushes; running ansible + purging the Fly cache is manual from gilbert (matches devpi)
Docs: docs/how-to/operations/{cv,docs}-on-indri.md, updated docs/reference/services/{cv,docs}.md, changelog fragment

What is not in this commit

The dead artifacts. After PR review and successful cutover, a follow-up commit deletes:

argocd/apps/{cv,docs}.yaml and argocd/manifests/{cv,docs}/
containers/cv/, containers/quartz/
CONTAINER_TO_SERVICE['quartz'] mapping in mise-tasks/container-version-check
bumps docs.current-version in service-versions.yaml to the release tag

Cutover plan (manual, from gilbert, after review)

Take down old:
- Remove the cv and docs Applications: argocd app delete cv --cascade && argocd app delete docs --cascade
- Verify k8s namespaces gone: kubectl --context=minikube-indri get ns | grep -E '^(cv|docs)\\b' (should be empty)
- Verify tailnet MagicDNS no longer advertises the VIPs: nslookup cv.tail8d86e.ts.net and nslookup docs.tail8d86e.ts.net should both fail
Bring up new:
- mise run provision-indri -- --tags cv,docs,caddy --check --diff (already validated on branch)
- mise run provision-indri -- --tags cv,docs,caddy
- fly ssh console -a blumeops-proxy -C "sh -c 'rm -rf /tmp/cache && nginx -s reload'"
Verify: mise run services-check and the curl checks listed in docs/how-to/operations/{cv,docs}-on-indri.md
Cleanup commit + merge.

Total expected downtime: minutes (not the few-hour budget you authorized).

Test plan

mise run provision-indri -- --tags cv,docs --check --diff clean
mise run provision-indri -- --tags caddy --check --diff shows only the cv + docs blocks changing as previewed in the PR thread
After cutover: cv.eblu.me, cv.ops.eblu.me, docs.eblu.me, docs.ops.eblu.me all return 200
cv.eblu.me/resume.pdf includes Content-Disposition: attachment
A clean Quartz URL (e.g. docs.eblu.me/explanation/agent-change-process) resolves to the right page
mise run services-check clean
mise run service-review --type ansible shows cv and docs

🤖 Generated with Claude Code

## Summary Replace the cv (`cv.eblu.me`) and docs (`docs.eblu.me`) minikube Deployments with indri-native ansible roles. Caddy serves the extracted release tarballs directly via a new `kind: static` service-block — no daemon, no nginx pod, no ProxyGroup ingress on the request path. Mirrors the rationale of the recent devpi migration; part of the broader minikube wind-down. ## What's in this commit - `ansible/roles/{cv,docs}` — sentinel-gated tarball download + extract into `~/{cv,docs}/content/` - `ansible/roles/caddy/` — new `kind: static` branch in the Caddyfile template (encoded gzip, immutable cache headers for fingerprinted assets, optional `try_html` for Quartz-style clean URLs, optional per-path `download_paths` for the resume PDF's `Content-Disposition`) - `ansible/playbooks/indri.yml` — wires `cv` and `docs` roles before `caddy` - `service-versions.yaml` — both services flip to `type: ansible`. `docs.current-version` stays at `1.28.2` for this commit so `container-version-check` keeps passing while `containers/quartz/Dockerfile` still exists; it moves to the docs release tag in the cleanup commit - `.forgejo/workflows/{cv-deploy,build-blumeops}.yaml` — deploy step now bumps `cv_version`/`docs_version` in the role defaults and pushes; running ansible + purging the Fly cache is manual from gilbert (matches devpi) - Docs: `docs/how-to/operations/{cv,docs}-on-indri.md`, updated `docs/reference/services/{cv,docs}.md`, changelog fragment ## What is not in this commit The dead artifacts. After PR review and successful cutover, a follow-up commit deletes: - `argocd/apps/{cv,docs}.yaml` and `argocd/manifests/{cv,docs}/` - `containers/cv/`, `containers/quartz/` - `CONTAINER_TO_SERVICE['quartz']` mapping in `mise-tasks/container-version-check` - bumps `docs.current-version` in `service-versions.yaml` to the release tag ## Cutover plan (manual, from gilbert, after review) 1. **Take down old:** - Remove the cv and docs Applications: `argocd app delete cv --cascade && argocd app delete docs --cascade` - Verify k8s namespaces gone: `kubectl --context=minikube-indri get ns | grep -E '^(cv|docs)\\b'` (should be empty) - Verify tailnet MagicDNS no longer advertises the VIPs: `nslookup cv.tail8d86e.ts.net` and `nslookup docs.tail8d86e.ts.net` should both fail 2. **Bring up new:** - `mise run provision-indri -- --tags cv,docs,caddy --check --diff` (already validated on branch) - `mise run provision-indri -- --tags cv,docs,caddy` - `fly ssh console -a blumeops-proxy -C "sh -c 'rm -rf /tmp/cache && nginx -s reload'"` 3. **Verify:** `mise run services-check` and the curl checks listed in `docs/how-to/operations/{cv,docs}-on-indri.md` 4. **Cleanup commit + merge.** Total expected downtime: minutes (not the few-hour budget you authorized). ## Test plan - [ ] `mise run provision-indri -- --tags cv,docs --check --diff` clean - [ ] `mise run provision-indri -- --tags caddy --check --diff` shows only the cv + docs blocks changing as previewed in the PR thread - [ ] After cutover: `cv.eblu.me`, `cv.ops.eblu.me`, `docs.eblu.me`, `docs.ops.eblu.me` all return 200 - [ ] `cv.eblu.me/resume.pdf` includes `Content-Disposition: attachment` - [ ] A clean Quartz URL (e.g. `docs.eblu.me/explanation/agent-change-process`) resolves to the right page - [ ] `mise run services-check` clean - [ ] `mise run service-review --type ansible` shows cv and docs 🤖 Generated with [Claude Code](https://claude.com/claude-code)

eblume added 1 commit

2026-04-29 14:38:32 -07:00

C1: migrate cv + docs from minikube to indri-native (deploy artifacts) 930f99d706

Replaces the cv and docs minikube Deployments with ansible roles that
download release tarballs into ~/cv/content and ~/docs/content on indri.
Caddy now serves those directories directly via a new kind=static
service-block in the Caddy template; no daemon, no nginx pod, no
ProxyGroup ingress on the request path.

This commit adds the deploy-side artifacts only. Live cutover (delete
argocd apps, run ansible, verify) is staged manually after PR review;
the dead containers/{cv,quartz} and argocd manifests are removed in a
follow-up commit so each commit is internally consistent.

Workflows are simplified: the deploy step now bumps the role's pinned
version and pushes; running ansible + purging the Fly cache is manual
from gilbert (matches the devpi pattern).

service-versions.yaml: cv and docs are type=ansible. docs current-version
remains 1.28.2 for now to keep container-version-check passing while
containers/quartz still exists; will move to the docs release tag in the
cleanup commit.

Co-Authored-By: Claude Opus 4.7 (1M context) <noreply@anthropic.com>

eblume added 1 commit

2026-04-29 14:43:00 -07:00

homepage: add cv, docs, devpi as static entries 9a81bc4633

cv and docs were auto-discovered by homepage's k8s integration via
gethomepage.dev/* annotations on their Ingresses. After the indri-native
migration the Ingresses are gone, so add static entries that link to the
public URLs. devpi was never on the homepage; adding it under Host
Services next to the other indri-native infra (Forgejo, Registry).

The static entries lose pod-status indicators (no pod to watch) but stay
clickable. During the migration window the auto-discovered entries and
the static entries will both render briefly; once the cv/docs Ingresses
are deleted, only the static entries remain.

Co-Authored-By: Claude Opus 4.7 (1M context) <noreply@anthropic.com>

eblume added 1 commit

2026-04-29 14:54:14 -07:00

cv+docs: relocate content under ~/blumeops/{cv,docs} 5b52f18356

Keeps blumeops-managed state grouped under a single namespace in the
home dir rather than scattered top-level dirs. Caddy block paths are
derived from cv_content_dir / docs_content_dir, so the role-defaults
edit propagates automatically.

Validated end-to-end on indri: tarballs extracted to the new paths,
sentinels written, second run is idempotent. Old ~/cv and ~/docs from
the earlier validation run were removed.

Co-Authored-By: Claude Opus 4.7 (1M context) <noreply@anthropic.com>