blumeops/argocd/manifests/devpi
Erich Blume af39067e1f Pin ArgoCD to v3.2.6 (#44)
## Summary
- Pin ArgoCD kustomization to v3.2.6 tag instead of `stable` branch
- This gives intentional control over ArgoCD version upgrades

## Deployment and Testing
- [ ] Sync the `apps` application: `argocd app sync apps`
- [ ] Point argocd at feature branch: `argocd app set argocd --revision feature/pin-argocd-v3.2.6`
- [ ] Sync argocd: `argocd app sync argocd`
- [ ] Verify ArgoCD is running v3.2.6
- [ ] After merge, reset to main: `argocd app set argocd --revision main && argocd app sync argocd`

🤖 Generated with [Claude Code](https://claude.com/claude-code)

Reviewed-on: https://forge.tail8d86e.ts.net/eblume/blumeops/pulls/44
2026-01-22 16:38:27 -08:00
..
Dockerfile P5: Migrate devpi to Kubernetes (#34) 2026-01-20 14:55:37 -08:00
ingress-tailscale.yaml P5.1: Migrate minikube from podman to QEMU2 driver (#38) 2026-01-21 16:03:37 -08:00
kustomization.yaml P5: Migrate devpi to Kubernetes (#34) 2026-01-20 14:55:37 -08:00
README.md P5: Migrate devpi to Kubernetes (#34) 2026-01-20 14:55:37 -08:00
secret-root.yaml.tpl P5: Migrate devpi to Kubernetes (#34) 2026-01-20 14:55:37 -08:00
service.yaml P5: Migrate devpi to Kubernetes (#34) 2026-01-20 14:55:37 -08:00
start.sh P5: Migrate devpi to Kubernetes (#34) 2026-01-20 14:55:37 -08:00
statefulset.yaml Pin ArgoCD to v3.2.6 (#44) 2026-01-22 16:38:27 -08:00

devpi PyPI Caching Proxy

devpi-server running in Kubernetes, providing:

  • PyPI caching proxy at root/pypi
  • Private package hosting at eblume/dev

Setup

1. Create the root password secret

kubectl create namespace devpi
op inject -i argocd/manifests/devpi/secret-root.yaml.tpl | kubectl apply -f -

2. Deploy via ArgoCD

argocd app sync apps
argocd app sync devpi

The container will auto-initialize on first startup using the root password from the secret.

3. Create user and index (first time only)

After the pod is running:

# Login to devpi as root
uvx --from devpi-client devpi use https://pypi.tail8d86e.ts.net
uvx --from devpi-client devpi login root
# Enter root password when prompted

# Create eblume user (prompts for password - use the one from 1Password)
uvx --from devpi-client devpi user -c eblume email=blume.erich@gmail.com

# Create private index inheriting from PyPI
uvx --from devpi-client devpi index -c eblume/dev bases=root/pypi

Usage

As pip index (caching proxy)

Configure ~/.config/pip/pip.conf:

[global]
index-url = https://pypi.tail8d86e.ts.net/root/pypi/+simple/
trusted-host = pypi.tail8d86e.ts.net

Upload private packages

cd ~/code/personal/your-package
uv build
uv publish --publish-url https://pypi.tail8d86e.ts.net/eblume/dev/

URLs

Credentials

Stored in 1Password vault blumeops, item kyhzfifryqnuk7jeyibmmjvxxm:

  • root password - devpi root user
  • password - eblume user password