feat(neuron): add stage and prod k8s manifests + Argo CD apps

Completes the three-env setup (dev was added previously). Each env has
deployments, services, ingress, PVC, ConfigMap, and ExternalSecret pulling
from Vault. Prod has larger resource limits and 10Gi PVC. Vault secret at
secret/neuron-technologies/prod seeded separately.
This commit is contained in:
Will Anderson
2026-04-17 09:43:23 -05:00
parent 912e129e0d
commit 1b8ea63541
18 changed files with 517 additions and 0 deletions
@@ -0,0 +1,18 @@
apiVersion: external-secrets.io/v1beta1
kind: ExternalSecret
metadata:
name: neuron-prod-secrets
namespace: neuron-prod
spec:
refreshInterval: 1h
secretStoreRef:
name: vault
kind: ClusterSecretStore
target:
name: neuron-prod-secrets
creationPolicy: Owner
data:
- secretKey: NEURON_WEBHOOK_SECRET
remoteRef:
key: secret/data/neuron-technologies/prod
property: gitea_webhook_secret