arrstack: fix sync-wave deadlock + config multi-attach (#385)

## Why
The active-active arrstack deploy (#383) is stuck in-cluster: the app Deployments (sync-wave 0) can never become Healthy without their Postgres DB, so ArgoCD never advances to create the shared `arrstack-postgres` cluster (wave 1). Separately, `/config` is an immutable RWO cephrbd PVC, so 3 replicas fail with Multi-Attach.

## How
- Order DB infra before the apps: `<app>-db` VaultStaticSecrets + backup ObjectStoreUser/Bucket at sync-wave -3, CNPG `Cluster` -2, `Database` CRDs -1; app Deployments stay at default 0.
- Switch each app's `/config` to an emptyDir per-pod volume (library DB is in Postgres, config is env-driven; MediaCover regenerates). Old RWO config PVCs orphan.

Validated with kustomize build (62 resources). arrproxy/nzbget untouched.

Reviewed-on: #385
Co-authored-by: unkin-agent <unkin-agent@unkin.net>
Co-committed-by: unkin-agent <unkin-agent@unkin.net>

This commit was merged in pull request #385.

This commit is contained in:

Unkin Agent

2026-08-22 12:47:38 +10:00

committed by

BenVincent

parent e0d47295f2

commit 8446c31414

11 changed files with 117 additions and 26 deletions

									
										apps/base/arrstack/radarr/kustomization.yaml
									
		-1
	
												View File
												
				@@ -3,7 +3,6 @@ apiVersion: kustomize.config.k8s.io/v1beta1

				kind: Kustomization

				resources:

				  - pvc-config.yaml

				  - vaultstaticsecret.yaml

				  - configmap.yaml

				  - deployment.yaml