TB Platform Init

Bootstrap resources and services for tb-platform clusters

The TB Platform Init ApplicationSets deploy bootstrap resources to the three tb-platform clusters (dev, qa, prod). These include namespaces, RBAC, secret stores, and initial services.

ArgoCD Resources

ApplicationSetGenerated ApplicationsTarget
tb-platform-init-resources3 (one per env)Remote clusters
tb-platform-init-services3 (one per env)Local cluster (argocd namespace)

File Path: application-sets/tb-platform-init.yaml

Init Resources ApplicationSet

Deploys bootstrap resources directly to each tb-platform cluster.

apiVersion: argoproj.io/v1alpha1
kind: ApplicationSet
metadata:
  name: tb-platform-init-resources
  namespace: argocd
spec:
  goTemplate: true
  goTemplateOptions: ['missingkey=error']
  generators:
   - list:
      elements:
      - environment: dev
        cluster: https://10.64.128.34
        path: k8s/infra-services/cluster-init/overlays/tb-platform-dev/init-resources
      - environment: qa
        cluster: https://10.64.128.50
        path: k8s/infra-services/cluster-init/overlays/tb-platform-qa/init-resources
      - environment: prod
        cluster: https://10.64.128.66
        path: k8s/infra-services/cluster-init/overlays/tb-platform-prod/init-resources
  template:
    metadata:
      name: 'tb-platform-{{.environment}}-init-resources'
      labels:
        cluster: 'tb-platform-{{.environment}}'
        environment: '{{.environment}}'
    spec:
      project: 'tb-platform-infra'
      source:
        repoURL: https://github.com/Titanbay/infra-services.git
        targetRevision: 'main'
        path: '{{.path}}'
      destination:
        server: '{{.cluster}}'
      syncPolicy:
        automated:
          prune: true
        syncOptions:
          - ServerSideApply=true

Generated Applications

ApplicationClusterSource Path
tb-platform-dev-init-resources10.64.128.34cluster-init/overlays/tb-platform-dev/init-resources
tb-platform-qa-init-resources10.64.128.50cluster-init/overlays/tb-platform-qa/init-resources
tb-platform-prod-init-resources10.64.128.66cluster-init/overlays/tb-platform-prod/init-resources

Init Services ApplicationSet

Deploys ArgoCD Applications to the local cluster that manage services on remote clusters.

apiVersion: argoproj.io/v1alpha1
kind: ApplicationSet
metadata:
  name: tb-platform-init-services
  namespace: argocd
spec:
  goTemplate: true
  goTemplateOptions: ['missingkey=error']
  generators:
   - list:
      elements:
      - environment: dev
        cluster: https://kubernetes.default.svc
        path: k8s/infra-services/cluster-init/overlays/tb-platform-dev/init-services
      - environment: qa
        cluster: https://kubernetes.default.svc
        path: k8s/infra-services/cluster-init/overlays/tb-platform-qa/init-services
      - environment: prod
        cluster: https://kubernetes.default.svc
        path: k8s/infra-services/cluster-init/overlays/tb-platform-prod/init-services
  template:
    metadata:
      name: 'tb-platform-{{.environment}}-init-services'
      labels:
        cluster: 'tb-platform-{{.environment}}'
        environment: '{{.environment}}'
    spec:
      project: 'tb-platform-infra'
      source:
        repoURL: https://github.com/Titanbay/infra-services.git
        targetRevision: 'main'
        path: '{{.path}}'
      destination:
        server: '{{.cluster}}'
        namespace: 'argocd'
      syncPolicy:
        automated:
          prune: true
        syncOptions:
          - ServerSideApply=true

Generated Applications

ApplicationDestinationSource Path
tb-platform-dev-init-servicesLocal (argocd)cluster-init/overlays/tb-platform-dev/init-services
tb-platform-qa-init-servicesLocal (argocd)cluster-init/overlays/tb-platform-qa/init-services
tb-platform-prod-init-servicesLocal (argocd)cluster-init/overlays/tb-platform-prod/init-services

Source Structure

k8s/infra-services/cluster-init/
├── base/
│   └── cluster-resources/
│       └── tb-platform/
│           ├── argocd/              # ArgoCD default project
│           ├── namespaces/          # Common namespaces
│           ├── rbac/                # RBAC resources
│           └── secret-stores/       # External Secrets stores
└── overlays/
    ├── tb-platform-dev/
    │   ├── init-resources/          # Bootstrap resources for dev
    │   │   └── kustomization.yaml
    │   └── init-services/           # Service Applications for dev
    │       └── kustomization.yaml
    ├── tb-platform-qa/
    │   ├── init-resources/
    │   └── init-services/
    └── tb-platform-prod/
        ├── init-resources/
        └── init-services/

What Gets Deployed

Init Resources (to remote clusters)

  • Namespaces: Standard namespaces for services
  • RBAC: ClusterRoles and ClusterRoleBindings
  • Secret Stores: External Secrets SecretStore resources
  • ArgoCD Project: Default AppProject for the cluster

Init Services (Applications on hub)

  • Additional ArgoCD Applications that deploy services to the remote cluster
  • These Applications are created in the argocd namespace on the hub

How to Update

Adding Bootstrap Resources

  1. Add resources to k8s/infra-services/cluster-init/base/cluster-resources/tb-platform/
  2. Reference them in the environment overlay’s kustomization.yaml
  3. Commit and push to main

Environment-Specific Resources

  1. Add resources to k8s/infra-services/cluster-init/overlays/tb-platform-<env>/init-resources/
  2. Update the overlay’s kustomization.yaml
  3. Commit and push to main

Adding Init Services

  1. Create Application YAML in cluster-init/overlays/tb-platform-<env>/init-services/
  2. Add to the overlay’s kustomization.yaml
  3. Commit and push to main

Cluster Endpoints

EnvironmentCluster IP
Devhttps://10.64.128.34
QAhttps://10.64.128.50
Prodhttps://10.64.128.66

Other ApplicationSets that deploy to tb-platform clusters:

ApplicationSetPurpose
tb-platform-external-secretsExternal Secrets Operator
tb-platform-grafana-alloyTelemetry collection
tb-platform-1password-operatorSecret injection
tb-platform-config-connector-operatorGCP resource management
Last modified January 19, 2026: docs: add ArgoCD managed services (#1932) (2efa8f20)