Remove deprecated Argo CD application configurations and related files for noble cluster, including root-application.yaml, kustomization.yaml, and individual application manifests for argocd, cilium, longhorn, kube-vip, and monitoring components. Update kube-vip daemonset.yaml to enhance deployment strategy and environment variables for improved configuration.

clusters/noble/apps/longhorn/application.yaml

@@ -1,35 +0,0 @@
-apiVersion: argoproj.io/v1alpha1
-kind: Application
-metadata:
-  name: longhorn
-  namespace: argocd
-  annotations:
-    argocd.argoproj.io/sync-wave: "1"
-spec:
-  project: default
-  destination:
-    server: https://kubernetes.default.svc
-    namespace: longhorn-system
-  sources:
-    - repoURL: https://charts.longhorn.io
-      chart: longhorn
-      targetRevision: "1.11.1"
-      helm:
-        skipCrds: false
-        valuesObject:
-          defaultSettings:
-            createDefaultDiskLabeledNodes: false
-            defaultDataPath: /var/mnt/longhorn
-  syncPolicy:
-    automated:
-      prune: true
-      selfHeal: true
-    retry:
-      limit: 5
-      backoff:
-        duration: 20s
-        factor: 2
-        maxDuration: 3m
-    syncOptions:
-      - CreateNamespace=true
-      - PruneLast=true

clusters/noble/apps/longhorn/kustomization.yaml

@@ -0,0 +1,4 @@
+apiVersion: kustomize.config.k8s.io/v1beta1
+kind: Kustomization
+resources:
+  - namespace.yaml

clusters/noble/apps/longhorn/namespace.yaml

@@ -0,0 +1,10 @@
+# Longhorn Manager uses hostPath + privileged; incompatible with Pod Security "baseline".
+# Apply before or after Helm — merges labels onto existing longhorn-system.
+apiVersion: v1
+kind: Namespace
+metadata:
+  name: longhorn-system
+  labels:
+    pod-security.kubernetes.io/enforce: privileged
+    pod-security.kubernetes.io/audit: privileged
+    pod-security.kubernetes.io/warn: privileged

clusters/noble/apps/longhorn/values.yaml

@@ -0,0 +1,21 @@
+# Longhorn Helm values — use with Talos user volume + kubelet mounts (see talos/talconfig.yaml).
+# 1) PSA: `kubectl apply -k clusters/noble/apps/longhorn` (privileged namespace) before or after Helm.
+# 2) Talos: bind `/var/lib/longhorn` → `/var/mnt/longhorn` in kubelet extraMounts — chart hostPath is fixed to /var/lib/longhorn.
+# Example (run from home-server repo root so -f path resolves):
+#   kubectl apply -k clusters/noble/apps/longhorn
+#   helm repo add longhorn https://charts.longhorn.io && helm repo update
+#   helm upgrade --install longhorn longhorn/longhorn -n longhorn-system --create-namespace \
+#     -f clusters/noble/apps/longhorn/values.yaml
+# "helm upgrade --install" needs two arguments: RELEASE_NAME and CHART (e.g. longhorn longhorn/longhorn).
+#
+# If you already installed Longhorn without this file: fix Default Settings in the UI or edit each
+# node's disk path to /var/mnt/longhorn; wrong path → "wrong format" (root fs / overlay).
+
+defaultSettings:
+  defaultDataPath: /var/mnt/longhorn
+  # Default 30% reserved often makes small data disks look "full" to the scheduler.
+  storageReservedPercentageForDefaultDisk: "10"
+
+# Pre-upgrade Job waits for healthy managers; disable while fixing Talos image (iscsi-tools) / kubelet binds, then re-enable.
+preUpgradeChecker:
+  jobEnabled: false