From fd4afef9922d8483cdd7f2bb618ba8143ad33de9 Mon Sep 17 00:00:00 2001
From: Nikholas Pcenicni <82239765+nikpcenicni@users.noreply.github.com>
Date: Fri, 27 Mar 2026 23:57:25 -0400
Subject: [PATCH] Update Argo CD README and root-application.yaml to clarify
 prerequisites, enhance Ingress configuration with Traefik and cert-manager,
 and specify finalizer guidance for resource deletion. Adjust instructions for
 accessing the Argo CD UI and managing applications.

---
 clusters/noble/bootstrap/argocd/README.md             | 10 ++++++----
 clusters/noble/bootstrap/argocd/root-application.yaml |  5 ++++-
 2 files changed, 10 insertions(+), 5 deletions(-)

diff --git a/clusters/noble/bootstrap/argocd/README.md b/clusters/noble/bootstrap/argocd/README.md
index dfd2433..475eef6 100644
--- a/clusters/noble/bootstrap/argocd/README.md
+++ b/clusters/noble/bootstrap/argocd/README.md
@@ -1,6 +1,6 @@
 # Argo CD — noble (bootstrap)
 
-**Prerequisites:** cluster **Ready**, **MetalLB** pool **`192.168.50.210`–`229`** (Argo CD uses **`192.168.50.210`**; Traefik **`192.168.50.211`**).
+**Prerequisites:** cluster **Ready**, **Traefik** + **cert-manager**; DNS **`argo.apps.noble.lab.pcenicni.dev`** → Traefik **`192.168.50.211`** (see **`values.yaml`**).
 
 ## 1. Install
 
@@ -17,11 +17,13 @@ helm upgrade --install argocd argo/argo-cd \
 
 ## 2. UI / CLI address
 
+**HTTPS:** `https://argo.apps.noble.lab.pcenicni.dev` (Ingress via Traefik; cert from **`values.yaml`**).
+
 ```bash
-kubectl get svc -n argocd argocd-server
+kubectl get ingress -n argocd
 ```
 
-**LoadBalancer** should show **`192.168.50.210`**. Log in as **`admin`**; initial password:
+Log in as **`admin`**; initial password:
 
 ```bash
 kubectl -n argocd get secret argocd-initial-admin-secret \
@@ -37,7 +39,7 @@ Use **Settings → Repositories** in the UI, or `argocd repo add` / a `Secret` o
 
 ## 4. App-of-apps (optional)
 
-1. Edit **`root-application.yaml`**: set **`repoURL`** and **`targetRevision`** to this repository.
+1. Edit **`root-application.yaml`**: set **`repoURL`** and **`targetRevision`** to this repository. The **`resources-finalizer.argocd.argoproj.io/background`** finalizer uses Argo’s path-qualified form so **`kubectl apply`** does not warn about finalizer names.
 2. Commit **`Application`** manifests under **`apps/`** (see **`apps/README.md`**).
 3. Apply the root:
 
diff --git a/clusters/noble/bootstrap/argocd/root-application.yaml b/clusters/noble/bootstrap/argocd/root-application.yaml
index 79dcc72..0547bb6 100644
--- a/clusters/noble/bootstrap/argocd/root-application.yaml
+++ b/clusters/noble/bootstrap/argocd/root-application.yaml
@@ -11,8 +11,11 @@ kind: Application
 metadata:
   name: noble-root
   namespace: argocd
+  # Path suffix satisfies Kubernetes’ domain-qualified finalizer guidance (avoids kubectl warning).
+  # Background cascade: Application deletes after resources are removed asynchronously.
+  # See: https://argo-cd.readthedocs.io/en/stable/user-guide/app_deletion/#about-the-deletion-finalizer
   finalizers:
-    - resources-finalizer.argocd.argoproj.io
+    - resources-finalizer.argocd.argoproj.io/background
 spec:
   project: default
   source: