fix: bump argocd route timeout past Envoy's 15s default

Envoy Gateway's per-route default timeout (15s, unset anywhere in this cluster) was cutting the connection to argocd-server mid-Sync, surfacing as 'Gateway Timeout' in the UI — confirmed even a single-resource sync hit exactly ~15.0s every attempt, ruling out chart size/congestion. BackendTrafficPolicy on the argocd HTTPRoute raises requestTimeout to 120s.
chore: manual sync for leaf apps, keep root app-of-apps automated
2026-09-02 16:24:58 +07:00 · 2026-09-02 16:22:15 +07:00
6 changed files with 18 additions and 15 deletions
@@ -14,9 +14,7 @@ spec:
  destination:
    server: https://kubernetes.default.svc
    namespace: envoy-gateway-system
+  # Leaf app — manual sync only; root `bootstrap` app-of-apps stays automated.
  syncPolicy:
-    automated:
-      prune: true
-      selfHeal: true
    syncOptions:
      - SkipDryRunOnMissingResource=true
@@ -20,10 +20,8 @@ spec:
  destination:
    server: https://kubernetes.default.svc
    namespace: envoy-gateway-system
+  # Leaf app — manual sync only; root `bootstrap` app-of-apps stays automated.
  syncPolicy:
-    automated:
-      prune: true
-      selfHeal: true
    syncOptions:
      - CreateNamespace=true
      - ServerSideApply=true
@@ -14,10 +14,8 @@ spec:
  destination:
    server: https://kubernetes.default.svc
    namespace: metallb-system
+  # Leaf app — manual sync only; root `bootstrap` app-of-apps stays automated.
  syncPolicy:
-    automated:
-      prune: true
-      selfHeal: true
    syncOptions:
      - CreateNamespace=true
      - SkipDryRunOnMissingResource=true
@@ -20,10 +20,8 @@ spec:
  destination:
    server: https://kubernetes.default.svc
    namespace: metallb-system
+  # Leaf app — manual sync only; root `bootstrap` app-of-apps stays automated.
  syncPolicy:
-    automated:
-      prune: true
-      selfHeal: true
    syncOptions:
      - CreateNamespace=true
  ignoreDifferences:
@@ -20,9 +20,7 @@ spec:
  destination:
    server: https://kubernetes.default.svc
    namespace: nfs-provisioner
+  # Leaf app — manual sync only; root `bootstrap` app-of-apps stays automated.
  syncPolicy:
-    automated:
-      prune: true
-      selfHeal: true
    syncOptions:
      - CreateNamespace=true
@@ -0,0 +1,13 @@
+apiVersion: gateway.envoyproxy.io/v1alpha1
+kind: BackendTrafficPolicy
+metadata:
+  name: argocd
+  namespace: argocd
+spec:
+  targetRefs:
+    - group: gateway.networking.k8s.io
+      kind: HTTPRoute
+      name: argocd
+  timeout:
+    http:
+      requestTimeout: 120s