From 014ffa2fd2124352243565f785fc8be697043220 Mon Sep 17 00:00:00 2001
From: Celes Renata <celes@frameshift.net>
Date: Sun, 19 Apr 2026 20:08:46 +0000
Subject: [PATCH] =?UTF-8?q?fix:=20Kargo=20promotion=20pipeline=20=E2=80=94?=
 =?UTF-8?q?=20add=20AnalysisRun=20CRD,=20fix=20warehouse=20image=20strateg?=
 =?UTF-8?q?y,=20add=20authorized-stage=20annotations,=20remove=20proxy=20f?=
 =?UTF-8?q?rom=20ArgoCD?=
MIME-Version: 1.0
Content-Type: text/plain; charset=UTF-8
Content-Transfer-Encoding: 8bit

---
 pipelines/argocd/apps/stonks-beta.yaml  | 2 ++
 pipelines/argocd/apps/stonks-live.yaml  | 2 ++
 pipelines/argocd/apps/stonks-paper.yaml | 2 ++
 pipelines/argocd/values.yaml            | 3 +--
 pipelines/kargo/warehouse.yaml          | 2 ++
 5 files changed, 9 insertions(+), 2 deletions(-)

diff --git a/pipelines/argocd/apps/stonks-beta.yaml b/pipelines/argocd/apps/stonks-beta.yaml
index f3c269a..4d280ce 100644
--- a/pipelines/argocd/apps/stonks-beta.yaml
+++ b/pipelines/argocd/apps/stonks-beta.yaml
@@ -3,6 +3,8 @@ kind: Application
 metadata:
   name: stonks-beta
   namespace: argocd
+  annotations:
+    kargo.akuity.io/authorized-stage: stonks-oracle:beta
 spec:
   project: default
   source:
diff --git a/pipelines/argocd/apps/stonks-live.yaml b/pipelines/argocd/apps/stonks-live.yaml
index 0f0ae92..e878255 100644
--- a/pipelines/argocd/apps/stonks-live.yaml
+++ b/pipelines/argocd/apps/stonks-live.yaml
@@ -3,6 +3,8 @@ kind: Application
 metadata:
   name: stonks-live
   namespace: argocd
+  annotations:
+    kargo.akuity.io/authorized-stage: stonks-oracle:live
 spec:
   project: default
   source:
diff --git a/pipelines/argocd/apps/stonks-paper.yaml b/pipelines/argocd/apps/stonks-paper.yaml
index 816ec3d..76f87c9 100644
--- a/pipelines/argocd/apps/stonks-paper.yaml
+++ b/pipelines/argocd/apps/stonks-paper.yaml
@@ -3,6 +3,8 @@ kind: Application
 metadata:
   name: stonks-paper
   namespace: argocd
+  annotations:
+    kargo.akuity.io/authorized-stage: stonks-oracle:paper
 spec:
   project: default
   source:
diff --git a/pipelines/argocd/values.yaml b/pipelines/argocd/values.yaml
index 61f5592..7996021 100644
--- a/pipelines/argocd/values.yaml
+++ b/pipelines/argocd/values.yaml
@@ -3,8 +3,7 @@
 # Namespace: argocd
 
 global:
-  podAnnotations:
-    celestium.life/inject-ca: "true"
+  podAnnotations: {}
 
 # Disable dex (not needed)
 dex:
diff --git a/pipelines/kargo/warehouse.yaml b/pipelines/kargo/warehouse.yaml
index d7f3f54..27e25c3 100644
--- a/pipelines/kargo/warehouse.yaml
+++ b/pipelines/kargo/warehouse.yaml
@@ -7,3 +7,5 @@ spec:
   subscriptions:
     - image:
         repoURL: registry.celestium.life/stonks-oracle/query-api
+        imageSelectionStrategy: NewestBuild
+        allowTags: '^[0-9a-f]{7,40}$'