feat: migrate todo note to nc01 github storage

scripts/src/platform-infra-pipelines-as-code.ts

@@ -120,6 +120,14 @@ interface PacConsumer {
     pipelineRunPrefix: string;
     argoNamespace: string;
     argoApplication: string;
+    argoBootstrap: {
+      project: string;
+      repoUrl: string;
+      targetRevision: string;
+      path: string;
+      destinationNamespace: string;
+      automated: boolean;
+    } | null;
     repositoryRef: string;
     closeoutGitOpsMirrorFlush: boolean;
 }
@@ -315,6 +323,7 @@ function parseRepository(repository: Record<string, unknown>, path: string): Pac
 
 function parseConsumer(consumer: Record<string, unknown>, path: string, defaultRepositoryRef: string): PacConsumer {
   const id = typeof consumer.id === "string" && consumer.id.length > 0 ? consumer.id : `${y.stringField(consumer, "node", path)}-${y.stringField(consumer, "lane", path)}`;
+  const argoBootstrap = consumer.argoBootstrap === undefined ? null : y.objectField(consumer, "argoBootstrap", path);
   return {
     id,
     node: y.stringField(consumer, "node", path),
@@ -324,6 +333,14 @@ function parseConsumer(consumer: Record<string, unknown>, path: string, defaultR
     pipelineRunPrefix: y.stringField(consumer, "pipelineRunPrefix", path),
     argoNamespace: y.kubernetesNameField(consumer, "argoNamespace", path),
     argoApplication: y.kubernetesNameField(consumer, "argoApplication", path),
+    argoBootstrap: argoBootstrap === null ? null : {
+      project: y.kubernetesNameField(argoBootstrap, "project", `${path}.argoBootstrap`),
+      repoUrl: urlField(argoBootstrap, "repoUrl", `${path}.argoBootstrap`),
+      targetRevision: y.stringField(argoBootstrap, "targetRevision", `${path}.argoBootstrap`),
+      path: y.stringField(argoBootstrap, "path", `${path}.argoBootstrap`),
+      destinationNamespace: y.kubernetesNameField(argoBootstrap, "destinationNamespace", `${path}.argoBootstrap`),
+      automated: y.booleanField(argoBootstrap, "automated", `${path}.argoBootstrap`),
+    },
     repositoryRef: typeof consumer.repositoryRef === "string" && consumer.repositoryRef.length > 0 ? consumer.repositoryRef : defaultRepositoryRef,
     closeoutGitOpsMirrorFlush: consumer.closeoutGitOpsMirrorFlush === undefined ? false : y.booleanField(consumer, "closeoutGitOpsMirrorFlush", path),
   };
@@ -673,6 +690,7 @@ function remoteScript(action: "apply" | "status" | "history" | "webhook-test", p
     UNIDESK_PAC_DISPLAY_TIME_ZONE: pac.display.timeZone,
     UNIDESK_PAC_ARGO_NAMESPACE: consumer.argoNamespace,
     UNIDESK_PAC_ARGO_APPLICATION: consumer.argoApplication,
+    UNIDESK_PAC_ARGO_BOOTSTRAP_MANIFEST_B64: Buffer.from(argoBootstrapManifest(consumer), "utf8").toString("base64"),
     UNIDESK_PAC_PART_OF: pacPartOf(consumer.id),
     UNIDESK_PAC_SPEC: kubernetesLabelValue(pac.metadata.relatedIssues.includes(1555) ? "GH-1552-GH-1555" : pac.metadata.spec),
   };
@@ -698,11 +716,46 @@ function credentialPath(root: string, sourceRef: string): string {
 }
 
 function pacPartOf(consumerId: string): string {
+  if (consumerId === "unidesk-host") return "unidesk-host";
   if (consumerId.startsWith("sentinel")) return "hwlab-web-probe-sentinel";
   if (consumerId.startsWith("hwlab-")) return "hwlab";
   return "agentrun";
 }
 
+function argoBootstrapManifest(consumer: PacConsumer): string {
+  const bootstrap = consumer.argoBootstrap;
+  if (bootstrap === null) return "";
+  const application = {
+    apiVersion: "argoproj.io/v1alpha1",
+    kind: "Application",
+    metadata: {
+      name: consumer.argoApplication,
+      namespace: consumer.argoNamespace,
+      labels: {
+        "app.kubernetes.io/managed-by": "unidesk",
+        "app.kubernetes.io/part-of": pacPartOf(consumer.id),
+      },
+    },
+    spec: {
+      project: bootstrap.project,
+      source: {
+        repoURL: bootstrap.repoUrl,
+        targetRevision: bootstrap.targetRevision,
+        path: bootstrap.path,
+      },
+      destination: {
+        server: "https://kubernetes.default.svc",
+        namespace: bootstrap.destinationNamespace,
+      },
+      syncPolicy: bootstrap.automated ? {
+        automated: { prune: true, selfHeal: true },
+        syncOptions: ["CreateNamespace=true"],
+      } : undefined,
+    },
+  };
+  return `${Bun.YAML.stringify(application).trim()}\n`;
+}
+
 function parseLinePair(path: string, usernameLine: number, passwordLine: number): { username: string; password: string } {
   const lines = readFileSync(path, "utf8").split(/\r?\n/u);
   const username = lines[usernameLine - 1]?.trim() ?? "";