Deploy Body Wars Observability WebUI (Open WebUI → astro-orbiter vLLM)

- Service: Open WebUI latest (ghcr.io/open-webui/open-webui:latest)
- Backend: http://astro-orbiter:8000/v1 (Gemma-4-26B-A4B-it-AWQ)
- Ingress: body-wars.local.mk-labs.cloud (letsencrypt-prod TLS)
- Auth: vLLM API key from 1Password (op://mk-labs/vllm/api-key)
- ArgoCD wave 9 (post-Hindsight observability)
- ExternalSecret syncs credentials before deployment
- Replicas: 1, Resource limits: 1GB memory, 1 CPU

cluster/applications/body-wars/application.yaml

@@ -0,0 +1,50 @@
+# ============================================================================
+# ArgoCD Application: Body Wars Observability WebUI (Open WebUI)
+# Wave: 9 (post-Hindsight observability layer)
+# Deployment method: GitOps (Gitea -> ArgoCD)
+# ============================================================================
+#
+# Connects Open WebUI to astro-orbiter vLLM (Gemma-4-26B-A4B-it-AWQ).
+# Manifests: namespace, service account, deployment, service, ingress, secrets.
+# TLS: letsencrypt-prod
+#
+apiVersion: argoproj.io/v1alpha1
+kind: Application
+metadata:
+  name: body-wars
+  namespace: argocd
+  labels:
+    app.kubernetes.io/name: body-wars
+    app.kubernetes.io/part-of: mk-labs
+  annotations:
+    # Wave 9: Observability layer, after Hindsight (Wave 8)
+    argocd.argoproj.io/sync-wave: "9"
+    description: |
+      Body Wars: Observability WebUI for vLLM inference.
+      Frontend: Open WebUI (latest)
+      Backend: http://astro-orbiter:8000/v1 (vLLM OpenAI-compatible)
+      Model: Gemma-4-26B-A4B-it-AWQ
+      Ingress: body-wars.local.mk-labs.cloud (TLS via letsencrypt-prod)
+      Auth: API key from 1Password (op://mk-labs/vllm/api-key)
+spec:
+  project: default
+
+  source:
+    repoURL: https://gitea.mk-labs.cloud/rblundon/homelab.git
+    targetRevision: main
+    path: cluster/applications/body-wars
+    directory:
+      exclude: "application.yaml"
+
+  destination:
+    server: https://kubernetes.default.svc
+    namespace: body-wars
+
+  syncPolicy:
+    automated:
+      prune: true
+      selfHeal: true
+    syncOptions:
+      - CreateNamespace=true
+      - ServerSideApply=true
+      - PrunePropagationPolicy=background