Address code review feedback: add sync-wave comment, improve docs with service verification

Co-authored-by: SRF-Audio <16975040+SRF-Audio@users.noreply.github.com>

Author: Copilot

argocd/apps/platform/pgadmin.yml

@@ -6,6 +6,7 @@ metadata:
   namespace: argocd
   annotations:
     argocd.argoproj.io/sync-wave: "20"
+    # Deploys after pgadmin-secrets (wave 10) to ensure OnePasswordItem is created first
 spec:
   project: coachlight-k3s-infra
   source:

docs/platform/pgadmin.md

@@ -33,6 +33,17 @@ Credentials are automatically injected into the pgAdmin pod via the 1Password Op
 
 After logging in to pgAdmin, you'll need to register the PostgreSQL server to manage it:
 
+### Verify PostgreSQL Service Name
+
+First, verify the PostgreSQL service name and namespace:
+
+```bash
+kubectl -n db-postgres get svc
+# Look for: postgres-postgresql
+```
+
+### Add Server in pgAdmin
+
 1. Click **"Add New Server"** in the pgAdmin dashboard
 2. In the **General** tab:
    - **Name**: `Coachlight Postgres` (or any descriptive name)
@@ -46,6 +57,8 @@ After logging in to pgAdmin, you'll need to register the PostgreSQL server to ma
    - **DB restriction**: Leave blank to see all databases
 5. Click **Save**
 
+> **Note**: The hostname `postgres-postgresql.db-postgres.svc.cluster.local` assumes the PostgreSQL service is named `postgres-postgresql` in the `db-postgres` namespace. Verify the actual service name if connection fails.
+
 ## Usage Guidelines
 
 ### Intended Use
@@ -102,16 +115,28 @@ kubectl -n infra-pgadmin describe onepassworditem pgadmin-credentials
 
 ### Cannot connect to PostgreSQL
 
-Verify network connectivity from pgAdmin pod:
+Verify PostgreSQL service name and availability:
 
 ```bash
-kubectl -n infra-pgadmin exec -it <pod-name> -- ping postgres-postgresql.db-postgres.svc.cluster.local
+# List all services in db-postgres namespace
+kubectl -n db-postgres get svc
+
+# Check specific service (default name: postgres-postgresql)
+kubectl -n db-postgres get svc postgres-postgresql
+kubectl -n db-postgres describe svc postgres-postgresql
 ```
 
-Check PostgreSQL service:
+Verify network connectivity from pgAdmin pod:
 
 ```bash
-kubectl -n db-postgres get svc postgres-postgresql
+# Get pod name
+POD=$(kubectl -n infra-pgadmin get pod -l app.kubernetes.io/name=pgadmin4 -o jsonpath='{.items[0].metadata.name}')
+
+# Test DNS resolution
+kubectl -n infra-pgadmin exec -it $POD -- nslookup postgres-postgresql.db-postgres.svc.cluster.local
+
+# Test connectivity
+kubectl -n infra-pgadmin exec -it $POD -- nc -zv postgres-postgresql.db-postgres.svc.cluster.local 5432
 ```
 
 ### pgAdmin not accessible via Tailscale

k8s/resources/ingresses/infra-pgadmin/ingress-pgadmin.yml

@@ -1,4 +1,6 @@
 ---
+# Internal-only pgAdmin access via Tailscale
+# Service name follows Helm chart naming: <release-name>-<chart-name>
 apiVersion: networking.k8s.io/v1
 kind: Ingress
 metadata: