8 Commits

Include renames

Author	SHA1	Message	Date
Story Crater Bot	78c1fa3fb3	fix: set proxy-body-size 0 on the Forgejo chart Ingress ... Two Ingresses claim forgejo.riotpiao.com and nginx honours the older chart one, so the annotation on the other never applied and OCI pushes over 1m got 413.	2026-08-19 22:25:51 -07:00
Story Crater Bot	2b1c4b1df4	fix(forgejo): strategy Recreate for RWO data PVC — RollingUpdate deadlocked (new pod Multi-Attach error on the RWO gitea PVC held by the old pod, stuck Init forever)	2026-08-18 15:08:04 -07:00
Story Crater Bot	20d0517f79	feat(monitoring): enable Alertmanager (null receiver, longhorn PVC, az-a) + fix forgejo-rules ns forgejo->cicd — alerting delivery was disabled; forgejo PrometheusRule targeted a nonexistent namespace	2026-08-18 15:08:04 -07:00
Story Crater Bot	f6298086f2	fix(forgejo-runner): cicd ns PSS privileged (dind needs it) + mount homelab-ca as ConfigMap not Secret — runner RS created 0 pods under baseline PSS, then FailedMount because homelab-ca is a ConfigMap trust bundle, not a Secret	2026-08-18 15:08:04 -07:00
Story Crater Bot	828e3fb287	refactor(argocd): replace SOPS CMP with ksops kustomize generator, rotate age key — CMP discover glob silently shadowed kustomize rendering of any app whose path held a .enc.yaml (MinIO Tenant/cloudflared/authentik jobs never applied); centralize 8 Secret manifests under k8s/argocd/secrets, defer 4 helm-values fragments	2026-08-18 15:08:04 -07:00
Story Crater Bot	5b3307ffee	fix(bootstrap): correct cluster config + complete Phase4 ArgoCD bootstrap permanent fixes	2026-08-18 15:08:03 -07:00
Story Crater Bot	41f5b05395	refactor(k8s): consolidate to infra/+apps/ single-source tree, dedicated per-app CNPG (authentik-db/temporal-db), wire monitoring-config, forgejo→cicd ns, drop orphan/stale (data-schemas, ollama, story-crater, sqs/argocd, key-rotation)	2026-08-18 15:08:03 -07:00
Story Crater Bot	54fa540b33	feat:Fix the bootstrap to be deploy key application	2026-08-18 15:08:03 -07:00