Compare commits
base: riotpiao-poimen/homelab:7a5d0a83d5593d6646ecdabc91f6595beeb045cf
riotpiao-poimen/homelab:main
riotpiao-poimen/homelab:fix/grafana-oidc-secret
riotpiao-poimen/homelab:feat/grafana-gotify-contact
riotpiao-poimen/homelab:feat/grafana-gotify-bridge
riotpiao-poimen/homelab:feat/igotify-token
riotpiao-poimen/homelab:revert/gotify-sso
riotpiao-poimen/homelab:feat/gotify-sso
riotpiao-poimen/homelab:fix/authentik-tunnel-route
riotpiao-poimen/homelab:feat/zitadel-oidc-consumer-wiring
riotpiao-poimen/homelab:integration/merge-56-58-69
riotpiao-poimen/homelab:harness/zitadel-iam-wiring
riotpiao-poimen/homelab:fix/prometheus-retention-size
riotpiao-poimen/homelab:fix/allow-zitadel-chart-repo
riotpiao-poimen/homelab:fix/sops-generator-indent
riotpiao-poimen/homelab:fix/sops-drop-orphan-forgejo-pat
riotpiao-poimen/homelab:chore/remove-azhi-riotpiao-app
riotpiao-poimen/homelab:fix/certmanager-dns01
riotpiao-poimen/homelab:fix/retire-longhorn-disk4
riotpiao-poimen/homelab:feat/azhi-cnpg-test
riotpiao-poimen/homelab:feat/azhi-riotpiao-argocd
riotpiao-poimen/homelab:fix/etcd-defrag-main
riotpiao-poimen/homelab:feat/local-path-backend
riotpiao-poimen/homelab:fix/minio-frozen-image-pin
riotpiao-poimen/homelab:fix/minio-mc-image
riotpiao-poimen/homelab:fix/secrets-placeholders
riotpiao-poimen/homelab:fix/minio-image
riotpiao-poimen/homelab:harness/51-vllm-prefill-scheduling
riotpiao-poimen/homelab:paperless-ai-sops-fix
riotpiao-poimen/homelab:fix/aggressive-cleanup-and-paperless-ai
riotpiao-poimen/homelab:feat/tekton-pipelines-ci
riotpiao-poimen/homelab:fix/longhorn-storage-isolation
riotpiao-poimen/homelab:fix/cnpg-3-replicas
riotpiao-poimen/homelab:fix/org-transfer-urls
riotpiao-poimen/homelab:fix/argocd-repo-url
riotpiao-poimen/homelab:feat/gotify-notifications
riotpiao-poimen/homelab:feat/p3.9-e2e-auth-test
..
compare: riotpiao-poimen/homelab:95738b71bfcc25347a290e110dca189d670403f8
riotpiao-poimen/homelab:fix/grafana-oidc-secret
riotpiao-poimen/homelab:main
riotpiao-poimen/homelab:feat/grafana-gotify-contact
riotpiao-poimen/homelab:feat/grafana-gotify-bridge
riotpiao-poimen/homelab:feat/igotify-token
riotpiao-poimen/homelab:revert/gotify-sso
riotpiao-poimen/homelab:feat/gotify-sso
riotpiao-poimen/homelab:fix/authentik-tunnel-route
riotpiao-poimen/homelab:feat/zitadel-oidc-consumer-wiring
riotpiao-poimen/homelab:integration/merge-56-58-69
riotpiao-poimen/homelab:harness/zitadel-iam-wiring
riotpiao-poimen/homelab:fix/prometheus-retention-size
riotpiao-poimen/homelab:fix/allow-zitadel-chart-repo
riotpiao-poimen/homelab:fix/sops-generator-indent
riotpiao-poimen/homelab:fix/sops-drop-orphan-forgejo-pat
riotpiao-poimen/homelab:chore/remove-azhi-riotpiao-app
riotpiao-poimen/homelab:fix/certmanager-dns01
riotpiao-poimen/homelab:fix/retire-longhorn-disk4
riotpiao-poimen/homelab:feat/azhi-cnpg-test
riotpiao-poimen/homelab:feat/azhi-riotpiao-argocd
riotpiao-poimen/homelab:fix/etcd-defrag-main
riotpiao-poimen/homelab:feat/local-path-backend
riotpiao-poimen/homelab:fix/minio-frozen-image-pin
riotpiao-poimen/homelab:fix/minio-mc-image
riotpiao-poimen/homelab:fix/secrets-placeholders
riotpiao-poimen/homelab:fix/minio-image
riotpiao-poimen/homelab:harness/51-vllm-prefill-scheduling
riotpiao-poimen/homelab:paperless-ai-sops-fix
riotpiao-poimen/homelab:fix/aggressive-cleanup-and-paperless-ai
riotpiao-poimen/homelab:feat/tekton-pipelines-ci
riotpiao-poimen/homelab:fix/longhorn-storage-isolation
riotpiao-poimen/homelab:fix/cnpg-3-replicas
riotpiao-poimen/homelab:fix/org-transfer-urls
riotpiao-poimen/homelab:fix/argocd-repo-url
riotpiao-poimen/homelab:feat/gotify-notifications
riotpiao-poimen/homelab:feat/p3.9-e2e-auth-test
3
Commits
| Author | SHA1 | Message | Date | |
|---|---|---|---|---|
|
|
95738b71bf |
fix: vendor Tekton release.yaml for proper ArgoCD management
ROOT CAUSE: - tektoncd/pipeline config/ dir uses ko:// image refs (build-time placeholders) - ArgoCD synced the raw dev manifests → InvalidImageName on all pods - tektoncd/operator requires its own CRDs and controller (too heavy) - Tekton has no official Helm chart FIX: - Vendor the pre-built release.yaml (v0.68.0) into k8s/infra/tekton/ - Point ArgoCD Application at our own repo (forgejo) - Release contains real container images (ghcr.io/tektoncd/pipeline/*) - Remove external tektoncd repo from AppProject (not needed) TO UPGRADE TEKTON: 1. Download new release from github.com/tektoncd/pipeline/releases 2. Replace k8s/infra/tekton/release.yaml 3. Commit — ArgoCD syncs automatically |
||
|
|
1d6b9b5013 |
fix: use tektoncd/operator for proper K8s-native Tekton installation
ROOT CAUSE: - Previous Application pointed to storage bucket (not valid ArgoCD source) - ArgoCD couldn't sync manifests from non-git/non-helm source - tektoncd/operator is the official way to install Tekton SOLUTION: - Switch to tektoncd/operator repository - Use operator's config/install path (contains release manifests) - Proper GitOps flow: ArgoCD watches operator repo → syncs manifests → K8s reconciles BENEFITS: ✓ Official Tekton approach ✓ Proper K8s Operator pattern ✓ ArgoCD-compatible (git source) ✓ Automatic updates from upstream ✓ Full GitOps workflow |
||
|
|
28a9ef88a0 |
feat: add Tekton Pipelines for CI/CD orchestration
Install Tekton Pipelines via ArgoCD for Kubernetes-native CI/CD: COMPONENTS: - Tekton Pipelines: CNCF-standard test orchestration - Task/Pipeline CRDs: Reusable workflow definitions - PipelineRun: Ephemeral execution instances - ArgoCD Application: GitOps-managed installation INTEGRATION: - homelab-frontend CI triggers PipelineRun via Kubernetes API - Tests run in cluster against actual services - Results flow back to CI for pass/fail decisions - Image promotion only on test success FILES: - k8s/infra/tekton/: Tekton infrastructure setup - namespace.yaml: tekton-pipelines namespace - kustomization.yaml: Release manifest reference - k8s/argocd/apps/06-ci-cd.yaml: ArgoCD Application - k8s/argocd/projects/homelab-project.yaml: Added Tekton repos WAVE ORDERING: Wave 06 (CI/CD) is deployed after: - Wave 05 (Networking) - Wave 04 (Core components) But before Wave 40+ (Applications) BENEFITS: ✓ Kubernetes-native (no external CI runners) ✓ GitOps-managed (everything in git via ArgoCD) ✓ CNCF-standard (industry-proven Tekton project) ✓ Pre-merge testing (tests must pass before deploy) ✓ Observable (logs, status, results tracking) ✓ Secure (non-root, resource limits, RBAC) |