rock 8ed60c8b55 fix(forgejo): allow webhook delivery to api.riotpiao.com ...

GITEA__WEBHOOK__ALLOWED_HOST_LIST=external,api.riotpiao.com
api.riotpiao.com resolves to cluster ingress ClusterIP (private range)
which is blocked by Forgejo's default SSRF protection. Safe to allowlist
as it is our own api-gw.

2026-09-27 22:45:13 +08:00

..

cnpg-networkpolicy.yaml

fix(bootstrap): correct cluster config + complete Phase4 ArgoCD bootstrap permanent fixes

2026-08-18 15:08:03 -07:00

forgejo-db.yaml

fix(bootstrap): correct cluster config + complete Phase4 ArgoCD bootstrap permanent fixes

2026-08-18 15:08:03 -07:00

forgejo-values.yaml

fix(forgejo): allow webhook delivery to api.riotpiao.com

2026-09-27 22:45:13 +08:00

namespace.yaml

fix(forgejo-runner): cicd ns PSS privileged (dind needs it) + mount homelab-ca as ConfigMap not Secret — runner RS created 0 pods under baseline PSS, then FailedMount because homelab-ca is a ConfigMap trust bundle, not a Secret

2026-08-18 15:08:04 -07:00

registry-cleanup-cronjob.yaml

Clean up template files

2026-08-23 16:15:31 -07:00