The Terraform root module duplicated a writer that the provisioning script could be, and its state carried generated client secrets. Declare the objects in the script instead: project, 19 roles, 12 OIDC apps, applied through the management API with the iam-admin PAT. State is a 0600 JSON file under ~/.config/zitadel. Also add zitadel to the Cloudflare tunnel hostname list, with the import command and the note that the tunnel's Public Hostname entry is a separate dashboard step: DNS alone yields a 404 from the tunnel.
22 lines
1.1 KiB
JSON
22 lines
1.1 KiB
JSON
{
|
|
"nextId": 2,
|
|
"loops": [
|
|
{
|
|
"id": "1",
|
|
"prompt": "Check Longhorn and CNPG recovery progress in the homelab cluster and report terse. Run: kubectl -n longhorn-system get volumes.longhorn.io -o json (count by state/robustness), kubectl -n longhorn-system get replicas.longhorn.io -o json (count running/stopped/failed), kubectl get clusters.postgresql.cnpg.io -A (ready instances per cluster), kubectl -n cicd get pods,pvc | grep forgejo-db. Report: volumes healthy vs degraded, replicas running vs stopped, and each CNPG cluster ready count. If every volume is attached/healthy and every CNPG cluster shows 3/3 ready, say RECOVERED, list any leftover anomalies, and stop this loop with LoopDelete. Otherwise name what is still rebuilding and keep going.",
|
|
"trigger": {
|
|
"type": "cron",
|
|
"schedule": "*/5 * * * *"
|
|
},
|
|
"status": "expired",
|
|
"recurring": true,
|
|
"createdAt": 1792898370946,
|
|
"updatedAt": 1792901371403,
|
|
"expiresAt": 1793503170946,
|
|
"source": "tool",
|
|
"readOnly": true,
|
|
"maxFires": 6,
|
|
"fireCount": 6
|
|
}
|
|
]
|
|
} |