rock/homelab
1
0
Fork 0
Code Issues Pull Requests Actions Packages Projects Releases Wiki Activity

fix(argocd): clone the public GitHub seed anonymously over HTTPS and delete the SSH deploy-key Secret — its private half had been committed in plaintext to a public remote, and a public repo needs no credential at all

Browse Source
This commit is contained in:
Story Crater Bot
2026-08-18 15:08:04 -07:00
parent ee1bbed921
commit 5f16f16f0f
14 changed files with 41 additions and 74 deletions
Download Patch File Download Diff File Expand all files Collapse all files
k8s/argocd/apps/00-secrets.yaml
+1 -1
View File
@@ -17,7 +17,7 @@ spec:
syncOptions:
- CreateNamespace=true
source:
repoURL: git@github.com:Riotpiaole/riotpiao.homelab.com.git
repoURL: https://github.com/Riotpiaole/riotpiao.homelab.com.git
targetRevision: main
# ksops decrypts every *.enc.yaml here at kustomize-build time (repo-server
# runs `kustomize build --enable-alpha-plugins --enable-exec`). Replaces the
k8s/argocd/apps/00-substrate.yaml
+3 -3
View File
@@ -21,7 +21,7 @@ spec:
helm:
valueFiles:
- $values/k8s/bootstrap/cert-manager/cert-manager-values.yaml
- repoURL: git@github.com:Riotpiaole/riotpiao.homelab.com.git
- repoURL: https://github.com/Riotpiaole/riotpiao.homelab.com.git
targetRevision: main
ref: values
destination:
@@ -93,7 +93,7 @@ spec:
project: homelab
revisionHistoryLimit: 3
source:
repoURL: git@github.com:Riotpiaole/riotpiao.homelab.com.git
repoURL: https://github.com/Riotpiaole/riotpiao.homelab.com.git
targetRevision: main
# A real kustomization.yaml (resources: the 3 issuer/CA files) renders these
# deterministically. The previous directory.include with bare filenames
@@ -127,7 +127,7 @@ spec:
project: homelab
revisionHistoryLimit: 3
source:
repoURL: git@github.com:Riotpiaole/riotpiao.homelab.com.git
repoURL: https://github.com/Riotpiaole/riotpiao.homelab.com.git
targetRevision: main
path: k8s/bootstrap/ingress
destination:
k8s/argocd/apps/10-storage-observability.yaml
+7 -7
View File
@@ -17,7 +17,7 @@ spec:
helm:
valueFiles:
- $values/k8s/infra/minio/minio-operator-values.yaml
- repoURL: git@github.com:Riotpiaole/riotpiao.homelab.com.git
- repoURL: https://github.com/Riotpiaole/riotpiao.homelab.com.git
targetRevision: main
ref: values
destination:
@@ -41,7 +41,7 @@ metadata:
spec:
project: homelab
source:
repoURL: git@github.com:Riotpiaole/riotpiao.homelab.com.git
repoURL: https://github.com/Riotpiaole/riotpiao.homelab.com.git
targetRevision: main
path: k8s/infra/minio
destination:
@@ -66,7 +66,7 @@ metadata:
spec:
project: homelab
source:
repoURL: git@github.com:Riotpiaole/riotpiao.homelab.com.git
repoURL: https://github.com/Riotpiaole/riotpiao.homelab.com.git
targetRevision: main
path: k8s/infra/longhorn
destination:
@@ -94,7 +94,7 @@ spec:
skipCrds: true
valueFiles:
- $values/k8s/infra/monitoring/prometheus-values.yaml
- repoURL: git@github.com:Riotpiaole/riotpiao.homelab.com.git
- repoURL: https://github.com/Riotpiaole/riotpiao.homelab.com.git
targetRevision: main
ref: values
destination:
@@ -144,7 +144,7 @@ metadata:
spec:
project: homelab
source:
repoURL: git@github.com:Riotpiaole/riotpiao.homelab.com.git
repoURL: https://github.com/Riotpiaole/riotpiao.homelab.com.git
targetRevision: main
path: k8s/infra/monitoring/crds
destination:
@@ -175,7 +175,7 @@ metadata:
spec:
project: homelab
source:
repoURL: git@github.com:Riotpiaole/riotpiao.homelab.com.git
repoURL: https://github.com/Riotpiaole/riotpiao.homelab.com.git
targetRevision: main
path: k8s/infra/monitoring
destination:
@@ -205,7 +205,7 @@ spec:
helm:
valueFiles:
- $values/k8s/infra/monitoring/blackbox-exporter-values.yaml
- repoURL: git@github.com:Riotpiaole/riotpiao.homelab.com.git
- repoURL: https://github.com/Riotpiaole/riotpiao.homelab.com.git
targetRevision: main
ref: values
destination:
k8s/argocd/apps/20-logging.yaml
+3 -3
View File
@@ -19,7 +19,7 @@ spec:
helm:
valueFiles:
- $values/k8s/infra/logging/loki-values.yaml
- repoURL: git@github.com:Riotpiaole/riotpiao.homelab.com.git
- repoURL: https://github.com/Riotpiaole/riotpiao.homelab.com.git
targetRevision: main
ref: values
destination:
@@ -53,7 +53,7 @@ spec:
helm:
valueFiles:
- $values/k8s/infra/logging/grafana-values.yaml
- repoURL: git@github.com:Riotpiaole/riotpiao.homelab.com.git
- repoURL: https://github.com/Riotpiaole/riotpiao.homelab.com.git
targetRevision: main
ref: values
destination:
@@ -87,7 +87,7 @@ spec:
helm:
valueFiles:
- $values/k8s/infra/logging/promtail-values.yaml
- repoURL: git@github.com:Riotpiaole/riotpiao.homelab.com.git
- repoURL: https://github.com/Riotpiaole/riotpiao.homelab.com.git
targetRevision: main
ref: values
destination:
k8s/argocd/apps/30-security.yaml
+4 -4
View File
@@ -17,7 +17,7 @@ spec:
helm:
valueFiles:
- $values/k8s/infra/iam/vault-values.yaml
- repoURL: git@github.com:Riotpiaole/riotpiao.homelab.com.git
- repoURL: https://github.com/Riotpiaole/riotpiao.homelab.com.git
targetRevision: main
ref: values
destination:
@@ -46,7 +46,7 @@ spec:
helm:
valueFiles:
- $values/k8s/infra/iam/authentik-values.yaml
- repoURL: git@github.com:Riotpiaole/riotpiao.homelab.com.git
- repoURL: https://github.com/Riotpiaole/riotpiao.homelab.com.git
targetRevision: main
ref: values
destination:
@@ -68,7 +68,7 @@ metadata:
spec:
project: homelab
source:
repoURL: git@github.com:Riotpiaole/riotpiao.homelab.com.git
repoURL: https://github.com/Riotpiaole/riotpiao.homelab.com.git
targetRevision: main
path: k8s/infra/iam
destination:
@@ -90,7 +90,7 @@ metadata:
spec:
project: homelab
source:
repoURL: git@github.com:Riotpiaole/riotpiao.homelab.com.git
repoURL: https://github.com/Riotpiaole/riotpiao.homelab.com.git
targetRevision: main
path: k8s/infra/forgejo-runner
destination:
k8s/argocd/apps/40-data.yaml
+1 -1
View File
@@ -14,7 +14,7 @@ metadata:
spec:
project: homelab
source:
repoURL: git@github.com:Riotpiaole/riotpiao.homelab.com.git
repoURL: https://github.com/Riotpiaole/riotpiao.homelab.com.git
targetRevision: main
path: k8s/infra/databases
destination:
k8s/argocd/apps/50-messaging.yaml
+3 -3
View File
@@ -68,7 +68,7 @@ metadata:
spec:
project: homelab
source:
repoURL: git@github.com:Riotpiaole/riotpiao.homelab.com.git
repoURL: https://github.com/Riotpiaole/riotpiao.homelab.com.git
targetRevision: main
path: k8s/apps/messaging/kafka-cluster
destination:
@@ -89,7 +89,7 @@ metadata:
spec:
project: homelab
source:
repoURL: git@github.com:Riotpiaole/riotpiao.homelab.com.git
repoURL: https://github.com/Riotpiaole/riotpiao.homelab.com.git
targetRevision: main
path: k8s/apps/messaging/queue-crd
destination:
@@ -110,7 +110,7 @@ metadata:
spec:
project: homelab
source:
repoURL: git@github.com:Riotpiaole/riotpiao.homelab.com.git
repoURL: https://github.com/Riotpiaole/riotpiao.homelab.com.git
targetRevision: main
path: k8s/apps/messaging/management-service
destination:
k8s/argocd/apps/55-api-gateway.yaml
+2 -2
View File
@@ -28,13 +28,13 @@ spec:
helm:
valueFiles:
- $values/k8s/apps/api/kong-values.yaml
- repoURL: git@github.com:Riotpiaole/riotpiao.homelab.com.git
- repoURL: https://github.com/Riotpiaole/riotpiao.homelab.com.git
targetRevision: main
ref: values
# The nginx Ingress for api.riotpiao.com. Kept in this Application rather
# than the central k8s/bootstrap/ingress/ingress.yaml because that one syncs
# in wave 1, before namespace `api` exists.
- repoURL: git@github.com:Riotpiaole/riotpiao.homelab.com.git
- repoURL: https://github.com/Riotpiaole/riotpiao.homelab.com.git
targetRevision: main
path: k8s/apps/api
destination:
k8s/argocd/apps/60-applications.yaml
+6 -6
View File
@@ -19,7 +19,7 @@ spec:
helm:
valueFiles:
- $values/k8s/apps/temporal/temporal-values.yaml
- repoURL: git@github.com:Riotpiaole/riotpiao.homelab.com.git
- repoURL: https://github.com/Riotpiaole/riotpiao.homelab.com.git
targetRevision: main
ref: values
destination:
@@ -48,7 +48,7 @@ spec:
helm:
valueFiles:
- $values/k8s/apps/portainer/portainer-values.yaml
- repoURL: git@github.com:Riotpiaole/riotpiao.homelab.com.git
- repoURL: https://github.com/Riotpiaole/riotpiao.homelab.com.git
targetRevision: main
ref: values
destination:
@@ -71,7 +71,7 @@ metadata:
spec:
project: homelab
source:
repoURL: git@github.com:Riotpiaole/riotpiao.homelab.com.git
repoURL: https://github.com/Riotpiaole/riotpiao.homelab.com.git
targetRevision: main
path: k8s/apps/cloudflared
destination:
@@ -104,7 +104,7 @@ metadata:
spec:
project: homelab
source:
repoURL: git@github.com:Riotpiaole/riotpiao.homelab.com.git
repoURL: https://github.com/Riotpiaole/riotpiao.homelab.com.git
targetRevision: main
path: k8s/apps/sms
destination:
@@ -133,10 +133,10 @@ spec:
helm:
valueFiles:
- $values/k8s/apps/homarr/homarr-values.yaml
- repoURL: git@github.com:Riotpiaole/riotpiao.homelab.com.git
- repoURL: https://github.com/Riotpiaole/riotpiao.homelab.com.git
targetRevision: main
ref: values
- repoURL: git@github.com:Riotpiaole/riotpiao.homelab.com.git
- repoURL: https://github.com/Riotpiaole/riotpiao.homelab.com.git
targetRevision: main
path: k8s/apps/homarr # PostSync hook: fix-probes-job.yaml
destination:
k8s/argocd/projects/homelab-project.yaml
+1 -1
View File
@@ -11,7 +11,7 @@ metadata:
spec:
description: Homelab GitOps — single-repo, in-cluster destinations only
sourceRepos:
- git@github.com:Riotpiaole/riotpiao.homelab.com.git
- https://github.com/Riotpiaole/riotpiao.homelab.com.git
# Public Helm chart repos referenced by k8s/argocd/apps/* and bootstrap/*
- https://cloudnative-pg.github.io/charts
- https://dl.gitea.com/charts/
k8s/argocd/root/homelab-root.yaml
+1 -1
View File
@@ -12,7 +12,7 @@ metadata:
spec:
project: homelab
source:
repoURL: git@github.com:Riotpiaole/riotpiao.homelab.com.git
repoURL: https://github.com/Riotpiaole/riotpiao.homelab.com.git
targetRevision: main
path: k8s/argocd/apps
directory: