 Story Crater Bot
|
6cbd887b89
|
fix(forgejo-runner): add fsGroup 1000 so runner user can write /data/.runner — register hit permission denied on root-owned Longhorn PVC
|
2026-08-18 15:08:02 -07:00 |
|
|
Story Crater Bot
|
7e345625fa
|
chore(ci): refresh forgejo runner registration token — prior token invalid/expired
|
2026-08-18 15:08:02 -07:00 |
|
|
Story Crater Bot
|
b1be1d0d2c
|
fix(forgejo-runner): point at in-cluster forgejo Service :3000 not public :443 — runner i/o timeout, forgejo serves 3000 not 443
|
2026-08-18 15:08:02 -07:00 |
|
|
Story Crater Bot
|
63fc502359
|
fix(loki,vault,iam): loki minio endpoint :80 not :9000, emit vault-minio-creds via CMP, drop redundant broken authentik-migrations job
|
2026-08-18 15:08:02 -07:00 |
|
|
Story Crater Bot
|
2b89981c28
|
chore(ci): add SOPS-encrypted runner-token secret record for forgejo-runner registration
|
2026-08-18 15:08:02 -07:00 |
|
|
Story Crater Bot
|
384548b424
|
fix(storage): add longhorn-wffc SC + pin portainer/forgejo-runner to az-a — fixes PVC attach
|
2026-08-18 15:08:02 -07:00 |
|
|
Story Crater Bot
|
cda75eeb7b
|
fix(authentik): drop redundant authentik-migrate init container — server entrypoint migrates; old-image manage migrate tripped version-history precheck on empty DB
|
2026-08-18 15:08:02 -07:00 |
|
|
Story Crater Bot
|
48f3dd1db9
|
feat(argocd): wire SOPS CMP sidecar + fix loki/grafana/authentik secret resolution
|
2026-08-18 15:08:02 -07:00 |
|
|
Story Crater Bot
|
2623eecfca
|
feat(argocd): SOPS CMP plugin decryption for Stage 0 secrets (simplify to directory source)
|
2026-08-18 15:08:02 -07:00 |
|
|
Story Crater Bot
|
54bfb5ade6
|
feat(gitops): migrate domain to riotpiao.com, add CNPG + Forgejo HA on Redis/Postgres, wire ArgoCD apps — enables cluster rebuild after etcd wipe and unblocks the git-source chicken-egg via standalone Helm-source Applications
|
2026-08-18 15:08:02 -07:00 |
|
|
Story Crater Bot
|
0f30d77288
|
refactor(k8s): Reorganize into 5-layer structure with production kustomizations
|
2026-08-18 15:08:01 -07:00 |
|