Story Crater Bot
7437078f23
fix(ci): Correct Forgejo Actions template syntax for git clone auth
...
Use proper Forgejo variables: gitea.server_url, gitea.repository
Construct CLONE_URL correctly: https://user:token@host/repo.git
Use bash parameter expansion to strip https:// prefix
Removes invalid Forgejo filter syntax (| replace)
2026-07-17 12:27:40 -07:00
Story Crater Bot
f8b19d9f55
fix(ci): Replace GitHub actions/checkout with Forgejo auth
...
Use CI_RUNNER and CI_RUNNER_SECRET for repo clone authentication.
Embed credentials in git clone URL: https://user:token@host/repo.git
Removes dependency on GITHUB_TOKEN (GitHub-specific) and improves Forgejo compatibility.
2026-07-17 12:19:23 -07:00
Story Crater Bot
c000ddb402
fix(ci): Remove stale kustomize before reinstall in validate-k8s workflow
...
Prevent 'kustomize exists' error when downloading tools in CI runner.
Use -f flag on mv commands to force overwrite.
2026-07-17 11:31:44 -07:00
Story Crater Bot
a81b9b6169
refactor(ci-cd): Replace Terraform pipeline with GitOps validation and ArgoCD sync
...
Delete old terraform-apply.yml (terraform fmt/init/validate/plan/apply).
Create new GitOps CI/CD:
- validate-k8s.yaml: YAML lint, kubeval, kustomize build, ArgoCD validation
- argocd-sync.yaml: Auto-sync homelab-root on main branch
- security-scan.yaml: Trivy, Polaris, secret detection
- .yamllint.yaml: YAML linting configuration
Add documentation (.forgejo/CI-CD.md) and architecture guides.
Git is now single source of truth. CI validates, ArgoCD deploys.
2026-07-16 12:52:25 -07:00
Story Crater Bot
be2e5c321f
fix: use direct in-cluster kubernetes auth instead of kubeconfig file
...
- providers.tf: use host + token + ca_crt from mounted service account secrets
- workflow: remove kubeconfig generation step (no longer needed)
- variables.tf: remove unused kubeconfig_path variable
This is the standard pattern for running terraform inside k8s pods.
2026-07-15 21:26:09 -07:00
Story Crater Bot
7114fc8fc9
fix:Update the home lab repo
2026-07-15 20:40:02 -07:00
Story Crater Bot
fe7b749951
fix: terraform init backend config — use endpoint with inline credentials
2026-07-15 19:18:17 -07:00
Story Crater Bot
694350634b
fix: use endpoints.s3 for S3 backend (endpoint deprecated in TF 1.8+)
2026-07-15 19:16:13 -07:00
Story Crater Bot
ab103f00f0
fix: core-cli OAuth2 + S3 backend + admin group
...
- Link core-cli app to OAuth2 provider (was hardcoded to 0)
- Add core-cli user to authentik_admins for CI access
- Fix terraform init: use 'endpoint' not 'endpoints.s3' for S3 backend
(Terraform 1.9.4 compatibility, matches state.tf config)
2026-07-15 19:09:59 -07:00
Story Crater Bot
e4d645eae9
feat: Terraform CI via Forgejo Actions + MinIO S3 state backend
...
- ArgoCD manages MinIO (phase 0), Terraform manages infrastructure
- Runner workflow: pulls state from S3, validates, plans, applies
- 34 resources imported to state, S3 backend operational
- Fixed AppProject repos, S3 endpoint deprecation, runner package manager
2026-07-15 18:48:32 -07:00
Story Crater Bot