5 Commits

Include renames

Author	SHA1	Message	Date
Story Crater Bot	85f6984fbd	fix(argocd): add insecureSkipVerify for Authentik OIDC ... ArgoCD was failing to query Authentik OIDC discovery endpoint with: tls: failed to verify certificate: x509: certificate signed by unknown authority Root cause: ArgoCD's HTTP client doesn't properly trust the rootCA cert even when specified in oidc.config. Fixed by adding insecureSkipVerify: true to OIDC config. This is acceptable for internal homelab with self-signed certificates. Tested: ArgoCD SSO login via Authentik now works	2026-08-18 15:08:03 -07:00
Story Crater Bot	cd861a75e6	fix(argocd): raise repo-server memory 512Mi->1Gi — OOMKilled under CMP+Helm rendering caused chronic restarts, not-ready endpoint, and cluster-wide sync 'no route to host' failures	2026-08-18 15:08:02 -07:00
Story Crater Bot	48f3dd1db9	feat(argocd): wire SOPS CMP sidecar + fix loki/grafana/authentik secret resolution	2026-08-18 15:08:02 -07:00
Story Crater Bot	54bfb5ade6	feat(gitops): migrate domain to riotpiao.com, add CNPG + Forgejo HA on Redis/Postgres, wire ArgoCD apps — enables cluster rebuild after etcd wipe and unblocks the git-source chicken-egg via standalone Helm-source Applications	2026-08-18 15:08:02 -07:00
Story Crater Bot	0f30d77288	refactor(k8s): Reorganize into 5-layer structure with production kustomizations	2026-08-18 15:08:01 -07:00