4 Commits

Include renames

Author	SHA1	Message	Date
rock	20513c8b3b	iam: add memory scope, service accounts, manual provisioning ... - Add 'memory' scope property mapping (memory_projects, memory_visibility, memory_role) - Add capability groups: llm-users, memory-users, memory-writers - Add service account provisioning for portfolio-agent, memory-agent - Fix sops-secrets kustomization (generatorOptions) - Add RoleBindings for portfolio, poimen, dashboard namespaces - Remove PostSync hook - IAM provisioning is now manual-only	2026-09-03 18:07:22 -07:00
rock	88c9f3047a	fix: disable name suffix hash for portfolio-secrets to match deployment reference	2026-09-01 10:38:05 -07:00
rock	a6c3fdf786	feat: add portfolio LLM_API_TOKEN to ksops secrets ... - portfolio-secrets.enc.env: FORGEJO_TOKEN + LLM_API_TOKEN for api.riotpiao.com - kustomization: secretGenerator for ksops handling at deploy time - Will be SOPS encrypted with homelab age key before merge	2026-09-01 09:42:02 -07:00
Story Crater Bot	8ff3060ff0	refactor(argocd): replace SOPS CMP with ksops kustomize generator, rotate age key — CMP discover glob silently shadowed kustomize rendering of any app whose path held a .enc.yaml (MinIO Tenant/cloudflared/authentik jobs never applied); centralize 8 Secret manifests under k8s/argocd/secrets, defer 4 helm-values fragments	2026-08-18 15:08:04 -07:00