rock/homelab
1
0
Fork 0
Code Issues Pull Requests Actions Packages Projects Releases Wiki Activity
311 Commits 4 Branches 0 Tags
c29b4d8656e91329261990b078595df0587a0d24
Commit Graph
4 Commits
Author SHA1 Message Date
rock c29b4d8656 fix: kustomization syntax + add RBAC for new namespaces 
- Fix sops-secrets kustomization: use generatorOptions instead of
  per-generator disableNameSuffixHash (invalid field)
- Add RoleBindings for portfolio, poimen, dashboard namespaces
  so authentik-provisioner can create secrets there
 2026-09-03 16:30:28 -07:00
rock 88c9f3047a fix: disable name suffix hash for portfolio-secrets to match deployment reference 2026-09-01 10:38:05 -07:00
rock a6c3fdf786 feat: add portfolio LLM_API_TOKEN to ksops secrets 
- portfolio-secrets.enc.env: FORGEJO_TOKEN + LLM_API_TOKEN for api.riotpiao.com
- kustomization: secretGenerator for ksops handling at deploy time
- Will be SOPS encrypted with homelab age key before merge
 2026-09-01 09:42:02 -07:00
Story Crater Bot 8ff3060ff0 refactor(argocd): replace SOPS CMP with ksops kustomize generator, rotate age key — CMP discover glob silently shadowed kustomize rendering of any app whose path held a .enc.yaml (MinIO Tenant/cloudflared/authentik jobs never applied); centralize 8 Secret manifests under k8s/argocd/secrets, defer 4 helm-values fragments 2026-08-18 15:08:04 -07:00