Story Crater Bot
|
e71c7ad37e
|
feat(phase4): ArgoCD-driven Terraform apply via PostSync Hook Job
- Create Phase 4 ArgoCD Application (terraform-apply)
- PostSync Hook Job runs: terraform init && terraform apply -auto-approve
- ServiceAccount + ClusterRole for cluster-admin RBAC
- S3 credentials encrypted with SOPS (terraform-s3-secrets.enc.yaml)
- Pre-commit hook blocks local 'terraform apply' — all changes via git push
- True IaC: modify terraform/*.tf → git push → ArgoCD applies automatically
|
2026-07-15 16:39:27 -07:00 |
|
Story Crater Bot
|
ff22027c7a
|
refactor(argocd): phase3 reduced to authentik only (remove vault, temporal, ollama, story-crater)
|
2026-07-15 16:24:45 -07:00 |
|
Story Crater Bot
|
f158512261
|
feat(argocd): create phase3 Applications (authentik, vault, temporal, ollama, story-crater) with SOPS secrets and Hook Jobs
|
2026-07-15 16:23:30 -07:00 |
|
Story Crater Bot
|
7d1eb09486
|
feat(argocd): add phase2 Hook Jobs (CNPG, Prometheus, Forgejo-Runner) and update Applications to multi-source
|
2026-07-15 16:05:34 -07:00 |
|