6 Commits

Include renames

Author	SHA1	Message	Date
Story Crater Bot	720181c900	feat: let the runner build and the cluster pull from the Forgejo registry ... - Runner egress: allow 192.168.1.160/32:443. forgejo.riotpiao.com resolves to the ingress LB, inside the 192.168.1.0/24 block the NetworkPolicy denies, so docker push hung until timeout. - dind CA: also mount homelab-ca at /etc/docker/certs.d/forgejo.riotpiao.com/, the path dockerd actually reads for per-registry trust. - Pull secret: dockerconfigjson for the api namespace; /v2/ answers 401. - AppProject: allow the Forgejo repo as a source for api-gw.	2026-08-19 21:48:01 -07:00
Story Crater Bot	afb9b35292	fix(agent-pod): remote tui session for multi-agent	2026-08-18 15:08:04 -07:00
Story Crater Bot	6401652aa8	feat(forgejo): add runner-token Secret via ksops — forgejo-runner register initContainer needs the registration token (from gitea actions generate-runner-token); was missing so runner deploy stuck 0/1	2026-08-18 15:08:04 -07:00
Story Crater Bot	1a1edcfc27	fix(homarr): add auth-oidc-secret + db-encryption Secrets via ksops — homarr chart's envSecrets expect these exact names (oidc-client-id/secret, db-encryption-key); were never created so homarr CreateContainerConfigError	2026-08-18 15:08:04 -07:00
Story Crater Bot	b66c5f4916	fix: deploy authentik/loki/vault Secrets via ksops (were dead helm-values fragments, causing CreateContainerConfigError)	2026-08-18 15:08:04 -07:00
Story Crater Bot	8ff3060ff0	refactor(argocd): replace SOPS CMP with ksops kustomize generator, rotate age key — CMP discover glob silently shadowed kustomize rendering of any app whose path held a .enc.yaml (MinIO Tenant/cloudflared/authentik jobs never applied); centralize 8 Secret manifests under k8s/argocd/secrets, defer 4 helm-values fragments	2026-08-18 15:08:04 -07:00