Story Crater Bot 720181c900 feat: let the runner build and the cluster pull from the Forgejo registry ...

- Runner egress: allow 192.168.1.160/32:443. forgejo.riotpiao.com resolves to
  the ingress LB, inside the 192.168.1.0/24 block the NetworkPolicy denies, so
  docker push hung until timeout.
- dind CA: also mount homelab-ca at /etc/docker/certs.d/forgejo.riotpiao.com/,
  the path dockerd actually reads for per-registry trust.
- Pull secret: dockerconfigjson for the api namespace; /v2/ answers 401.
- AppProject: allow the Forgejo repo as a source for api-gw.

2026-08-19 21:48:01 -07:00

..

templates

feat: let the runner build and the cluster pull from the Forgejo registry

2026-08-19 21:48:01 -07:00

Chart.yaml

refactor(k8s): consolidate to infra/+apps/ single-source tree, dedicated per-app CNPG (authentik-db/temporal-db), wire monitoring-config, forgejo→cicd ns, drop orphan/stale (data-schemas, ollama, story-crater, sqs/argocd, key-rotation)

2026-08-18 15:08:03 -07:00

values.yaml

feat: let the runner build and the cluster pull from the Forgejo registry

2026-08-19 21:48:01 -07:00