Story Crater Bot e71c7ad37e feat(phase4): ArgoCD-driven Terraform apply via PostSync Hook Job ...

- Create Phase 4 ArgoCD Application (terraform-apply)
- PostSync Hook Job runs: terraform init && terraform apply -auto-approve
- ServiceAccount + ClusterRole for cluster-admin RBAC
- S3 credentials encrypted with SOPS (terraform-s3-secrets.enc.yaml)
- Pre-commit hook blocks local 'terraform apply' — all changes via git push
- True IaC: modify terraform/*.tf → git push → ArgoCD applies automatically

2026-07-15 16:39:27 -07:00

..

argocd/apps

feat(phase4): ArgoCD-driven Terraform apply via PostSync Hook Job

2026-07-15 16:39:27 -07:00

base

feat(phase0): configure ArgoCD SOPS decryption + update encrypted secrets

2026-07-15 15:04:26 -07:00

cert-manager

k8s/aux: add cert-manager longhorn dashboard forge dev-tools and shadowsocks

2026-07-11 19:19:59 -07:00

cilium

k8s/cilium: add lb-ipam pool configuration

2026-07-11 19:19:44 -07:00

coredns

Step 1 complete: Bootstrap layer with ArgoCD, cert-manager, namespaces imported to TF

2026-07-14 13:14:46 -07:00

ddb

k8s/iam: add cloudnativepg postgres and vault + authentik

2026-07-11 19:17:22 -07:00

dev-tools

k8s/aux: add cert-manager longhorn dashboard forge dev-tools and shadowsocks

2026-07-11 19:19:59 -07:00

duckdns

k8s/services: add ingress networking portainer llm and project guides

2026-07-11 19:17:54 -07:00

forge

k8s/aux: add cert-manager longhorn dashboard forge dev-tools and shadowsocks

2026-07-11 19:19:59 -07:00

hooks

feat(phase4): ArgoCD-driven Terraform apply via PostSync Hook Job

2026-07-15 16:39:27 -07:00

ingress

Step 1 complete: Bootstrap layer with ArgoCD, cert-manager, namespaces imported to TF

2026-07-14 13:14:46 -07:00

llm

refactor(argocd): phase3 reduced to authentik only (remove vault, temporal, ollama, story-crater)

2026-07-15 16:24:45 -07:00

logging

refactor(argocd): phase3 reduced to authentik only (remove vault, temporal, ollama, story-crater)

2026-07-15 16:24:45 -07:00

longhorn

k8s/aux: add cert-manager longhorn dashboard forge dev-tools and shadowsocks

2026-07-11 19:19:59 -07:00

monitoring

k8s/monitoring: add prometheus grafana loki observability

2026-07-11 19:17:28 -07:00

portainer

k8s/services: add ingress networking portainer llm and project guides

2026-07-11 19:17:54 -07:00

shadowsocks

k8s/aux: add cert-manager longhorn dashboard forge dev-tools and shadowsocks

2026-07-11 19:19:59 -07:00

sqs

feat: spread management-service pods across nodes via topologySpreadConstraints

2026-07-13 16:43:58 -07:00

storage

Revert: Use minio-creds secret with MINIO_ROOT_* keys (operator expected format)

2026-07-14 14:37:41 -07:00

talos-ci-cd

feat(argocd): add SOPS-encrypted secrets for phase2 releases (loki, grafana, forgejo)

2026-07-15 16:02:20 -07:00

talos-iam

refactor(argocd): phase3 reduced to authentik only (remove vault, temporal, ollama, story-crater)

2026-07-15 16:24:45 -07:00

temporal

feat(argocd): create phase3 Applications (authentik, vault, temporal, ollama, story-crater) with SOPS secrets and Hook Jobs

2026-07-15 16:23:30 -07:00