Story Crater Bot e71c7ad37e feat(phase4): ArgoCD-driven Terraform apply via PostSync Hook Job ...

- Create Phase 4 ArgoCD Application (terraform-apply)
- PostSync Hook Job runs: terraform init && terraform apply -auto-approve
- ServiceAccount + ClusterRole for cluster-admin RBAC
- S3 credentials encrypted with SOPS (terraform-s3-secrets.enc.yaml)
- Pre-commit hook blocks local 'terraform apply' — all changes via git push
- True IaC: modify terraform/*.tf → git push → ArgoCD applies automatically

2026-07-15 16:39:27 -07:00

..

0-minio.yaml

fix(minio): migrate to official chart, TF-owned

2026-07-14 16:07:03 -07:00

1-wave-1.yaml

test(argocd): add label to vault app to verify GitOps flow

2026-07-14 23:24:12 -07:00

2-wave-2.yaml

Step 2: ArgoCD app-of-apps manifests for 19 workloads

2026-07-14 13:52:18 -07:00

3-wave-3.yaml

Step 2: ArgoCD app-of-apps manifests for 19 workloads

2026-07-14 13:52:18 -07:00

phase1-hookless-0.yaml

feat(phase1): create ArgoCD Applications for 9 hookless releases

2026-07-15 15:06:02 -07:00

phase1-hookless-1.yaml

feat(argocd): remove claude-terminal and blackbox-exporter from phase1

2026-07-15 15:11:30 -07:00

phase2-storage-observability-0.yaml

feat(argocd): add phase2 Hook Jobs (CNPG, Prometheus, Forgejo-Runner) and update Applications to multi-source

2026-07-15 16:05:34 -07:00

phase2-storage-observability-1.yaml

feat(argocd): add phase2 Hook Jobs (CNPG, Prometheus, Forgejo-Runner) and update Applications to multi-source

2026-07-15 16:05:34 -07:00

phase3-iam-0.yaml

refactor(argocd): phase3 reduced to authentik only (remove vault, temporal, ollama, story-crater)

2026-07-15 16:24:45 -07:00

phase4-terraform-0.yaml

feat(phase4): ArgoCD-driven Terraform apply via PostSync Hook Job

2026-07-15 16:39:27 -07:00