Story Crater Bot e71c7ad37e feat(phase4): ArgoCD-driven Terraform apply via PostSync Hook Job ...

- Create Phase 4 ArgoCD Application (terraform-apply)
- PostSync Hook Job runs: terraform init && terraform apply -auto-approve
- ServiceAccount + ClusterRole for cluster-admin RBAC
- S3 credentials encrypted with SOPS (terraform-s3-secrets.enc.yaml)
- Pre-commit hook blocks local 'terraform apply' — all changes via git push
- True IaC: modify terraform/*.tf → git push → ArgoCD applies automatically

2026-07-15 16:39:27 -07:00

..

.terraform/providers/registry.terraform.io/hashicorp

chore: remove terraform cache from git tracking

2026-07-14 23:34:01 -07:00

scripts

feat(terraform): import Longhorn StorageClasses and app PVCs to Terraform state

2026-07-15 12:22:35 -07:00

.terraform.lock.hcl

chore: update terraform dependencies and config

2026-07-14 23:33:16 -07:00

argocd-bootstrap.tf

feat(phase4): ArgoCD-driven Terraform apply via PostSync Hook Job

2026-07-15 16:39:27 -07:00

authentik-config.tf

feat(authentik): import 24 resources to TF; chore(bootstrap): add cilium to TF

2026-07-14 16:36:12 -07:00

authentik-generated.tf

feat(authentik): import 24 resources to TF; chore(bootstrap): add cilium to TF

2026-07-14 16:36:12 -07:00

bootstrap-certificates.tf.disabled

Temp: disable kubernetes_manifest cert-manager resources (already live)

2026-07-14 13:26:26 -07:00

bootstrap-manifests.yaml

Step 1 complete: Bootstrap layer with ArgoCD, cert-manager, namespaces imported to TF

2026-07-14 13:14:46 -07:00

bootstrap-namespaces.tf

Fix: set ingress-nginx to privileged PodSecurity level

2026-07-14 13:43:56 -07:00

bootstrap-releases.tf

Revert "feat(phase0): bootstrap External Secrets Operator and fix helmfile dual-ownership"

2026-07-15 14:59:54 -07:00

forgejo.tf

feat(terraform): import Longhorn StorageClasses and app PVCs to Terraform state

2026-07-15 12:22:35 -07:00

grafana.tf

feat(terraform): import Longhorn StorageClasses and app PVCs to Terraform state

2026-07-15 12:22:35 -07:00

helm-repositories.tf

Revert "feat(phase0): bootstrap External Secrets Operator and fix helmfile dual-ownership"

2026-07-15 14:59:54 -07:00

loki.tf

feat(terraform): import Longhorn StorageClasses and app PVCs to Terraform state

2026-07-15 12:22:35 -07:00

LONGHORN_PVC_IMPORT.md

feat(terraform): import Longhorn StorageClasses and app PVCs to Terraform state

2026-07-15 12:22:35 -07:00

longhorn.tf

Revert "feat(phase0): bootstrap External Secrets Operator and fix helmfile dual-ownership"

2026-07-15 14:59:54 -07:00

main.tf

feat: Terraform foundation for cluster & app bootstrap

2026-07-14 09:27:24 -07:00

minio.tf

Revert "feat(phase0): bootstrap External Secrets Operator and fix helmfile dual-ownership"

2026-07-15 14:59:54 -07:00

portainer.tf

feat(terraform): import Longhorn StorageClasses and app PVCs to Terraform state

2026-07-15 12:22:35 -07:00

providers.tf

feat(terraform): import Longhorn StorageClasses and app PVCs to Terraform state

2026-07-15 12:22:35 -07:00

state.tf

Revert "feat(phase0): bootstrap External Secrets Operator and fix helmfile dual-ownership"

2026-07-15 14:59:54 -07:00

terraform.tfvars

Step 1 complete: Bootstrap layer with ArgoCD, cert-manager, namespaces imported to TF

2026-07-14 13:14:46 -07:00

terraform.tfvars.example

Step 1 complete: Bootstrap layer with ArgoCD, cert-manager, namespaces imported to TF

2026-07-14 13:14:46 -07:00

variables.tf

chore: update terraform dependencies and config

2026-07-14 23:33:16 -07:00