Commit Graph
70 Commits
Author SHA1 Message Date
olb042 a60747ba04 rbac admin
Validate manifests / validate (push) Successful in 5s
2026-05-05 16:45:06 +01:00
olb042 87e9ba9ef1 oidc changes
Validate manifests / validate (push) Successful in 5s
2026-05-05 16:36:43 +01:00
olb042 bb55398e0d fixed annotation on sealed argo-cd-secret
Validate manifests / validate (push) Successful in 5s
2026-05-05 16:20:11 +01:00
olb042 32698c8941 added tracking to sealed-secret template annotations
Validate manifests / validate (push) Successful in 5s
2026-05-05 16:17:27 +01:00
olb042 4b7c2b3305 add missed file
Validate manifests / validate (push) Successful in 5s
2026-05-05 11:21:00 +01:00
olb042 a3b93ca8a8 readd sops secret
Validate manifests / validate (push) Successful in 5s
2026-05-05 11:12:20 +01:00
olb042 156a9b7ef8 readd sops secret
Validate manifests / validate (push) Failing after 5s
2026-05-05 11:04:27 +01:00
olb042 d13564d5e5 move to sealed secrets
Validate manifests / validate (push) Failing after 2m49s
2026-05-05 01:01:52 +01:00
olb042 c111a36a03 update client id to string
Validate manifests / validate (push) Failing after 3s
2026-04-29 18:37:27 +01:00
olb042 bac8312bf0 update client id to strong
Validate manifests / validate (push) Failing after 3s
2026-04-29 18:28:55 +01:00
olb042 a2875609be update rbac
Validate manifests / validate (push) Failing after 3s
2026-04-29 18:06:33 +01:00
olb042 78d6e8fbd5 add oauth
Validate manifests / validate (push) Failing after 4s
2026-04-29 18:01:52 +01:00
olb042 142adb2194 fixed homepage iron
Validate manifests / validate (push) Failing after 3s
2026-04-29 09:50:03 +01:00
olb042 09a2596077 fixed tls wildcard reference on ingresssroute, enabled autosync
Validate manifests / validate (push) Failing after 5s
2026-04-29 09:47:43 +01:00
olb042 5acbd937b7 update repo creds
Validate manifests / validate (push) Failing after 5s
2026-04-26 18:29:25 +01:00
olb042 60f14a8749 enable badges
Validate manifests / validate (push) Failing after 5s
2026-04-21 00:29:44 +01:00
olb042 0d2b0fc67f fix: scale bundled argocd-redis to 0 replicas
Validate manifests / validate (push) Failing after 3s
Redis migrated to shared-redis.data:6379; the bundled Deployment from the
upstream install.yaml is no longer needed.
2026-04-19 23:42:41 +01:00
olb042 8b21b56512 fix: add kustomize merge annotation to secrets that exist in base install.yaml
Validate manifests / validate (push) Failing after 3s
argocd-notifications-secret and argocd-secret are defined as empty secrets in
the upstream install.yaml. Without the merge annotation, kustomize errors on
duplicate resource IDs when the KSOPS generator also produces them.
2026-04-19 23:41:29 +01:00
olb042 f9097676c7 fix: split secrets into individual encrypted files for KSOPS compatibility
Validate manifests / validate (push) Failing after 3s
KSOPS cannot handle multi-document YAML files; each secret needs its own
encrypted file. Updated ksops-generator.yaml to reference all 7 secrets.
2026-04-19 23:38:19 +01:00
olb042 40eb3b842c feat: initial ArgoCD GitOps self-management setup
Validate manifests / validate (push) Failing after 4s
- Base references upstream ArgoCD v3.3.6 install.yaml
- Production overlay applies all cluster customizations:
  - KSOPS CMP sidecar on argocd-repo-server
  - Custom ConfigMaps (argocd-cm, argocd-cmd-params-cm, argocd-rbac-cm, argocd-notifications-cm)
  - Redis migrated to shared-redis.data:6379
  - Traefik IngressRoute for argocd.olb42.com
  - SOPS-encrypted secrets (age key, redis auth, gitea tokens, repo-creds)
- Bootstrap Application with prune:false for safe self-management
2026-04-19 23:36:09 +01:00