feature/ci-gitops #6

Closed

bstein wants to merge 0 commits from feature/ci-gitops into main

pull from: feature/ci-gitops

merge into: bstein:main

bstein:main

bstein:feature/atlasbot

bstein:feature/ariadne

bstein:deploy

bstein:feature/vault-consumption

bstein:feature/postgres-migration

bstein:feature/sso-hardening

bstein:feature/bstein-dev-home

bstein:feature/mailu

bstein:feature/sso

bstein:feature/atlas-monitoring

bstein:restructure/hybrid-clusters

bstein:fea/titan24-gpu

Conversation 0 Commits - Files Changed -

bstein commented 2025-12-18 04:21:25 +00:00

Owner

Copy Link

No description provided.

bstein added 97 commits 2025-12-18 04:21:27 +00:00

gitops-ui: cert + switch flux to feature/ci-gitops 85cea34fe8

gitops-ui: allow acme solver ingress from traefik 6993f51ef7

gitops-ui: allow acme solver from kube-system traefik 694bb4d12e

gitops-ui: open ingress for acme solver b28e393524

git: ignore fixed 39d732d74d

chore: drop stray NOTES.md b575c64de1

cleanup: stop tracking extra md files; switch gitops cert to letsencrypt ccfc473521

jenkins: add helm release with ingress + astreae storage 4eff9ebcc1

jenkins: use latest plugin versions to avoid 404 6def1aa479

jenkins: start without plugin installs to unblock bootstrap 90bf1f7d8e

jenkins: restore plugin list without pinned versions 0286f4f317

jenkins: drop JCasC OIDC script to unblock startup fc0fa59981

jenkins: auto-configure OIDC via init script 04602a2914

ci: enable oidc for jenkins/gitops/gitea a46226bb0a

jenkins: fix OIDC retriever null 37761fa118

gitea: enable debug logging for oauth 2ffc906487

gitea: relax required signin, set admin group+skip 2fa 0d93929e3d

gitea: set trace logging for oidc d8dab08cd8

gitea: fix bootstrap job immutability a174e451d9

gitea: remove bootstrap job (immutable error) 9b994111cb

gitea: enforce keycloak auth source via init container c8b89c3120

gitea: drop required claim constraint on keycloak auth fc5b0cccf8

gitea: pin secret/internal token and include secret manifest 29da4be557

gitea: remove committed secret and env refs c3a8c7ddae

gitea: reference secret via env; remove secret file 294542e718

gitea: add proxy/session headers for OIDC 7a1f3bfc3f

gitea: enable OIDC auto-registration 828f66d18c

zot: add oauth proxy and user sync scripts b87f06f6ff

zot: fix htpasswd volume to avoid type conflict 0416493f49

zot: move basic auth to oauth2-proxy upstream 1899bb7677

zot: restore UI basic header middleware 54eb9e1ac5

zot ui: send basic creds from oauth2-proxy, remove traefik header caef505677

zot: forward authorization header to ui 54406661f2

zot: allow upstream basic auth from oauth2-proxy aa2bb09873

harbor: add helm repo and deploy via helmrelease aa0df1f62b

harbor: deploy chart via flux dba7cf00a4

harbor: use existing secrets and correct admin key 252743e416

Regenerate dashboards after availability thresholds tweak 0f49849761

harbor: use astreae storageclass for pvc 9cda32c0bf

harbor: increase helm timeout 3e3cab6845

harbor: prefer rpi nodes d51a19cab9

harbor: pin to amd64, prefer titan-22 a8bde2edc7

harbor: set redis affinity to amd64 titan-22 first 22b611f8ea

registry: point workloads to harbor bd64a36165

harbor: use project paths for crypto/pegasus images 144a860a88

Add AC Infinity ingestion plan c661658a12

harbor: run arm64 images on rpi workers 759a77c745

harbor: bootstrap arm64 images on titan-05 3066db793d

chore: remove zot stack 8b9fc8ff1c

ci: seed harbor-arm-build pipeline in Jenkins fc858fc8df

fix: pin Jenkins OIDC realm via JCasC 162fe3339f

fix: jenkins casc OIDC using explicit endpoints cfa7bd8198

fix: enforce Jenkins OIDC via init groovy only b951058dc6

fix: add job-dsl plugin for JCasC jobs 3e4a49e7fb

fix: add casc support plugin 6759871b43

fix: use FullControlOnceLoggedIn auth strategy 0385a653af

jenkins: disable scm trigger for harbor arm build f3335028b1

jenkins: enforce OIDC via JCasC and pin to arm64 ce7631f896

jenkins: enforce OIDC via JCasC (no node move) 60a8192f61

jenkins: drop invalid JCasC OIDC realm (use init script) 30048a9ae5

jenkins: clean stale JCasC files on startup 1f98a5be12

jenkins: run jcasc cleanup initcontainer as jenkins user 4e479147ec

jenkins: harden oidc and timeouts f512e0fa29

chore: stop tracking NOTES.md 5e6f9c6c83

harbor: add helm remediation and timeouts cd1b9b57b0

jenkins: source pipeline creds from secrets a52b811e5b

jenkins: poll harbor-arm-build scm d3aa456bee

jenkins: stop JCasC resetting OIDC 7dcfd5f6cf

jenkins: disable chart local auth realm d93d24d5ef

jenkins: pin controller to rpi4 8d04f6c6c7

harbor: add image automation f28d5680f2

harbor: re-pin workloads to titan-05 1a8c6857e7

flux(atlas): limit kustomization health checks f55d3fd956

flux(atlas): use scoped health checks 2f66afd970

harbor: automate nginx and prepare efa6d92b69

harbor: fix image policy tag regex 543f2a9ccd

harbor: enable image automation push cde135c59e

harbor: fix image automation push schema 37a50622a2

harbor: fix imagepolicy tag setters 1d788a5dc4

harbor: run image automation in harbor ns bb8de41cdb

chore(harbor): update images to registry.bstein.dev/infra/harbor-redis:v2.14.1-arm64.14registry.bstein.dev/infra/harbor-core:v2.14.1-arm64.14registry.bstein.dev/infra/harbor-jobservice:v2.14.1-arm64.14registry.bstein.dev/infra/harbor-portal:v2.14.1-arm64.14registry.bstein.dev/infra/harbor-registry:v2.14.1-arm64.14registry.bstein.dev/infra/harbor-registryctl:v2.14.1-arm64.14registry.bstein.dev/infra/harbor-nginx:v2.14.1-arm64.14registry.bstein.dev/infra/harbor-prepare:v2.14.1-arm64.14 b7709b3f40

harbor: suspend automation, pin redis b7246f5835

harbor: pin components to v2.14.1-arm64 0a42289516

ci-demo: add flux image automation daa354e2cd

jenkins: add ci-demo job bbb84c1182

ci-demo: fix imagepolicy tag regex 9635100675

ci-demo: set tag v0.0.0-1 39275db74e

ci-demo: bump to v0.0.0-2 9816354d0f

flux: upgrade controllers to v2.7.5 609347991e

flux: update pegasus image automation api 61d9f05fef

flux: enable debug logging for image automation 5d4a0814c1

flux: enable debug logging for controllers c04a38fac5

flux: bump image automation api to v1 5f300c47a5

ci-demo: move image policy to flux-system bfb6b4135e

chore: update image automation templates adfe833d60

chore: simplify image automation commit messages a76044f85c

chore(ci-demo): apply image updates 34e37f0b97

bstein added 1 commit 2025-12-18 04:21:34 +00:00

flux: reset image automation log level 8ffdf9a014

bstein added 1 commit 2025-12-18 04:24:20 +00:00

flux: lower controller log verbosity 72991db7c3

bstein force-pushed feature/ci-gitops from 72991db7c3 to ba12854639 2025-12-18 05:15:45 +00:00 Compare

bstein closed this pull request 2025-12-19 18:45:30 +00:00

Pull request closed

Please reopen this pull request to perform a merge.

Sign in to join this conversation.

Reviewers

No Reviewers

Labels

No items

No Label

Milestone

No items

No Milestone

Projects

Clear projects

No project

Assignees

Clear assignees

bstein

No Assignees

1 Participants

Notifications

Subscribe

Due Date

No due date set.

Dependencies

No dependencies set.

Reference: bstein/titan-iac#6

No description provided.