feature/bstein-dev-home #7
bstein
commented
Owner
No description provided.
bstein
added 95 commits 2025-12-18 04:22:54 +00:00
gitops-ui: cert + switch flux to feature/ci-gitops
85cea34fe8
gitops-ui: allow acme solver ingress from traefik
6993f51ef7
gitops-ui: allow acme solver from kube-system traefik
694bb4d12e
gitops-ui: open ingress for acme solver
b28e393524
git: ignore fixed
39d732d74d
chore: drop stray NOTES.md
b575c64de1
cleanup: stop tracking extra md files; switch gitops cert to letsencrypt
ccfc473521
jenkins: add helm release with ingress + astreae storage
4eff9ebcc1
jenkins: use latest plugin versions to avoid 404
6def1aa479
jenkins: start without plugin installs to unblock bootstrap
90bf1f7d8e
jenkins: restore plugin list without pinned versions
0286f4f317
jenkins: drop JCasC OIDC script to unblock startup
fc0fa59981
jenkins: auto-configure OIDC via init script
04602a2914
ci: enable oidc for jenkins/gitops/gitea
a46226bb0a
jenkins: fix OIDC retriever null
37761fa118
gitea: enable debug logging for oauth
2ffc906487
gitea: relax required signin, set admin group+skip 2fa
0d93929e3d
gitea: set trace logging for oidc
d8dab08cd8
gitea: fix bootstrap job immutability
a174e451d9
gitea: remove bootstrap job (immutable error)
9b994111cb
gitea: enforce keycloak auth source via init container
c8b89c3120
gitea: drop required claim constraint on keycloak auth
fc5b0cccf8
gitea: pin secret/internal token and include secret manifest
29da4be557
gitea: remove committed secret and env refs
c3a8c7ddae
gitea: reference secret via env; remove secret file
294542e718
gitea: add proxy/session headers for OIDC
7a1f3bfc3f
gitea: enable OIDC auto-registration
828f66d18c
zot: add oauth proxy and user sync scripts
b87f06f6ff
zot: fix htpasswd volume to avoid type conflict
0416493f49
zot: move basic auth to oauth2-proxy upstream
1899bb7677
zot: restore UI basic header middleware
54eb9e1ac5
zot ui: send basic creds from oauth2-proxy, remove traefik header
caef505677
zot: forward authorization header to ui
54406661f2
zot: allow upstream basic auth from oauth2-proxy
aa2bb09873
harbor: add helm repo and deploy via helmrelease
aa0df1f62b
harbor: deploy chart via flux
dba7cf00a4
harbor: use existing secrets and correct admin key
252743e416
Regenerate dashboards after availability thresholds tweak
0f49849761
harbor: use astreae storageclass for pvc
9cda32c0bf
harbor: increase helm timeout
3e3cab6845
harbor: prefer rpi nodes
d51a19cab9
harbor: pin to amd64, prefer titan-22
a8bde2edc7
harbor: set redis affinity to amd64 titan-22 first
22b611f8ea
registry: point workloads to harbor
bd64a36165
harbor: use project paths for crypto/pegasus images
144a860a88
Add AC Infinity ingestion plan
c661658a12
harbor: run arm64 images on rpi workers
759a77c745
harbor: bootstrap arm64 images on titan-05
3066db793d
chore: remove zot stack
8b9fc8ff1c
ci: seed harbor-arm-build pipeline in Jenkins
fc858fc8df
fix: pin Jenkins OIDC realm via JCasC
162fe3339f
fix: jenkins casc OIDC using explicit endpoints
cfa7bd8198
fix: enforce Jenkins OIDC via init groovy only
b951058dc6
fix: add job-dsl plugin for JCasC jobs
3e4a49e7fb
fix: add casc support plugin
6759871b43
fix: use FullControlOnceLoggedIn auth strategy
0385a653af
jenkins: disable scm trigger for harbor arm build
f3335028b1
jenkins: enforce OIDC via JCasC and pin to arm64
ce7631f896
jenkins: enforce OIDC via JCasC (no node move)
60a8192f61
jenkins: drop invalid JCasC OIDC realm (use init script)
30048a9ae5
jenkins: clean stale JCasC files on startup
1f98a5be12
jenkins: run jcasc cleanup initcontainer as jenkins user
4e479147ec
jenkins: harden oidc and timeouts
f512e0fa29
chore: stop tracking NOTES.md
5e6f9c6c83
harbor: add helm remediation and timeouts
cd1b9b57b0
jenkins: source pipeline creds from secrets
a52b811e5b
jenkins: poll harbor-arm-build scm
d3aa456bee
jenkins: stop JCasC resetting OIDC
7dcfd5f6cf
jenkins: disable chart local auth realm
d93d24d5ef
jenkins: pin controller to rpi4
8d04f6c6c7
harbor: add image automation
f28d5680f2
harbor: re-pin workloads to titan-05
1a8c6857e7
flux(atlas): limit kustomization health checks
f55d3fd956
flux(atlas): use scoped health checks
2f66afd970
harbor: automate nginx and prepare
efa6d92b69
harbor: fix image policy tag regex
543f2a9ccd
harbor: enable image automation push
cde135c59e
harbor: fix image automation push schema
37a50622a2
harbor: fix imagepolicy tag setters
1d788a5dc4
harbor: run image automation in harbor ns
bb8de41cdb
chore(harbor): update images to registry.bstein.dev/infra/harbor-redis:v2.14.1-arm64.14registry.bstein.dev/infra/harbor-core:v2.14.1-arm64.14registry.bstein.dev/infra/harbor-jobservice:v2.14.1-arm64.14registry.bstein.dev/infra/harbor-portal:v2.14.1-arm64.14registry.bstein.dev/infra/harbor-registry:v2.14.1-arm64.14registry.bstein.dev/infra/harbor-registryctl:v2.14.1-arm64.14registry.bstein.dev/infra/harbor-nginx:v2.14.1-arm64.14registry.bstein.dev/infra/harbor-prepare:v2.14.1-arm64.14
b7709b3f40
harbor: suspend automation, pin redis
b7246f5835
harbor: pin components to v2.14.1-arm64
0a42289516
ci-demo: add flux image automation
daa354e2cd
jenkins: add ci-demo job
bbb84c1182
ci-demo: fix imagepolicy tag regex
9635100675
ci-demo: set tag v0.0.0-1
39275db74e
ci-demo: bump to v0.0.0-2
9816354d0f
flux: upgrade controllers to v2.7.5
609347991e
flux: update pegasus image automation api
61d9f05fef
flux: enable debug logging for image automation
5d4a0814c1
flux: enable debug logging for controllers
c04a38fac5
flux: bump image automation api to v1
5f300c47a5
Merge remote-tracking branch 'origin/feature/ci-gitops' into feature/bstein-dev-home
449574d59f
Add bstein-dev-home deployment and Jenkins job
6f6fb363b3
bstein
merged commit be23851878 into main
bstein
referenced this issue from a commit
Merge pull request 'feature/bstein-dev-home' (#7) from feature/bstein-dev-home into main
Loading…
x
Reference in New Issue
Block a user
No description provided.
Delete Branch "feature/bstein-dev-home"
Deleting a branch is permanent. Although the deleted branch may continue to exist for a short time before it actually gets removed, it CANNOT be undone in most cases. Continue?