9d42ff33f5
Resolve 8 conflicts, uniting #16's daemonless image-release lane with #14's SCM broker + node-audit boundary. Nothing dropped from either side. - quality_coverage.py / test_quality_coverage_helpers.py: take main's dual-metric gate (line+branch enforced per file at minimum_percent); drop #14's now-dead branch_tracked_files/minimum_branch_percent keys. - quality_contract.json: union all lists (managed_modules, lint_paths, coverage_sources, tracked_files, hygiene globs) so #14's scm-broker, git_pack_objects, receive_pack_scan, deadline_http and node_polkit_audit are branch-checked alongside #16's image-builder modules. - Vault auth (vault_k8s_auth_configure.sh): coexist both role sets. Keep #16's hermes-switchyard split + hermes-jenkins-token-seed; keep #14's hermes-scm-broker role. Preserve #14's security property: hermes-agent no longer holds developer-gitea (broker role carries it). - agent-deployment.yaml / stage_runtime_access.py: keep #16's jenkins-image-build-token injection/staging; keep #14's removal of the agent's gitea-token/gitea-username. - Bump vault-k8s-auth-hermes job -9 -> -10 (and its health check + test) so the merged auth config re-applies over any -9 already in-cluster. - flux hermes dependsOn: union jenkins + hermes-scm-broker + observer-rbac. Co-Authored-By: Claude Fable 5 <noreply@anthropic.com>
51 lines
1.7 KiB
YAML
51 lines
1.7 KiB
YAML
# clusters/atlas/flux-system/applications/kustomization.yaml
|
|
apiVersion: kustomize.config.k8s.io/v1beta1
|
|
kind: Kustomization
|
|
resources:
|
|
- gitea/kustomization.yaml
|
|
- vault/kustomization.yaml
|
|
- vault-hermes-jenkins-token-seed/kustomization.yaml
|
|
- vaultwarden/kustomization.yaml
|
|
- comms/kustomization.yaml
|
|
- crypto/kustomization.yaml
|
|
- monerod/kustomization.yaml
|
|
- pegasus/kustomization.yaml
|
|
- pegasus/image-automation.yaml
|
|
- bstein-dev-home/kustomization.yaml
|
|
- bstein-dev-home/image-automation.yaml
|
|
- bstein-dev-home-migrations/kustomization.yaml
|
|
- harbor/kustomization.yaml
|
|
- harbor/image-automation.yaml
|
|
- jellyfin/kustomization.yaml
|
|
- xmr-miner/kustomization.yaml
|
|
- wallet-monero-temp/kustomization.yaml
|
|
- sui-metrics/kustomization.yaml
|
|
- openldap/kustomization.yaml
|
|
- keycloak/kustomization.yaml
|
|
- quality/kustomization.yaml
|
|
- oauth2-proxy/kustomization.yaml
|
|
- mailu/kustomization.yaml
|
|
- jenkins/kustomization.yaml
|
|
- ai-llm/kustomization.yaml
|
|
- openclaw/kustomization.yaml
|
|
- hermes-scm-namespace/kustomization.yaml
|
|
- hermes-scm-broker-code/kustomization.yaml
|
|
- hermes/kustomization.yaml
|
|
- hermes-observer-rbac/kustomization.yaml
|
|
- hermes-observer-bindings/kustomization.yaml
|
|
- hermes-scm-broker/kustomization.yaml
|
|
- hermes-chat/kustomization.yaml
|
|
- hermes-triage-demo/kustomization.yaml
|
|
- game-stream/kustomization.yaml
|
|
- cassandra-auth/kustomization.yaml
|
|
- cassandra/kustomization.yaml
|
|
- cassandra/image-automation.yaml
|
|
- veles/kustomization.yaml
|
|
- typhon/kustomization.yaml
|
|
- nextcloud/kustomization.yaml
|
|
- nextcloud-mail-sync/kustomization.yaml
|
|
- outline/kustomization.yaml
|
|
- planka/kustomization.yaml
|
|
- finance/kustomization.yaml
|
|
- health/kustomization.yaml
|