alpha
Login
or
Join now
tibor.sh
/
infrastructure
Star
0
Fork
0
Atom
Configure Feed
Issues
Pull Requests
Commits
Tags
Feed URL
Select the types of activity you want to include in your feed.
[READ-ONLY] Mirror of https://github.com/tiborpilz/infrastructure. Personal Infrastructure managed via terraform & k8s
Star
0
Fork
0
Atom
Configure Feed
Issues
Pull Requests
Commits
Tags
Feed URL
Select the types of activity you want to include in your feed.
Overview
Issues
Pulls
Pipelines
infrastructure
/
applications
/
services
/
harbor
/
at
ci/add-tests
1 folder
9 files
renovate[bot]
chore(deps): update valkey/valkey docker tag to v9
3mo ago
ef62a36b
blueprints
feat: add harbor registry with authentik oidc Harbor 2.15 (chart 1.19.1) as a services-group app: CNPG-backed external postgres, internal redis, hcloud-volumes persistence, exposed through the public gateway at harbor.tibor.sh. All chart-generated component secrets are pinned via existingSecret references (sops-encrypted, age-only recipients) so ArgoCD renders stay deterministic. OIDC is wired both ways: an authentik blueprint creates the provider/application (client secret via authentik-oidc-clients env secret), and a post-deploy job PUTs the matching oidc_auth config into Harbor's API. tibor joins the new harbor-admins group for oidc admin.
3 months ago
argo-app.yaml
fix: recreate harbor storage under new names (#27)
3 months ago
database.yaml
fix: recreate harbor storage under new names (#27)
3 months ago
httproute.yaml
feat: add harbor registry with authentik oidc Harbor 2.15 (chart 1.19.1) as a services-group app: CNPG-backed external postgres, internal redis, hcloud-volumes persistence, exposed through the public gateway at harbor.tibor.sh. All chart-generated component secrets are pinned via existingSecret references (sops-encrypted, age-only recipients) so ArgoCD renders stay deterministic. OIDC is wired both ways: an authentik blueprint creates the provider/application (client secret via authentik-oidc-clients env secret), and a post-deploy job PUTs the matching oidc_auth config into Harbor's API. tibor joins the new harbor-admins group for oidc admin.
3 months ago
kustomization.yaml
chore(deps): update valkey/valkey docker tag to v9
3 months ago
namespace.yaml
feat: add harbor registry with authentik oidc Harbor 2.15 (chart 1.19.1) as a services-group app: CNPG-backed external postgres, internal redis, hcloud-volumes persistence, exposed through the public gateway at harbor.tibor.sh. All chart-generated component secrets are pinned via existingSecret references (sops-encrypted, age-only recipients) so ArgoCD renders stay deterministic. OIDC is wired both ways: an authentik blueprint creates the provider/application (client secret via authentik-oidc-clients env secret), and a post-deploy job PUTs the matching oidc_auth config into Harbor's API. tibor joins the new harbor-admins group for oidc admin.
3 months ago
oidc-config.yaml
feat: manage container image tags via kustomize images transformers
3 months ago
pvcs.yaml
fix: recreate harbor storage under new names (#27)
3 months ago
secrets.enc.yaml
feat: add harbor registry with authentik oidc Harbor 2.15 (chart 1.19.1) as a services-group app: CNPG-backed external postgres, internal redis, hcloud-volumes persistence, exposed through the public gateway at harbor.tibor.sh. All chart-generated component secrets are pinned via existingSecret references (sops-encrypted, age-only recipients) so ArgoCD renders stay deterministic. OIDC is wired both ways: an authentik blueprint creates the provider/application (client secret via authentik-oidc-clients env secret), and a post-deploy job PUTs the matching oidc_auth config into Harbor's API. tibor joins the new harbor-admins group for oidc admin.
3 months ago
valkey.yaml
feat: manage container image tags via kustomize images transformers
3 months ago