infrastructure/applications/services/ at test/provision-cluster-for-testing · tibor.sh/infrastructure · Tangled

tibor.sh / infrastructure

0

[READ-ONLY] Mirror of https://github.com/tiborpilz/infrastructure. Personal Infrastructure managed via terraform & k8s

0

infrastructure / applications / services /

at test/provision-cluster-for-testing 8 folders 3 files

Tibor Pilz fix: recreate harbor storage under new names (#27) 7w ago

chore: deslop comments to load-bearing one-liners

1 month ago

fix: recreate harbor storage under new names (#27)

1 month ago

chore: deslop comments to load-bearing one-liners

1 month ago

chore: deslop comments to load-bearing one-liners

1 month ago

refactor: group kustomize apps

1 month ago

chore: deslop comments to load-bearing one-liners

1 month ago

refactor: group kustomize apps

1 month ago

chore: deslop comments to load-bearing one-liners

1 month ago

application.yaml

fix: recreate harbor storage under new names (#27)

1 month ago

gitops-canary.yaml

chore: add gitops canary configmap to services

1 month ago

kustomization.yaml

feat: add harbor registry with authentik oidc Harbor 2.15 (chart 1.19.1) as a services-group app: CNPG-backed external postgres, internal redis, hcloud-volumes persistence, exposed through the public gateway at harbor.tibor.sh. All chart-generated component secrets are pinned via existingSecret references (sops-encrypted, age-only recipients) so ArgoCD renders stay deterministic. OIDC is wired both ways: an authentik blueprint creates the provider/application (client secret via authentik-oidc-clients env secret), and a post-deploy job PUTs the matching oidc_auth config into Harbor's API. tibor joins the new harbor-admins group for oidc admin.

1 month ago