6 Commits

Include renames

Author	SHA1	Message	Date
bmr_bluecap	c19b2b2af4	ci: install docker + kustomize as static binaries, not distro packages ... CI has been failing silently since 2026-08-03. The run for 9f1cbca did execute (Gitea action_run #6, status=failure, 13m) but died before pushing an image, so no package version exists for that commit and ArgoCD has been serving the 2026-07-20 build ever since. Cause: the "Ensure docker + kustomize are available" step ran `apt-get install -y docker.io`. The runner's job image was node:18-bullseye and Debian 11 went EOL, so debian-security stopped serving those package versions. `apt-get update` still succeeds, so the failure surfaces only at install time as 404s on docker.io, containerd, systemd and libcap2. Fetch both tools as pinned static binaries instead. These have no distro archive dependency, so the same rot cannot recur when bookworm ages out. Verified in the real job environment: the static client installs and reaches the host daemon through the mounted socket. The runner job image has separately been moved to node:22-bookworm, which also resolves the immediate breakage, but the static-binary approach is kept as the durable fix. Also refresh the prerequisites header: items 3 and 4 still described the pre-ADR-0008 registry design (k3s now pulls over public HTTPS, and the private package's pull auth comes from External Secrets).	2026-09-22 15:45:57 -04:00
gitea_admin	b9f2c72bd4	deploy: private package pull via External Secrets; pull over public HTTPS (no k3s restart) ... - k3s pulls git.7tl-homelab.com/... over valid TLS (no registries.yaml/node config) - CI still pushes internally to 10.66.15.22:3000 (fast, insecure-trusted) - ExternalSecret materializes gitea-registry dockerconfigjson from OpenBao - deployment uses imagePullSecrets: gitea-registry - .env added to .dockerignore	2026-07-17 07:36:22 -04:00
gitea_admin	466a01f217	ci: drop Playwright e2e from CI (run locally); keep build + seo:lint	2026-07-17 07:33:42 -04:00
gitea_admin	79f2e8a78b	ci: retry registry push on transient timeout	2026-07-16 17:43:44 -04:00
gitea_admin	28438dcde6	ci: use CI_TOKEN PAT for registry push and tag-bump	2026-07-16 16:02:00 -04:00
gitea_adminandClaude Opus 4.8	3dab3bc9fb	Add Gitea Actions CI, ArgoCD Application, and Gitea Packages wiring ... - .gitea/workflows/ci.yml: build → seo:lint → e2e → image build/push → bump k8s image tag and commit back (paths-ignore + [skip ci] guard) - argocd/bcs-website-application.yaml: ArgoCD App (internal Gitea repoURL, k8s path) - k8s: image → Gitea Packages path; kustomization images newTag stanza - ADR-0007 (Gitea Actions + Packages), supersedes GHCR/GitHub bits of ADR-0001 - Reconcile gitops-deployment-strategy.md to Gitea Co-Authored-By: Claude Opus 4.8 <noreply@anthropic.com>	2026-07-16 06:29:01 -04:00