unkinben 58c32c1cb6 Bump Woodpecker CI to v3.16.0 ...

Move the Woodpecker helm chart from 3.6.3 (appVersion 3.14.1) to 3.6.5
(appVersion 3.16.0), upgrading server and agent together. Enable the new
agent flag that gates step-level serviceAccountName so existing pipelines
keep working.

- Bump helmChart version 3.6.3 -> 3.6.5 in the au-syd1 overlay (server +
  agent both render as v3.16.0 via the chart appVersion).
- Set WOODPECKER_BACKEND_K8S_SERVICE_ACCOUNT_NAME_ALLOW_FROM_STEP=true on
  the agent; 3.16.0 (GHSA-qf34-295c-26v8) gates step-level
  serviceAccountName behind this flag (default false), and the estate's
  pipelines set backend_options.kubernetes.serviceAccountName.

Claude-Session: https://claude.ai/code/session_015ur3i7D2azsMAWTSVABApv

2026-07-27 21:55:30 +10:00

.claude/commands

chore: bump almalinux9 image tags (#188)

2026-06-07 00:35:12 +10:00

.woodpecker

chore: bump almalinux9 image tags (#188)

2026-06-07 00:35:12 +10:00

apps

Bump Woodpecker CI to v3.16.0

2026-07-27 21:55:30 +10:00

argocd

Add VPA CRDs and kubeconform schemas (#284)

2026-07-25 18:16:15 +10:00

ci

Add JSON schema generation for kubeconform CRD validation (#212)

2026-06-28 17:26:08 +10:00

clusters/au-syd1

Wire ArgoCD RBAC to Authentik ak_groups / akP-argocd-admin (#263)

2026-07-18 16:23:58 +10:00

schemas

Reflect externaldns TSIG key into the externaldns namespace (#285)

2026-07-25 22:37:39 +10:00

.gitignore

feat: add reloader (#6)

2026-03-01 16:34:01 +11:00

.pre-commit-config.yaml

Add JSON schema generation for kubeconform CRD validation (#212)

2026-06-28 17:26:08 +10:00

.yamllint.yaml

feat: add pre-commit configuration (#9)

2026-03-02 00:09:21 +11:00

AGENTS.md

chore: bump almalinux9 image tags (#188)

2026-06-07 00:35:12 +10:00

Makefile

Add JSON schema generation for kubeconform CRD validation (#212)

2026-06-28 17:26:08 +10:00

migration.md

chore: bump almalinux9 image tags (#188)

2026-06-07 00:35:12 +10:00

S

Description

GitOps for ArgoCD

4.7 MiB

Languages

Shell 88.8%

Makefile 11.2%