unkin/argocd-apps

Fork 0

T

Ben Vincent 9ed9ebe167

ci/woodpecker/pr/vector-test Pipeline was successful

Details

ci/woodpecker/pr/pre-commit Pipeline was successful

Details

ci/woodpecker/pr/kubeconform Pipeline was successful

Details

Add cnameStrategy: Follow to ACME DNS-01 solvers

A live smoke test showed cert-manager sending the rfc2136 UPDATE to zone
unkin.net (walked from _acme-challenge.unkin.net), which bind-external is
not authoritative for, returning NOTAUTH; the solver was not following the
delegation CNAME.

- Set cnameStrategy: Follow on the letsencrypt and letsencrypt-staging
  ClusterIssuer DNS-01 solvers so cert-manager chases the
  _acme-challenge.unkin.net -> _acme-challenge.acme.unkin.net CNAME and
  updates the acme.unkin.net zone.

Claude-Session: https://claude.ai/code/session_01JUoARVdmhxKQHyyyp1pxeT

2026-08-02 18:49:38 +10:00

.claude/commands

chore: bump almalinux9 image tags (#188 )

2026-06-07 00:35:12 +10:00

.woodpecker

Replace vector-archiver with logarchiver (#308 )

2026-07-29 21:07:20 +10:00

apps

Add cnameStrategy: Follow to ACME DNS-01 solvers

2026-08-02 18:49:38 +10:00

argocd

Add bind-external namespace for externally-reachable zones (#329 )

2026-08-02 17:53:34 +10:00

certificates: restore the validly-signed intermediate in vault-ca-cert (#305 )

2026-07-28 23:14:14 +10:00

clusters/au-syd1

Trust internal unkin.net CA for ArgoCD OIDC egress (#303 )

2026-07-28 22:17:32 +10:00

docs

Add k8s Gitea deployment (migration target for git.unkin.net) (#309 )

2026-07-31 20:03:43 +10:00

schemas

Add S3 backups to all CNPG Postgres clusters (#298 )

2026-07-27 23:57:08 +10:00

.gitignore

feat: add reloader (#6 )

2026-03-01 16:34:01 +11:00

.pre-commit-config.yaml

Add JSON schema generation for kubeconform CRD validation (#212 )

2026-06-28 17:26:08 +10:00

.yamllint.yaml

feat: add pre-commit configuration (#9 )

2026-03-02 00:09:21 +11:00

AGENTS.md

chore: bump almalinux9 image tags (#188 )

2026-06-07 00:35:12 +10:00

Makefile

Add JSON schema generation for kubeconform CRD validation (#212 )

2026-06-28 17:26:08 +10:00

migration.md

chore: bump almalinux9 image tags (#188 )

2026-06-07 00:35:12 +10:00

docs/README.md

argocd-apps docs

Operational notes for the manifests in this repo.

Doc	What it covers
cnpg-backups.md	How CNPG Postgres backups (WAL archiving + nightly base backups) to Ceph RGW are configured.
cnpg-restore.md	Restoring a CNPG cluster: full recovery, point-in-time recovery, cutover, and gotchas.
authentik-rancher-sso.md	Manual runtime step to point Rancher's OIDC auth at the canonical `identity.unkin.net` issuer and trust the internal CA.
gitea-migration.md	Staged cutover of the git.unkin.net forge from the Puppet VM to the `gitea` namespace.