112 Commits

This Branch

This Branch

All Branches

Author	SHA1	Message	Date
unkin-agent	35c7d1d224	Add remote_npm config kind	2026-10-09 19:30:17 +11:00
benvin	cf2d16268b	Merge pull request 'allow envoy release assets on github remote' (#53) from benvin/github-envoy into main ... Reviewed-on: #53	2026-10-09 19:27:10 +11:00
benvin	0027183be7	Merge pull request 'Add storytold GitHub-release rpm/deb remotes' (#55) from benvin/storytold-remotes into main ... Reviewed-on: #55	2026-10-09 19:25:18 +11:00
benvin	1625d41ad4	Merge pull request 'Add GitHub-release rpm/deb remote kinds' (#54) from benvin/github-pkg-remotes into main ... Reviewed-on: #54	2026-10-09 19:23:36 +11:00
unkin-agent	c3a96e5fa2	Drop storytold-artcraft remotes and fix apt description grammar	2026-10-09 19:18:58 +11:00
unkin-agent	6396c80eaa	Add storytold GitHub-release rpm and deb remotes	2026-10-09 19:09:17 +11:00
unkin-agent	c1c1c9d553	Add remote_github_rpm and remote_github_deb config kinds	2026-10-09 19:08:28 +11:00
unkin-agent	9759f059ea	allow envoy release binary and checksums on github remote	2026-10-07 11:47:31 +11:00
benvin	df73beb57d	Merge pull request 'ci: use container-opentofu image' (#52) from benvin/opentofu-image into main ... Reviewed-on: #52	2026-10-05 14:11:12 +11:00
unkin-agent	39817316ab	ci: use container-opentofu image	2026-10-05 13:49:23 +11:00
benvin	88f231e752	Merge pull request 'allow kubectl plugin release assets' (#51) from benvin/kubectl-plugins-allowlist into main ... Reviewed-on: #51	2026-10-02 23:49:05 +10:00
unkin-agent	37688d237a	allow kubectl plugin release assets in github remote	2026-10-02 23:43:54 +10:00
benvin	afb0b51dc6	Merge pull request 'allow kubectl-cnpg release assets through the github remote' (#50) from benvin/kubectl-cnpg into main ... Reviewed-on: #50	2026-10-02 23:30:03 +10:00
unkin-agent	69c9938c64	feat: allow kubectl-cnpg release assets through the github remote	2026-10-02 23:18:19 +10:00
benvin	0c1b2a0504	Merge pull request 'Allow victoria-metrics-k8s-stack dashboard sources on github_user' (#49) from benvin/vm-k8s-stack-dashboards into main ... Reviewed-on: #49	2026-10-02 23:00:26 +10:00
unkin-agent	0e1add0d43	Allow victoria-metrics-k8s-stack dashboard sources on github_user	2026-10-02 22:48:08 +10:00
benvin	b7e10718c3	Merge pull request 'ci: allow manual trigger of apply on main' (#48) from benvin/apply-manual-trigger into main ... Reviewed-on: #48	2026-09-19 23:36:36 +10:00
unkin-agent	0a245e7bca	ci: allow manual trigger of apply on main	2026-09-19 22:32:40 +10:00
benvin	dc07c26c2e	Merge pull request 'feat: add jellyfin-plugins local generic repo' (#47) from benvin/jellyfin-plugins-local into main ... Reviewed-on: #47	2026-09-19 18:41:25 +10:00
unkin-agent	e8c09807ae	feat: add jellyfin-plugins local generic repo	2026-09-19 17:42:00 +10:00
benvin	f64b553e15	Merge pull request 'feat: allow argocd CLI release assets through the github remote' (#46) from benvin/argocd-cli-remote into main ... Reviewed-on: #46	2026-09-19 16:29:07 +10:00
unkin-agent	f0e63a091e	feat: allow argocd CLI release assets through the github remote	2026-09-19 16:22:41 +10:00
benvin	03eb79f27b	Merge pull request 'Allow GitHub branch archives through the github remote' (#45) from benvin/github-branch-archives into main ... Reviewed-on: #45	2026-09-11 23:37:08 +10:00
unkin-agent	d7542d8fe2	Narrow GitHub branch archives to named repos ... The wildcard heads entries admitted a branch archive from any repository on GitHub. patterns is the admission allowlist, so only the repos that need a branch install belong in it. - Replace the wildcard heads entries with one anchored entry per repo - Cover the 14 Neovim plugins that publish no tags, zip and tar.gz - List each repo in both patterns and mutable_patterns	2026-09-11 23:34:12 +10:00
unkin-agent	b76fddecb9	Allow GitHub branch archives through the github remote ... patterns is a strict allowlist evaluated before mutable_patterns, so /archive/refs/heads/ downloads are denied despite the mutable entry. - Add heads .zip and .tar.gz to patterns - Add heads .zip to mutable_patterns and escape the tar.gz dots	2026-09-11 23:26:29 +10:00
benvin	9ef54c7338	Merge pull request 'Add gitea generic remote for internal tag archives' (#44) from benvin/gitea-generic-remote into main ... Reviewed-on: #44	2026-09-09 23:47:47 +10:00
unkin-agent	20838caa8f	Add gitea generic remote for internal tag archives ... Proxy unkin tag source zips from git.unkin.net through artifactapi.	2026-09-09 23:32:31 +10:00
benvin	00a931ed35	Merge pull request 'Allow stylua linux release assets through the github remote' (#42) from benvin/stylua-release-asset into main ... Reviewed-on: #42	2026-09-09 22:36:12 +10:00
benvin	35c1fb2195	Merge pull request 'Add nvim-plugins local generic repo' (#43) from benvin/nvim-plugins-local-generic into main ... Reviewed-on: #43	2026-09-09 22:34:57 +10:00
unkin-agent	901aaf1f1f	Add nvim-plugins local generic repo ... Receives Neovim plugin release archives for arti-pack installs.	2026-09-09 21:12:00 +10:00
unkin-agent	e7c4c76002	Allow stylua linux release assets through the github remote	2026-09-09 21:05:06 +10:00
benvin	ad8d530687	Merge pull request 'Allow GitHub tag zip archives through the github remote' (#41) from benvin/github-tag-zips into main ... Reviewed-on: #41	2026-09-08 00:37:09 +10:00
unkin-agent	888e3e84ce	Allow GitHub tag zip archives through the github remote	2026-09-07 23:49:10 +10:00
benvin	5a0c1fe814	Merge pull request 'Add artifactapi remotes for jellyfin-ha auth plugins' (#39) from benvin/jellyfin-plugin-remotes into main ... Reviewed-on: #39	2026-08-29 11:52:23 +10:00
unkin-agent	11c3059b05	Add artifactapi remotes for jellyfin-ha auth plugins ... jellyfin-ha bakes the LDAP and SSO auth plugins into its image, and all outside artifacts must be fetched via artifactapi rather than direct. - Add remote_generic/jellyfin.yaml proxying repo.jellyfin.org, scoped to the ldap-authentication plugin zip. - Add a github.yaml pattern for 9p4/jellyfin-plugin-sso release zips (GitHub redirects release downloads to objects.githubusercontent.com, which the existing github remote already follows).	2026-08-26 23:23:27 +10:00
benvin	e7113bb0b3	Merge pull request 'Allow ghcr.io/arabcoders/watchstate via artifactapi' (#38) from benvin/ghcr-remote into main ... Reviewed-on: #38	2026-08-24 21:39:05 +10:00
unkin-agent	b776d16a9c	Narrow arabcoders allow-pattern to watchstate per review	2026-08-24 21:37:30 +10:00
unkin-agent	5596088c57	Allow ghcr.io/arabcoders/watchstate via artifactapi ... Add arabcoders pattern to ghcr remote to enable pulling watchstate image through artifactapi for media watch-state sync deployment.	2026-08-24 21:22:58 +10:00
benvin	4e141add6f	Merge pull request 'Run plan without acquiring the Consul state lock' (#37) from benvin/lockfree-plan into main ... Reviewed-on: #37	2026-08-23 22:31:48 +10:00
unkin-agent	1013d5a26b	Run plan without acquiring the Consul state lock ... PR plan pipelines were failing with "Error acquiring the state lock" when they collided with a concurrent apply (or another plan) holding the lock on the same Consul-backed state. - plan: pass -lock=false to terragrunt plan; apply keeps locking	2026-08-23 22:21:06 +10:00
benvin	f160ded56f	Merge pull request 'Allow kube-state-metrics through the k8s-registry docker remote' (#36) from benvin/registry-k8s-io into main ... Reviewed-on: #36	2026-08-23 21:36:37 +10:00
unkin-agent	35b44f3956	Allow kube-state-metrics through the k8s-registry docker remote	2026-08-23 21:32:05 +10:00
benvin	212a82539c	Merge pull request 'quay remote: allowlist oauth2-proxy images' (#35) from benvin/quay-oauth2-proxy into main ... Reviewed-on: #35	2026-08-17 21:30:39 +10:00
unkin-agent	62c8307c08	quay remote: allowlist oauth2-proxy images ... Adds the ^oauth2-proxy/ pattern to the quay.io remote so the artifactapi caching proxy will serve quay.io/oauth2-proxy/oauth2-proxy. Needed so the arrproxy oauth2-proxy sidecar can pull the real upstream quay.io address via the rke2 registries.yaml mirror.	2026-08-17 20:43:43 +10:00
benvin	8ddfc99e00	Merge pull request 'ghcr: allowlist oauth2-proxy for the arrproxy sidecar' (#34) from benvin/oauth2-proxy-image into main ... Reviewed-on: #34	2026-08-16 17:37:11 +10:00
unkin-agent	f68de9283b	ghcr: allowlist oauth2-proxy for the arrproxy sidecar	2026-08-16 16:25:43 +10:00
benvin	96555885be	Merge pull request 'fix(fedora): repoint remote to gsl-syd (rackspace dropped F44)' (#32) from benvin/fedora-mirror-fcix into main ... Reviewed-on: #32	2026-08-15 15:34:49 +10:00
unkin-agent	8e88642bfa	fix(fedora): repoint remote to gsl-syd (rackspace dropped F44) ... Rackspace (syd.mirror.rackspace.com) never synced Fedora 44: it serves releases/43 but 404s on releases/44/.../repomd.xml, breaking dnf makecache for F44 through the caching proxy. Repoint to gsl-syd.mm.fcix.net, a Sydney-local FCIX tier-1 mirror that is fully synced for F44 (releases + updates + Packages, verified 200, ~25ms), using the standard /fedora/linux layout root.	2026-08-15 15:25:13 +10:00
benvin	770c489e40	Merge pull request 'dockerhub: allowlist linuxserver images for arrstack' (#31) from benvin/media-arr-images into main ... Reviewed-on: #31	2026-08-15 13:21:23 +10:00
unkin-agent	b4670ea796	dockerhub: allowlist linuxserver images for arrstack	2026-08-15 13:12:48 +10:00