102 Commits

This Branch

This Branch

All Branches

Author	SHA1	Message	Date
benvin	88f231e752	Merge pull request 'allow kubectl plugin release assets' (#51) from benvin/kubectl-plugins-allowlist into main ... Reviewed-on: #51	2026-10-02 23:49:05 +10:00
unkin-agent	37688d237a	allow kubectl plugin release assets in github remote	2026-10-02 23:43:54 +10:00
benvin	afb0b51dc6	Merge pull request 'allow kubectl-cnpg release assets through the github remote' (#50) from benvin/kubectl-cnpg into main ... Reviewed-on: #50	2026-10-02 23:30:03 +10:00
unkin-agent	69c9938c64	feat: allow kubectl-cnpg release assets through the github remote	2026-10-02 23:18:19 +10:00
benvin	0c1b2a0504	Merge pull request 'Allow victoria-metrics-k8s-stack dashboard sources on github_user' (#49) from benvin/vm-k8s-stack-dashboards into main ... Reviewed-on: #49	2026-10-02 23:00:26 +10:00
unkin-agent	0e1add0d43	Allow victoria-metrics-k8s-stack dashboard sources on github_user	2026-10-02 22:48:08 +10:00
benvin	b7e10718c3	Merge pull request 'ci: allow manual trigger of apply on main' (#48) from benvin/apply-manual-trigger into main ... Reviewed-on: #48	2026-09-19 23:36:36 +10:00
unkin-agent	0a245e7bca	ci: allow manual trigger of apply on main	2026-09-19 22:32:40 +10:00
benvin	dc07c26c2e	Merge pull request 'feat: add jellyfin-plugins local generic repo' (#47) from benvin/jellyfin-plugins-local into main ... Reviewed-on: #47	2026-09-19 18:41:25 +10:00
unkin-agent	e8c09807ae	feat: add jellyfin-plugins local generic repo	2026-09-19 17:42:00 +10:00
benvin	f64b553e15	Merge pull request 'feat: allow argocd CLI release assets through the github remote' (#46) from benvin/argocd-cli-remote into main ... Reviewed-on: #46	2026-09-19 16:29:07 +10:00
unkin-agent	f0e63a091e	feat: allow argocd CLI release assets through the github remote	2026-09-19 16:22:41 +10:00
benvin	03eb79f27b	Merge pull request 'Allow GitHub branch archives through the github remote' (#45) from benvin/github-branch-archives into main ... Reviewed-on: #45	2026-09-11 23:37:08 +10:00
unkin-agent	d7542d8fe2	Narrow GitHub branch archives to named repos ... The wildcard heads entries admitted a branch archive from any repository on GitHub. patterns is the admission allowlist, so only the repos that need a branch install belong in it. - Replace the wildcard heads entries with one anchored entry per repo - Cover the 14 Neovim plugins that publish no tags, zip and tar.gz - List each repo in both patterns and mutable_patterns	2026-09-11 23:34:12 +10:00
unkin-agent	b76fddecb9	Allow GitHub branch archives through the github remote ... patterns is a strict allowlist evaluated before mutable_patterns, so /archive/refs/heads/ downloads are denied despite the mutable entry. - Add heads .zip and .tar.gz to patterns - Add heads .zip to mutable_patterns and escape the tar.gz dots	2026-09-11 23:26:29 +10:00
benvin	9ef54c7338	Merge pull request 'Add gitea generic remote for internal tag archives' (#44) from benvin/gitea-generic-remote into main ... Reviewed-on: #44	2026-09-09 23:47:47 +10:00
unkin-agent	20838caa8f	Add gitea generic remote for internal tag archives ... Proxy unkin tag source zips from git.unkin.net through artifactapi.	2026-09-09 23:32:31 +10:00
benvin	00a931ed35	Merge pull request 'Allow stylua linux release assets through the github remote' (#42) from benvin/stylua-release-asset into main ... Reviewed-on: #42	2026-09-09 22:36:12 +10:00
benvin	35c1fb2195	Merge pull request 'Add nvim-plugins local generic repo' (#43) from benvin/nvim-plugins-local-generic into main ... Reviewed-on: #43	2026-09-09 22:34:57 +10:00
unkin-agent	901aaf1f1f	Add nvim-plugins local generic repo ... Receives Neovim plugin release archives for arti-pack installs.	2026-09-09 21:12:00 +10:00
unkin-agent	e7c4c76002	Allow stylua linux release assets through the github remote	2026-09-09 21:05:06 +10:00
benvin	ad8d530687	Merge pull request 'Allow GitHub tag zip archives through the github remote' (#41) from benvin/github-tag-zips into main ... Reviewed-on: #41	2026-09-08 00:37:09 +10:00
unkin-agent	888e3e84ce	Allow GitHub tag zip archives through the github remote	2026-09-07 23:49:10 +10:00
benvin	5a0c1fe814	Merge pull request 'Add artifactapi remotes for jellyfin-ha auth plugins' (#39) from benvin/jellyfin-plugin-remotes into main ... Reviewed-on: #39	2026-08-29 11:52:23 +10:00
unkin-agent	11c3059b05	Add artifactapi remotes for jellyfin-ha auth plugins ... jellyfin-ha bakes the LDAP and SSO auth plugins into its image, and all outside artifacts must be fetched via artifactapi rather than direct. - Add remote_generic/jellyfin.yaml proxying repo.jellyfin.org, scoped to the ldap-authentication plugin zip. - Add a github.yaml pattern for 9p4/jellyfin-plugin-sso release zips (GitHub redirects release downloads to objects.githubusercontent.com, which the existing github remote already follows).	2026-08-26 23:23:27 +10:00
benvin	e7113bb0b3	Merge pull request 'Allow ghcr.io/arabcoders/watchstate via artifactapi' (#38) from benvin/ghcr-remote into main ... Reviewed-on: #38	2026-08-24 21:39:05 +10:00
unkin-agent	b776d16a9c	Narrow arabcoders allow-pattern to watchstate per review	2026-08-24 21:37:30 +10:00
unkin-agent	5596088c57	Allow ghcr.io/arabcoders/watchstate via artifactapi ... Add arabcoders pattern to ghcr remote to enable pulling watchstate image through artifactapi for media watch-state sync deployment.	2026-08-24 21:22:58 +10:00
benvin	4e141add6f	Merge pull request 'Run plan without acquiring the Consul state lock' (#37) from benvin/lockfree-plan into main ... Reviewed-on: #37	2026-08-23 22:31:48 +10:00
unkin-agent	1013d5a26b	Run plan without acquiring the Consul state lock ... PR plan pipelines were failing with "Error acquiring the state lock" when they collided with a concurrent apply (or another plan) holding the lock on the same Consul-backed state. - plan: pass -lock=false to terragrunt plan; apply keeps locking	2026-08-23 22:21:06 +10:00
benvin	f160ded56f	Merge pull request 'Allow kube-state-metrics through the k8s-registry docker remote' (#36) from benvin/registry-k8s-io into main ... Reviewed-on: #36	2026-08-23 21:36:37 +10:00
unkin-agent	35b44f3956	Allow kube-state-metrics through the k8s-registry docker remote	2026-08-23 21:32:05 +10:00
benvin	212a82539c	Merge pull request 'quay remote: allowlist oauth2-proxy images' (#35) from benvin/quay-oauth2-proxy into main ... Reviewed-on: #35	2026-08-17 21:30:39 +10:00
unkin-agent	62c8307c08	quay remote: allowlist oauth2-proxy images ... Adds the ^oauth2-proxy/ pattern to the quay.io remote so the artifactapi caching proxy will serve quay.io/oauth2-proxy/oauth2-proxy. Needed so the arrproxy oauth2-proxy sidecar can pull the real upstream quay.io address via the rke2 registries.yaml mirror.	2026-08-17 20:43:43 +10:00
benvin	8ddfc99e00	Merge pull request 'ghcr: allowlist oauth2-proxy for the arrproxy sidecar' (#34) from benvin/oauth2-proxy-image into main ... Reviewed-on: #34	2026-08-16 17:37:11 +10:00
unkin-agent	f68de9283b	ghcr: allowlist oauth2-proxy for the arrproxy sidecar	2026-08-16 16:25:43 +10:00
benvin	96555885be	Merge pull request 'fix(fedora): repoint remote to gsl-syd (rackspace dropped F44)' (#32) from benvin/fedora-mirror-fcix into main ... Reviewed-on: #32	2026-08-15 15:34:49 +10:00
unkin-agent	8e88642bfa	fix(fedora): repoint remote to gsl-syd (rackspace dropped F44) ... Rackspace (syd.mirror.rackspace.com) never synced Fedora 44: it serves releases/43 but 404s on releases/44/.../repomd.xml, breaking dnf makecache for F44 through the caching proxy. Repoint to gsl-syd.mm.fcix.net, a Sydney-local FCIX tier-1 mirror that is fully synced for F44 (releases + updates + Packages, verified 200, ~25ms), using the standard /fedora/linux layout root.	2026-08-15 15:25:13 +10:00
benvin	770c489e40	Merge pull request 'dockerhub: allowlist linuxserver images for arrstack' (#31) from benvin/media-arr-images into main ... Reviewed-on: #31	2026-08-15 13:21:23 +10:00
unkin-agent	b4670ea796	dockerhub: allowlist linuxserver images for arrstack	2026-08-15 13:12:48 +10:00
benvin	baba4ba26e	Merge pull request 'ghcr: allow k8up-io images through the docker remote' (#30) from benvin/k8up-images into main ... Reviewed-on: #30	2026-08-15 12:30:25 +10:00
benvin	05e8903207	Merge pull request 'Add valkey-operator artifactapi remotes' (#29) from benvin/valkey-operator-artifactapi into main ... Reviewed-on: #29	2026-08-15 12:13:03 +10:00
unkin-agent	01a09a229a	ghcr: allow k8up-io images through the docker remote ... The k8up operator (deployed via the k8up-system app) and its restic backup/prune/check jobs both run ghcr.io/k8up-io/k8up, which the containerd mirror only serves when the image path is allowlisted. - Add ^k8up-io/ to the ghcr remote patterns	2026-08-15 12:09:28 +10:00
unkin-agent	5b6af846b8	Add valkey-operator artifactapi remotes ... Adds a valkey helm remote and allowlists the operator/exporter images so the valkey-operator install in argocd-apps resolves everything through artifactapi. - Add config/remote_helm/valkey.yaml proxying https://valkey.io/valkey-helm - Add valkey to the virtual/helm member list - Allow ^valkey-io/ on the ghcr remote (operator image ghcr.io/valkey-io/valkey-operator) - Allow ^oliver006/redis_exporter on dockerhub (Valkey metrics exporter)	2026-08-15 12:06:00 +10:00
benvin	f822e463e1	Merge pull request 'Add k8up Helm remote to virtual helm proxy' (#28) from benvin/k8up-helm-remote into main ... Reviewed-on: #28	2026-08-13 23:41:41 +10:00
unkin-agent	c5ce67a5d1	Add k8up Helm remote to virtual helm proxy ... The k8up backup operator will be installed via ArgoCD, which pulls charts through the artifactapi virtual helm proxy. That proxy resolves only the remotes listed as members, so the upstream k8up repo must be registered. - Add config/remote_helm/k8up.yaml pointing at https://k8up-io.github.io/k8up - Register k8up as a member of the virtual helm repository	2026-08-13 23:31:59 +10:00
benvin	2c3f52181a	Merge pull request 'artifactapi module: plumb mirror_strategy on rpm/apk remotes' (#26) from benvin/mirror-strategy-config into main ... Reviewed-on: #26	2026-08-13 20:10:50 +10:00
unkin-agent	b8ee0ed385	artifactapi module: plumb mirror_strategy on rpm/apk(alpine) remotes ... Expose the provider v0.5.1 mirror_strategy field through the config module so rpm and alpine(apk) remotes can select how upstream mirrors are chosen (round_robin | least_conn) across base_url + mirrorlist. Completes the mirror IaC surface started in #24. - remote_rpm / remote_alpine object vars gain mirror_strategy = optional(string, null) - pass mirror_strategy through to the corresponding remote resources - provider constraint stays ~> 0.5 (already resolves v0.5.1, which adds the attr) Additive and optional; no real remote config changes.	2026-08-13 20:06:15 +10:00
benvin	a335dc75f8	Merge pull request 'add ghcr.io container remote (for ghp image pull-through)' (#25) from benvin/ghcr-remote into main ... Reviewed-on: #25	2026-08-13 20:02:33 +10:00
benvin	6c4b37ff17	Merge pull request 'artifactapi module: support mirrorlist on rpm/apk(alpine) remotes' (#24) from benvin/mirrorlist-config into main ... Reviewed-on: #24	2026-08-13 19:54:02 +10:00