Commit Graph

80 Commits

Author SHA1 Message Date
unkin-agent b867ccf8b0 Merge remote-tracking branch 'origin/main' into benvin/alpine
ci/woodpecker/pr/pre-commit Pipeline was successful
ci/woodpecker/pr/plan Pipeline was successful
# Conflicts:
#	environments/artifactapi.k8s.syd1.au.unkin.net/terragrunt.hcl
2026-10-24 18:34:49 +11:00
unkin-agent 68f42acae6 Add alpine-internal local and alpine-custom virtual
ci/woodpecker/pr/pre-commit Pipeline was successful
ci/woodpecker/pr/plan Pipeline was successful
2026-10-24 17:43:05 +11:00
unkin-agent e3129a4356 Merge remote-tracking branch 'origin/main' into benvin/vcs 2026-10-24 17:24:55 +11:00
unkin-agent 3ace41b48a drop github-vcs remote; wire the kind only
ci/woodpecker/pr/plan Pipeline failed
ci/woodpecker/pr/pre-commit Pipeline failed
2026-10-24 17:05:31 +11:00
unkin-agent 6fb5191d9a Add vcs remote for GitHub archives and release assets
ci/woodpecker/pr/plan Pipeline failed
ci/woodpecker/pr/pre-commit Pipeline failed
2026-10-24 16:37:17 +11:00
unkin-agent 2bf1240e70 add cnpg and orca github deb remotes to deb-custom
ci/woodpecker/pr/plan Pipeline was successful
ci/woodpecker/pr/pre-commit Pipeline was successful
2026-10-20 22:45:56 +11:00
unkin-agent 03baa38a84 Add deb-internal local and deb-custom virtual
ci/woodpecker/pr/pre-commit Pipeline was successful
ci/woodpecker/pr/plan Pipeline was successful
2026-10-20 22:44:10 +11:00
unkin-agent 560c6bee91 Add puppet remote, local and virtual
ci/woodpecker/pr/plan Pipeline failed
ci/woodpecker/pr/pre-commit Pipeline failed
2026-10-20 00:17:19 +11:00
unkin-agent 54c8caa359 Add goproxy local and virtual
ci/woodpecker/pr/plan Pipeline failed
ci/woodpecker/pr/pre-commit Pipeline failed
2026-10-18 21:03:43 +11:00
unkin-agent 53407489a8 Add ansible remote, local and virtual
ci/woodpecker/pr/plan Pipeline failed
ci/woodpecker/pr/pre-commit Pipeline failed
2026-10-18 03:46:34 +11:00
unkin-agent 9c1851b497 Lower rubygems mutable_ttl to 300s
ci/woodpecker/pr/plan Pipeline failed
ci/woodpecker/pr/pre-commit Pipeline failed
2026-10-18 01:15:26 +11:00
unkin-agent 9765097f80 Add gems remote, local and virtual
ci/woodpecker/pr/plan Pipeline failed
ci/woodpecker/pr/pre-commit Pipeline failed
2026-10-18 00:47:19 +11:00
unkin-agent 2aa0e3a3bb Add local npm kind and npm virtual
ci/woodpecker/pr/plan Pipeline was successful
ci/woodpecker/pr/pre-commit Pipeline was successful
2026-10-17 17:01:41 +11:00
benvin ea574515e5 Merge pull request 'Add local helm repository kind' (#65) from benvin/local-helm-kind into main
ci/woodpecker/push/apply Pipeline was successful
Reviewed-on: #65
2026-10-17 16:35:08 +11:00
unkin-agent 527a8f2fe3 Restrict orca pattern to real rpm/deb assets; sort orca member
ci/woodpecker/pr/plan Pipeline was successful
ci/woodpecker/pr/pre-commit Pipeline was successful
2026-10-17 15:27:02 +11:00
unkin-agent e004eb5845 Add orca and cloudnative-pg GitHub-release rpm and deb remotes
ci/woodpecker/pr/plan Pipeline was successful
ci/woodpecker/pr/pre-commit Pipeline was successful
2026-10-17 15:25:00 +11:00
unkin-agent 3446a861c8 Add local_helm kind with helm-internal as first helm virtual member
ci/woodpecker/pr/plan Pipeline failed
ci/woodpecker/pr/pre-commit Pipeline failed
2026-10-17 15:12:09 +11:00
unkin-agent 29fc4b6655 Add rspamd RPM remote
ci/woodpecker/pr/plan Pipeline was successful
ci/woodpecker/pr/pre-commit Pipeline was successful
2026-10-12 22:46:01 +11:00
unkin-agent 3c97135e77 Allow mail stack images through dockerhub and k8s-registry remotes
ci/woodpecker/pr/pre-commit Pipeline was successful
ci/woodpecker/pr/plan Pipeline was successful
2026-10-12 22:20:10 +11:00
unkin-agent 8fe5f74afd Allow the ClamAV image through the dockerhub remote
ci/woodpecker/pr/plan Pipeline was successful
ci/woodpecker/pr/pre-commit Pipeline was successful
The mail namespace runs clamd + freshclam from clamav/clamav on Docker Hub
via the artifactapi mirror. Add it to the dockerhub allowlist.

- add "^clamav/clamav" to config/remote_docker/dockerhub.yaml patterns
2026-10-12 21:49:42 +11:00
benvin 8345a0e23e Merge pull request 'Add rpm-custom virtuals per distro' (#60) from benvin/rpm-custom-virtuals into main
ci/woodpecker/push/apply Pipeline was successful
Reviewed-on: #60
2026-10-09 23:38:37 +11:00
unkin-agent 66177b5017 Add rpm-custom virtuals per distro
ci/woodpecker/pr/pre-commit Pipeline was successful
ci/woodpecker/pr/plan Pipeline was successful
2026-10-09 22:17:36 +11:00
unkin-agent c2acde9f66 Add crates-io cargo remote
ci/woodpecker/pr/pre-commit Pipeline was successful
ci/woodpecker/pr/plan Pipeline was successful
2026-10-09 22:17:08 +11:00
unkin-agent 09870e9040 Add remote_cargo config kind
ci/woodpecker/pr/pre-commit Pipeline was successful
ci/woodpecker/pr/plan Pipeline was successful
2026-10-09 22:16:28 +11:00
unkin-agent ae8be9f569 Add npmjs npm remote
ci/woodpecker/pr/plan Pipeline was successful
ci/woodpecker/pr/pre-commit Pipeline was successful
2026-10-09 19:31:34 +11:00
unkin-agent 35c7d1d224 Add remote_npm config kind
ci/woodpecker/pr/plan Pipeline was successful
ci/woodpecker/pr/pre-commit Pipeline was successful
2026-10-09 19:30:17 +11:00
benvin cf2d16268b Merge pull request 'allow envoy release assets on github remote' (#53) from benvin/github-envoy into main
ci/woodpecker/push/apply Pipeline was successful
Reviewed-on: #53
2026-10-09 19:27:10 +11:00
unkin-agent c3a96e5fa2 Drop storytold-artcraft remotes and fix apt description grammar
ci/woodpecker/pr/plan Pipeline was successful
ci/woodpecker/pr/pre-commit Pipeline was successful
2026-10-09 19:18:58 +11:00
unkin-agent 6396c80eaa Add storytold GitHub-release rpm and deb remotes
ci/woodpecker/pr/plan Pipeline was successful
ci/woodpecker/pr/pre-commit Pipeline was successful
2026-10-09 19:09:17 +11:00
unkin-agent c1c1c9d553 Add remote_github_rpm and remote_github_deb config kinds
ci/woodpecker/pr/pre-commit Pipeline was successful
ci/woodpecker/pr/plan Pipeline was successful
2026-10-09 19:08:28 +11:00
unkin-agent 9759f059ea allow envoy release binary and checksums on github remote
ci/woodpecker/pr/plan Pipeline was successful
ci/woodpecker/pr/pre-commit Pipeline was successful
2026-10-07 11:47:31 +11:00
unkin-agent 37688d237a allow kubectl plugin release assets in github remote
ci/woodpecker/pr/plan Pipeline was successful
ci/woodpecker/pr/pre-commit Pipeline was successful
2026-10-02 23:43:54 +10:00
unkin-agent 69c9938c64 feat: allow kubectl-cnpg release assets through the github remote
ci/woodpecker/pr/plan Pipeline was successful
ci/woodpecker/pr/pre-commit Pipeline was successful
2026-10-02 23:18:19 +10:00
unkin-agent 0e1add0d43 Allow victoria-metrics-k8s-stack dashboard sources on github_user
ci/woodpecker/pr/pre-commit Pipeline was successful
ci/woodpecker/pr/plan Pipeline was successful
2026-10-02 22:48:08 +10:00
unkin-agent e8c09807ae feat: add jellyfin-plugins local generic repo 2026-09-19 17:42:00 +10:00
unkin-agent f0e63a091e feat: allow argocd CLI release assets through the github remote
ci/woodpecker/pr/plan Pipeline was successful
ci/woodpecker/pr/pre-commit Pipeline was successful
2026-09-19 16:22:41 +10:00
unkin-agent d7542d8fe2 Narrow GitHub branch archives to named repos
ci/woodpecker/pr/plan Pipeline was successful
ci/woodpecker/pr/pre-commit Pipeline was successful
The wildcard heads entries admitted a branch archive from any repository
on GitHub. patterns is the admission allowlist, so only the repos that
need a branch install belong in it.

- Replace the wildcard heads entries with one anchored entry per repo
- Cover the 14 Neovim plugins that publish no tags, zip and tar.gz
- List each repo in both patterns and mutable_patterns
2026-09-11 23:34:12 +10:00
unkin-agent b76fddecb9 Allow GitHub branch archives through the github remote
ci/woodpecker/pr/plan Pipeline was successful
ci/woodpecker/pr/pre-commit Pipeline was successful
patterns is a strict allowlist evaluated before mutable_patterns, so
/archive/refs/heads/ downloads are denied despite the mutable entry.

- Add heads .zip and .tar.gz to patterns
- Add heads .zip to mutable_patterns and escape the tar.gz dots
2026-09-11 23:26:29 +10:00
unkin-agent 20838caa8f Add gitea generic remote for internal tag archives
ci/woodpecker/pr/pre-commit Pipeline was successful
ci/woodpecker/pr/plan Pipeline was successful
Proxy unkin tag source zips from git.unkin.net through artifactapi.
2026-09-09 23:32:31 +10:00
benvin 00a931ed35 Merge pull request 'Allow stylua linux release assets through the github remote' (#42) from benvin/stylua-release-asset into main
ci/woodpecker/push/apply Pipeline was successful
Reviewed-on: #42
2026-09-09 22:36:12 +10:00
unkin-agent 901aaf1f1f Add nvim-plugins local generic repo
ci/woodpecker/pr/pre-commit Pipeline was successful
ci/woodpecker/pr/plan Pipeline was successful
Receives Neovim plugin release archives for arti-pack installs.
2026-09-09 21:12:00 +10:00
unkin-agent e7c4c76002 Allow stylua linux release assets through the github remote
ci/woodpecker/pr/plan Pipeline was successful
ci/woodpecker/pr/pre-commit Pipeline was successful
2026-09-09 21:05:06 +10:00
unkin-agent 888e3e84ce Allow GitHub tag zip archives through the github remote
ci/woodpecker/pr/plan Pipeline was successful
ci/woodpecker/pr/pre-commit Pipeline was successful
2026-09-07 23:49:10 +10:00
unkin-agent 11c3059b05 Add artifactapi remotes for jellyfin-ha auth plugins
ci/woodpecker/pr/plan Pipeline was successful
ci/woodpecker/pr/pre-commit Pipeline was successful
jellyfin-ha bakes the LDAP and SSO auth plugins into its image, and all
outside artifacts must be fetched via artifactapi rather than direct.

- Add remote_generic/jellyfin.yaml proxying repo.jellyfin.org, scoped to
  the ldap-authentication plugin zip.
- Add a github.yaml pattern for 9p4/jellyfin-plugin-sso release zips
  (GitHub redirects release downloads to objects.githubusercontent.com,
  which the existing github remote already follows).
2026-08-26 23:23:27 +10:00
unkin-agent b776d16a9c Narrow arabcoders allow-pattern to watchstate per review
ci/woodpecker/pr/plan Pipeline was successful
ci/woodpecker/pr/pre-commit Pipeline was successful
2026-08-24 21:37:30 +10:00
unkin-agent 5596088c57 Allow ghcr.io/arabcoders/watchstate via artifactapi
ci/woodpecker/pr/plan Pipeline was successful
ci/woodpecker/pr/pre-commit Pipeline was successful
Add arabcoders pattern to ghcr remote to enable pulling watchstate
image through artifactapi for media watch-state sync deployment.
2026-08-24 21:22:58 +10:00
unkin-agent 35b44f3956 Allow kube-state-metrics through the k8s-registry docker remote
ci/woodpecker/pr/pre-commit Pipeline was successful
ci/woodpecker/pr/plan Pipeline was successful
2026-08-23 21:32:05 +10:00
unkin-agent 62c8307c08 quay remote: allowlist oauth2-proxy images
ci/woodpecker/pr/plan Pipeline was successful
ci/woodpecker/pr/pre-commit Pipeline was successful
Adds the ^oauth2-proxy/ pattern to the quay.io remote so the
artifactapi caching proxy will serve quay.io/oauth2-proxy/oauth2-proxy.
Needed so the arrproxy oauth2-proxy sidecar can pull the real upstream
quay.io address via the rke2 registries.yaml mirror.
2026-08-17 20:43:43 +10:00
unkin-agent f68de9283b ghcr: allowlist oauth2-proxy for the arrproxy sidecar
ci/woodpecker/pr/plan Pipeline was successful
ci/woodpecker/pr/pre-commit Pipeline was successful
2026-08-16 16:25:43 +10:00
unkin-agent 8e88642bfa fix(fedora): repoint remote to gsl-syd (rackspace dropped F44)
ci/woodpecker/pr/plan Pipeline was successful
ci/woodpecker/pr/pre-commit Pipeline was successful
Rackspace (syd.mirror.rackspace.com) never synced Fedora 44: it serves
releases/43 but 404s on releases/44/.../repomd.xml, breaking dnf makecache
for F44 through the caching proxy. Repoint to gsl-syd.mm.fcix.net, a
Sydney-local FCIX tier-1 mirror that is fully synced for F44 (releases +
updates + Packages, verified 200, ~25ms), using the standard
/fedora/linux layout root.
2026-08-15 15:25:13 +10:00