Add kubernetes rpm remote (pkgs.k8s.io stable v1.33)

Claude-Session: https://claude.ai/code/session_015ur3i7D2azsMAWTSVABApv
2026-07-30 21:08:52 +10:00
18 changed files with 5 additions and 95 deletions
@@ -1,8 +1,6 @@
 when:
  - event: push
    branch: main
-  - event: manual
-    branch: main

 steps:
  - name: apply
@@ -21,7 +21,7 @@ init:

 plan: init
 	@$(call vault_env) && \
-	terragrunt run --all --parallelism 4 --non-interactive plan -- -lock=false
+	terragrunt run --all --parallelism 4 --non-interactive plan

 apply: init
 	@$(call vault_env) && \
@@ -1,2 +0,0 @@
---
-description: "Jellyfin plugin zips built in-house (JPRM release archives published on tag)"
@@ -1,2 +0,0 @@
---
-description: "Neovim plugin release archives (<plugin>-<version>.zip) installed by arti-pack"
@@ -28,9 +28,7 @@ patterns:
  - "^jfrog/"
  - "^jpgouin/"
  - "^kanidm/"
-  - "^linuxserver/"
  - "^natsio/"
-  - "^oliver006/redis_exporter"
  - "^osixia/"
  - "^rancher/"
  - "^rspamd/rspamd"
@@ -3,18 +3,14 @@ description: GitHub Container Registry
 immutable_ttl: 0
 mutable_ttl: 300
 patterns:
-  - "^arabcoders/watchstate"
  - "^cloudnative-pg/"
  - "^dexidp/"
  - "^emberstack/helm-charts"
  - "^fallenbagel/"
  - "^goauthentik/"
-  - "^goodtune/ghp"
  - "^home-operations/"
  - "^jellyfin/"
-  - "^k8up-io/"
  - "^netbox-community/"
-  - "^oauth2-proxy/"
  - "^onedr0p/"
  - "^open-webui/open-webui"
  - "^openvoxproject/"
@@ -22,6 +18,5 @@ patterns:
  - "^plexguide/"
  - "^stakater/reloader"
  - "^stalwartlabs/stalwart"
-  - "^valkey-io/"
  - "^voxpupuli/puppetboard"
  - "^woodpecker-ci/helm"
@@ -5,5 +5,4 @@ mutable_ttl: 300
 patterns:
  - "^autoscaling/vpa-"
  - "^external-dns/external-dns"
-  - "^kube-state-metrics/"
  - "^sig-storage/"
@@ -7,4 +7,3 @@ patterns:
  - "^brancz/kube-rbac-proxy"
  - "^cephcsi/cephcsi"
  - "^jetstack/cert-manager-"
-  - "^oauth2-proxy/"
@@ -1,6 +0,0 @@
-base_url: https://git.unkin.net
-description: Internal Gitea unkin tag source archives
-immutable_ttl: 0
-mutable_ttl: 7200
-patterns:
-  - "^unkin/[^/]+/archive/refs/tags/[^/]+\\.zip$"
@@ -3,53 +3,16 @@ description: GitHub releases and files
 immutable_ttl: 0
 mutable_ttl: 7200
 mutable_patterns:
-  # Branch archives of tagless Neovim plugins; a branch ref moves, so these
-  # revalidate on mutable_ttl instead of caching immutably.
-  - "^HampusHauffman/block\\.nvim/archive/refs/heads/main\\.(zip|tar\\.gz)$"
-  - "^hrsh7th/cmp-buffer/archive/refs/heads/main\\.(zip|tar\\.gz)$"
-  - "^hrsh7th/cmp-nvim-lsp/archive/refs/heads/main\\.(zip|tar\\.gz)$"
-  - "^hrsh7th/cmp-nvim-lsp-signature-help/archive/refs/heads/main\\.(zip|tar\\.gz)$"
-  - "^hrsh7th/cmp-nvim-lua/archive/refs/heads/main\\.(zip|tar\\.gz)$"
-  - "^hrsh7th/cmp-path/archive/refs/heads/main\\.(zip|tar\\.gz)$"
-  - "^hrsh7th/cmp-vsnip/archive/refs/heads/main\\.(zip|tar\\.gz)$"
-  - "^hrsh7th/vim-vsnip/archive/refs/heads/master\\.(zip|tar\\.gz)$"
-  - "^junegunn/gv\\.vim/archive/refs/heads/master\\.(zip|tar\\.gz)$"
-  - "^jvirtanen/vim-hcl/archive/refs/heads/main\\.(zip|tar\\.gz)$"
-  - "^Mofiqul/dracula\\.nvim/archive/refs/heads/main\\.(zip|tar\\.gz)$"
-  - "^numToStr/FTerm\\.nvim/archive/refs/heads/master\\.(zip|tar\\.gz)$"
-  - "^qvalentin/helm-ls\\.nvim/archive/refs/heads/main\\.(zip|tar\\.gz)$"
-  - "^rafamadriz/friendly-snippets/archive/refs/heads/main\\.(zip|tar\\.gz)$"
+  - ".*/archive/refs/heads/.*.tar.gz$"
  - "stalwartlabs/webadmin/releases/latest/download/webadmin.zip$"
  # iplocate IP databases (Git-LFS; the /raw/ path redirects to the LFS media host).
  - "iplocate/ip-address-databases/raw/.*/ip-to-asn/.*"
  - "iplocate/ip-address-databases/raw/.*/ip-to-country/.*"
 patterns:
-  # Branch archives of Neovim plugins that publish no tags. patterns is a
-  # strict allowlist checked before mutable_patterns, so each repo must be
-  # listed in both. Anchored per repo: matching is a substring search, so an
-  # unanchored entry would also admit evil/<owner>/<repo>/....
-  - "^HampusHauffman/block\\.nvim/archive/refs/heads/main\\.(zip|tar\\.gz)$"
-  - "^hrsh7th/cmp-buffer/archive/refs/heads/main\\.(zip|tar\\.gz)$"
-  - "^hrsh7th/cmp-nvim-lsp/archive/refs/heads/main\\.(zip|tar\\.gz)$"
-  - "^hrsh7th/cmp-nvim-lsp-signature-help/archive/refs/heads/main\\.(zip|tar\\.gz)$"
-  - "^hrsh7th/cmp-nvim-lua/archive/refs/heads/main\\.(zip|tar\\.gz)$"
-  - "^hrsh7th/cmp-path/archive/refs/heads/main\\.(zip|tar\\.gz)$"
-  - "^hrsh7th/cmp-vsnip/archive/refs/heads/main\\.(zip|tar\\.gz)$"
-  - "^hrsh7th/vim-vsnip/archive/refs/heads/master\\.(zip|tar\\.gz)$"
-  - "^junegunn/gv\\.vim/archive/refs/heads/master\\.(zip|tar\\.gz)$"
-  - "^jvirtanen/vim-hcl/archive/refs/heads/main\\.(zip|tar\\.gz)$"
-  - "^Mofiqul/dracula\\.nvim/archive/refs/heads/main\\.(zip|tar\\.gz)$"
-  - "^numToStr/FTerm\\.nvim/archive/refs/heads/master\\.(zip|tar\\.gz)$"
-  - "^qvalentin/helm-ls\\.nvim/archive/refs/heads/main\\.(zip|tar\\.gz)$"
-  - "^rafamadriz/friendly-snippets/archive/refs/heads/main\\.(zip|tar\\.gz)$"
  - ".*/archive/refs/tags/.*.tar.gz$"
-  - ".*/archive/refs/tags/.*\\.zip$"
-  - "9p4/jellyfin-plugin-sso/.*/sso-authentication_.*.zip$"
  - "ahmetb/kubectx/.*/kubectx_.*_linux_x86_64.tar.gz$"
  - "ahmetb/kubectx/.*/kubens_.*_linux_x86_64.tar.gz$"
  - "apple/foundationdb/.*/libfdb_c.x86_64.so$"
-  - "argoproj/argo-cd/.*/argocd-linux-amd64$"
-  - "argoproj/argo-cd/.*/cli_checksums.txt$"
  - "astral-sh/ruff/.*/ruff-x86_64-unknown-linux-gnu.tar.gz$"
  - "astral-sh/uv/.*/uv-x86_64-unknown-linux-gnu.tar.gz$"
  - "camptocamp/prometheus-puppetdb-exporter/.*/prometheus-puppetdb-exporter-.*.linux-amd64.tar.gz$"
@@ -70,8 +33,6 @@ patterns:
  - "iplocate/ip-address-databases/raw/.*/ip-to-asn/.*"
  - "iplocate/ip-address-databases/raw/.*/ip-to-country/.*"
  - "jesseduffield/lazydocker/.*/lazydocker_.*_Linux_x86_64.tar.gz$"
-  - "JohnnyMorganz/StyLua/.*/stylua-linux-x86_64\\.zip$"
-  - "JohnnyMorganz/StyLua/.*/stylua-linux-x86_64-musl\\.zip$"
  - "kubecolor/kubecolor/.*/kubecolor_.*_linux_amd64.tar.gz$"
  - "kubernetes-sigs/gateway-api/.*/standard-install.yaml$"
  - "kubernetes-sigs/kustomize/.*/kustomize_.*_linux_amd64.tar.gz$"
@@ -1,6 +0,0 @@
-base_url: https://repo.jellyfin.org
-description: Jellyfin official plugin repository
-immutable_ttl: 0
-mutable_ttl: 7200
-patterns:
-  - "files/plugin/ldap-authentication/ldap-authentication_.*.zip$"
@@ -1,7 +0,0 @@
-base_url: https://k8up-io.github.io/k8up
-description: K8up backup operator Helm charts
-immutable_ttl: 0
-mutable_ttl: 3600
-check_mutable: true
-immutable_patterns:
-  - "\\.tgz$"
@@ -1,7 +0,0 @@
-base_url: https://valkey.io/valkey-helm
-description: Valkey Helm charts (valkey-operator)
-immutable_ttl: 0
-mutable_ttl: 3600
-check_mutable: true
-immutable_patterns:
-  - "\\.tgz$"
@@ -1,5 +1,5 @@
-base_url: "https://pkgs.k8s.io/core:/stable:"
-description: Kubernetes upstream RPMs (kubectl/kubeadm/kubelet); version-agnostic, consumers pick the minor via path (e.g. v1.33/rpm)
+base_url: https://pkgs.k8s.io/core:/stable:/v1.33/rpm
+description: Kubernetes upstream RPMs (kubectl/kubeadm/kubelet), stable v1.33 channel
 immutable_ttl: 0
 mutable_ttl: 7200
 immutable_patterns:
@@ -10,11 +10,9 @@ members:
  - hashicorp-helm
  - intel-helm
  - jetstack
-  - k8up
  - purelb
  - rancher-stable
  - stakater
  - traefik
-  - valkey
  - victoriametrics
  - argo-helm
@@ -9,8 +9,6 @@ resource "artifactapi_remote_alpine" "this" {
  immutable_patterns = each.value.immutable_patterns
  mutable_patterns   = each.value.mutable_patterns
  stale_on_error     = each.value.stale_on_error
-  mirrorlist         = each.value.mirrorlist
-  mirror_strategy    = each.value.mirror_strategy
 }

 resource "artifactapi_remote_docker" "this" {
@@ -76,8 +74,6 @@ resource "artifactapi_remote_rpm" "this" {
  immutable_patterns = each.value.immutable_patterns
  mutable_patterns   = each.value.mutable_patterns
  stale_on_error     = each.value.stale_on_error
-  mirrorlist         = each.value.mirrorlist
-  mirror_strategy    = each.value.mirror_strategy
 }

 resource "artifactapi_remote_pypi" "this" {
@@ -8,8 +8,6 @@ variable "remote_alpine" {
    immutable_patterns = optional(list(string), [])
    mutable_patterns   = optional(list(string), [])
    stale_on_error     = optional(bool, true)
-    mirrorlist         = optional(list(string), [])
-    mirror_strategy    = optional(string, null)
  }))
  default = {}
 }
@@ -80,8 +78,6 @@ variable "remote_rpm" {
    immutable_patterns = optional(list(string), [])
    mutable_patterns   = optional(list(string), [])
    stale_on_error     = optional(bool, true)
-    mirrorlist         = optional(list(string), [])
-    mirror_strategy    = optional(string, null)
  }))
  default = {}
 }
@@ -3,7 +3,7 @@ terraform {
  required_providers {
    artifactapi = {
      source  = "artifactapi.k8s.syd1.au.unkin.net/terraform-unkin/artifactapi"
-      version = "~> 0.5"
+      version = "0.1.4"
    }
  }
 }