Add logarchiver repository #47

2026-07-27T21:37:18+10:00

unkinben commented

2026-07-27 21:37:18 +10:00

Why

The centralized logging stack (argocd-apps #296) archives raw logs with a plain Vector consumer (gzip NDJSON to Ceph RGW). We need to outgrow that: zstd compression, OpenPGP encryption with a key held in the Vault GPG secrets engine, and a searchable index over the archived objects ("vault logs from host X between dates Y and Z"). logarchiver is a new Go k8s service + CLI that replaces the Vector archiver leg and provides that index/retrieval. This PR registers the Gitea repo so the code can land.

What changed

Add config/git.unkin.net/unkin/repository/logarchiver.yaml, modeled on the existing Go-service repo entries (encapi, cephrgw-operator): public repo, main default branch, squash merges with delete-branch-after-merge, and branch protection on main requiring the woodpecker pre-commit/test/build PR checks with benvin on the approval whitelist.

https://claude.ai/code/session_015ur3i7D2azsMAWTSVABApv

## Why The centralized logging stack (argocd-apps #296) archives raw logs with a plain Vector consumer (gzip NDJSON to Ceph RGW). We need to outgrow that: zstd compression, OpenPGP encryption with a key held in the Vault GPG secrets engine, and a searchable index over the archived objects ("vault logs from host X between dates Y and Z"). `logarchiver` is a new Go k8s service + CLI that replaces the Vector archiver leg and provides that index/retrieval. This PR registers the Gitea repo so the code can land. ## What changed - Add `config/git.unkin.net/unkin/repository/logarchiver.yaml`, modeled on the existing Go-service repo entries (encapi, cephrgw-operator): public repo, `main` default branch, squash merges with delete-branch-after-merge, and branch protection on `main` requiring the woodpecker `pre-commit`/`test`/`build` PR checks with `benvin` on the approval whitelist. https://claude.ai/code/session_015ur3i7D2azsMAWTSVABApv

unkinben added 1 commit 2026-07-27 21:37:19 +10:00

Add logarchiver repository

ci/woodpecker/pr/plan Pipeline was successful

Details

ci/woodpecker/pr/pre-commit Pipeline was successful

Details

9cee6024d3

Registers the logarchiver Gitea repo: a k8s Go service that archives
raw logs from NATS JetStream to S3 as zstd-compressed, GPG-encrypted,
indexed objects, plus a CLI to search and retrieve them. It replaces the
Vector archiver leg of the centralized logging stack (argocd-apps #296)
with zstd compression, OpenPGP encryption keyed from the Vault GPG
secrets engine, and a ClickHouse-backed searchable index.

- Add config/git.unkin.net/unkin/repository/logarchiver.yaml modeled on
  the existing Go-service repos (encapi, cephrgw-operator): public repo,
  main default branch, squash merges, branch protection requiring the
  woodpecker pre-commit/test/build PR checks with benvin approval.

Claude-Session: https://claude.ai/code/session_015ur3i7D2azsMAWTSVABApv

benvin merged commit c068f56eca into main

2026-07-27 21:48:25 +10:00

benvin deleted branch benvin/logarchiver-repo

2026-07-27 21:48:25 +10:00

Sign in to join this conversation.

1 Participants

Notifications

Due Date

No due date set.

Dependencies

No dependencies set.

Reference: unkin/terraform-git#47