Block a user
unkinben
pushed to benvin/issue-326-reloader-secrets at unkin/argocd-apps
2026-08-08 18:40:41 +10:00
Woodpecker k8s runner: trust the internal CA so buildx can push to artifactapi
Reopening — this was closed without a resolving PR, but the assessment above confirms it's still required (the x509 blocker is real and ~11 per-repo push PRs remain blocked). Like #323, it's not…
Woodpecker k8s runner: trust the internal CA so buildx can push to artifactapi
Woodpecker k8s runner: trust the internal CA so buildx can push to artifactapi
Woodpecker k8s runner: trust the internal CA so buildx can push to artifactapi
Assessment — not actionable in argocd-apps, recommend close
The x509 problem is still real: artifactapi.k8s.syd1.au.unkin.net still serves a vault-issuer (internal PKI) cert…
lldpd: run on physicals and expose neighbour topology as the lldp fact
pdbmux backfill: consume the puppet lldp fact to populate NetBox switch/port cabling
Decommission the legacy standalone ceph-csi namespace
Assessment: STILL REQUIRED — but this is not an argocd-apps change
Verified against live cluster (read-only) + git main.
**Legacy ceph-csi is real, active, and unmanaged by Argo…
Fix kea CrashLoopBackOff: drop DHCP ntp hostnames, bump to v0.1.1
fix: preload correct rke2 airgap images to break CNI bootstrap deadlock