Renovate Bot
a3c92318b1
chore(deps): update helm release opencost to v2
renovate/stability-days Updates have met minimum release age requirement
scan.yaml / test (pull_request) Successful in 17s
AI Code Review / ai-review (pull_request) Successful in 25s
2026-09-30 00:10:32 +00:00
danijel.simeunovic
5960da5522
chore(deps): update all non-major dependencies
/ test (push) Has started running
scan.yaml / test (push) Failing after 13m4s
2026-09-29 00:18:26 +02:00
91c7a90d1b
chore(deps): update alpine docker tag to v3.24 ( #29 )
...
/ test (push) Failing after 10m45s
This PR contains the following updates:
| Package | Update | Change |
|---|---|---|
| [alpine](https://hub.docker.com/_/alpine ) ([source](https://github.com/alpinelinux/docker-alpine )) | minor | `3.20` → `3.24` |
---
### Configuration
📅 **Schedule**: (in timezone Europe/Oslo)
- Branch creation
- At any time (no schedule defined)
- Automerge
- At any time (no schedule defined)
🚦 **Automerge**: Disabled by config. Please merge this manually once you are satisfied.
♻ **Rebasing**: Whenever PR becomes conflicted, or you tick the rebase/retry checkbox.
🔕 **Ignore**: Close this PR and you won't be reminded about this update again.
---
- [ ] <!-- rebase-check -->If you want to rebase/retry this PR, check this box
---
This PR has been generated by [Mend Renovate CLI](https://github.com/renovatebot/renovate ).
<!--renovate-debug:eyJjcmVhdGVkSW5WZXIiOiI0NC4xMTIuMyIsInVwZGF0ZWRJblZlciI6IjQ0LjExMi4zIiwidGFyZ2V0QnJhbmNoIjoibWFpbiIsImxhYmVscyI6WyJyZW5vdmF0ZSJdfQ==-->
---------
Co-authored-by: Renovate Bot <renovate@forteapps.net >
Reviewed-on: #29
Reviewed-by: Danijel Simeunovic <danijel.simeunovic@fortedigital.com >
Co-authored-by: gitea_admin <admin@forteapps.net >
Co-committed-by: gitea_admin <admin@forteapps.net >
2026-09-25 05:40:40 +00:00
danijel.simeunovic
c1f4298bfe
renovate
/ test (push) Successful in 23s
2026-09-25 00:02:00 +02:00
danijel.simeunovic
14cabaf3f5
version bumps
/ test (push) Successful in 36s
2026-09-24 23:56:20 +02:00
danijel.simeunovic
809e90d12d
upgrade loki
/ test (push) Successful in 31s
2026-09-23 20:46:25 +00:00
danijel.simeunovic
eeb7321819
loki values
/ test (push) Failing after 11m2s
2026-09-23 20:20:19 +00:00
danijel.simeunovic
c47e89e02a
Update infra/values/base/loki-values.yaml
/ test (push) Successful in 11s
2026-09-16 17:17:12 +00:00
danijel.simeunovic
3bf6f22a4a
keycloak client cleanup: harden candidate selection
/ test (push) Successful in 8s
2026-09-04 12:05:23 +00:00
danijel.simeunovic
10f27fa3c4
harden client cleanup scheduling
...
/ test (push) Successful in 13s
timeZone: "Europe/Oslo"
startingDeadlineSeconds: 3600
2026-09-04 11:38:33 +00:00
gitea_admin
90ba7ac905
Keycloak: Run client cleanup once a month
/ test (push) Successful in 13s
2026-09-03 09:52:49 +00:00
gitea_admin
b616e59231
Increase min age for keycloak client cleanup
...
/ test (push) Successful in 13s
increase to 15 days min age
2026-09-03 07:26:30 +00:00
danijel.simeunovic
7f4a0bccf1
notify mail
2026-07-02 15:27:16 +02:00
danijel.simeunovic
9297398d56
gitea update
/ test (push) Successful in 8s
2026-06-11 13:03:59 +02:00
danijel.simeunovic
a70f078bbb
drop drop
2026-06-05 19:38:30 +02:00
b713ec853c
feat(apps): forte-drop web + mcp argocd apps (prod) ( #18 )
...
## Summary
ArgoCD Applications + Keycloak clients + sealed secret for forte-drop **web + mcp** (PROD).
## What changed
- **forte-drop** + **forte-drop-mcp** ArgoCD Applications (two-source: forte-helm chart + helm-prod-values).
- **namespace.yaml** — explicit `forte-drop` Namespace at sync-wave -1, `Prune=false` (avoids first-sync race for namespaced resources; doesn't cascade-delete on base removal).
- **keycloak-client-forte-drop** + **keycloak-client-forte-drop-mcp** — labeled config Secrets; the registrar creates the OIDC clients in the `forte` realm within ~2 min.
- **forte-drop-secrets** SealedSecret — UpCloud S3 creds (existing drops bucket) + PG creds + PASSWORD_GATE_SECRET. Consumed by both deployments + the pg-backup CronJob.
- **forte-drop-web PDB** — minAvailable 1 (selector verified against the live forteapp chart's pod labels).
- Wired into `apps/overlays/upc-dev` (NOT base → stays out of upc-prod).
## Post-merge manual step (one-time)
`auth-oidc` SealedSecret for the web sidecar is still commented out — it needs the `client-secret` the Keycloak registrar writes to `forte-drop-oidc-credentials` after first sync:
```bash
CLIENT_SECRET=$(kubectl -n forte-drop get secret forte-drop-oidc-credentials -o jsonpath='{.data.client-secret}' | base64 -d)
kubectl create secret generic auth-oidc -n forte-drop \
--from-literal=client-secret="$CLIENT_SECRET" \
--from-literal=cookie-secret="$(openssl rand -hex 32)" \
--dry-run=client -o yaml > private/auth-oidc.yaml
kubeseal --format=yaml --controller-name=sealed-secrets-controller --controller-namespace=kube-system \
< private/auth-oidc.yaml > apps/base/forte-drop/auth-oidc-sealed.yaml
# uncomment in kustomization, commit, push
```
## Depends on
- launchpad PR #17 (postgres + namespace via CreateNamespace).
- helm-prod-values forte-drop PR (values).
## Review
- [x] codex: namespace first-sync race → fixed (explicit namespace, sync-wave -1).
- [x] Keycloak registrar unblocked (stale chibisafe/minio config secrets removed; registrar green).
🤖 Generated with Claude Code
Co-authored-by: Sten <sten@Sten-sin-MacBook-Pro.local >
Co-authored-by: Sten <sten@Mac.domain_not_set.invalid>
Co-authored-by: Danijel Simeunovic <danijel.simeunovic@fortedigital.com >
Reviewed-on: #18
Reviewed-by: Danijel Simeunovic <danijel.simeunovic@fortedigital.com >
2026-06-04 18:47:08 +00:00
danijel.simeunovic
33f0463c1f
upc dev spec
2026-06-03 20:14:21 +02:00
danijel.simeunovic
a997a6b81e
kc cleanup
2026-06-03 17:41:10 +02:00
danijel.simeunovic
071f57f1d3
kc cleanup
2026-06-03 17:39:02 +02:00
danijel.simeunovic
ecf871f0e4
kc fix
2026-06-03 17:36:29 +02:00
danijel.simeunovic
376d81a5ac
keycloak client cleanup
2026-06-03 17:28:08 +02:00
danijel.simeunovic
e319295f62
bunker host
2026-05-29 22:06:08 +02:00
danijel.simeunovic
a7106bc8f4
new tls wildcard
2026-05-29 21:58:34 +02:00
jorgen.stensrud and Sten
396c771f59
feat(homepage): list forte_drop in Apps ( #16 )
...
Adds forte_drop as an external service entry in the upc-dev Homepage portal.
- Target host: https://drop.hackathon.forteapps.net (current Coolify deploy).
- One-line addition under `services > Apps` in `infra/values/upc-dev/homepage-values.yaml`.
- Will be retargeted to https://drop.forteapps.net once the K8s migration ships (spec in forte_drop repo: docs/superpowers/specs/2026-05-28-k8s-migration-design.md).
Zero risk — pure metadata, no cluster mutation beyond Homepage refresh.
Co-authored-by: Sten <sten@Mac.domain_not_set.invalid>
Reviewed-on: #16
Reviewed-by: Danijel Simeunovic <danijel.simeunovic@fortedigital.com >
2026-05-28 14:04:05 +00:00
danijel.simeunovic
c49d03d7f7
onlySSO
2026-05-16 23:04:11 +02:00
danijel.simeunovic
d47dba2ae5
signups
2026-05-16 22:12:04 +02:00
danijel.simeunovic
cf9eb47ecf
script fix
2026-05-16 22:08:56 +02:00
danijel.simeunovic
3eca723f05
diffs
2026-05-16 22:05:02 +02:00
danijel.simeunovic
f36996da11
script fix
2026-05-16 21:57:44 +02:00
danijel.simeunovic
6bf7db21d0
registrar error
2026-05-16 21:55:44 +02:00
danijel.simeunovic
2641d55784
scopes
2026-05-16 21:53:36 +02:00
danijel.simeunovic
117297effc
sso vw
2026-05-16 21:47:59 +02:00
danijel.simeunovic
fda90f9e01
adminToken enc
2026-05-16 21:34:34 +02:00
danijel.simeunovic
1124377d97
adminToken
2026-05-16 21:29:14 +02:00
danijel.simeunovic
c0710b89bb
no signup
2026-05-16 21:15:38 +02:00
danijel.simeunovic
d7bda18aea
domain
2026-05-16 21:11:17 +02:00
danijel.simeunovic
2796e1b9d3
name
2026-05-16 21:09:04 +02:00
danijel.simeunovic
d7a0c26117
icon
2026-05-16 21:08:36 +02:00
danijel.simeunovic
693f2f9168
homepage
2026-05-16 21:07:29 +02:00
danijel.simeunovic
2509ef062c
domain restriction
2026-05-16 20:58:00 +02:00
danijel.simeunovic
957757e557
host
2026-05-16 20:51:44 +02:00
danijel.simeunovic
070799da05
bitw
2026-05-16 20:49:25 +02:00
danijel.simeunovic
1a2817e537
domain fix
2026-05-16 20:42:17 +02:00
danijel.simeunovic
b47b0035f5
smtp auth
2026-05-16 20:38:21 +02:00
danijel.simeunovic
d3fac4d43e
smtp port
2026-05-16 20:34:22 +02:00
danijel.simeunovic
c37bd3ef04
from
2026-05-16 20:30:32 +02:00
danijel.simeunovic
ad661ba3dd
allow signup
2026-05-16 20:27:36 +02:00
danijel.simeunovic
a9625f96e6
db secrets
2026-05-16 20:23:58 +02:00
danijel.simeunovic
cb64edc927
cleanup
2026-05-16 20:18:48 +02:00
danijel.simeunovic
ac1c242fb9
kust
2026-05-16 20:17:14 +02:00
Renovate Bot
danijel.simeunovic
