kacerr/fuj-management
1
0
Fork 0
Code Issues Pull Requests Actions Packages Projects Releases Wiki Activity
191 Commits 52 Branches 41 Tags
cfdc5cbb2a2867a3bf525645d0c81345197fa265
Commit Graph
11 Commits
Author SHA1 Message Date
Jan NovakandClaude Sonnet 4.6 65e40d116b ci: temporarily skip CA cert for kubectl cluster config
Deploy to K8s / deploy (push) Successful in 7s
Details 
Co-Authored-By: Claude Sonnet 4.6 <noreply@anthropic.com>
 2026-03-01 23:45:32 +01:00
Jan NovakandClaude Sonnet 4.6 8842371f80 ci: add environment debug steps before and after Vault auth
Deploy to K8s / deploy (push) Failing after 11s
Details 
Co-Authored-By: Claude Sonnet 4.6 <noreply@anthropic.com>
 2026-03-01 23:44:33 +01:00
Jan NovakandClaude Sonnet 4.6 9769769c2c ci: add debug output to Kanidm token exchange step
Deploy to K8s / deploy (push) Failing after 7s
Details 
Capture HTTP status code and full response body separately so failures
show the actual error from the server instead of silently dying.

Co-Authored-By: Claude Sonnet 4.6 <noreply@anthropic.com>
 2026-03-01 23:39:00 +01:00
Jan NovakandClaude Sonnet 4.6 4ba6682000 ci: update Vault secret path for kanidm token
Deploy to K8s / deploy (push) Failing after 11s
Details 
Co-Authored-By: Claude Sonnet 4.6 <noreply@anthropic.com>
 2026-03-01 23:36:58 +01:00
Jan NovakandClaude Sonnet 4.6 ed8abc9b56 ci: remove dead OIDC steps, use repo secrets for AppRole auth
Deploy to K8s / deploy (push) Failing after 9s
Details 
Gitea doesn't implement Actions OIDC tokens yet. Drop the experimental
id_token steps and use VAULT_ROLE_ID/VAULT_SECRET_ID/K8S_CA_CERT as
standard Gitea repo secrets.

Co-Authored-By: Claude Sonnet 4.6 <noreply@anthropic.com>
 2026-03-01 23:30:39 +01:00
Jan NovakandClaude Sonnet 4.6 bed8e93b5d ci: fix unbound variable error for OIDC vars on stock Gitea
Deploy to K8s / deploy (push) Failing after 3s
Details 
Use ${VAR:-} default-empty syntax so set -u doesn't abort when
ACTIONS_ID_TOKEN_REQUEST_TOKEN/URL are absent (stock Gitea runners
don't set them).

Co-Authored-By: Claude Sonnet 4.6 <noreply@anthropic.com>
 2026-03-01 23:17:42 +01:00
Jan NovakandClaude Sonnet 4.6 695b08819a ci: use runner host env vars for Vault AppRole credentials
Deploy to K8s / deploy (push) Failing after 3s
Details 
Switch VAULT_ROLE_ID, VAULT_SECRET_ID, and K8S_CA_CERT from Gitea repo
secrets to shell env vars, which are injected via the runner host's
systemd EnvironmentFile — keeping credentials off Gitea entirely.

Co-Authored-By: Claude Sonnet 4.6 <noreply@anthropic.com>
 2026-03-01 23:11:33 +01:00
Jan Novak 4d0b89943d ci: some debugging ....
Deploy to K8s / deploy (push) Failing after 3s
Details
2026-03-01 23:06:38 +01:00
Jan NovakandClaude Sonnet 4.6 4a8a64f161 ci: add verbose debugging to Vault token step
Deploy to K8s / deploy (push) Failing after 7s
Details 
Split curl calls into separate variables and log intermediate
responses to stderr to identify which request is failing.
Added set -euxo pipefail for immediate failure visibility.

Co-Authored-By: Claude Sonnet 4.6 <noreply@anthropic.com>
 2026-03-01 22:56:27 +01:00
Jan Novak 01e8bb4406 ci: make kubernetes workflow run on push into any branch
Deploy to K8s / deploy (push) Failing after 11s
Details
2026-03-01 22:53:21 +01:00
Jan Novak cfaa2db88b ci: workflow that can get secret from vault and authenticate with it 
against kanidm to be able to connect to kubernetes cluster
 2026-03-01 22:51:12 +01:00