8 Commits

Include renames

Author	SHA1	Message	Date
Jan NovakandClaude Sonnet 4.6	ed8abc9b56	ci: remove dead OIDC steps, use repo secrets for AppRole auth ... Gitea doesn't implement Actions OIDC tokens yet. Drop the experimental id_token steps and use VAULT_ROLE_ID/VAULT_SECRET_ID/K8S_CA_CERT as standard Gitea repo secrets. Co-Authored-By: Claude Sonnet 4.6 <noreply@anthropic.com>	2026-03-01 23:30:39 +01:00
Jan NovakandClaude Sonnet 4.6	bed8e93b5d	ci: fix unbound variable error for OIDC vars on stock Gitea ... Use ${VAR:-} default-empty syntax so set -u doesn't abort when ACTIONS_ID_TOKEN_REQUEST_TOKEN/URL are absent (stock Gitea runners don't set them). Co-Authored-By: Claude Sonnet 4.6 <noreply@anthropic.com>	2026-03-01 23:17:42 +01:00
Jan NovakandClaude Sonnet 4.6	695b08819a	ci: use runner host env vars for Vault AppRole credentials ... Switch VAULT_ROLE_ID, VAULT_SECRET_ID, and K8S_CA_CERT from Gitea repo secrets to shell env vars, which are injected via the runner host's systemd EnvironmentFile — keeping credentials off Gitea entirely. Co-Authored-By: Claude Sonnet 4.6 <noreply@anthropic.com>	2026-03-01 23:11:33 +01:00
Jan Novak	4d0b89943d	ci: some debugging ....	2026-03-01 23:06:38 +01:00
Jan NovakandClaude Sonnet 4.6	4a8a64f161	ci: add verbose debugging to Vault token step ... Split curl calls into separate variables and log intermediate responses to stderr to identify which request is failing. Added set -euxo pipefail for immediate failure visibility. Co-Authored-By: Claude Sonnet 4.6 <noreply@anthropic.com>	2026-03-01 22:56:27 +01:00
Jan Novak	01e8bb4406	ci: make kubernetes workflow run on push into any branch	2026-03-01 22:53:21 +01:00
Jan Novak	cfaa2db88b	ci: workflow that can get secret from vault and authenticate with it ... against kanidm to be able to connect to kubernetes cluster	2026-03-01 22:51:12 +01:00
Jan NovakandAntigravity	3bfea4e0a4	feat: initial dashboard implementation and robust attendance parsing ... - Added a Makefile to easily run project scripts (fees, match, web, image) - Modified attendance.py to dynamically handle a variable number of header rows from the Google Sheet - Updated both attendance calculations and calculate_fees terminal output to show actual attendance counts (e.g., '750 CZK (3)') - Created a Flask web dashboard (app.py and templates/fees.html) to view member fees in an attractive, condensed, terminal-like UI - Bound the Flask server to port 5000 and added a routing alias from '/' to '/fees' - Configured Python virtual environment (.venv) creation directly into the Makefile to resolve global pip install errors on macOS Co-authored-by: Antigravity <antigravity@deepmind.com>	2026-02-27 13:20:42 +01:00