finn/homelab
Watch
2
0
Fork
You've already forked homelab
 0
Code Issues Pull requests Projects Releases Packages Wiki Activity Actions

Simplify preview bootstrap credentials and GitOps #28

Merged
finn merged 1 commit from feat/preview-bootstrap-oidc-gitops into main 2026-10-27 07:10:19 +00:00
Conversation 0 Commits 1 Files changed 9 +471 -33
finn commented 2026-10-27 07:07:31 +00:00
Owner

Summary

  • Use Forgejo Actions OIDC to retrieve central bootstrap credentials from OpenBao.
  • Move generated preview AppProjects and certificate Applications into an Argo-managed GitOps tree.
  • Add a dedicated Argo bootstrap account scoped to preview projects; keep per-repository application tokens isolated.
  • Document one-time OpenBao setup and add focused tests.

Validation

  • Preview workflow and bootstrap tests: 21 passed.
  • Terraform formatting and validation passed.
  • Reviewed and applied plan: 1 added, 1 changed, 0 destroyed.

The platform root Application is deployed and will sync its GitOps path once this PR is merged to the main branch.

## Summary - Use Forgejo Actions OIDC to retrieve central bootstrap credentials from OpenBao. - Move generated preview AppProjects and certificate Applications into an Argo-managed GitOps tree. - Add a dedicated Argo bootstrap account scoped to preview projects; keep per-repository application tokens isolated. - Document one-time OpenBao setup and add focused tests. ## Validation - Preview workflow and bootstrap tests: 21 passed. - Terraform formatting and validation passed. - Reviewed and applied plan: 1 added, 1 changed, 0 destroyed. The platform root Application is deployed and will sync its GitOps path once this PR is merged to the main branch.
feat: simplify preview bootstrap credentials
All checks were successful
terraform / check (pull_request) Successful in 19s
Details
terraform / check (push) Successful in 29s
Details
649429e38c 
Use Forgejo OIDC to retrieve central bootstrap credentials from OpenBao and reconcile preview projects and certificate applications through Argo CD GitOps.

Co-authored-by: Copilot <[email protected]>
finn merged commit 649429e38c into main 2026-10-27 07:10:19 +00:00
finn deleted branch feat/preview-bootstrap-oidc-gitops 2026-10-27 07:10:19 +00:00
Sign in to join this conversation.
Reviewers
No reviewers
Labels
Clear labels   
preview-bootstrap
Provision repository-scoped PR preview access

No labels
preview-bootstrap
Milestone
Clear milestone
No items
No milestone
Projects
Clear projects
No items
No project
Assignees
Clear assignees
No assignees
1 participant
Notifications
Due date
The due date is invalid or out of range. Please use the format "yyyy-mm-dd".

No due date set.

Dependencies

No dependencies set

Reference
finn/homelab!28
No description provided.