k8s-and-chill/rendered/envs/production/traefik
Felix Wolf c7bfd4953c feat: Wire ArgoCD to Forgejo for GitOps management
Configure myks with global repoURL pointing to Forgejo, in-cluster
destination, and disabled placeholder cluster Secret. Implement App of
Apps pattern with a root Application that syncs all child apps.

Add argocd-deploy-key-init Job that generates an ed25519 SSH keypair,
registers it as a deploy key via Forgejo API, and creates the ArgoCD
repository secret with insecure host key verification (avoids
chicken-and-egg with ArgoCD managing its own known hosts ConfigMap).

Additional changes:
- Ignore /status field diffs globally (K8s 1.32 compat)
- Add Replace=true sync option on Jobs (immutable resource compat)
- Switch job images from bitnami/kubectl to alpine/k8s
- Update CLAUDE.md with ArgoCD status and no-bitnami rule

Co-Authored-By: Claude Opus 4.6 (1M context) <noreply@anthropic.com>
2026-03-30 23:09:50 +02:00
..
clusterrole-traefik-traefik.yaml feat: Wire ArgoCD to Forgejo for GitOps management 2026-03-30 23:09:50 +02:00
clusterrolebinding-traefik-traefik.yaml feat: Wire ArgoCD to Forgejo for GitOps management 2026-03-30 23:09:50 +02:00
customresourcedefinition-accesscontrolpolicies.hub.traefik.io.yaml feat: Wire ArgoCD to Forgejo for GitOps management 2026-03-30 23:09:50 +02:00
customresourcedefinition-aiservices.hub.traefik.io.yaml feat: Wire ArgoCD to Forgejo for GitOps management 2026-03-30 23:09:50 +02:00
customresourcedefinition-apiauths.hub.traefik.io.yaml feat: Wire ArgoCD to Forgejo for GitOps management 2026-03-30 23:09:50 +02:00
customresourcedefinition-apibundles.hub.traefik.io.yaml feat: Wire ArgoCD to Forgejo for GitOps management 2026-03-30 23:09:50 +02:00
customresourcedefinition-apicatalogitems.hub.traefik.io.yaml feat: Wire ArgoCD to Forgejo for GitOps management 2026-03-30 23:09:50 +02:00
customresourcedefinition-apiplans.hub.traefik.io.yaml feat: Wire ArgoCD to Forgejo for GitOps management 2026-03-30 23:09:50 +02:00
customresourcedefinition-apiportalauths.hub.traefik.io.yaml feat: Wire ArgoCD to Forgejo for GitOps management 2026-03-30 23:09:50 +02:00
customresourcedefinition-apiportals.hub.traefik.io.yaml feat: Wire ArgoCD to Forgejo for GitOps management 2026-03-30 23:09:50 +02:00
customresourcedefinition-apiratelimits.hub.traefik.io.yaml feat: Wire ArgoCD to Forgejo for GitOps management 2026-03-30 23:09:50 +02:00
customresourcedefinition-apis.hub.traefik.io.yaml feat: Wire ArgoCD to Forgejo for GitOps management 2026-03-30 23:09:50 +02:00
customresourcedefinition-apiversions.hub.traefik.io.yaml feat: Wire ArgoCD to Forgejo for GitOps management 2026-03-30 23:09:50 +02:00
customresourcedefinition-backendtlspolicies.gateway.networking.k8s.io.yaml feat: Wire ArgoCD to Forgejo for GitOps management 2026-03-30 23:09:50 +02:00
customresourcedefinition-gatewayclasses.gateway.networking.k8s.io.yaml feat: Wire ArgoCD to Forgejo for GitOps management 2026-03-30 23:09:50 +02:00
customresourcedefinition-gateways.gateway.networking.k8s.io.yaml feat: Wire ArgoCD to Forgejo for GitOps management 2026-03-30 23:09:50 +02:00
customresourcedefinition-grpcroutes.gateway.networking.k8s.io.yaml feat: Wire ArgoCD to Forgejo for GitOps management 2026-03-30 23:09:50 +02:00
customresourcedefinition-httproutes.gateway.networking.k8s.io.yaml feat: Wire ArgoCD to Forgejo for GitOps management 2026-03-30 23:09:50 +02:00
customresourcedefinition-ingressroutes.traefik.io.yaml feat: Wire ArgoCD to Forgejo for GitOps management 2026-03-30 23:09:50 +02:00
customresourcedefinition-ingressroutetcps.traefik.io.yaml feat: Wire ArgoCD to Forgejo for GitOps management 2026-03-30 23:09:50 +02:00
customresourcedefinition-ingressrouteudps.traefik.io.yaml feat: Wire ArgoCD to Forgejo for GitOps management 2026-03-30 23:09:50 +02:00
customresourcedefinition-managedapplications.hub.traefik.io.yaml feat: Wire ArgoCD to Forgejo for GitOps management 2026-03-30 23:09:50 +02:00
customresourcedefinition-managedsubscriptions.hub.traefik.io.yaml feat: Wire ArgoCD to Forgejo for GitOps management 2026-03-30 23:09:50 +02:00
customresourcedefinition-middlewares.traefik.io.yaml feat: Wire ArgoCD to Forgejo for GitOps management 2026-03-30 23:09:50 +02:00
customresourcedefinition-middlewaretcps.traefik.io.yaml feat: Wire ArgoCD to Forgejo for GitOps management 2026-03-30 23:09:50 +02:00
customresourcedefinition-referencegrants.gateway.networking.k8s.io.yaml feat: Wire ArgoCD to Forgejo for GitOps management 2026-03-30 23:09:50 +02:00
customresourcedefinition-serverstransports.traefik.io.yaml feat: Wire ArgoCD to Forgejo for GitOps management 2026-03-30 23:09:50 +02:00
customresourcedefinition-serverstransporttcps.traefik.io.yaml feat: Wire ArgoCD to Forgejo for GitOps management 2026-03-30 23:09:50 +02:00
customresourcedefinition-tlsoptions.traefik.io.yaml feat: Wire ArgoCD to Forgejo for GitOps management 2026-03-30 23:09:50 +02:00
customresourcedefinition-tlsstores.traefik.io.yaml feat: Wire ArgoCD to Forgejo for GitOps management 2026-03-30 23:09:50 +02:00
customresourcedefinition-traefikservices.traefik.io.yaml feat: Wire ArgoCD to Forgejo for GitOps management 2026-03-30 23:09:50 +02:00
daemonset-traefik.yaml feat: Wire ArgoCD to Forgejo for GitOps management 2026-03-30 23:09:50 +02:00
ingressclass-traefik.yaml feat: Wire ArgoCD to Forgejo for GitOps management 2026-03-30 23:09:50 +02:00
namespace-traefik.yaml feat: Wire ArgoCD to Forgejo for GitOps management 2026-03-30 23:09:50 +02:00
service-traefik.yaml feat: Wire ArgoCD to Forgejo for GitOps management 2026-03-30 23:09:50 +02:00
serviceaccount-traefik.yaml feat: Wire ArgoCD to Forgejo for GitOps management 2026-03-30 23:09:50 +02:00