Fix CI pipeline and k8s manifests per service onboarding SOP #4

Merged

forgejo_admin merged 1 commit from 3-fix-ci-pipeline-and-k8s-manifests-per-se into main

2026-03-13 19:48:32 +00:00

forgejo_admin commented

2026-03-13 19:46:10 +00:00

Owner

Summary

Fix Woodpecker pipeline to use kaniko, correct tag format, path excludes per SERVICE_ONBOARDING.md
Fix k8s manifests: add kustomization.yaml, imagePullSecrets, remove namespace, merge Service into deployment

Changes

.woodpecker.yaml — kaniko plugin, $CI_COMMIT_SHA tags, top-level when with argocd path exclude, manual event support
k8s/deployment.yaml — removed namespace, added imagePullSecrets, merged Service definition
k8s/kustomization.yaml — new, required for ArgoCD Image Updater
k8s/service.yaml — deleted (merged into deployment.yaml)
k8s/ingress.yaml — deleted (terraform manages Tailscale funnel)

Test Plan

Woodpecker pipeline runs successfully after merge
Image appears in Harbor with commit SHA tag
ArgoCD syncs the application

Review Checklist

No secrets committed
No unnecessary file changes
Commit messages are descriptive

Closes #3 — CI/k8s fixes per service onboarding SOP
plan-2026-03-08-tryout-prep — Phase 6a

## Summary - Fix Woodpecker pipeline to use kaniko, correct tag format, path excludes per SERVICE_ONBOARDING.md - Fix k8s manifests: add kustomization.yaml, imagePullSecrets, remove namespace, merge Service into deployment ## Changes - `.woodpecker.yaml` — kaniko plugin, `$CI_COMMIT_SHA` tags, top-level when with argocd path exclude, manual event support - `k8s/deployment.yaml` — removed namespace, added imagePullSecrets, merged Service definition - `k8s/kustomization.yaml` — new, required for ArgoCD Image Updater - `k8s/service.yaml` — deleted (merged into deployment.yaml) - `k8s/ingress.yaml` — deleted (terraform manages Tailscale funnel) ## Test Plan - [ ] Woodpecker pipeline runs successfully after merge - [ ] Image appears in Harbor with commit SHA tag - [ ] ArgoCD syncs the application ## Review Checklist - [ ] No secrets committed - [ ] No unnecessary file changes - [ ] Commit messages are descriptive ## Related - Closes #3 — CI/k8s fixes per service onboarding SOP - `plan-2026-03-08-tryout-prep` — Phase 6a

forgejo_admin added 1 commit

2026-03-13 19:46:10 +00:00

Fix CI pipeline and k8s manifests per service onboarding SOP 246ce360ec

- Use kaniko plugin instead of plugins/docker
- Use $CI_COMMIT_SHA tag (no curly braces)
- Add top-level when with .argocd-source-* path exclude
- Allow manual pipeline triggers
- Add kustomization.yaml for ArgoCD Image Updater
- Remove namespace from manifests (ArgoCD manages this)
- Add imagePullSecrets for harbor-creds
- Merge Service into deployment.yaml, remove separate ingress (terraform manages funnel)

Co-Authored-By: Claude Opus 4.6 (1M context) <noreply@anthropic.com>