NowChess/GitOps
4
0
Fork 0
Code Issues Pull Requests Actions Packages Projects Releases Wiki Activity
550 Commits 4 Branches 0 Tags
feat/tournament-bot-env-config
Commit Graph

11 Commits

Author SHA1 Message Date
LQ63 6cef31d142 feat: wire official-bots to external tournament server 
Adds the env vars and secret structure needed for the official-bots pod
to connect to the external tournament server at 141.37.123.132:8086.

- TOURNAMENT_SERVER_URL and TOURNAMENT_BOT_DIFFICULTY added as plain env
  vars to the nowchess-official-bots rollout
- TOURNAMENT_BOT_TOKEN wired from a new ncs-tournament-secret SealedSecret
- Placeholder SealedSecret files added for staging, eu-central-1-prod, and
  htwg-1-prod — must be sealed with a real bot token before deploying

TOURNAMENT_ID is intentionally omitted; it is per-tournament and supplied
at runtime via POST /api/bots/official/join-tournament.

Co-Authored-By: Claude Sonnet 4.6 <noreply@anthropic.com>
 2026-06-17 02:04:26 +02:00
Janis Eccarius ec10c55094 chore: mode changes 2026-06-06 15:47:25 +02:00
Janis Eccarius 5d715f6c0c feat(promotion): add htwg-1-prod stage and update promotion policies 2026-05-30 15:33:27 +02:00
Janis Eccarius 821c7c256b feat(secrets): add sealed secret for GHCR image credentials 2026-05-30 15:08:03 +02:00
Janis Eccarius dcdcaff3b0 feat(secrets): add initial configuration for FluxCD, including sealed secrets and Helm releases 2026-05-30 13:23:19 +02:00
Janis Eccarius 24b9c52e90 chore(secrets): delete duplicate sealed secret files 
git-pull-secret.yaml: duplicate of redis/github-pull-secret.yaml
gitea-secret.yaml: duplicate (empty creds) of nowchess/kargo/github-image-secret.yaml

Co-Authored-By: Claude Sonnet 4.6 <noreply@anthropic.com>
 2026-05-30 12:42:23 +02:00
Janis Eccarius d509ebec88 feat(secrets): seal cluster secrets missing from GitOps 
Sealed from live cluster state — no plaintext ever on disk:
- redis/github (dockerconfigjson pull secret)
- nowchess/remotek6-certs (prod, staging, kargo)

Added to kustomization:
- kargo/discord-webhook-secret
- nowchess/kargo/github-image-secret
- redis/github-pull-secret
- remotek6-certs for all three namespaces

Co-Authored-By: Claude Sonnet 4.6 <noreply@anthropic.com>
 2026-05-30 12:29:18 +02:00
Janis Eccarius a40831d55f feat(secrets): update ghcr-pull-secret with new encrypted docker config for nowchess and nowchess-staging 2026-05-30 12:20:46 +02:00
Janis Eccarius 666aab1e70 feat(sealed-secrets): add multiple SealedSecrets for various services and configurations 2026-05-30 12:02:34 +02:00
Janis Eccarius a4d9c41c27 feat(secrets): migrate secrets to SealedSecrets format and update configurations 2026-05-30 11:55:49 +02:00
Janis 2022631f45 feat(nowchess): add Kargo project, Rollouts deployment, and secrets 
- 9 Kargo Warehouses (one per microservice), staging + prod stages
- PromotionTask: clone GitOps, kustomize-set-image, Gitea PR, ArgoCD sync
- BlueGreen Rollouts for all 9 services with health probes and envFrom
- staging,deployed / production,deployed Quarkus multi-profile support
- CORS_ORIGINS and QUARKUS_PROFILE injected via nowchess-env-config ConfigMap
- Plain K8s Secrets with empty values in secrets/nowchess/ (staging, prod, kargo)
- ArgoCD Applications for kargo project, staging, and prod deployments

Co-Authored-By: Claude Sonnet 4.6 <noreply@anthropic.com>
 2026-04-30 10:58:45 +02:00