Fix mirror org refs in ArgoCD apps and widen credential template #266

Merged
eblume merged 3 commits from fix/mirror-org-refs into main 2026-02-25 06:55:54 -08:00
Owner

Summary

  • Widen repo-creds-forge URL prefix from /eblume/ to host-wide / so it matches repos in all forge orgs (fixes mirrors/ repos not getting SSH credentials)
  • Update 8 ArgoCD app definitions from eblume/<mirror>mirrors/<mirror> (immich-charts, cloudnative-pg-charts, external-secrets, connect-helm-charts)
  • Fix stale alloy clone comment in Ansible defaults
  • Bump immich v2.5.2 → v2.5.6 (bug-fix patches only)
  • Update ArgoCD README bootstrap command and credential docs

Context

Mirrors were migrated from forge.ops.eblu.me/eblume/ to forge.ops.eblu.me/mirrors/ in commit cd57814. Container Dockerfiles and image tags were updated, but ArgoCD app definitions and the repo credential template were missed, causing ComparisonError on apps that source Helm charts from mirrored repos.

Deployment

  1. Sync the ArgoCD argocd app first (picks up the widened credential template)
  2. Sync the apps app (picks up new repo URLs for all 8 apps)
  3. Verify immich resolves its ComparisonError: argocd app get immich
  4. Sync immich to deploy v2.5.6: argocd app sync immich
  5. Spot-check: argocd app get external-secrets, argocd app get cloudnative-pg, argocd app get 1password-connect
## Summary - Widen `repo-creds-forge` URL prefix from `/eblume/` to host-wide `/` so it matches repos in all forge orgs (fixes `mirrors/` repos not getting SSH credentials) - Update 8 ArgoCD app definitions from `eblume/<mirror>` → `mirrors/<mirror>` (immich-charts, cloudnative-pg-charts, external-secrets, connect-helm-charts) - Fix stale alloy clone comment in Ansible defaults - Bump immich v2.5.2 → v2.5.6 (bug-fix patches only) - Update ArgoCD README bootstrap command and credential docs ## Context Mirrors were migrated from `forge.ops.eblu.me/eblume/` to `forge.ops.eblu.me/mirrors/` in commit `cd57814`. Container Dockerfiles and image tags were updated, but ArgoCD app definitions and the repo credential template were missed, causing `ComparisonError` on apps that source Helm charts from mirrored repos. ## Deployment 1. Sync the ArgoCD `argocd` app first (picks up the widened credential template) 2. Sync the `apps` app (picks up new repo URLs for all 8 apps) 3. Verify immich resolves its ComparisonError: `argocd app get immich` 4. Sync immich to deploy v2.5.6: `argocd app sync immich` 5. Spot-check: `argocd app get external-secrets`, `argocd app get cloudnative-pg`, `argocd app get 1password-connect`
After the forge mirror migration from eblume/ to mirrors/ org, ArgoCD
app definitions and the repo credential template still referenced the
old paths, causing ComparisonError on mirrored-chart apps.

- Widen repo-creds-forge URL prefix to host-wide (matches all forge orgs)
- Update 8 ArgoCD app definitions: eblume/<mirror> → mirrors/<mirror>
- Fix stale alloy clone comment in Ansible defaults
- Bump immich v2.5.2 → v2.5.6 (bug-fix patches)
- Update README bootstrap command and credential docs

Co-Authored-By: Claude Opus 4.6 <noreply@anthropic.com>
Replace insecure: true (skip host key verification) with the actual
forge SSH host key, so ArgoCD verifies the server identity on connect.

Co-Authored-By: Claude Opus 4.6 <noreply@anthropic.com>
Co-Authored-By: Claude Opus 4.6 <noreply@anthropic.com>
eblume merged commit 5f9bc20345 into main 2026-02-25 06:55:54 -08:00
Sign in to join this conversation.
No reviewers
No labels
No milestone
No project
No assignees
1 participant
Notifications
Due date
The due date is invalid or out of range. Please use the format "yyyy-mm-dd".

No due date set.

Dependencies

No dependencies set.

Reference
eblume/blumeops!266
No description provided.