Erich Blume
00b0287bcc
## Summary - C2 Mikado chain for upgrading the k8s forgejo-runner daemon (6 major versions behind) - Root goal card with two leaf prerequisites: workflow validation and config review - Ringtail runner is already at ~v12.6.4 via nixpkgs, no work needed there ## Mikado Chain ``` upgrade-k8s-runner (goal) ├── validate-workflows-against-v12 (leaf) └── review-runner-config-v12 (leaf) ``` Both leaves are actionable now. The biggest risk is workflow schema validation (introduced in v8/v9) rejecting our existing workflows. ## Next Steps Work the leaf nodes in a follow-up session, then attempt the goal. 🤖 Generated with [Claude Code](https://claude.com/claude-code) Reviewed-on: https://forge.ops.eblu.me/eblume/blumeops/pulls/249
248 lines
7.1 KiB
YAML
248 lines
7.1 KiB
YAML
# Service Version Tracking
|
|
#
|
|
# Tracks when each BlumeOps service was last reviewed for version freshness.
|
|
# Used by `mise run service-review` to surface stale services.
|
|
#
|
|
# Fields:
|
|
# name - kebab-case service identifier
|
|
# type - argocd | ansible | nixos
|
|
# last-reviewed - date (YYYY-MM-DD) or null
|
|
# current-version - deployed version string or null
|
|
# upstream-source - URL to upstream releases/changelog
|
|
# notes - optional context
|
|
|
|
services:
|
|
- name: prometheus
|
|
type: argocd
|
|
last-reviewed: 2026-02-16
|
|
current-version: "v3.9.1"
|
|
upstream-source: https://github.com/prometheus/prometheus/releases
|
|
|
|
- name: loki
|
|
type: argocd
|
|
last-reviewed: 2026-02-16
|
|
current-version: "3.6.5"
|
|
upstream-source: https://github.com/grafana/loki/releases
|
|
|
|
- name: kube-state-metrics
|
|
type: argocd
|
|
last-reviewed: 2026-02-16
|
|
current-version: "v2.18.0"
|
|
upstream-source: https://github.com/kubernetes/kube-state-metrics/releases
|
|
|
|
- name: mosquitto
|
|
type: argocd
|
|
last-reviewed: 2026-02-16
|
|
current-version: "2.0.22"
|
|
upstream-source: https://github.com/eclipse/mosquitto/releases
|
|
|
|
- name: ntfy
|
|
type: argocd
|
|
last-reviewed: 2026-02-17
|
|
current-version: "v2.17.0"
|
|
upstream-source: https://github.com/binwiederhier/ntfy/releases
|
|
|
|
- name: homepage
|
|
type: argocd
|
|
last-reviewed: 2026-02-19
|
|
current-version: "v1.10.1"
|
|
upstream-source: https://github.com/gethomepage/homepage/releases
|
|
notes: Custom container, kustomize manifests
|
|
|
|
- name: nvidia-device-plugin
|
|
type: argocd
|
|
last-reviewed: 2026-02-19
|
|
current-version: "v0.18.2"
|
|
upstream-source: https://github.com/NVIDIA/k8s-device-plugin/releases
|
|
notes: DaemonSet + RuntimeClass on ringtail for GPU workloads
|
|
|
|
- name: frigate
|
|
type: argocd
|
|
last-reviewed: 2026-02-17
|
|
current-version: "0.17.0-rc2"
|
|
upstream-source: https://github.com/blakeblackshear/frigate/releases
|
|
|
|
- name: frigate-notify
|
|
type: argocd
|
|
last-reviewed: 2026-02-22
|
|
current-version: "v0.5.4"
|
|
upstream-source: https://github.com/0x2142/frigate-notify/releases
|
|
|
|
- name: alloy-k8s
|
|
type: argocd
|
|
last-reviewed: 2026-02-16
|
|
current-version: "v1.13.1"
|
|
upstream-source: https://github.com/grafana/alloy/releases
|
|
|
|
- name: tailscale-operator
|
|
type: argocd
|
|
last-reviewed: 2026-02-16
|
|
current-version: "v1.94.2"
|
|
upstream-source: https://github.com/tailscale/tailscale/releases
|
|
|
|
- name: grafana
|
|
type: argocd
|
|
last-reviewed: null
|
|
current-version: null
|
|
upstream-source: https://github.com/grafana/grafana/releases
|
|
notes: Deployed via Helm chart
|
|
|
|
- name: cloudnative-pg
|
|
type: argocd
|
|
last-reviewed: null
|
|
current-version: null
|
|
upstream-source: https://github.com/cloudnative-pg/cloudnative-pg/releases
|
|
notes: Deployed via Helm chart
|
|
|
|
- name: immich
|
|
type: argocd
|
|
last-reviewed: null
|
|
current-version: null
|
|
upstream-source: https://github.com/immich-app/immich/releases
|
|
notes: Deployed via Helm chart
|
|
|
|
- name: external-secrets
|
|
type: argocd
|
|
last-reviewed: 2026-02-17
|
|
current-version: "helm-chart-2.0.0"
|
|
upstream-source: https://github.com/external-secrets/external-secrets/releases
|
|
notes: Deployed via Helm chart (operator v1.3.2)
|
|
|
|
- name: 1password-connect
|
|
type: argocd
|
|
last-reviewed: null
|
|
current-version: null
|
|
upstream-source: https://github.com/1Password/connect/releases
|
|
notes: Deployed via Helm chart
|
|
|
|
- name: argocd
|
|
type: argocd
|
|
last-reviewed: null
|
|
current-version: null
|
|
upstream-source: https://github.com/argoproj/argo-cd/releases
|
|
|
|
- name: blumeops-pg
|
|
type: argocd
|
|
last-reviewed: null
|
|
current-version: null
|
|
upstream-source: https://github.com/cloudnative-pg/cloudnative-pg/releases
|
|
notes: CloudNativePG Cluster resource
|
|
|
|
- name: authentik
|
|
type: argocd
|
|
last-reviewed: null
|
|
current-version: "2025.10.1"
|
|
upstream-source: https://github.com/goauthentik/authentik/releases
|
|
|
|
- name: navidrome
|
|
type: argocd
|
|
last-reviewed: null
|
|
current-version: "v0.60.3"
|
|
upstream-source: https://github.com/navidrome/navidrome/releases
|
|
|
|
- name: miniflux
|
|
type: argocd
|
|
last-reviewed: null
|
|
current-version: "2.2.17"
|
|
upstream-source: https://github.com/miniflux/v2/releases
|
|
|
|
- name: teslamate
|
|
type: argocd
|
|
last-reviewed: null
|
|
current-version: "v2.2.0"
|
|
upstream-source: https://github.com/teslamate-org/teslamate/releases
|
|
|
|
- name: transmission
|
|
type: argocd
|
|
last-reviewed: null
|
|
current-version: "4.0.6-r4"
|
|
upstream-source: https://github.com/transmission/transmission/releases
|
|
|
|
- name: kiwix
|
|
type: argocd
|
|
last-reviewed: null
|
|
current-version: "3.8.1"
|
|
upstream-source: https://github.com/kiwix/kiwix-tools/releases
|
|
|
|
- name: devpi
|
|
type: argocd
|
|
last-reviewed: null
|
|
current-version: "6.19.1"
|
|
upstream-source: https://github.com/devpi/devpi/releases
|
|
|
|
- name: cv
|
|
type: argocd
|
|
last-reviewed: null
|
|
current-version: "1.0.3"
|
|
upstream-source: null
|
|
notes: Personal static site, no upstream
|
|
|
|
- name: docs
|
|
type: argocd
|
|
last-reviewed: null
|
|
current-version: "1.28.2"
|
|
upstream-source: https://github.com/jackyzha0/quartz/releases
|
|
notes: Quartz static site generator; container version tracks nginx base
|
|
|
|
- name: forgejo-runner
|
|
type: argocd
|
|
last-reviewed: 2026-02-22
|
|
current-version: "6.3.1"
|
|
upstream-source: https://code.forgejo.org/forgejo/runner/releases
|
|
notes: >-
|
|
Runner daemon version. Job execution container (containers/forgejo-runner)
|
|
tracks Dagger at v0.19.11.
|
|
|
|
- name: nix-container-builder
|
|
type: nixos
|
|
last-reviewed: 2026-02-22
|
|
current-version: "12.6.4"
|
|
upstream-source: https://code.forgejo.org/forgejo/runner/releases
|
|
notes: Forgejo runner on ringtail via nixpkgs; version tracks flake.lock
|
|
|
|
- name: forgejo
|
|
type: ansible
|
|
last-reviewed: 2026-02-22
|
|
current-version: "14.0.2"
|
|
upstream-source: https://codeberg.org/forgejo/forgejo/releases
|
|
notes: Installed via Homebrew on indri; plan to migrate to source build
|
|
|
|
- name: alloy
|
|
type: ansible
|
|
last-reviewed: null
|
|
current-version: null
|
|
upstream-source: https://github.com/grafana/alloy/releases
|
|
notes: Built from source on indri
|
|
|
|
- name: zot
|
|
type: ansible
|
|
last-reviewed: null
|
|
current-version: null
|
|
upstream-source: https://github.com/project-zot/zot/releases
|
|
notes: Built from source on indri
|
|
|
|
- name: caddy
|
|
type: ansible
|
|
last-reviewed: null
|
|
current-version: null
|
|
upstream-source: https://github.com/caddyserver/caddy/releases
|
|
notes: Built from source with Gandi DNS plugin
|
|
|
|
- name: borgmatic
|
|
type: ansible
|
|
last-reviewed: null
|
|
current-version: null
|
|
upstream-source: https://github.com/borgmatic-collective/borgmatic/releases
|
|
|
|
- name: jellyfin
|
|
type: ansible
|
|
last-reviewed: null
|
|
current-version: null
|
|
upstream-source: https://github.com/jellyfin/jellyfin/releases
|
|
|
|
- name: automounter
|
|
type: ansible
|
|
last-reviewed: null
|
|
current-version: null
|
|
upstream-source: null
|
|
notes: Custom service, no upstream
|