blumeops/pulumi
Erich Blume c47ac189c9 Migrate Tailscale operator to ArgoCD management (Phase 1 Step 5)
Adds ArgoCD Application to manage Tailscale operator from forge:
- ArgoCD Application sourced from internal Forgejo via SSH
- DNS config for cluster-to-tailnet name resolution
- Egress proxy for accessing forge on indri
- ACL grants for k8s workloads to reach forge (ports 3001, 2200)
- Template for repository secret with 1Password SSH key reference

Key discovery: 1Password op read requires ?ssh-format=openssh parameter
to get keys in OpenSSH format that ArgoCD's SSH client can read.

Co-Authored-By: Claude Opus 4.5 <noreply@anthropic.com>
2026-01-19 07:12:51 -08:00
..
.gitignore Add Pulumi for tailnet IaC management (#15) 2026-01-15 20:55:25 -08:00
__main__.py Expose Kubernetes API as Tailscale service (Step 0.14) (#27) 2026-01-18 12:49:20 -08:00
policy.hujson Migrate Tailscale operator to ArgoCD management (Phase 1 Step 5) 2026-01-19 07:12:51 -08:00
Pulumi.tail8d86e.yaml Add pre-commit hooks for code quality (#19) 2026-01-16 19:33:02 -08:00
Pulumi.yaml Add pre-commit hooks for code quality (#19) 2026-01-16 19:33:02 -08:00
pyproject.toml Add pre-commit hooks for code quality (#19) 2026-01-16 19:33:02 -08:00