All Workflows cve-triage gate images merge-gate renovate

Management

Job queue

546 workflow runs

Actor

All actors gitea-admin jakman85 pm-agent renovate-bot

Status

All status Success Failure Canceled Skipped Waiting Running Blocked Canceling

Branch

All branches bugfix/arr-to-plex chore/adopt-spec-sync chore/cilium-split-merge2 chore/decisions-log-conflict-free chore/pm-agent-digest-99 chore/pm-agent-go-live chore/pm-agent-runner-digest chore/renovate-config-cleanup chore/rotate-cloudflared-tunnel docs/agents-work-in-their-own-workspace docs/ci-delivery-flow-for-agents docs/ci-reality-vs-phase-0 docs/close-out-ci-hardening docs/handoff-2026-09-29 docs/memattr-6-12-backport docs/node2-memory-refine docs/oauth2-sidecar-scrape-verified docs/phase-7-open-prod-node-1 docs/pihole-ha-verified docs/pm-agent-registry-pull-prereq docs/poststart-incident docs/reconcile-with-reality docs/runbooks-pr-flow docs/source-comment-audit feat/automated-upgrades feat/ci-is-the-approver feat/cilium-own-kustomization feat/cilium-roll-out-on-config-change feat/cloudflare-tunnel feat/conformance-job-template feat/conformance-run-ledger feat/conformance-runner-image feat/conformance-trigger-admission-boundary feat/conformance-trigger-kubeconfig feat/devcontainer-velero-cli feat/dns-via-cloudflare-tunnel feat/flux-deploy-notifications feat/gate-toolbox-container feat/gitea-28 feat/gitea-settings-drift-check feat/graceful-cluster-shutdown feat/hubble-flow-export-plex feat/image-pipeline feat/intel-gpu-device-plugin feat/keycloak-passkey-reconcile feat/keycloak-passkeys feat/l0-externaldns-annotation-prefix feat/ledger-section-parsing feat/node-health-render-device feat/oauth2-proxy-api-route-per-app feat/oauth2-proxy-auth-failure-visible feat/parallel-l0-checks feat/pihole-declare-state feat/pihole-explicit-lan-names feat/pihole-multi-replica feat/pin-pihole-jackett-plex feat/plex-claim-sops-secret feat/plex-claim-token-013124 feat/plex-quicksync feat/plex-remote-access-l4 feat/plex-vip-hostname-and-lan-networks feat/pm-agent-issue-to-pr feat/pm-agent-pr-mentions feat/pm-agent-registry-pull-secret feat/prod-hardening feat/prod-memattr-and-nodes feat/prod-node-2 feat/public-dns-wan-target feat/quicksync-via-device-plugin feat/r-state-03-proven feat/renovate-track-keycloak-operator feat/runner-capacity-2 feat/sd-hardware-capability feat/vpn-remote-access-wireguard feat/vuln-visibility feature/add-private-key-for-wireguard feature/cloudflare-tunnel-config feature/pm-agent-credentials fix/admin-approval-override fix/bulk-nfs-truenas fix/cilium-cgroup-hostroot fix/cloudflared-creds-permission fix/cluster-available-would-fake-a-green fix/conformance-context-is-fail-open fix/coredns-ha fix/crafty-bedrock-19132 fix/crafty-oauth2-proxy-signin fix/dind-native-sidecar fix/flux-deploy-notification-inhibited fix/gate-push-trigger-matches-feat-prefix fix/gitea-admins-could-override-the-gate fix/gitea-admit-buildkit fix/gitea-settings-comment-names-impossible-secret fix/ha-check-catastrophic-regex fix/jackett-oauth2-proxy-session fix/keycloak-operator-crds fix/keycloak-servicemonitor-owner fix/kyverno-policy-was-never-applied fix/new-peer-ignores-template-comments fix/node-keycloak-hosts-pin fix/oauth2-proxy-cookie-collision-fleet fix/oauth2-proxy-oidc-startup-race fix/oauth2-sidecar-metrics-scrape-netpol fix/peers-configmap-content-hash fix/pihole-local-ttl fix/plex-advertise-plexdirect fix/plex-quicksync-verification fix/plex-resolver-independent-advertise fix/plex-unblock-app-tier fix/pm-agent-triage-exit fix/poststart-exit-status fix/public-dns-wan-a-record fix/render-selftest-runs-in-gate fix/renovate-auth fix/renovate-config-filename fix/renovate-cron-window fix/renovate-first-run fix/renovate-hold-auth-and-self fix/renovate-invalid-config fix/renovate-run-hygiene fix/secret-name-and-require-gitea-settings fix/strict-postbuild-substitutions fix/unattended-upgrades-debian-sentinel fix/vpn-ingress-ip-forward fix/vpn-ingress-l2-lease-collision fix/vpn-runbook-ansible-command fix/vpn-server-key-in-sops fix/wg-client-mtu-docs fix/wg-home-peer-pihole-sources main migration/dns-apex-inversion plex/volume-expamsion prod/deliver-fixes renovate/ghcr.io-renovatebot-renovate-44.x renovate/gitea.home.keithjackson.dev-home-network-toolbox-main renovate/kube-prometheus-stack-93.x rescued/fix/act-runner-dind-readiness rescued/fix/node-dns-resilient-upstream sync-39-onto-main vpn/add-keith-phone

docs(agents): one workspace per agent run — the shared checkout is off-limits

gate #246:Commit 4d6f669c60 pushed by gitea-admin

#56

2026-10-06 03:27:29 +00:00

1m49s

View workflow file

docs(agents): one workspace per agent run — the shared checkout is off-limits

gate #245:Commit b988da8b77 pushed by gitea-admin

#56

2026-10-06 03:22:59 +00:00

1m47s

View workflow file

feat(vpn-ingress): WireGuard remote access on udp/51820 (hostNetwork, declarative peers)

gate #244:Commit 1a67fc1b3c pushed by gitea-admin

#55

2026-10-06 03:15:13 +00:00

1m49s

View workflow file

Merge pull request 'feat(cilium): roll the agents when cilium-config changes (merged config was silently inert)' (#53) from feat/cilium-roll-out-on-config-change into main

gate #243:Commit 22c94effff pushed by jakman85

main

2026-10-06 02:33:10 +00:00

2m34s

View workflow file

docs(obs): record that the gate-sidecar scrape works — four places still said it did not

gate #242:Commit 81f627167d pushed by gitea-admin

#54

2026-10-06 02:25:07 +00:00

1m50s

View workflow file

Merge pull request 'fix(plex): advertise a resolver-independent plex.direct name again (LAN-wide outage)' (#52) from fix/plex-resolver-independent-advertise into main

gate #241:Commit 4386d1453b pushed by gitea-admin

#54

2026-10-06 02:25:05 +00:00

3m36s

View workflow file

feat(cilium): roll the agents when cilium-config changes (merged config was silently inert)

gate #240:Commit d0db63911a pushed by gitea-admin

#53

2026-10-06 02:23:16 +00:00

3m34s

View workflow file

Merge pull request 'fix(plex): advertise a resolver-independent plex.direct name again (LAN-wide outage)' (#52) from fix/plex-resolver-independent-advertise into main

gate #239:Commit 4386d1453b pushed by jakman85

main

2026-10-06 02:07:54 +00:00

1m50s

View workflow file

fix(plex): advertise a resolver-independent plex.direct name again (LAN-wide outage)

gate #238:Commit 874c6703f0 pushed by gitea-admin

#52

2026-10-06 02:01:18 +00:00

1m53s

View workflow file

Merge pull request 'fix(plex): unblock the app tier — drop the Certificate that stalled apps-wave-0, advertise http' (#51) from fix/plex-unblock-app-tier into main

gate #237:Commit bc7095677b pushed by jakman85

main

2026-10-05 13:55:13 +00:00

1m50s

View workflow file

fix(plex): unblock the app tier — drop the Certificate that stalled apps-wave-0, advertise http

gate #236:Commit a0e6ef145f pushed by gitea-admin

#51

2026-10-04 22:12:51 +00:00

1m53s

View workflow file

Merge pull request 'feat(plex): one advertised hostname for local+remote, its own LE cert, and a LAN definition so LAN clients stop reading as remote' (#48) from feat/plex-vip-hostname-and-lan-networks into main

gate #235:Commit c163deaef9 pushed by jakman85

main

2026-10-04 21:49:25 +00:00

1m51s

View workflow file

Merge pull request 'feat(cilium): export Plex's pre-SNAT client address via Hubble, scoped to tcp/32400' (#50) from feat/hubble-flow-export-plex into main

gate #234:Commit 642a7752d8 pushed by jakman85

main

2026-10-04 21:47:32 +00:00

9s

View workflow file

feat(cilium): export Plex's pre-SNAT client address via Hubble, scoped to tcp/32400

gate #233:Commit 989649e64a pushed by gitea-admin

#50

2026-10-04 21:38:49 +00:00

1m51s

View workflow file

Merge pull request 'fix(obs): open 44180 to ns monitoring so the forward-auth gate sidecars are actually scrapable' (#49) from fix/oauth2-sidecar-metrics-scrape-netpol into main

gate #232:Commit 21c88b0dc7 pushed by jakman85

main

2026-10-04 21:35:21 +00:00

1m50s

View workflow file

fix(obs): open 44180 to ns monitoring so the forward-auth gate sidecars are actually scrapable

gate #231:Commit b156ee6cfa pushed by gitea-admin

#49

2026-10-04 21:33:18 +00:00

3m45s

View workflow file

fix(obs): open 44180 to ns monitoring so the forward-auth gate sidecars are actually scrapable

gate #230:Commit f9446be381 pushed by gitea-admin

#49

2026-10-04 21:03:37 +00:00

1m51s

View workflow file

feat(plex): one advertised hostname for local+remote, its own LE cert, and a LAN definition

gate #229:Commit 0aa1a0a78a pushed by gitea-admin

#48

2026-10-04 21:42:41 +00:00

3m42s

View workflow file

Merge pull request 'fix(plex): advertise the plex.direct name, not the bare VIP (server vanished from the plex.tv account)' (#47) from fix/plex-advertise-plexdirect into main

gate #228:Commit 422834d4e2 pushed by jakman85

main

2026-10-04 08:01:06 +00:00

1m49s

View workflow file

fix(plex): advertise the plex.direct name, not the bare VIP (server vanished from the plex.tv account)

gate #227:Commit 1f4552d409 pushed by gitea-admin

#47

2026-10-04 07:58:28 +00:00

3m40s

View workflow file

Merge pull request 'fix(cilium): point cgroup.hostRoot at the host cgroup2 root (socket-LB never covered host processes)' (#42) from fix/cilium-cgroup-hostroot into main

gate #226:Commit c95b1c7121 pushed by jakman85

main

2026-10-04 07:13:43 +00:00

3m6s

View workflow file

Merge pull request 'docs(decisions): record that PiHole HA is verified live, failover drill included' (#46) from docs/pihole-ha-verified into main

gate #225:Commit ed6afc3d3f pushed by jakman85

main

2026-10-04 07:10:12 +00:00

1m51s

View workflow file

docs(decisions): record that PiHole HA is verified live, failover drill included

gate #224:Commit 254985baa6 pushed by gitea-admin

#46

2026-10-04 07:06:00 +00:00

1m49s

View workflow file

Merge pull request 'feat(pihole): two replicas on different nodes, and fix a PVC mounted where pihole never writes' (#45) from feat/pihole-multi-replica into main

gate #223:Commit dce20b7be6 pushed by jakman85

main

2026-10-04 06:52:47 +00:00

1m49s

View workflow file

feat(pihole): two replicas on different nodes, and fix a PVC mounted where pihole never writes

gate #222:Commit 028853c87c pushed by gitea-admin

#45

2026-10-04 06:37:24 +00:00

1m49s

View workflow file

Merge pull request 'feat(pihole): declare the admin password and adlists in git' (#44) from feat/pihole-declare-state into main

gate #221:Commit 17f0c11403 pushed by jakman85

main

2026-10-04 06:16:37 +00:00

1m48s

View workflow file

feat(pihole): declare the admin password and adlists in git

gate #220:Commit 3b1d6ae115 pushed by gitea-admin

#44

2026-10-04 06:14:47 +00:00

3m38s

View workflow file

Merge pull request 'feat(plex): expose tcp/32400 for remote access via a pinned LoadBalancer VIP' (#43) from feat/plex-remote-access-l4 into main

gate #219:Commit 939461120a pushed by jakman85

main

2026-10-04 04:48:46 +00:00

2m7s

View workflow file

feat(plex): expose tcp/32400 for remote access via a pinned LoadBalancer VIP

gate #218:Commit fbaeb3e038 pushed by gitea-admin

#43

2026-10-04 04:44:38 +00:00

3m42s

View workflow file

fix(cilium): point cgroup.hostRoot at the host's real cgroup2 root

gate #217:Commit 9a69f6906a pushed by gitea-admin

#42

2026-10-03 23:10:35 +00:00

1m49s

View workflow file