All Workflows gate images merge-gate renovate

Management

Job queue

542 workflow runs

Actor

All actors gitea-admin jakman85 pm-agent renovate-bot

Status

All status Success Failure Canceled Skipped Waiting Running Blocked Canceling

Branch

All branches bugfix/arr-to-plex chore/adopt-spec-sync chore/cilium-split-merge2 chore/decisions-log-conflict-free chore/pm-agent-digest-99 chore/pm-agent-go-live chore/pm-agent-runner-digest chore/renovate-config-cleanup chore/rotate-cloudflared-tunnel docs/agents-work-in-their-own-workspace docs/ci-delivery-flow-for-agents docs/ci-reality-vs-phase-0 docs/close-out-ci-hardening docs/handoff-2026-09-29 docs/memattr-6-12-backport docs/node2-memory-refine docs/oauth2-sidecar-scrape-verified docs/phase-7-open-prod-node-1 docs/pihole-ha-verified docs/pm-agent-registry-pull-prereq docs/poststart-incident docs/reconcile-with-reality docs/runbooks-pr-flow docs/source-comment-audit feat/automated-upgrades feat/ci-is-the-approver feat/cilium-own-kustomization feat/cilium-roll-out-on-config-change feat/cloudflare-tunnel feat/conformance-job-template feat/conformance-run-ledger feat/conformance-runner-image feat/conformance-trigger-admission-boundary feat/conformance-trigger-kubeconfig feat/devcontainer-velero-cli feat/dns-via-cloudflare-tunnel feat/flux-deploy-notifications feat/gate-toolbox-container feat/gitea-28 feat/gitea-settings-drift-check feat/graceful-cluster-shutdown feat/hubble-flow-export-plex feat/image-pipeline feat/intel-gpu-device-plugin feat/keycloak-passkey-reconcile feat/keycloak-passkeys feat/l0-externaldns-annotation-prefix feat/ledger-section-parsing feat/node-health-render-device feat/oauth2-proxy-api-route-per-app feat/oauth2-proxy-auth-failure-visible feat/parallel-l0-checks feat/pihole-declare-state feat/pihole-explicit-lan-names feat/pihole-multi-replica feat/pin-pihole-jackett-plex feat/plex-claim-sops-secret feat/plex-claim-token-013124 feat/plex-quicksync feat/plex-remote-access-l4 feat/plex-vip-hostname-and-lan-networks feat/pm-agent-issue-to-pr feat/pm-agent-pr-mentions feat/pm-agent-registry-pull-secret feat/prod-hardening feat/prod-memattr-and-nodes feat/prod-node-2 feat/public-dns-wan-target feat/quicksync-via-device-plugin feat/r-state-03-proven feat/renovate-track-keycloak-operator feat/runner-capacity-2 feat/sd-hardware-capability feat/vpn-remote-access-wireguard feat/vuln-visibility feature/add-private-key-for-wireguard feature/cloudflare-tunnel-config feature/pm-agent-credentials fix/admin-approval-override fix/bulk-nfs-truenas fix/cilium-cgroup-hostroot fix/cloudflared-creds-permission fix/cluster-available-would-fake-a-green fix/conformance-context-is-fail-open fix/coredns-ha fix/crafty-bedrock-19132 fix/crafty-oauth2-proxy-signin fix/dind-native-sidecar fix/flux-deploy-notification-inhibited fix/gate-push-trigger-matches-feat-prefix fix/gitea-admins-could-override-the-gate fix/gitea-admit-buildkit fix/gitea-settings-comment-names-impossible-secret fix/ha-check-catastrophic-regex fix/jackett-oauth2-proxy-session fix/keycloak-operator-crds fix/keycloak-servicemonitor-owner fix/kyverno-policy-was-never-applied fix/new-peer-ignores-template-comments fix/node-keycloak-hosts-pin fix/oauth2-proxy-cookie-collision-fleet fix/oauth2-proxy-oidc-startup-race fix/oauth2-sidecar-metrics-scrape-netpol fix/peers-configmap-content-hash fix/pihole-local-ttl fix/plex-advertise-plexdirect fix/plex-quicksync-verification fix/plex-resolver-independent-advertise fix/plex-unblock-app-tier fix/pm-agent-triage-exit fix/poststart-exit-status fix/public-dns-wan-a-record fix/render-selftest-runs-in-gate fix/renovate-auth fix/renovate-config-filename fix/renovate-cron-window fix/renovate-first-run fix/renovate-hold-auth-and-self fix/renovate-invalid-config fix/renovate-run-hygiene fix/secret-name-and-require-gitea-settings fix/strict-postbuild-substitutions fix/unattended-upgrades-debian-sentinel fix/vpn-ingress-ip-forward fix/vpn-ingress-l2-lease-collision fix/vpn-runbook-ansible-command fix/vpn-server-key-in-sops fix/wg-client-mtu-docs fix/wg-home-peer-pihole-sources main migration/dns-apex-inversion plex/volume-expamsion prod/deliver-fixes renovate/ghcr.io-renovatebot-renovate-44.x renovate/gitea.home.keithjackson.dev-home-network-toolbox-main renovate/kube-prometheus-stack-93.x rescued/fix/act-runner-dind-readiness rescued/fix/node-dns-resilient-upstream sync-39-onto-main vpn/add-keith-phone

fix(conformance): one regex made the merge gate take 28 minutes instead of 2

gate #302:Commit 793c3940a8 pushed by gitea-admin

#76

2026-10-18 07:46:35 +00:00

3m54s

View workflow file

Merge pull request 'fix(unattended-upgrades): Debian has no reboot-sentinel package, so ship the writer' (#75) from fix/unattended-upgrades-debian-sentinel into main

gate #301:Commit a9a529750d pushed by jakman85

main

2026-10-18 07:41:51 +00:00

1m28s

View workflow file

Merge pull request 'feat(upgrades): automate node reboots (kured) and wire Renovate, which had never run' (#73) from feat/automated-upgrades into main

renovate #300:Commit ee196c7bcd pushed by jakman85

main

2026-10-18 07:39:54 +00:00

16s

View workflow file

fix(unattended-upgrades): Debian has no reboot-sentinel package, so ship the writer

gate #299:Commit ef8ef5ac29 pushed by gitea-admin

#75

2026-10-18 07:39:55 +00:00

28m8s

View workflow file

Merge pull request 'feat(upgrades): automate node reboots (kured) and wire Renovate, which had never run' (#73) from feat/automated-upgrades into main

gate #298:Commit ee196c7bcd pushed by jakman85

main

2026-10-18 06:56:21 +00:00

27m49s

View workflow file

Merge pull request 'feat(shutdown): configure graceful node shutdown, and never scale a Delete-policy StatefulSet' (#71) from feat/graceful-cluster-shutdown into main

gate #297:Commit 83d3568150 pushed by jakman85

main

2026-10-18 06:19:07 +00:00

27m42s

View workflow file

Merge pull request 'fix(coredns): hold in-cluster DNS at 2 replicas via an HPA, because k3s owns the Deployment' (#74) from fix/coredns-ha into main

gate #296:Commit 24bea918ab pushed by jakman85

main

2026-10-18 05:51:21 +00:00

31s

View workflow file

fix(coredns): hold in-cluster DNS at 2 replicas via an HPA, because k3s owns the Deployment

gate #295:Commit 5642881c4d pushed by gitea-admin

#74

2026-10-18 05:48:30 +00:00

1m55s

View workflow file

Merge pull request 'feat(keycloak): add passkey (WebAuthn passwordless) login, additive and optional' (#72) from feat/keycloak-passkeys into main

gate #294:Commit 4d489f2059 pushed by jakman85

main

2026-10-18 05:46:02 +00:00

1m56s

View workflow file

feat(upgrades): automated OS reboots (kured) + security-only unattended-upgrades, and give Renovate a runner

gate #293:Commit a2440a3125 pushed by gitea-admin

#73

2026-10-18 05:44:00 +00:00

3m57s

View workflow file

revert(vpn-ingress): withdraw the L2 lease-collision fix — a node CAN reach a VIP it announces

gate #292:Commit e82dab5df5 pushed by gitea-admin

#69

2026-10-18 05:02:57 +00:00

1m55s

View workflow file

feat(keycloak): declare passkey (WebAuthn passwordless) login for the homelab realm

gate #291:Commit 16894b7b73 pushed by gitea-admin

#72

2026-10-18 04:48:26 +00:00

1m56s

View workflow file

feat(shutdown): configure graceful node shutdown, and never scale a Delete-policy StatefulSet

gate #290:Commit 2f2e98aa19 pushed by gitea-admin

#71

2026-10-18 04:48:24 +00:00

29m42s

View workflow file

Merge branch 'main' into fix/vpn-ingress-l2-lease-collision

gate #289:Commit 0913ea9450 pushed by jakman85

#69

2026-10-18 04:46:29 +00:00

29m42s

View workflow file

Merge pull request 'fix(oauth2-proxy): gate startup on Keycloak discovery, or a cold boot CrashLoops the proxy' (#70) from fix/oauth2-proxy-oidc-startup-race into main

gate #288:Commit 1a0b20857a pushed by jakman85

main

2026-10-18 04:46:27 +00:00

31m33s

View workflow file

fix(oauth2-proxy): gate startup on Keycloak discovery, or a cold boot CrashLoops the proxy

gate #287:Commit c150327a30 pushed by gitea-admin

#70

2026-10-18 04:00:58 +00:00

1m55s

View workflow file

fix(vpn-ingress): the VPN ingress node must announce no L2 VIPs, or clients route nothing

gate #286:Commit f5353cbd30 pushed by gitea-admin

#69

2026-10-18 03:45:23 +00:00

2m25s

View workflow file

Merge pull request 'Expand plex volume' (#68) from plex/volume-expamsion into main

gate #285:Commit 9a41a8e1e5 pushed by jakman85

main

2026-10-10 16:15:44 +00:00

1m55s

View workflow file

Update apps/wave-0/plex.yaml

gate #284:Commit 0132c680b3 pushed by jakman85

#68

2026-10-10 16:11:52 +00:00

1m56s

View workflow file

Expand plex volume

gate #283:Commit 439b35a3f0 pushed by jakman85

#68

2026-10-10 16:06:10 +00:00

1m52s

View workflow file

Merge pull request 'fix(bulk-nfs): repoint at the TrueNAS (192.168.2.30); the PVs must be recreated, not reconciled' (#67) from fix/bulk-nfs-truenas into main

gate #282:Commit e89df78210 pushed by jakman85

main

2026-10-07 06:28:44 +00:00

1m56s

View workflow file

fix(bulk-nfs): repoint at the TrueNAS (192.168.2.30); the PVs must be recreated, not reconciled

gate #281:Commit 0747849837 pushed by gitea-admin

#67

2026-10-07 06:26:12 +00:00

3m54s

View workflow file

Merge pull request 'fix(vpn-ingress): content-hash the peer register, or a merged peer never reaches the tunnel' (#66) from fix/peers-configmap-content-hash into main

gate #280:Commit ad37acdf53 pushed by jakman85

main

2026-10-06 08:00:46 +00:00

1m54s

View workflow file

fix(vpn-ingress): content-hash the peer register, or a merged peer never reaches the tunnel

gate #279:Commit 2acfed460a pushed by gitea-admin

#66

2026-10-06 07:58:32 +00:00

1m53s

View workflow file

Merge pull request 'Added my phone to peers' (#65) from vpn/add-keith-phone into main

gate #278:Commit e1bebb857e pushed by jakman85

main

2026-10-06 07:44:02 +00:00

1m56s

View workflow file

Added my phone to peers

gate #277:Commit 23db97b958 pushed by jakman85

#65

2026-10-06 07:41:57 +00:00

1m56s

View workflow file

Merge pull request 'fix(vpn-ingress): new-peer.sh counted its own commented-out example as an allocated address' (#64) from fix/new-peer-ignores-template-comments into main

gate #276:Commit 5928d8153c pushed by jakman85

main

2026-10-06 07:33:00 +00:00

1m53s

View workflow file

fix(vpn-ingress): new-peer.sh counted its own commented-out example as an allocated address

gate #275:Commit 146dd9a906 pushed by gitea-admin

#64

2026-10-06 07:30:55 +00:00

1m54s

View workflow file

Merge pull request 'fix(vpn-ingress): stop trying to set net.ipv4.ip_forward — a hostNetwork pod cannot, and wg-quick dies on a failed PostUp' (#63) from fix/vpn-ingress-ip-forward into main

gate #274:Commit d1c07fe021 pushed by jakman85

main

2026-10-06 07:11:29 +00:00

1m54s

View workflow file

fix(vpn-ingress): stop trying to set net.ipv4.ip_forward — a hostNetwork pod cannot, and wg-quick dies on a failed PostUp

gate #273:Commit 5c43fbac65 pushed by gitea-admin

#63

2026-10-06 07:08:30 +00:00

2m5s

View workflow file