jasonwitty 96e1825629 Add Gitea Actions deploy pipeline + deployer RBAC ... - .gitea/workflows/deploy.yaml: PRs run a server-side dry-run; pushes to main apply the kustomization and wait for all rollouts. Modeled on socktop-webterm's pipeline; uses the same KUBECONFIG secret convention and gitea-deployer ServiceAccount. - rbac/gitea-deployer.yaml: ClusterRole/Binding (admin bootstrap, outside the root kustomization) — repo resource kinds only, no secrets access, no delete verbs, no RBAC escalation. Applied to the cluster 2026-07-26. - One-time env->secretKeyRef migration executed against the cluster; README updated. Co-Authored-By: Claude Fable 5 <noreply@anthropic.com>		2026-07-26 02:37:49 -07:00
..
deploy.yaml	Add Gitea Actions deploy pipeline + deployer RBAC	2026-07-26 02:37:49 -07:00