Skip to content

feat(unraid-lab): Harbor as an unraid-lab-scoped app - #16

Merged
syscod3 merged 2 commits into
mainfrom
feat/unraid-lab-harbor
Jul 20, 2026
Merged

syscod3 merged 2 commits into
mainfrom
feat/unraid-lab-harbor

Conversation

@syscod3

@syscod3 syscod3 commented Jul 20, 2026 •

Copy link
Copy Markdown
Contributor

Adds Harbor (Image Factory backing registry) scoped to the unraid-lab cluster via a new clusters/unraid-lab/ path — synced only by that cluster app-of-apps, so it never deploys to OCI. Tailscale-operator ingress provides TLS (no private CA). Post-deploy project/robot/OIDC bootstrap + the Argo-CD-on-unraid-lab prerequisite are documented in clusters/unraid-lab/README.md.

Also adds ARC runner GitOps wiring for unraid-lab:

  • arc-controller Application for GitHub gha-runner-scale-set-controller chart
  • arc-runners ApplicationSet for runner scale sets
  • active unraid-lab runner values and commented OCI generator slot for later
  • runner secrets referenced only as Kubernetes Secrets: arc-gha-secret and harbor-mirror-robot

Validation:

  • YAML parse of new cluster app manifests
  • pre-commit run --files ...
  • staged gitleaks

Consolidation per decision (B): supersedes the mistakenly-created separate unraid-lab-gitops-apps repo (to be removed).

Plan: syscode-ai-internal-plans/projects/image-factory-registry/plans/2026-07-19-harbor-ghcr-mirror.md

syscod3 added 2 commits July 20, 2026 22:13
Consolidates the Image Factory backing registry into this repo rather than a
separate per-cluster repo. clusters/unraid-lab/ is synced only by the unraid-lab
cluster's app-of-apps, so Harbor never lands on OCI. Tailscale ingress for TLS;
post-deploy project/robot/OIDC bootstrap documented.
@syscod3
syscod3 merged commit 3daac0e into main Jul 20, 2026
6 checks passed
@syscod3
syscod3 deleted the feat/unraid-lab-harbor branch July 20, 2026 21:21
syscod3 added a commit that referenced this pull request Aug 8, 2026
* feat(unraid-lab): Harbor as an unraid-lab-scoped app

Consolidates the Image Factory backing registry into this repo rather than a
separate per-cluster repo. clusters/unraid-lab/ is synced only by the unraid-lab
cluster's app-of-apps, so Harbor never lands on OCI. Tailscale ingress for TLS;
post-deploy project/robot/OIDC bootstrap documented.

* Add unraid-lab ARC runner apps
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

1 participant