feat: move GitLab from EKS to EC2 docker-compose#755

Merged

allamand merged 232 commits into

feature/cloudfront-on-agent-platformfrom

feature/cloudfront-on-agent-platform-without-gitlab

Jul 7, 2026

Commits on Jun 26, 2026

feat: move GitLab from EKS to EC2 docker-compose
allamand
committed
feat: backport generic tasks from kind-crossplane to kind-kro-ack
allamand
committed
feat: complete kind-kro-ack consolidation
allamand
committed
feat: create-config.sh reads CLUSTER_PROVIDER env var (default: kind-crossplane)
allamand
committed
refactor: remove argocd:capability job from kind-kro-ack — Capabilities managed declaratively by RGD
allamand
committed
fix: restore Kargo ECR pod-identity setup in deploy-kargo.sh (accidentally removed)
allamand
committed
fix: restore create-ray-models-bucket from deleted Taskfile.workshop.yaml
allamand
committed
fix: restore accidentally removed code from cherry-pick
allamand
committed
fix: add kind-kro-ack to root Taskfile includes
allamand
committed
fix: increase RGD wait timeout 180s→300s and wait individually for better diagnostics
allamand
committed
fix: add kind:kubeconfig task to ensure kubeconfig is present on re-runs
allamand
committed
fix: gitlab:init-ec2 rails runner fully idempotent on re-runs (user exists, project exists)
allamand
committed
fix: gitlab:init-ec2 use save(validate:false) — update! fails on complex hash/validation
allamand
committed
fix: ensure user namespace exists before creating GitLab projects
allamand
committed
fix(kind-kro-ack): add ACK SecretsManager + ESO bootstrap to install
allamand
committed
fix(kind-kro-ack): fix hub:claim - remove unknown argocdCapability, add argoCdCapabilityRoleArn
allamand
committed
fix: gitlab:init-ec2 use Users::CreateService + Devise::Encryptor for proper user+namespace creation
allamand
committed
fix(kind-kro-ack): restore argocdCapability as RGD-managed EKS Capability
allamand
committed
fix: gitlab:init-ec2 definitive - namespace via organization_id, unprotect after creation
allamand
committed
fix: restore argoCdCapabilityRoleArn as optional field — KRO rejects CRD with removed property
allamand
committed
feat(kind-kro-ack): add kro:reset-crds task for breaking schema changes
allamand
committed
fix(kind-kro-ack): derive subnet CIDRs from HUB_VPC_CIDR prefix
allamand
committed
fix(kind-kro-ack): skip hub:install-argocd when ArgoCD CRDs already exist
allamand
committed
fix: remove force push in seed loop - repos are fresh, no need for -f
allamand
committed
fix(kind-kro-ack): fix list-vpc-origins JMESPath query (VpcOriginList.Items)
allamand
committed
fix(kind-kro-ack): fix hub:install-argocd status check (OR not AND)
allamand
committed
fix: seed repos by cloning first (preserves README history from initialize_with_readme)
allamand
committed
fix(kind-kro-ack): seed peeks-hub/secrets early in hub:seed
allamand
committed
fix(kind-kro-ack): add ClusterSecretStore + eso-aws-credentials on bootstrap cluster
allamand
committed
fix(kind-kro-ack): remove clusterSecretsSecret from RGD, seed-secrets handles it
allamand
committed
fix: unprotect branch immediately before each seed push (GitLab re-applies protection)
allamand
committed
refactor: move docker exec gitlab-rails unprotect to workshop/Taskfile.yaml, sync runners
allamand
committed
chore: reference #757 in secrets-manager:seed-secrets (GitLab creds separation)
allamand
committed
fix: use initialize_with_readme:false — empty repos have no protected main branch
allamand
committed
fix(kind-kro-ack): guard kro:reset-crds against live instances
allamand
committed
fix: set default_branch_protection_defaults to allow all pushes (stops re-protection on branch creation)
allamand
committed
fix(kro): remove readyWhen from clusterConfigSecret and hubSecretsExternal
allamand
committed
fix(kind-kro-ack): refresh eso-aws-credentials in credentials:refresh
allamand
committed
fix: restore git push -f for seed — user1 owns repos, force push is correct
allamand
committed
fix(kind-kro-ack): restore-secret before create/put in all seed tasks
allamand
committed

Commits on Jun 27, 2026

Commits on Jun 28, 2026

Commits on Jun 29, 2026

Commits on Jun 30, 2026

Commits on Jul 1, 2026

Commits on Jul 2, 2026

Commits on Jul 3, 2026

Commits on Jul 4, 2026

Commits on Jul 6, 2026

Commits on Jul 7, 2026

fix(cluster-mgmt): allow spoke ACK roles + microservice PassRole; fix ALB host wildcard
allamand
committed
refactor(exposure): introduce explicit `insecure` ingress flag

shapirov103
authored and
allamand
committed
refactor(config): add `insecure` + `certificateArn` to the platform contract

shapirov103
authored and
allamand
committed
refactor(workshop): consolidate workshop content into a top-level workshop/ folder

shapirov103
authored and
allamand
committed
refactor(kind-crossplane): stop provisioning CloudFront; source domain from config

shapirov103
authored and
allamand
committed
refactor(kind-kro-ack): stop provisioning CloudFront; delete shared CF taskfile

shapirov103
authored and
allamand
committed
refactor(kind-kro-ack): stop provisioning CloudFront; source domain from config

shapirov103
authored and
allamand
committed
chore: stop tracking .local scratch dir (add to .gitignore)

shapirov103
authored and
allamand
committed
refactor(providers): remove GitLab-CE docker exec branch-unprotect

shapirov103
authored and
allamand
committed
refactor(providers): spoke-agnostic install + clearer phase names

shapirov103
authored and
allamand
committed
chore: fix stale post-sync log message (was 'phase1-parallel ... cloudfront')

shapirov103
authored and
allamand
committed
refactor(providers): delete GitLab-coupled spoke/overlay tasks (b)

shapirov103
authored and
allamand
committed
feat(workshop): own spoke declaration + fleet overlay (b, consumer side)

shapirov103
authored and
allamand
committed
refactor(config,ray): drop cloudfront.* from schema; parameterize Ray model

shapirov103
authored and
allamand
committed
feat(workshop): consume platform as an artifact (OAP-style, conditional clone)

shapirov103
authored and
allamand
committed
docs(kind-crossplane): replace stale CloudFront exposure section with insecure model

shapirov103
authored and
allamand
committed
refactor(providers): drop GitLab URL from platform finalize output

shapirov103
authored and
allamand
committed
feat(workshop): both spokes (dev+prod) via Crossplane with crossplane+kubevela

shapirov103
authored and
allamand
committed
refactor(workshop): run standalone from workshop/; remove workshop from repo root

shapirov103
authored and
allamand
committed
refactor(workshop): move create-config.sh into workshop/ (out of repo root)

shapirov103
authored and
allamand
committed
fix(workshop): create-config.sh writes repo-root config.local.yaml from workshop/

shapirov103
authored and
allamand
committed
fix(workshop): create-config.sh sets insecure:true for CloudFront mode
allamand
committed
Merge pull request #772 from aws-samples/refactor/decouple-workshop-from-platform
allamand
authored