aaron/infra-core
1
0
Fork 2
Code Issues Pull requests 12 Projects Releases 1 Packages Wiki Activity Actions

HOMELAB-379: feat(lab-director): Temporal worker Helm chart + ExternalSecrets #57

Merged
claude-agent merged 2 commits from plane/HOMELAB-379-temporal-worker into live 2026-03-25 00:39:49 +00:00
Conversation 1 Commits 2 Files changed 6 +291
claude-agent commented 2026-03-25 00:39:29 +00:00
Owner
Copy link

Summary

  • Worker deployment template with dev-agent credential mounts, PVC, SecurityContext
  • ExternalSecrets for lab-director namespace (auto-synced by existing ArgoCD app)
  • ServiceAccount + RBAC (ClusterRoleBinding to dev-agent-scoped, RoleBinding for namespace admin)
  • Worker disabled by default — enabled via prod overrides

Test plan

  • helm template renders all templates without errors
  • Worker templates only render when worker.enabled: true
  • ExternalSecrets create secrets in lab-director namespace
  • RBAC grants appropriate cluster-read + namespace-admin

Generated with Claude Code

## Summary - Worker deployment template with dev-agent credential mounts, PVC, SecurityContext - ExternalSecrets for lab-director namespace (auto-synced by existing ArgoCD app) - ServiceAccount + RBAC (ClusterRoleBinding to dev-agent-scoped, RoleBinding for namespace admin) - Worker disabled by default — enabled via prod overrides ## Test plan - [ ] helm template renders all templates without errors - [ ] Worker templates only render when worker.enabled: true - [ ] ExternalSecrets create secrets in lab-director namespace - [ ] RBAC grants appropriate cluster-read + namespace-admin Generated with [Claude Code](https://claude.com/claude-code)
Add worker-deployment.yaml and worker-pvc.yaml templates to the
lab-director chart. Worker deployment mounts the same credentials
as dev-environment pods (SSH, kubeconfig, ArgoCD, Claude OAuth, MCP).
Disabled by default — enabled via prod overrides.

Co-Authored-By: Claude Opus 4.6 (1M context) <noreply@anthropic.com>
HOMELAB-379: feat(lab-director): add worker ExternalSecrets, SA, and RBAC
Some checks failed
Plan failed.
CI Review / ai-review (pull_request) Has been cancelled
Details
CI Review / helm-validate (pull_request) Has been cancelled
Details
CI Review / pr-title (pull_request) Has been cancelled
Details
Lint & Validate / shellcheck (pull_request) Has been cancelled
Details
Lint & Validate / yaml-lint (pull_request) Has been cancelled
Details
Lint & Validate / terraform-validate (pull_request) Has been cancelled
Details
e3e3134f24 
Create ExternalSecrets for lab-director namespace (synced by existing
ArgoCD external-secrets-config app) to provision dev-agent credentials.
Add ServiceAccount and RBAC templates to the lab-director Helm chart
binding to the existing dev-agent-scoped ClusterRole.

Co-Authored-By: Claude Opus 4.6 (1M context) <noreply@anthropic.com>
atlantis commented 2026-03-25 00:39:32 +00:00
Collaborator
Copy link

Plan Error

creating new workspace: mkdir /atlantis-data/repos/aaron/infra-core/57: read-only file system
**Plan Error** ``` creating new workspace: mkdir /atlantis-data/repos/aaron/infra-core/57: read-only file system ```
Sign in to join this conversation.
Reviewers
No reviewers
Labels
Clear labels
No items
No labels
Milestone
Clear milestone
No items
No milestone
Projects
Clear projects
No items
No project
Assignees
Clear assignees
No assignees
2 participants
Notifications
Due date
The due date is invalid or out of range. Please use the format "yyyy-mm-dd".

No due date set.

Dependencies

No dependencies set.

Reference
aaron/infra-core!57
No description provided.