gitea_admin/Homelabv4
1
0
Fork 0
mirror of https://gitlab.kube.huskypup.net/Scooby/Homelabv4.git synced 2026-08-21 05:26:49 +00:00
Code Issues Packages Projects Releases Wiki Activity

Add VPS GitLab mirror-sync CronJob for Homelabv4 repo

Browse Source 
GitLab's native pull-mirror feature is Premium/Ultimate-gated on this
chart/version - confirmed live: the project API rejects 'mirror' and
'import_url' as unrecognized params on this CE instance entirely.
Plain git equivalent instead: CronJob every 15min does
'git clone --mirror' from home's Scooby/Homelabv4 (read-only deploy
token) then 'git push --mirror' to the VPS copy (write_repository
PAT, since deploy tokens can't push - not a valid scope for them
either). Matches the original plan's 'Gitea pull mirror of the GitOps
source' intent now that real GitLab replaced Gitea. Both tokens in
Vault at secret/vps/gitlab-mirror, pulled via ExternalSecret.

Co-Authored-By: Claude Sonnet 5 <noreply@anthropic.com>
This commit is contained in:
Scooby Husky
2026-08-20 23:55:20 -05:00
co-authored by Claude Sonnet 5
parent d99b560cec
commit a104008111
2 changed files with 98 additions and 0 deletions
Download Patch File Download Diff File Expand all files Collapse all files
infrastructure/vps-standby/gitlab/manifests/mirror-sync-secret.yaml
+39
View File
@@ -0,0 +1,39 @@
# Credentials for mirror-sync-cronjob.yaml. GitLab's native repository
# mirroring (pull mirror) is a Premium/Ultimate-gated feature as of this
# chart version - confirmed live 2026-08-21: the API rejects `mirror`
# and `import_url` as valid params on this CE instance entirely
# ("allow_merge_on_skipped_pipeline, ... are missing" - i.e. neither
# field is even recognized). So this CronJob does the plain-git
# equivalent (clone --mirror / push --mirror) on a schedule instead.
#
# - pull_username/pull_token: read-only deploy token on HOME's
# Scooby/Homelabv4 project (deploy tokens can't have write_repository
# - it's not a valid scope for them, confirmed live).
# - push_username/push_token: a write_repository-scoped Personal Access
# Token for VPS GitLab's root user (deploy tokens can't push either).
apiVersion: external-secrets.io/v1
kind: ExternalSecret
metadata:
name: gitlab-mirror-sync
namespace: gitlab
spec:
refreshInterval: 1h
secretStoreRef:
kind: ClusterSecretStore
name: vault-backend
target:
name: gitlab-mirror-sync-secret
creationPolicy: Owner
data:
- secretKey: pull_username
remoteRef:
key: vps/gitlab-mirror
property: username
- secretKey: pull_token
remoteRef:
key: vps/gitlab-mirror
property: token
- secretKey: push_token
remoteRef:
key: vps/gitlab-mirror
property: push_token