vikingowl
75a626b127
CI deploy steps now target helm/marktvogt with --reset-then-reuse-values, preserving the other service's image tag across pipeline runs. Each pipeline sets only its own X.image.tag. App-level secrets (smtp/turnstile/discovery/ai/JWT/oauth) moved out of CI's --set chain in the previous phase — now pre-created via scripts/k8s-secrets-sync.sh from .env.helm. The chart's conditional secret templates remain for backward-compat with the live release's stored values but will be removed in a follow-up once those values are cleared. Old per-service chart directories deleted; only the monolithic helm/marktvogt/ remains. MIGRATION.md updated with the actual procedure that worked, including the several pitfalls hit during the live tenant-2 migration on 2026-04-28 (helm uninstall trap, SSA field-manager swap for CRDs, kyverno hostname allowlist for new subdomains).
67 lines
1.8 KiB
YAML
67 lines
1.8 KiB
YAML
repos:
|
|
- repo: https://github.com/pre-commit/pre-commit-hooks
|
|
rev: v5.0.0
|
|
hooks:
|
|
- id: trailing-whitespace
|
|
- id: end-of-file-fixer
|
|
- id: check-yaml
|
|
exclude: ^helm/marktvogt/templates/
|
|
- id: check-json
|
|
exclude: ^web/tsconfig\.json$
|
|
- id: check-merge-conflict
|
|
- id: check-added-large-files
|
|
exclude: ^backend/internal/domain/discovery/crawler/testdata/
|
|
- id: no-commit-to-branch
|
|
args: ['--branch', 'main']
|
|
|
|
- repo: local
|
|
hooks:
|
|
- id: golangci-lint
|
|
name: golangci-lint
|
|
entry: bash -c 'cd backend && golangci-lint run --config .golangci.yml ./...'
|
|
language: system
|
|
files: ^backend/.*\.go$
|
|
pass_filenames: false
|
|
|
|
- id: go-fmt
|
|
name: go fmt
|
|
entry: bash -c 'cd backend && gofmt -w .'
|
|
language: system
|
|
files: ^backend/.*\.go$
|
|
pass_filenames: false
|
|
|
|
- id: go-vet
|
|
name: go vet
|
|
entry: bash -c 'cd backend && go vet ./...'
|
|
language: system
|
|
files: ^backend/.*\.go$
|
|
pass_filenames: false
|
|
|
|
- id: go-mod-tidy
|
|
name: go mod tidy
|
|
entry: bash -c 'cd backend && go mod tidy'
|
|
language: system
|
|
files: ^backend/go\.(mod|sum)$
|
|
pass_filenames: false
|
|
|
|
- id: prettier
|
|
name: prettier
|
|
entry: bash -c 'cd web && pnpm run format:check'
|
|
language: system
|
|
files: ^web/
|
|
pass_filenames: false
|
|
|
|
- id: eslint
|
|
name: eslint
|
|
entry: bash -c 'cd web && pnpm run lint'
|
|
language: system
|
|
files: ^web/
|
|
pass_filenames: false
|
|
|
|
- id: svelte-check
|
|
name: svelte-check
|
|
entry: bash -c 'cd web && pnpm run check -- --threshold error'
|
|
language: system
|
|
files: ^web/
|
|
pass_filenames: false
|