Hermes Agent service account 152f10ed8b Add ArgoCD PostSync hook for Harbor robot accounts ...

Manages robot accounts declaratively via GitOps:
- tekton-builder: push/pull access for CI/CD pipelines
- fastpass-cluster: pull-only access for K8s image pulls

Implementation:
- Kubernetes Job with argocd.argoproj.io/hook: PostSync annotation
- Idempotent: checks if accounts exist before creating
- Uses harbor-credentials ExternalSecret for admin password
- BeforeHookCreation deletion policy for clean reruns

Replaces manual robot account creation via Harbor API.

2026-06-04 23:35:45 -05:00

3.1 KiB

Raw Blame History

View Raw