Payload
{
"ref": "refs/heads/main",
"before": "7989826fb8a8510b9b202b152073e5457591829d",
"after": "008c3ccf1dc7e7867eaba9ccd981d6c751fcfbbf",
"repository": {
"id": 1245034854,
"node_id": "R_kgDOSjW5Zg",
"name": "gitops",
"full_name": "darkmatter/gitops",
"private": true,
"owner": {
"name": "darkmatter",
"email": "hello@dm.sh",
"login": "darkmatter",
"id": 17834193,
"node_id": "MDEyOk9yZ2FuaXphdGlvbjE3ODM0MTkz",
"avatar_url": "https://avatars.githubusercontent.com/u/17834193?v=4",
"gravatar_id": "",
"url": "https://api.github.com/users/darkmatter",
"html_url": "https://github.com/darkmatter",
"followers_url": "https://api.github.com/users/darkmatter/followers",
"following_url": "https://api.github.com/users/darkmatter/following{/other_user}",
"gists_url": "https://api.github.com/users/darkmatter/gists{/gist_id}",
"starred_url": "https://api.github.com/users/darkmatter/starred{/owner}{/repo}",
"subscriptions_url": "https://api.github.com/users/darkmatter/subscriptions",
"organizations_url": "https://api.github.com/users/darkmatter/orgs",
"repos_url": "https://api.github.com/users/darkmatter/repos",
"events_url": "https://api.github.com/users/darkmatter/events{/privacy}",
"received_events_url": "https://api.github.com/users/darkmatter/received_events",
"type": "Organization",
"user_view_type": "public",
"site_admin": false
},
"html_url": "https://github.com/darkmatter/gitops",
"description": "ArgoCD-managed Kubernetes workloads for the Dark Matter k3s control plane (app-of-apps target).",
"fork": false,
"url": "https://api.github.com/repos/darkmatter/gitops",
"forks_url": "https://api.github.com/repos/darkmatter/gitops/forks",
"keys_url": "https://api.github.com/repos/darkmatter/gitops/keys{/key_id}",
"collaborators_url": "https://api.github.com/repos/darkmatter/gitops/collaborators{/collaborator}",
"teams_url": "https://api.github.com/repos/darkmatter/gitops/teams",
"hooks_url": "https://api.github.com/repos/darkmatter/gitops/hooks",
"issue_events_url": "https://api.github.com/repos/darkmatter/gitops/issues/events{/number}",
"events_url": "https://api.github.com/repos/darkmatter/gitops/events",
"assignees_url": "https://api.github.com/repos/darkmatter/gitops/assignees{/user}",
"branches_url": "https://api.github.com/repos/darkmatter/gitops/branches{/branch}",
"tags_url": "https://api.github.com/repos/darkmatter/gitops/tags",
"blobs_url": "https://api.github.com/repos/darkmatter/gitops/git/blobs{/sha}",
"git_tags_url": "https://api.github.com/repos/darkmatter/gitops/git/tags{/sha}",
"git_refs_url": "https://api.github.com/repos/darkmatter/gitops/git/refs{/sha}",
"trees_url": "https://api.github.com/repos/darkmatter/gitops/git/trees{/sha}",
"statuses_url": "https://api.github.com/repos/darkmatter/gitops/statuses/{sha}",
"languages_url": "https://api.github.com/repos/darkmatter/gitops/languages",
"stargazers_url": "https://api.github.com/repos/darkmatter/gitops/stargazers",
"contributors_url": "https://api.github.com/repos/darkmatter/gitops/contributors",
"subscribers_url": "https://api.github.com/repos/darkmatter/gitops/subscribers",
"subscription_url": "https://api.github.com/repos/darkmatter/gitops/subscription",
"commits_url": "https://api.github.com/repos/darkmatter/gitops/commits{/sha}",
"git_commits_url": "https://api.github.com/repos/darkmatter/gitops/git/commits{/sha}",
"comments_url": "https://api.github.com/repos/darkmatter/gitops/comments{/number}",
"issue_comment_url": "https://api.github.com/repos/darkmatter/gitops/issues/comments{/number}",
"contents_url": "https://api.github.com/repos/darkmatter/gitops/contents/{+path}",
"compare_url": "https://api.github.com/repos/darkmatter/gitops/compare/{base}...{head}",
"merges_url": "https://api.github.com/repos/darkmatter/gitops/merges",
"archive_url": "https://api.github.com/repos/darkmatter/gitops/{archive_format}{/ref}",
"downloads_url": "https://api.github.com/repos/darkmatter/gitops/downloads",
"issues_url": "https://api.github.com/repos/darkmatter/gitops/issues{/number}",
"pulls_url": "https://api.github.com/repos/darkmatter/gitops/pulls{/number}",
"milestones_url": "https://api.github.com/repos/darkmatter/gitops/milestones{/number}",
"notifications_url": "https://api.github.com/repos/darkmatter/gitops/notifications{?since,all,participating}",
"labels_url": "https://api.github.com/repos/darkmatter/gitops/labels{/name}",
"releases_url": "https://api.github.com/repos/darkmatter/gitops/releases{/id}",
"deployments_url": "https://api.github.com/repos/darkmatter/gitops/deployments",
"created_at": 1779310990,
"updated_at": "2026-06-10T20:26:31Z",
"pushed_at": 1781154507,
"git_url": "git://github.com/darkmatter/gitops.git",
"ssh_url": "git@github.com:darkmatter/gitops.git",
"clone_url": "https://github.com/darkmatter/gitops.git",
"svn_url": "https://github.com/darkmatter/gitops",
"homepage": null,
"size": 442,
"stargazers_count": 0,
"watchers_count": 0,
"language": "Shell",
"has_issues": true,
"has_projects": true,
"has_downloads": true,
"has_wiki": true,
"has_pages": false,
"has_discussions": true,
"forks_count": 0,
"mirror_url": null,
"archived": false,
"disabled": false,
"open_issues_count": 0,
"license": null,
"allow_forking": false,
"is_template": false,
"web_commit_signoff_required": false,
"has_pull_requests": true,
"pull_request_creation_policy": "all",
"topics": [],
"visibility": "private",
"forks": 0,
"open_issues": 0,
"watchers": 0,
"default_branch": "main",
"stargazers": 0,
"master_branch": "main",
"organization": "darkmatter",
"custom_properties": {}
},
"pusher": {
"name": "czxtm",
"email": "1325802+czxtm@users.noreply.github.com"
},
"forced": false,
"organization": {
"login": "darkmatter",
"id": 17834193,
"node_id": "MDEyOk9yZ2FuaXphdGlvbjE3ODM0MTkz",
"url": "https://api.github.com/orgs/darkmatter",
"repos_url": "https://api.github.com/orgs/darkmatter/repos",
"events_url": "https://api.github.com/orgs/darkmatter/events",
"hooks_url": "https://api.github.com/orgs/darkmatter/hooks",
"issues_url": "https://api.github.com/orgs/darkmatter/issues",
"members_url": "https://api.github.com/orgs/darkmatter/members{/member}",
"public_members_url": "https://api.github.com/orgs/darkmatter/public_members{/member}",
"avatar_url": "https://avatars.githubusercontent.com/u/17834193?v=4",
"description": ""
},
"enterprise": {
"id": 469843,
"slug": "darkmatter",
"name": "darkmatter",
"node_id": "E_kgDOAAcrUw",
"avatar_url": "https://avatars.githubusercontent.com/b/469843?v=4",
"description": "",
"website_url": "darkmatter.io",
"html_url": "https://github.com/enterprises/darkmatter",
"created_at": "2025-09-07T16:01:00Z",
"updated_at": "2026-06-07T16:53:26Z"
},
"sender": {
"login": "czxtm",
"id": 1325802,
"node_id": "MDQ6VXNlcjEzMjU4MDI=",
"avatar_url": "https://avatars.githubusercontent.com/u/1325802?v=4",
"gravatar_id": "",
"url": "https://api.github.com/users/czxtm",
"html_url": "https://github.com/czxtm",
"followers_url": "https://api.github.com/users/czxtm/followers",
"following_url": "https://api.github.com/users/czxtm/following{/other_user}",
"gists_url": "https://api.github.com/users/czxtm/gists{/gist_id}",
"starred_url": "https://api.github.com/users/czxtm/starred{/owner}{/repo}",
"subscriptions_url": "https://api.github.com/users/czxtm/subscriptions",
"organizations_url": "https://api.github.com/users/czxtm/orgs",
"repos_url": "https://api.github.com/users/czxtm/repos",
"events_url": "https://api.github.com/users/czxtm/events{/privacy}",
"received_events_url": "https://api.github.com/users/czxtm/received_events",
"type": "User",
"user_view_type": "public",
"site_admin": false
},
"installation": {
"id": 131074261,
"node_id": "MDIzOkludGVncmF0aW9uSW5zdGFsbGF0aW9uMTMxMDc0MjYx"
},
"created": false,
"deleted": false,
"base_ref": null,
"compare": "https://github.com/darkmatter/gitops/compare/7989826fb8a8...008c3ccf1dc7",
"commits": [
{
"id": "a772218278807955ac9f9ff2c9bcfb5fd7b250fb",
"tree_id": "2174d37ec3bb7540894fffe310408e487767c3cb",
"distinct": true,
"message": "feat(authentik): add Grafana OAuth2 provider blueprint\n\nThe Authentik side of Grafana SSO was never codified — the provider\nand application (slug: darkmatter-grafana) were missing from Authentik's\nDB entirely, causing Grafana's generic_oauth login to fail with a\nmissing client ID error.\n\n- Add grafana-oauth.yaml blueprint defining:\n - OAuth2Provider with client_id=darkmatter-grafana (matching\n GF_AUTH_GENERIC_OAUTH_CLIENT_ID in the grafana-oauth K8s Secret)\n - Application with slug darkmatter-grafana (matching the\n signout_redirect_url in Grafana's auth config)\n - Redirect URI regex for grafana.darkmatter.io + drkmttr.dev\n - openid/profile/email/groups scope mappings\n- Register blueprint in authentik-blueprints ConfigMap\n\nPost-merge: patch the grafana-oauth K8s Secret with the real\nclient_secret (already done in-cluster) and re-encrypt the SOPS\nfile on a machine with the age key.",
"timestamp": "2026-06-10T22:07:17-07:00",
"url": "https://github.com/darkmatter/gitops/commit/a772218278807955ac9f9ff2c9bcfb5fd7b250fb",
"author": {
"name": "Cooper Maruyama",
"email": "me@cooperm.com",
"date": "2026-06-10T22:07:17-07:00",
"username": "czxtm"
},
"committer": {
"name": "Cooper Maruyama",
"email": "me@cooperm.com",
"date": "2026-06-10T22:07:17-07:00",
"username": "czxtm"
},
"added": [
"manifests/authentik/blueprints/grafana-oauth.yaml"
],
"removed": [],
"modified": [
"manifests/authentik/kustomization.yaml"
]
},
{
"id": "3756c111f338ee57999cf3028e1fbc9b859008f8",
"tree_id": "4d8acd76cf56fe8b8c48f8696831b72c32506353",
"distinct": true,
"message": "fix(grafana): set real OAuth client secret in SOPS\n\nRe-encrypt the grafana-oauth secret with the actual client_secret\nthat matches the Authentik provider blueprint. The previous value\nwas the placeholder ROTATE_ME_AFTER_AUTHENTIK_PROVIDER_CREATED.\n\nclient_id: darkmatter-grafana (unchanged)\nclient_secret: generated to match the authentik blueprint",
"timestamp": "2026-06-10T22:07:53-07:00",
"url": "https://github.com/darkmatter/gitops/commit/3756c111f338ee57999cf3028e1fbc9b859008f8",
"author": {
"name": "Cooper Maruyama",
"email": "me@cooperm.com",
"date": "2026-06-10T22:07:53-07:00",
"username": "czxtm"
},
"committer": {
"name": "Cooper Maruyama",
"email": "me@cooperm.com",
"date": "2026-06-10T22:07:53-07:00",
"username": "czxtm"
},
"added": [],
"removed": [],
"modified": [
"manifests/observability-grafana-oauth/secrets.sops.yaml"
]
},
{
"id": "008c3ccf1dc7e7867eaba9ccd981d6c751fcfbbf",
"tree_id": "68c4b192b5be6e9363a050880adc1f1042ec84cb",
"distinct": true,
"message": "feat: eth mainnet + base nodes via reth on raven\n\nblockchain-platform: StorageClass + 4 static local NVMe PVs (sync-wave -2)\nethereum-l1: reth v2.3.0 --full + lighthouse v8.1.3 checkpoint sync\nbase-node: ghcr.io/base/node-reth:v0.14.8 with snapshot bootstrap\n\nOracle-reviewed; JWTs SOPS-encrypted; kubeconform + kustomize clean.\nRecovered from session DB after external workspace wipe (gitops-uva).",
"timestamp": "2026-06-10T22:08:15-07:00",
"url": "https://github.com/darkmatter/gitops/commit/008c3ccf1dc7e7867eaba9ccd981d6c751fcfbbf",
"author": {
"name": "Cooper Maruyama",
"email": "me@cooperm.com",
"date": "2026-06-10T22:08:15-07:00",
"username": "czxtm"
},
"committer": {
"name": "Cooper Maruyama",
"email": "me@cooperm.com",
"date": "2026-06-10T22:08:15-07:00",
"username": "czxtm"
},
"added": [
"apps/base-node.yaml",
"apps/blockchain-platform.yaml",
"apps/ethereum-l1.yaml",
"manifests/base-node/README.md",
"manifests/base-node/configmap.yaml",
"manifests/base-node/jwt.sops.yaml",
"manifests/base-node/kustomization.yaml",
"manifests/base-node/pvc.yaml",
"manifests/base-node/secret-generator.yaml",
"manifests/base-node/service.yaml",
"manifests/base-node/servicemonitor.yaml",
"manifests/base-node/statefulset.yaml",
"manifests/blockchain-platform/README.md",
"manifests/blockchain-platform/kustomization.yaml",
"manifests/blockchain-platform/persistentvolumes.yaml",
"manifests/blockchain-platform/storageclass.yaml",
"manifests/ethereum-l1/README.md",
"manifests/ethereum-l1/jwt.sops.yaml",
"manifests/ethereum-l1/kustomization.yaml",
"manifests/ethereum-l1/lighthouse-pvc.yaml",
"manifests/ethereum-l1/lighthouse-service.yaml",
"manifests/ethereum-l1/lighthouse-servicemonitor.yaml",
"manifests/ethereum-l1/lighthouse-statefulset.yaml",
"manifests/ethereum-l1/reth-pvc.yaml",
"manifests/ethereum-l1/reth-service.yaml",
"manifests/ethereum-l1/reth-servicemonitor.yaml",
"manifests/ethereum-l1/reth-statefulset.yaml",
"manifests/ethereum-l1/secret-generator.yaml"
],
"removed": [],
"modified": []
}
],
"head_commit": {
"id": "008c3ccf1dc7e7867eaba9ccd981d6c751fcfbbf",
"tree_id": "68c4b192b5be6e9363a050880adc1f1042ec84cb",
"distinct": true,
"message": "feat: eth mainnet + base nodes via reth on raven\n\nblockchain-platform: StorageClass + 4 static local NVMe PVs (sync-wave -2)\nethereum-l1: reth v2.3.0 --full + lighthouse v8.1.3 checkpoint sync\nbase-node: ghcr.io/base/node-reth:v0.14.8 with snapshot bootstrap\n\nOracle-reviewed; JWTs SOPS-encrypted; kubeconform + kustomize clean.\nRecovered from session DB after external workspace wipe (gitops-uva).",
"timestamp": "2026-06-10T22:08:15-07:00",
"url": "https://github.com/darkmatter/gitops/commit/008c3ccf1dc7e7867eaba9ccd981d6c751fcfbbf",
"author": {
"name": "Cooper Maruyama",
"email": "me@cooperm.com",
"date": "2026-06-10T22:08:15-07:00",
"username": "czxtm"
},
"committer": {
"name": "Cooper Maruyama",
"email": "me@cooperm.com",
"date": "2026-06-10T22:08:15-07:00",
"username": "czxtm"
},
"added": [
"apps/base-node.yaml",
"apps/blockchain-platform.yaml",
"apps/ethereum-l1.yaml",
"manifests/base-node/README.md",
"manifests/base-node/configmap.yaml",
"manifests/base-node/jwt.sops.yaml",
"manifests/base-node/kustomization.yaml",
"manifests/base-node/pvc.yaml",
"manifests/base-node/secret-generator.yaml",
"manifests/base-node/service.yaml",
"manifests/base-node/servicemonitor.yaml",
"manifests/base-node/statefulset.yaml",
"manifests/blockchain-platform/README.md",
"manifests/blockchain-platform/kustomization.yaml",
"manifests/blockchain-platform/persistentvolumes.yaml",
"manifests/blockchain-platform/storageclass.yaml",
"manifests/ethereum-l1/README.md",
"manifests/ethereum-l1/jwt.sops.yaml",
"manifests/ethereum-l1/kustomization.yaml",
"manifests/ethereum-l1/lighthouse-pvc.yaml",
"manifests/ethereum-l1/lighthouse-service.yaml",
"manifests/ethereum-l1/lighthouse-servicemonitor.yaml",
"manifests/ethereum-l1/lighthouse-statefulset.yaml",
"manifests/ethereum-l1/reth-pvc.yaml",
"manifests/ethereum-l1/reth-service.yaml",
"manifests/ethereum-l1/reth-servicemonitor.yaml",
"manifests/ethereum-l1/reth-statefulset.yaml",
"manifests/ethereum-l1/secret-generator.yaml"
],
"removed": [],
"modified": []
}
}