fix some autodeploy stuff

.forgejo/workflows/build-deployer.yaml

@@ -11,7 +11,7 @@ jobs:
     steps:
       - run: apk add --no-cache nodejs git
       - name: login to container registry
-        run: echo "${{ secrets.DEPLOY_SECRET }}" | docker login --username ${{ secrets.DEPLOY_USER }} --password-stdin git.janky.solutions
+        run: echo "${{ secrets.DEPLOY_TOKEN }}" | docker login --username ${{ secrets.DEPLOY_USER }} --password-stdin git.janky.solutions
       - name: build container image
         uses: docker/build-push-action@v6
         with:

.forgejo/workflows/k8s-diff-and-deploy.yaml

@@ -7,7 +7,7 @@ jobs:
   diff-and-deploy:
     runs-on: ubuntu-latest
     container:
-      image: git.devhack.net/devhack/containers/deployer:latest
+      image: git.janky.solutions/jankysolutions/infra/deployer:latest
     steps:
       - uses: actions/checkout@v4
       - name: kubectl diff and deploy

k8s/external-account-rbac/infra-deployer.yaml

@@ -0,0 +1,20 @@
+apiVersion: rbac.authorization.k8s.io/v1
+kind: ClusterRole
+metadata:
+  name: infra-deployer
+rules:
+  - apiGroups: ["*"]
+    resources: ["*"]
+    verbs: ["*"]
+---
+apiVersion: rbac.authorization.k8s.io/v1
+kind: ClusterRoleBinding
+metadata:
+  name: infra-deployer
+roleRef:
+  apiGroup: rbac.authorization.k8s.io
+  kind: ClusterRole
+  name: infra-deployer
+subjects:
+- kind: User
+  name: infra-deployer

k8s/external-account-rbac/kustomization.yaml

@@ -0,0 +1,4 @@
+apiVersion: kustomize.config.k8s.io/v1beta1
+kind: Kustomization
+resources:
+  - infra-deployer.yaml

k8s/forgejo/forgejo-secret-sync/forgejo-secret-sync.py

@@ -53,7 +53,7 @@ apiVersion: v1
 clusters:
 - cluster:
     certificate-authority-data: {ca}
-    server: https://k8s-node-1:6443
+    server: https://10.5.1.110:6443
   name: default
 contexts:
 - context:

k8s/operators/longhorn/kustomization.yaml

@@ -3,7 +3,7 @@ kind: Kustomization
 namespace: longhorn-system
 resources:
   - https://github.com/longhorn/longhorn/releases/download/v1.6.2/longhorn.yaml
-  - secrets.yaml
+  # - secrets.yaml
   - backup.yaml
   - ingress.yaml
   - servicemonitor.yaml