150 Commits

Author SHA1 Message Date
ed5a59f21d maintenance(soteria): set explicit b2 endpoint and bucket 2026-04-12 20:31:02 -03:00
a1257b65ff maintenance(ariadne): roll image to 0.1.0-103 for cleanup rollout 2026-04-12 20:06:03 -03:00
049a0deb04 maintenance(soteria): roll react ui image and wire b2 monitoring 2026-04-12 20:04:35 -03:00
b9b9308500 maintenance(soteria): roll image to 0.1.0-22 for oauth2 headers 2026-04-12 18:55:09 -03:00
9f5c9bfb86 maintenance(soteria): re-enable flux management for workload resources 2026-04-12 18:41:56 -03:00
8a413c0024 merge: lane2 jenkins cleanup activate 2026-04-12 18:33:00 -03:00
aa24e08744 merge: lane2 jenkins cleanup wiring 2026-04-12 18:32:48 -03:00
82cab1ce2a maintenance(soteria): tighten oauth2 ingress and drill validation 2026-04-12 15:07:54 -03:00
241a405c05 maintenance(soteria): harden ingress path and add backup alerts 2026-04-12 15:07:54 -03:00
6a44a56c38 maintenance(soteria): add serviceaccount and rbac manifests 2026-04-12 15:07:54 -03:00
091e743d0e maintenance(soteria): add protected UI, OIDC bootstrap, and backup health panel wiring 2026-04-12 15:07:53 -03:00
4864939eef maintenance(ariadne): activate jenkins workspace cleanup deletes 2026-04-12 15:01:35 -03:00
2509d8876a maintenance(ariadne): default jenkins cleanup to safe dry-run 2026-04-12 12:32:20 -03:00
6276bd037c maintenance/ariadne: add jenkins workspace cleanup schedule and RBAC 2026-04-12 04:47:19 -03:00
3774b600ee scheduling: keep app workloads off control-plane 2026-04-12 04:27:43 -03:00
246424762e maintenance: remove pi-usb-scratch guard rollout 2026-04-12 01:04:23 -03:00
63e89b51f0 maintenance(pi-usb-scratch): disable rollout jitter for initial cutover 2026-04-11 12:00:46 -03:00
3cb1582adc maintenance(pi-usb-scratch): fix false mount conflict detection 2026-04-11 11:58:00 -03:00
3ea296b552 maintenance: enforce Astraios + tmpfs /tmp on worker Pis 2026-04-11 11:55:49 -03:00
5e39164fcd maintenance: add worker pi usb scratch rollout 2026-04-11 11:55:49 -03:00
764bfe189e monitoring/recovery: harden ananke checks and OIDC-gated service validation 2026-04-09 01:44:26 -03:00
a4631dee81 maintenance: migrate metis ssh key names to ananke 2026-04-07 04:36:42 -03:00
5e387e8e4d maintenance/metis: remove legacy hecate ssh key vars 2026-04-06 19:43:16 -03:00
1ccb04a18a maintenance/metis: default missing ananke ssh keys to empty 2026-04-06 19:36:01 -03:00
25ea022c2e maintenance/metis: migrate ssh key vars to ananke 2026-04-06 19:28:44 -03:00
801dde8242 maintenance: harden k3s traefik disable cleanup 2026-04-06 01:47:32 -03:00
2a9485d9e0 maintenance: disable ariadne vault auth/oidc policy sync cron 2026-04-05 17:40:40 -03:00
2799b54b08 maintenance: pin metis to available image tag 2026-04-05 17:05:31 -03:00
3ce7b2eeb7 maintenance/monitoring: wire reciprocal metis hecate key + dampen alert flapping 2026-04-05 13:51:57 -03:00
8d1be9672c maintenance/metis: bump runner tags to 0.1.0-23 2026-04-05 11:41:02 -03:00
deb52c424b maintenance/vault: move Metis runtime secrets to Vault 2026-04-05 11:31:05 -03:00
0828f0cf9e maintenance: inject metis SSH keys directly from Vault 2026-04-05 10:31:20 -03:00
e84399d0b1 maintenance: source metis SSH keys from Vault 2026-04-05 10:25:29 -03:00
1c9716d855 maintenance: pass bastion key into metis env 2026-04-05 10:18:13 -03:00
0fc5ac3041 maintenance/metis: read optional ssh pubkeys from secret env 2026-04-05 10:07:09 -03:00
e418183f56 maintenance(metis): roll deployment after config update 2026-04-02 01:27:23 -03:00
8e711c4666 maintenance(metis): raise media size ceiling to 1TB 2026-04-02 01:26:38 -03:00
0c2f769875 maintenance(metis): re-enable titan-24 flash host list 2026-04-02 01:22:49 -03:00
1e3352b94a maintenance: roll metis runtime to 0.1.0-21 2026-04-01 13:16:04 -03:00
db357dca2c maintenance: roll metis runtime to 0.1.0-20 2026-04-01 13:00:59 -03:00
7d0c474f4d maintenance: enable jetson sources and roll metis to 0.1.0-19 2026-04-01 12:53:50 -03:00
5ec3b2b992 maintenance: roll metis runtime to 0.1.0-18 2026-04-01 12:47:27 -03:00
aacaee2052 maintenance: roll metis runtime to 0.1.0-17 2026-04-01 12:30:04 -03:00
572cb018c4 maintenance: roll metis runtime to 0.1.0-16 2026-04-01 11:14:49 -03:00
17ab6e6fec maintenance: add rpi5 worker base image for metis 2026-04-01 11:09:53 -03:00
ef07a044c6 maintenance: roll metis runtime tag 2026-04-01 10:32:15 -03:00
a02e42b1ea maintenance: tighten metis auth and roll inventory update 2026-04-01 10:31:06 -03:00
5e188e6b8a maintenance: roll metis progress update 2026-04-01 02:08:32 -03:00
8005d72bca maintenance: roll metis remote worker result fix 2026-04-01 01:49:10 -03:00
f3d2cb3b64 maintenance: roll metis host tmp path fix 2026-03-31 21:49:31 -03:00