1335 Commits

Author SHA1 Message Date
4406724da5 longhorn: add helm repo and adopt workflow 2026-01-16 16:25:40 -03:00
7c3006736c traefik: add CRDs 2026-01-16 11:21:58 -03:00
9f3d2db63d platform: add cert-manager and align postgres vault path 2026-01-16 11:14:48 -03:00
beb646f78f jellyfin: move cache to emptyDir 2026-01-16 09:43:01 -03:00
4faa039a8e maintenance: avoid blocking on k3s traefik cleanup 2026-01-16 09:38:14 -03:00
ef504eea80 maintenance: allow traefik cleanup watch 2026-01-16 09:33:11 -03:00
671d4d5dce maintenance: cleanup k3s traefik and wger attrs 2026-01-16 09:27:22 -03:00
9474ab97f2 maintenance: disable k3s traefik; keycloak portal admin roles 2026-01-16 07:53:04 -03:00
cf5d7dfa00 jellyfin: set traefik tls annotations 2026-01-16 04:01:27 -03:00
5cd196e043 vault/keycloak: restore kv access and wger sync rbac 2026-01-16 03:46:07 -03:00
8ad9f0a664 vault: allow admin kv browse 2026-01-16 03:20:32 -03:00
f5231d282b vault: allow UI mount listing for admins 2026-01-16 02:06:31 -03:00
bb1bf3c017 fix ingress tls routing 2026-01-16 01:40:50 -03:00
b1489a8dd9 fix logging pipeline secret and scheduling 2026-01-16 00:15:58 -03:00
5816d4f399 comms: fix mas vault file paths 2026-01-15 23:56:32 -03:00
d90950b82e gitea: expose ssh via metallb shared IP 2026-01-15 16:39:04 -03:00
66e7e6acc5 core: add bstein.dev coredns overrides 2026-01-15 16:29:32 -03:00
7817248eb9 traefik: wire LB service to custom deployment 2026-01-15 11:26:46 -03:00
9993b501a6 logging: disable wait for data-prepper helmrelease 2026-01-15 04:47:07 -03:00
a2b2c7db9d keycloak: align smtp probe user 2026-01-15 04:44:35 -03:00
8db4b4f0b5 keycloak: rerun execute-actions email e2e 2026-01-15 04:37:12 -03:00
70a52dec06 bstein-dev-home: rerun onboarding e2e job 2026-01-15 04:35:06 -03:00
c759fb1dbb logging: fix data-prepper post-render patch 2026-01-15 04:27:25 -03:00
c0d0e64bc6 keycloak: rerun realm smtp config 2026-01-15 04:24:16 -03:00
5899c9acb3 vault: allow admin policy to update shared secrets 2026-01-15 04:17:14 -03:00
de6665c450 smtp: use mail.bstein.dev for app relays 2026-01-15 04:04:50 -03:00
e6210644c2 smtp: point services at mailu relay 2026-01-15 03:58:03 -03:00
c30f1fc587 vault: allow sso role to read portal admin secret 2026-01-15 03:46:58 -03:00
bf9a24681c fix: bump keycloak and portal e2e job names 2026-01-15 03:44:27 -03:00
69cee91dda vault: fix data-prepper pipeline and portal admin secret job 2026-01-15 03:42:57 -03:00
2ccc33b105 logging: patch data-prepper volume via json 2026-01-15 03:30:16 -03:00
760c9cbe6b logging: drop namespace from data-prepper patch 2026-01-15 03:27:36 -03:00
76151a082c logging: simplify data-prepper patch 2026-01-15 03:25:33 -03:00
c7fa52ab27 logging: use strategic patch for pipeline volume 2026-01-15 03:23:42 -03:00
88f862e18a logging: switch data-prepper volume to configmap 2026-01-15 03:17:07 -03:00
4dba510d6f logging: replace pipeline volume with configmap 2026-01-15 03:14:07 -03:00
9a9ecc4903 logging: patch data-prepper volume to configmap 2026-01-15 03:12:13 -03:00
a7998fc0bf bstein-dev-home: restore image automation setters 2026-01-15 03:11:57 -03:00
72d49f88fe nextcloud: fix cronjob shell flags 2026-01-15 03:08:01 -03:00
fb992f0cff logging: move data-prepper pipeline to configmap 2026-01-15 02:59:21 -03:00
53da4c20ab keycloak: stop writing oauth2-proxy secret 2026-01-15 02:37:04 -03:00
f9fa6dcbb4 crypto: drop wallet rpc bootstrap job 2026-01-15 02:31:31 -03:00
2ecd274f28 crypto: fix wallet rpc image 2026-01-15 02:26:54 -03:00
feb9d6997c vault: prepopulate oidc job 2026-01-15 02:22:52 -03:00
9e6673d02e vault: default oidc claims type 2026-01-15 02:20:53 -03:00
d69545cdb5 vault: harden oidc claims type 2026-01-15 02:18:50 -03:00
756a1af2e6 vault: allow oidc tuning 2026-01-15 02:16:55 -03:00
74a2b3e28d vault: use static token reviewer 2026-01-15 02:14:08 -03:00
84ccf35c44 flux: auto-update portal images on feature branch 2026-01-15 02:12:52 -03:00
e885c7d6ce vault: allow vault-admin token review 2026-01-15 02:09:34 -03:00