126 Commits

Author SHA1 Message Date
d514fb35e5 longhorn(core): restore b2 secret objects in vault sync 2026-04-12 23:54:35 -03:00
764bfe189e monitoring/recovery: harden ananke checks and OIDC-gated service validation 2026-04-09 01:44:26 -03:00
7619bba5d9 traefik: define cluster ingress class 2026-04-06 02:00:22 -03:00
816d0cca65 traefik: isolate custom rbac from k3s cleanup 2026-04-06 01:57:34 -03:00
a097c36718 core: decouple coredns image from harbor for bootstrap recovery 2026-04-05 18:33:21 -03:00
28ad86085c longhorn: reconcile astreae and asteria disk tags 2026-03-31 13:54:58 -03:00
7a70c22a46 cert-manager: force public DNS for HTTP-01 self-check 2026-03-30 21:39:35 -03:00
993702afee monitoring: alert on VM outage 2026-01-23 11:51:28 -03:00
8b8766b0f0 monitoring: add postgres metrics and update overview 2026-01-22 18:23:26 -03:00
c804ec040c glue: centralize sync tasks in ariadne 2026-01-21 02:57:40 -03:00
d07415e623 core: fix postmark DNS and time sync 2026-01-19 23:45:31 -03:00
f3620aa2a4 chore: centralize harbor pull credentials 2026-01-19 19:02:14 -03:00
2b9a8eb8eb monitoring: add glue row and fix mail dns 2026-01-18 08:12:06 -03:00
b95cde3650 core: pin coredns to rpi workers 2026-01-17 20:15:51 -03:00
7e06457add core: route budget and money to traefik 2026-01-17 08:16:57 -03:00
31f9f1a42d core: point internal dns at traefik service 2026-01-17 08:05:33 -03:00
8d6d97e244 platform: restore cert-manager and encrypt budget storage 2026-01-17 07:38:38 -03:00
46459d562b core: add finance hosts to coredns 2026-01-17 06:56:45 -03:00
66679c428f jobs: bump names after affinity update 2026-01-17 01:52:16 -03:00
7cf0344d59 jobs: prefer arm64 workers 2026-01-17 01:47:53 -03:00
e8ccfa6207 jobs: drop apk installs and prefer arm64 2026-01-17 01:02:58 -03:00
a098ca454f core: fix coredns tag 2026-01-16 23:27:04 -03:00
c40c1b221b core: use harbor coredns image 2026-01-16 23:25:28 -03:00
bd6643512f core: manage coredns deployment 2026-01-16 23:16:04 -03:00
4107a37fe0 core: scale coredns replicas 2026-01-16 23:12:56 -03:00
31952ca53c longhorn: make settings job idempotent 2026-01-16 20:15:33 -03:00
8f302a7cf6 longhorn: apply settings via api job 2026-01-16 20:11:22 -03:00
3e150e3d2d longhorn: ensure settings via job 2026-01-16 20:05:36 -03:00
2a47baca3d longhorn: move images to infra project 2026-01-16 20:00:17 -03:00
5406f432dd longhorn: force image pulls during migration 2026-01-16 18:26:29 -03:00
eb4aa701d6 cert-manager: pin webhook and cainjector to rpi nodes 2026-01-16 18:17:40 -03:00
dcfd357658 longhorn: pin vault sync to rpi workers 2026-01-16 17:45:29 -03:00
5ba9501db9 longhorn: use harbor mirrors and vault pull secret 2026-01-16 17:31:29 -03:00
c2bfdb57d3 longhorn: add helm repo and adopt workflow 2026-01-16 16:25:40 -03:00
6477997bd5 traefik: add CRDs 2026-01-16 11:21:58 -03:00
90a25ac73e platform: add cert-manager and align postgres vault path 2026-01-16 11:14:48 -03:00
4de2e96f4d gitea: expose ssh via metallb shared IP 2026-01-15 16:39:04 -03:00
04a58b43d6 core: add bstein.dev coredns overrides 2026-01-15 16:29:32 -03:00
ab4f0d4fe2 traefik: wire LB service to custom deployment 2026-01-15 11:26:46 -03:00
fb05c442f5 longhorn: read oauth2-proxy secrets from vault 2026-01-14 17:48:12 -03:00
ac0d7a40ab infra: add vault injector 2026-01-14 11:46:13 -03:00
bdc32b7a36 vault(consumption): sync secrets via CSI 2026-01-14 05:07:23 -03:00
5d53d900aa feat: start vault consumption for outline and planka 2026-01-14 01:30:41 -03:00
6f4cc58941 vault: prep helm releases and image pins 2026-01-13 19:29:14 -03:00
3c3a573e3d platform: move postgres to infrastructure 2026-01-13 17:53:04 -03:00
987dd126fa Fix Jetson device plugin args 2026-01-11 01:57:20 -03:00
c887aaeecf logging: add trace analytics ingestion 2026-01-10 00:13:59 -03:00
abc6e45d17 logging: add opensearch dashboards ui 2026-01-09 08:54:07 -03:00
b33be4a7c2 logging: add loki and fluent-bit 2026-01-08 22:31:45 -03:00
91de1c1d8d gpu: enable time-slicing and refresh dashboards 2026-01-01 14:16:08 -03:00