1513 Commits

Author SHA1 Message Date
6ec0414fcd jobs: prefer arm64 workers 2026-01-17 01:47:53 -03:00
33e35193fb sso: harden keycloak jobs and rerun 2026-01-17 01:41:39 -03:00
1b4f46bb41 sso: rerun realm settings and vault oidc job 2026-01-17 01:36:48 -03:00
5eff31595e maintenance: add k3s agent restart daemonset 2026-01-17 01:28:13 -03:00
622c7acaa4 jobs: rerun keycloak realm + mas db ensure 2026-01-17 01:11:45 -03:00
8f990031f1 finance: fix vault seed job 2026-01-17 01:07:46 -03:00
a9351bc737 jobs: drop apk installs and prefer arm64 2026-01-17 01:02:58 -03:00
f4c6827c8c keycloak: bump realm settings job 2026-01-17 01:00:12 -03:00
62fa6ef371 finance: seed vault secrets 2026-01-17 00:54:49 -03:00
3e3061fe5b finance: add actual budget and firefly 2026-01-16 23:52:56 -03:00
354a803ff4 core: fix coredns tag 2026-01-16 23:27:04 -03:00
368dd81c5e core: use harbor coredns image 2026-01-16 23:25:28 -03:00
e1bd962956 core: manage coredns deployment 2026-01-16 23:16:04 -03:00
d9fabbf353 core: scale coredns replicas 2026-01-16 23:12:56 -03:00
55992ea48f longhorn: make settings job idempotent 2026-01-16 20:15:33 -03:00
42e987f4ee longhorn: apply settings via api job 2026-01-16 20:11:22 -03:00
71a1a55a01 longhorn: ensure settings via job 2026-01-16 20:05:36 -03:00
f8ffa830b7 longhorn: move images to infra project 2026-01-16 20:00:17 -03:00
8535d50faa longhorn: force image pulls during migration 2026-01-16 18:26:29 -03:00
dc62b4998b cert-manager: pin webhook and cainjector to rpi nodes 2026-01-16 18:17:40 -03:00
2f176d5a36 planka: allow project creation for all users 2026-01-16 17:58:20 -03:00
1fb7b27de4 keycloak: rerun realm and user overrides 2026-01-16 17:47:34 -03:00
b07f32e7c8 longhorn: pin vault sync to rpi workers 2026-01-16 17:45:29 -03:00
d9d31f7701 longhorn: allow kustomization to apply without waiting 2026-01-16 17:39:37 -03:00
1eb7d58259 keycloak: enforce bstein group membership 2026-01-16 17:36:07 -03:00
401df4d68c longhorn: use harbor mirrors and vault pull secret 2026-01-16 17:31:29 -03:00
4406724da5 longhorn: add helm repo and adopt workflow 2026-01-16 16:25:40 -03:00
7c3006736c traefik: add CRDs 2026-01-16 11:21:58 -03:00
9f3d2db63d platform: add cert-manager and align postgres vault path 2026-01-16 11:14:48 -03:00
beb646f78f jellyfin: move cache to emptyDir 2026-01-16 09:43:01 -03:00
4faa039a8e maintenance: avoid blocking on k3s traefik cleanup 2026-01-16 09:38:14 -03:00
ef504eea80 maintenance: allow traefik cleanup watch 2026-01-16 09:33:11 -03:00
671d4d5dce maintenance: cleanup k3s traefik and wger attrs 2026-01-16 09:27:22 -03:00
9474ab97f2 maintenance: disable k3s traefik; keycloak portal admin roles 2026-01-16 07:53:04 -03:00
cf5d7dfa00 jellyfin: set traefik tls annotations 2026-01-16 04:01:27 -03:00
5cd196e043 vault/keycloak: restore kv access and wger sync rbac 2026-01-16 03:46:07 -03:00
8ad9f0a664 vault: allow admin kv browse 2026-01-16 03:20:32 -03:00
f5231d282b vault: allow UI mount listing for admins 2026-01-16 02:06:31 -03:00
bb1bf3c017 fix ingress tls routing 2026-01-16 01:40:50 -03:00
b1489a8dd9 fix logging pipeline secret and scheduling 2026-01-16 00:15:58 -03:00
5816d4f399 comms: fix mas vault file paths 2026-01-15 23:56:32 -03:00
d90950b82e gitea: expose ssh via metallb shared IP 2026-01-15 16:39:04 -03:00
66e7e6acc5 core: add bstein.dev coredns overrides 2026-01-15 16:29:32 -03:00
7817248eb9 traefik: wire LB service to custom deployment 2026-01-15 11:26:46 -03:00
9993b501a6 logging: disable wait for data-prepper helmrelease 2026-01-15 04:47:07 -03:00
a2b2c7db9d keycloak: align smtp probe user 2026-01-15 04:44:35 -03:00
8db4b4f0b5 keycloak: rerun execute-actions email e2e 2026-01-15 04:37:12 -03:00
70a52dec06 bstein-dev-home: rerun onboarding e2e job 2026-01-15 04:35:06 -03:00
c759fb1dbb logging: fix data-prepper post-render patch 2026-01-15 04:27:25 -03:00
c0d0e64bc6 keycloak: rerun realm smtp config 2026-01-15 04:24:16 -03:00