1362 Commits

Author SHA1 Message Date
66679c428f jobs: bump names after affinity update 2026-01-17 01:52:16 -03:00
7cf0344d59 jobs: prefer arm64 workers 2026-01-17 01:47:53 -03:00
9493ede273 sso: harden keycloak jobs and rerun 2026-01-17 01:41:39 -03:00
8263eb577d sso: rerun realm settings and vault oidc job 2026-01-17 01:36:48 -03:00
806330a890 maintenance: add k3s agent restart daemonset 2026-01-17 01:28:13 -03:00
9e08bc358d jobs: rerun keycloak realm + mas db ensure 2026-01-17 01:11:45 -03:00
b6f57d7dcf finance: fix vault seed job 2026-01-17 01:07:46 -03:00
e8ccfa6207 jobs: drop apk installs and prefer arm64 2026-01-17 01:02:58 -03:00
43b552a720 keycloak: bump realm settings job 2026-01-17 01:00:12 -03:00
15021dd2dc finance: seed vault secrets 2026-01-17 00:54:49 -03:00
05cdf75dc6 finance: add actual budget and firefly 2026-01-16 23:52:56 -03:00
a098ca454f core: fix coredns tag 2026-01-16 23:27:04 -03:00
c40c1b221b core: use harbor coredns image 2026-01-16 23:25:28 -03:00
bd6643512f core: manage coredns deployment 2026-01-16 23:16:04 -03:00
4107a37fe0 core: scale coredns replicas 2026-01-16 23:12:56 -03:00
31952ca53c longhorn: make settings job idempotent 2026-01-16 20:15:33 -03:00
8f302a7cf6 longhorn: apply settings via api job 2026-01-16 20:11:22 -03:00
3e150e3d2d longhorn: ensure settings via job 2026-01-16 20:05:36 -03:00
2a47baca3d longhorn: move images to infra project 2026-01-16 20:00:17 -03:00
5406f432dd longhorn: force image pulls during migration 2026-01-16 18:26:29 -03:00
eb4aa701d6 cert-manager: pin webhook and cainjector to rpi nodes 2026-01-16 18:17:40 -03:00
dc9b6e1213 planka: allow project creation for all users 2026-01-16 17:58:20 -03:00
fd88e8e04f keycloak: rerun realm and user overrides 2026-01-16 17:47:34 -03:00
dcfd357658 longhorn: pin vault sync to rpi workers 2026-01-16 17:45:29 -03:00
d54ee91f5a longhorn: allow kustomization to apply without waiting 2026-01-16 17:39:37 -03:00
574353d884 keycloak: enforce bstein group membership 2026-01-16 17:36:07 -03:00
5ba9501db9 longhorn: use harbor mirrors and vault pull secret 2026-01-16 17:31:29 -03:00
c2bfdb57d3 longhorn: add helm repo and adopt workflow 2026-01-16 16:25:40 -03:00
6477997bd5 traefik: add CRDs 2026-01-16 11:21:58 -03:00
90a25ac73e platform: add cert-manager and align postgres vault path 2026-01-16 11:14:48 -03:00
f552119323 jellyfin: move cache to emptyDir 2026-01-16 09:43:01 -03:00
85e5584b20 maintenance: avoid blocking on k3s traefik cleanup 2026-01-16 09:38:14 -03:00
fe7bfd590d maintenance: allow traefik cleanup watch 2026-01-16 09:33:11 -03:00
37571ef738 maintenance: cleanup k3s traefik and wger attrs 2026-01-16 09:27:22 -03:00
b72561e5ec maintenance: disable k3s traefik; keycloak portal admin roles 2026-01-16 07:53:04 -03:00
913dd7208a jellyfin: set traefik tls annotations 2026-01-16 04:01:27 -03:00
a603b88eea vault/keycloak: restore kv access and wger sync rbac 2026-01-16 03:46:07 -03:00
b308ee8d55 vault: allow admin kv browse 2026-01-16 03:20:32 -03:00
05b0242e26 vault: allow UI mount listing for admins 2026-01-16 02:06:31 -03:00
af86a610d9 fix ingress tls routing 2026-01-16 01:40:50 -03:00
109bd3026f fix logging pipeline secret and scheduling 2026-01-16 00:15:58 -03:00
621550cba1 comms: fix mas vault file paths 2026-01-15 23:56:32 -03:00
4de2e96f4d gitea: expose ssh via metallb shared IP 2026-01-15 16:39:04 -03:00
04a58b43d6 core: add bstein.dev coredns overrides 2026-01-15 16:29:32 -03:00
ab4f0d4fe2 traefik: wire LB service to custom deployment 2026-01-15 11:26:46 -03:00
ae688d0db6 logging: disable wait for data-prepper helmrelease 2026-01-15 04:47:07 -03:00
6d249466ee keycloak: align smtp probe user 2026-01-15 04:44:35 -03:00
9bddcd1e76 keycloak: rerun execute-actions email e2e 2026-01-15 04:37:12 -03:00
78a547d6b8 bstein-dev-home: rerun onboarding e2e job 2026-01-15 04:35:06 -03:00
b1ddb110cc logging: fix data-prepper post-render patch 2026-01-15 04:27:25 -03:00