175 Commits

Author SHA1 Message Date
jenkins
d19feb1659 fix(vault-injector): run two replicas so restarts cannot skip injection
The webhook is failurePolicy: Ignore, so with one replica any pod created
during an injector restart is admitted without its Vault agent sidecar and
then crash-loops forever on a missing /vault/secrets file, with nothing to
indicate injection was skipped. Hit twice while rolling ariadne.

Co-Authored-By: Claude Fable 5 <noreply@anthropic.com>
2026-08-05 22:56:49 -03:00
jenkins
f4097c6e59 Merge origin/main into layout migration
Reconciles the services layout migration with ~991 upstream commits:
- Remote content wins for cassandra/cassandra-auth, monitoring dashboards,
  vmalert availability rules, veles, vault auth script, dashboard render
  script and tests (request-v4 availability definition)
- Layout paths win for structure: keycloak/bstein-dev-home job dirs use
  bootstrap-jobs/validation-jobs; cassandra realm jobs live in
  cassandra-auth (removed keycloak duplicates)
- Union: applications CR list gains hermes-chat and cassandra
  image-automation
- Fixed post-migration paths in dashboard test module loader and
  hermes-access job header

Co-Authored-By: Claude Fable 5 <noreply@anthropic.com>
2026-08-05 16:26:36 -03:00
jenkins
0da9e4c82d refactor: restructure services layout, retire oceanus, add aether scaffolding
- Move flat service manifests into structured subdirs (apps/, bootstrap-jobs/,
  repair-jobs/, migration-jobs/, validation-jobs/, node-ops/, networking/)
- Retire oneoffs/ directories across services
- Remove oceanus cluster and its host roles; add aether cluster + terraform scaffolding
- Reorganize scripts/ into ops/, render/, sync/, manual-tests/
- Add Makefile with render/validate/test/flux targets and repo-structure tests
- Update flux-system application CRs to the new paths
- Add hermes-automated-triage-24h-plan knowledge doc (+ comms mirror)
- Refresh knowledge catalogs, dashboards, vmalert rules, quality contract

Co-Authored-By: Claude Fable 5 <noreply@anthropic.com>
2026-08-05 16:21:36 -03:00
jenkins
e864d1635a fix(hermes): stabilize consumer chat transport 2026-08-02 15:25:22 -03:00
jenkins
b26a4f8c66 feat(cassandra): add migration Grafana rollup 2026-07-25 00:29:03 -03:00
jenkins
ea334a2863 feat(cassandra): add parallel migration infrastructure 2026-07-25 00:20:01 -03:00
jenkins
a4d8e58a13 feat(cassandra): add parallel migration infrastructure 2026-07-25 00:18:48 -03:00
jenkins
97ecb36b56 agent: replace OpenClaw with Hermes 2026-07-21 21:02:44 -03:00
jenkins
3431f1f58a Deploy Veles 0.4.1 runtime support 2026-06-27 19:07:16 -03:00
jenkins
7abbd40881 core: preserve Veles artifacts storageclass parameters 2026-06-27 07:48:46 -03:00
jenkins
a1139cd3f6 Add Veles deployment IaC 2026-06-27 07:37:42 -03:00
jenkins
f6167b4ac1 core: repair node role reconciler 2026-06-19 15:45:45 -03:00
jenkins
0f58aa16a9 recovery(ananke): handle longhorn harbor deadlock 2026-06-18 18:02:32 -03:00
jenkins
6833c3fe61 veles: harden app infrastructure contract 2026-06-09 11:59:27 -03:00
jenkins
63c869bf42 longhorn: ensure engine image on oceanus 2026-06-09 02:06:34 -03:00
jenkins
8fcc61cae9 longhorn: validate oceanus csi registration 2026-06-09 01:57:59 -03:00
jenkins
7885a70ee1 longhorn: pin toleration jobs off titan-14 2026-06-09 01:55:02 -03:00
jenkins
42069b0f23 longhorn: ensure csi tolerates oceanus 2026-06-09 01:53:04 -03:00
jenkins
5db9dd54fc longhorn: enforce oceanus taint setting 2026-06-09 01:49:16 -03:00
jenkins
530f813ebd longhorn: run csi driver on oceanus 2026-06-09 01:47:03 -03:00
jenkins
ea6a10dd7f longhorn: set veles recurring job names 2026-06-09 00:49:03 -03:00
jenkins
654900b8a2 veles: stage atlas infrastructure 2026-06-09 00:46:46 -03:00
jenkins
c7edc81239 maintenance: stabilize recovered worker nodes 2026-05-22 17:10:01 -03:00
jenkins
17dc9a6e52 scheduling: target hdd storage node exclusions 2026-05-22 14:02:17 -03:00
jenkins
155d7d020e scheduling: keep apps off longhorn storage nodes 2026-05-22 13:38:29 -03:00
jenkins
1332b611a3 vault-csi: tolerate busy-node probe delays 2026-05-21 15:52:48 -03:00
jenkins
8fbe82eb5b game-stream: expose Wolf Moonlight ports 2026-05-21 03:30:40 -03:00
jenkins
1470cea862 game-stream: deploy Wolf foundation 2026-05-21 02:07:17 -03:00
jenkins
eb4a197eb7 core(nodes): mark rpi4 spillover workers 2026-05-20 18:14:49 -03:00
jenkins
8ce8b1aac2 agent(openclaw): expose oauth protected UI 2026-05-20 17:22:12 -03:00
jenkins
178e523bc2 ops(traefik): keep ingress available during balancing 2026-05-20 05:23:49 -03:00
jenkins
269136bee9 ops(cert-manager): keep admission webhook available 2026-05-20 04:51:39 -03:00
jenkins
36487543bb vault: prefer rpi5 for injector 2026-05-20 02:03:35 -03:00
jenkins
dd20678c46 openclaw: route testing triage through ariadne 2026-05-19 23:30:29 -03:00
jenkins
c923be8ff1 ops: fix descheduler policy for chart api 2026-05-19 18:06:30 -03:00
jenkins
4bd83a1aa8 cert-manager: harden webhook resources 2026-05-19 17:35:10 -03:00
jenkins
37fe1d5d24 ci(jenkins): reduce default agent cpu request 2026-05-19 16:21:43 -03:00
jenkins
24920c8a56 ops: keep scavenger work out of scheduler headroom 2026-05-19 16:02:10 -03:00
jenkins
a3e14ce0f2 ops: add resource guardrails for rpi workers 2026-05-19 12:48:40 -03:00
jenkins
c79489d0b8 recovery: keep storage nodes as spillover only 2026-05-15 11:52:26 -03:00
jenkins
da7ee45366 postgres: avoid unstable nodes 2026-05-10 04:04:34 -03:00
jenkins
4beb08f1cf scheduling: keep longhorn vault sync off storage nodes 2026-05-05 13:46:19 -03:00
jenkins
e2cbbd6963 scheduling: keep singleton apps off storage nodes 2026-05-05 13:37:04 -03:00
jenkins
c46764e80c recovery(atlas): stop post-outage control-plane churn 2026-05-05 10:42:28 -03:00
45b145667a longhorn: rerun settings ensure job 2026-04-27 16:16:51 -03:00
9fb8dd4839 stability: harden fluent-bit buffering and longhorn node-down recovery 2026-04-27 16:15:13 -03:00
jenkins
2df830f01b longhorn: bound settings sync curl calls and rerun job 2026-04-21 21:18:41 -03:00
jenkins
e29d0fe349 longhorn: rebalance replicas and cap rebuild pressure 2026-04-21 21:12:19 -03:00
jenkins
77f7620eca scheduling: de-prefer spillover nodes for non-longhorn services 2026-04-21 21:00:56 -03:00
d514fb35e5 longhorn(core): restore b2 secret objects in vault sync 2026-04-12 23:54:35 -03:00