1145 Commits

Author SHA1 Message Date
e9318db2fc logging: patch data-prepper volume to configmap 2026-01-15 03:12:13 -03:00
05a88bae9e bstein-dev-home: restore image automation setters 2026-01-15 03:11:57 -03:00
55383a654e nextcloud: fix cronjob shell flags 2026-01-15 03:08:01 -03:00
11dbb10b50 logging: move data-prepper pipeline to configmap 2026-01-15 02:59:21 -03:00
5b8dd6f322 keycloak: stop writing oauth2-proxy secret 2026-01-15 02:37:04 -03:00
5ac24c85b0 crypto: drop wallet rpc bootstrap job 2026-01-15 02:31:31 -03:00
0f80e905ec crypto: fix wallet rpc image 2026-01-15 02:26:54 -03:00
f35f0e27b5 vault: prepopulate oidc job 2026-01-15 02:22:52 -03:00
ee1fd7f458 vault: default oidc claims type 2026-01-15 02:20:53 -03:00
d82146cfd6 vault: harden oidc claims type 2026-01-15 02:18:50 -03:00
a4d20efe7d vault: allow oidc tuning 2026-01-15 02:16:55 -03:00
2b934d4263 vault: use static token reviewer 2026-01-15 02:14:08 -03:00
52239dd17e vault: allow vault-admin token review 2026-01-15 02:09:34 -03:00
53c4faf2f7 vault: add admin role for config jobs 2026-01-15 02:06:28 -03:00
1eab80648d vault: finalize sidecar migration 2026-01-15 01:52:24 -03:00
853417194c health: run wger sync with python3 2026-01-15 01:13:42 -03:00
2e70843db6 mailu: use vault sidecar env 2026-01-15 01:02:41 -03:00
d9ba9cb51c bstein-dev-home: bump portal images 2026-01-15 00:47:51 -03:00
f44eef36c2 health: allow portal wger sync 2026-01-15 00:41:28 -03:00
ec7e0ef6e1 comms: move synapse secrets to vault 2026-01-15 00:35:41 -03:00
fedeb3bab7 bstein-dev-home: bump portal images 2026-01-15 00:28:15 -03:00
6183b1f57a jellyfin: prefer gpu nodes by hostname 2026-01-14 23:56:02 -03:00
d60ae9d02d health: add nginx main config 2026-01-14 23:55:50 -03:00
1ca3ee018f health: run nginx directly 2026-01-14 23:47:23 -03:00
64b9351b1b jellyfin: schedule on nvidia accelerators 2026-01-14 23:37:06 -03:00
ee455ec4f0 health: fix nginx pid path 2026-01-14 23:35:07 -03:00
8e1f03f99d jellyfin: trim vault ldap template 2026-01-14 23:34:39 -03:00
b5eb29af2f health: stabilize wger startup 2026-01-14 23:26:07 -03:00
662e724c95 vault: sync oidc and wger env 2026-01-14 23:21:39 -03:00
d957e7e7f7 vault: read oidc config from vault 2026-01-14 23:20:04 -03:00
cb15d9cf66 jellyfin: read LDAP config from vault 2026-01-14 23:15:19 -03:00
b23377119e comms: mount synapse signing key 2026-01-14 22:59:11 -03:00
355088058e comms: mount vault signing key volume 2026-01-14 22:56:30 -03:00
3b6f9ad650 comms: keep redis env while injecting vault 2026-01-14 22:43:50 -03:00
5fc530b6de vault: fix hyphenated key templates 2026-01-14 22:37:18 -03:00
c26b8bb44a comms: fix synapse vault patch 2026-01-14 22:34:02 -03:00
dd0b4e28e7 vault: inject comms and grafana secrets 2026-01-14 22:29:27 -03:00
49d4d13a64 health: fix wger env template newlines 2026-01-14 22:23:48 -03:00
790e41300f health: avoid surge rollout for wger 2026-01-14 22:16:36 -03:00
a99f680711 health: load wger secrets without shell expansion 2026-01-14 22:11:55 -03:00
bc3bfb9348 harbor: fix vault env templates 2026-01-14 22:07:51 -03:00
79d4cac000 health: escape wger env vars and fix nginx temp paths 2026-01-14 22:03:40 -03:00
efbfca1677 harbor: preserve required volume mounts 2026-01-14 21:29:40 -03:00
665612b781 vault: keep copy loop from clobbering args 2026-01-14 21:24:16 -03:00
f484083653 harbor: fix vault secretKey file path 2026-01-14 21:17:05 -03:00
6c91e0313f harbor: mount vault entrypoint script 2026-01-14 21:02:50 -03:00
a2646d92f0 harbor: move secrets to vault sidecars 2026-01-14 20:46:46 -03:00
d716edb6ef jenkins: load vault env via env 2026-01-14 17:57:10 -03:00
dbfc541ccb jenkins: escape vault env values 2026-01-14 17:53:09 -03:00
fb05c442f5 longhorn: read oauth2-proxy secrets from vault 2026-01-14 17:48:12 -03:00