1370 Commits

Author SHA1 Message Date
ee55fd5a2b finance: switch vault seed to python 2026-01-17 02:22:59 -03:00
b7ff01f58f finance: rerun secrets seed job 2026-01-17 02:17:29 -03:00
08695fe0a5 mailu: retry sync and rerun job 2026-01-17 02:16:13 -03:00
76f13e6664 finance: ensure vault init ordering 2026-01-17 02:10:28 -03:00
4c6a7e8e1f finance: decouple from mailu readiness 2026-01-17 02:06:55 -03:00
e5c26c971f mailu: bump sync job 2026-01-17 02:01:53 -03:00
47cb30aa76 comms: bump mas admin secret job 2026-01-17 02:00:14 -03:00
a8cb4d8804 keycloak: bump portal admin secret job 2026-01-17 01:54:15 -03:00
66679c428f jobs: bump names after affinity update 2026-01-17 01:52:16 -03:00
7cf0344d59 jobs: prefer arm64 workers 2026-01-17 01:47:53 -03:00
9493ede273 sso: harden keycloak jobs and rerun 2026-01-17 01:41:39 -03:00
8263eb577d sso: rerun realm settings and vault oidc job 2026-01-17 01:36:48 -03:00
806330a890 maintenance: add k3s agent restart daemonset 2026-01-17 01:28:13 -03:00
9e08bc358d jobs: rerun keycloak realm + mas db ensure 2026-01-17 01:11:45 -03:00
b6f57d7dcf finance: fix vault seed job 2026-01-17 01:07:46 -03:00
e8ccfa6207 jobs: drop apk installs and prefer arm64 2026-01-17 01:02:58 -03:00
43b552a720 keycloak: bump realm settings job 2026-01-17 01:00:12 -03:00
15021dd2dc finance: seed vault secrets 2026-01-17 00:54:49 -03:00
05cdf75dc6 finance: add actual budget and firefly 2026-01-16 23:52:56 -03:00
a098ca454f core: fix coredns tag 2026-01-16 23:27:04 -03:00
c40c1b221b core: use harbor coredns image 2026-01-16 23:25:28 -03:00
bd6643512f core: manage coredns deployment 2026-01-16 23:16:04 -03:00
4107a37fe0 core: scale coredns replicas 2026-01-16 23:12:56 -03:00
31952ca53c longhorn: make settings job idempotent 2026-01-16 20:15:33 -03:00
8f302a7cf6 longhorn: apply settings via api job 2026-01-16 20:11:22 -03:00
3e150e3d2d longhorn: ensure settings via job 2026-01-16 20:05:36 -03:00
2a47baca3d longhorn: move images to infra project 2026-01-16 20:00:17 -03:00
5406f432dd longhorn: force image pulls during migration 2026-01-16 18:26:29 -03:00
eb4aa701d6 cert-manager: pin webhook and cainjector to rpi nodes 2026-01-16 18:17:40 -03:00
dc9b6e1213 planka: allow project creation for all users 2026-01-16 17:58:20 -03:00
fd88e8e04f keycloak: rerun realm and user overrides 2026-01-16 17:47:34 -03:00
dcfd357658 longhorn: pin vault sync to rpi workers 2026-01-16 17:45:29 -03:00
d54ee91f5a longhorn: allow kustomization to apply without waiting 2026-01-16 17:39:37 -03:00
574353d884 keycloak: enforce bstein group membership 2026-01-16 17:36:07 -03:00
5ba9501db9 longhorn: use harbor mirrors and vault pull secret 2026-01-16 17:31:29 -03:00
c2bfdb57d3 longhorn: add helm repo and adopt workflow 2026-01-16 16:25:40 -03:00
6477997bd5 traefik: add CRDs 2026-01-16 11:21:58 -03:00
90a25ac73e platform: add cert-manager and align postgres vault path 2026-01-16 11:14:48 -03:00
f552119323 jellyfin: move cache to emptyDir 2026-01-16 09:43:01 -03:00
85e5584b20 maintenance: avoid blocking on k3s traefik cleanup 2026-01-16 09:38:14 -03:00
fe7bfd590d maintenance: allow traefik cleanup watch 2026-01-16 09:33:11 -03:00
37571ef738 maintenance: cleanup k3s traefik and wger attrs 2026-01-16 09:27:22 -03:00
b72561e5ec maintenance: disable k3s traefik; keycloak portal admin roles 2026-01-16 07:53:04 -03:00
913dd7208a jellyfin: set traefik tls annotations 2026-01-16 04:01:27 -03:00
a603b88eea vault/keycloak: restore kv access and wger sync rbac 2026-01-16 03:46:07 -03:00
b308ee8d55 vault: allow admin kv browse 2026-01-16 03:20:32 -03:00
05b0242e26 vault: allow UI mount listing for admins 2026-01-16 02:06:31 -03:00
af86a610d9 fix ingress tls routing 2026-01-16 01:40:50 -03:00
109bd3026f fix logging pipeline secret and scheduling 2026-01-16 00:15:58 -03:00
621550cba1 comms: fix mas vault file paths 2026-01-15 23:56:32 -03:00