6 Commits

Author SHA1 Message Date
jenkins
d19feb1659 fix(vault-injector): run two replicas so restarts cannot skip injection
The webhook is failurePolicy: Ignore, so with one replica any pod created
during an injector restart is admitted without its Vault agent sidecar and
then crash-loops forever on a missing /vault/secrets file, with nothing to
indicate injection was skipped. Hit twice while rolling ariadne.

Co-Authored-By: Claude Fable 5 <noreply@anthropic.com>
2026-08-05 22:56:49 -03:00
jenkins
17dc9a6e52 scheduling: target hdd storage node exclusions 2026-05-22 14:02:17 -03:00
jenkins
155d7d020e scheduling: keep apps off longhorn storage nodes 2026-05-22 13:38:29 -03:00
jenkins
36487543bb vault: prefer rpi5 for injector 2026-05-20 02:03:35 -03:00
jenkins
e2cbbd6963 scheduling: keep singleton apps off storage nodes 2026-05-05 13:37:04 -03:00
ac0d7a40ab infra: add vault injector 2026-01-14 11:46:13 -03:00