Commit Graph

Select branches

Hide Pull Requests

deploy

fea/titan24-gpu

feature/ariadne

feature/atlas-monitoring

feature/atlasbot

feature/bstein-dev-home

feature/ci-gitops

feature/mailu

feature/postgres-migration

feature/sso

feature/sso-hardening

feature/vault-consumption

main

restructure/hybrid-clusters

#1

#10

#11

#2

#3

#4

#5

#6

#7

#8

#9

Mono Color

• 6ec0414fcd jobs: prefer arm64 workers Brad Stein 2026-01-17 01:47:53 -03:00
• 33e35193fb sso: harden keycloak jobs and rerun Brad Stein 2026-01-17 01:41:39 -03:00
• 1b4f46bb41 sso: rerun realm settings and vault oidc job Brad Stein 2026-01-17 01:36:48 -03:00
• 5eff31595e maintenance: add k3s agent restart daemonset Brad Stein 2026-01-17 01:28:13 -03:00
• 622c7acaa4 jobs: rerun keycloak realm + mas db ensure Brad Stein 2026-01-17 01:11:45 -03:00
• 8f990031f1 finance: fix vault seed job Brad Stein 2026-01-17 01:07:46 -03:00
• a9351bc737 jobs: drop apk installs and prefer arm64 Brad Stein 2026-01-17 01:02:58 -03:00
• f4c6827c8c keycloak: bump realm settings job Brad Stein 2026-01-17 01:00:12 -03:00
• 62fa6ef371 finance: seed vault secrets Brad Stein 2026-01-17 00:54:49 -03:00
• 3e3061fe5b finance: add actual budget and firefly Brad Stein 2026-01-16 23:52:56 -03:00
• 354a803ff4 core: fix coredns tag Brad Stein 2026-01-16 23:27:04 -03:00
• 368dd81c5e core: use harbor coredns image Brad Stein 2026-01-16 23:25:28 -03:00
• e1bd962956 core: manage coredns deployment Brad Stein 2026-01-16 23:16:04 -03:00
• d9fabbf353 core: scale coredns replicas Brad Stein 2026-01-16 23:12:56 -03:00
• 55992ea48f longhorn: make settings job idempotent Brad Stein 2026-01-16 20:15:33 -03:00
• 42e987f4ee longhorn: apply settings via api job Brad Stein 2026-01-16 20:11:22 -03:00
• 71a1a55a01 longhorn: ensure settings via job Brad Stein 2026-01-16 20:05:36 -03:00
• f8ffa830b7 longhorn: move images to infra project Brad Stein 2026-01-16 20:00:17 -03:00
• 8535d50faa longhorn: force image pulls during migration Brad Stein 2026-01-16 18:26:29 -03:00
• dc62b4998b cert-manager: pin webhook and cainjector to rpi nodes Brad Stein 2026-01-16 18:17:40 -03:00
• 2f176d5a36 planka: allow project creation for all users Brad Stein 2026-01-16 17:58:20 -03:00
• 1fb7b27de4 keycloak: rerun realm and user overrides Brad Stein 2026-01-16 17:47:34 -03:00
• b07f32e7c8 longhorn: pin vault sync to rpi workers Brad Stein 2026-01-16 17:45:29 -03:00
• d9d31f7701 longhorn: allow kustomization to apply without waiting Brad Stein 2026-01-16 17:39:37 -03:00
• 1eb7d58259 keycloak: enforce bstein group membership Brad Stein 2026-01-16 17:36:07 -03:00
• 401df4d68c longhorn: use harbor mirrors and vault pull secret Brad Stein 2026-01-16 17:31:29 -03:00
• 4406724da5 longhorn: add helm repo and adopt workflow Brad Stein 2026-01-16 16:25:40 -03:00
• 7c3006736c traefik: add CRDs Brad Stein 2026-01-16 11:21:58 -03:00
• 9f3d2db63d platform: add cert-manager and align postgres vault path Brad Stein 2026-01-16 11:14:48 -03:00
• beb646f78f jellyfin: move cache to emptyDir Brad Stein 2026-01-16 09:43:01 -03:00
• 4faa039a8e maintenance: avoid blocking on k3s traefik cleanup Brad Stein 2026-01-16 09:38:14 -03:00
• ef504eea80 maintenance: allow traefik cleanup watch Brad Stein 2026-01-16 09:33:11 -03:00
• 671d4d5dce maintenance: cleanup k3s traefik and wger attrs Brad Stein 2026-01-16 09:27:22 -03:00
• 9474ab97f2 maintenance: disable k3s traefik; keycloak portal admin roles Brad Stein 2026-01-16 07:53:04 -03:00
• cf5d7dfa00 jellyfin: set traefik tls annotations Brad Stein 2026-01-16 04:01:27 -03:00
• 5cd196e043 vault/keycloak: restore kv access and wger sync rbac Brad Stein 2026-01-16 03:46:07 -03:00
• 8ad9f0a664 vault: allow admin kv browse Brad Stein 2026-01-16 03:20:32 -03:00
• f5231d282b vault: allow UI mount listing for admins Brad Stein 2026-01-16 02:06:31 -03:00
• bb1bf3c017 fix ingress tls routing Brad Stein 2026-01-16 01:40:50 -03:00
• b1489a8dd9 fix logging pipeline secret and scheduling Brad Stein 2026-01-16 00:15:58 -03:00
• 5816d4f399 comms: fix mas vault file paths Brad Stein 2026-01-15 23:56:32 -03:00
• d90950b82e gitea: expose ssh via metallb shared IP Brad Stein 2026-01-15 16:39:04 -03:00
• 66e7e6acc5 core: add bstein.dev coredns overrides Brad Stein 2026-01-15 16:29:32 -03:00
• 7817248eb9 traefik: wire LB service to custom deployment Brad Stein 2026-01-15 11:26:46 -03:00
• 9993b501a6 logging: disable wait for data-prepper helmrelease Brad Stein 2026-01-15 04:47:07 -03:00
• a2b2c7db9d keycloak: align smtp probe user Brad Stein 2026-01-15 04:44:35 -03:00
• 8db4b4f0b5 keycloak: rerun execute-actions email e2e Brad Stein 2026-01-15 04:37:12 -03:00
• 70a52dec06 bstein-dev-home: rerun onboarding e2e job Brad Stein 2026-01-15 04:35:06 -03:00
• c759fb1dbb logging: fix data-prepper post-render patch Brad Stein 2026-01-15 04:27:25 -03:00
• c0d0e64bc6 keycloak: rerun realm smtp config Brad Stein 2026-01-15 04:24:16 -03:00
• 5899c9acb3 vault: allow admin policy to update shared secrets Brad Stein 2026-01-15 04:17:14 -03:00
• de6665c450 smtp: use mail.bstein.dev for app relays Brad Stein 2026-01-15 04:04:50 -03:00
• e6210644c2 smtp: point services at mailu relay Brad Stein 2026-01-15 03:58:03 -03:00
• c30f1fc587 vault: allow sso role to read portal admin secret Brad Stein 2026-01-15 03:46:58 -03:00
• bf9a24681c fix: bump keycloak and portal e2e job names Brad Stein 2026-01-15 03:44:27 -03:00
• 69cee91dda vault: fix data-prepper pipeline and portal admin secret job Brad Stein 2026-01-15 03:42:57 -03:00
• 2ccc33b105 logging: patch data-prepper volume via json Brad Stein 2026-01-15 03:30:16 -03:00
• 760c9cbe6b logging: drop namespace from data-prepper patch Brad Stein 2026-01-15 03:27:36 -03:00
• 76151a082c logging: simplify data-prepper patch Brad Stein 2026-01-15 03:25:33 -03:00
• c7fa52ab27 logging: use strategic patch for pipeline volume Brad Stein 2026-01-15 03:23:42 -03:00
• 88f862e18a logging: switch data-prepper volume to configmap Brad Stein 2026-01-15 03:17:07 -03:00
• 4dba510d6f logging: replace pipeline volume with configmap Brad Stein 2026-01-15 03:14:07 -03:00
• 9a9ecc4903 logging: patch data-prepper volume to configmap Brad Stein 2026-01-15 03:12:13 -03:00
• a7998fc0bf bstein-dev-home: restore image automation setters Brad Stein 2026-01-15 03:11:57 -03:00
• 72d49f88fe nextcloud: fix cronjob shell flags Brad Stein 2026-01-15 03:08:01 -03:00
• fb992f0cff logging: move data-prepper pipeline to configmap Brad Stein 2026-01-15 02:59:21 -03:00
• 53da4c20ab keycloak: stop writing oauth2-proxy secret Brad Stein 2026-01-15 02:37:04 -03:00
• f9fa6dcbb4 crypto: drop wallet rpc bootstrap job Brad Stein 2026-01-15 02:31:31 -03:00
• 2ecd274f28 crypto: fix wallet rpc image Brad Stein 2026-01-15 02:26:54 -03:00
• feb9d6997c vault: prepopulate oidc job Brad Stein 2026-01-15 02:22:52 -03:00
• 9e6673d02e vault: default oidc claims type Brad Stein 2026-01-15 02:20:53 -03:00
• d69545cdb5 vault: harden oidc claims type Brad Stein 2026-01-15 02:18:50 -03:00
• 756a1af2e6 vault: allow oidc tuning Brad Stein 2026-01-15 02:16:55 -03:00
• 74a2b3e28d vault: use static token reviewer Brad Stein 2026-01-15 02:14:08 -03:00
• 84ccf35c44 flux: auto-update portal images on feature branch Brad Stein 2026-01-15 02:12:52 -03:00
• e885c7d6ce vault: allow vault-admin token review Brad Stein 2026-01-15 02:09:34 -03:00
• 86c9951cc4 vault: add admin role for config jobs Brad Stein 2026-01-15 02:06:28 -03:00
• 85c3d9c2f7 vault: finalize sidecar migration Brad Stein 2026-01-15 01:52:24 -03:00
• cd14e70d02 health: run wger sync with python3 Brad Stein 2026-01-15 01:13:42 -03:00
• f5a3894c2b mailu: use vault sidecar env Brad Stein 2026-01-15 01:02:41 -03:00
• 511403c4a6 bstein-dev-home: bump portal images Brad Stein 2026-01-15 00:47:51 -03:00
• 8fed4a08c5 health: allow portal wger sync Brad Stein 2026-01-15 00:41:28 -03:00
• 7f96daa7b8 comms: move synapse secrets to vault Brad Stein 2026-01-15 00:35:41 -03:00
• 139ca78c3d bstein-dev-home: bump portal images Brad Stein 2026-01-15 00:28:15 -03:00
• 836ce605b6 jellyfin: prefer gpu nodes by hostname Brad Stein 2026-01-14 23:56:02 -03:00
• 88be97d860 health: add nginx main config Brad Stein 2026-01-14 23:55:50 -03:00
• 35dcc5d66c health: run nginx directly Brad Stein 2026-01-14 23:47:23 -03:00
• c1b771298a jellyfin: schedule on nvidia accelerators Brad Stein 2026-01-14 23:37:06 -03:00
• e94ea272ce health: fix nginx pid path Brad Stein 2026-01-14 23:35:07 -03:00
• 81e79fd19a jellyfin: trim vault ldap template Brad Stein 2026-01-14 23:34:39 -03:00
• 3af97973e0 health: stabilize wger startup Brad Stein 2026-01-14 23:26:07 -03:00
• 0733127039 vault: sync oidc and wger env Brad Stein 2026-01-14 23:21:39 -03:00
• 82090c1953 vault: read oidc config from vault Brad Stein 2026-01-14 23:20:04 -03:00
• 6c8d3b24f2 jellyfin: read LDAP config from vault Brad Stein 2026-01-14 23:15:19 -03:00
• d898c71c08 comms: mount synapse signing key Brad Stein 2026-01-14 22:59:11 -03:00
• 52cc04dee9 comms: mount vault signing key volume Brad Stein 2026-01-14 22:56:30 -03:00
• 98cdafb162 comms: keep redis env while injecting vault Brad Stein 2026-01-14 22:43:50 -03:00
• 0b21c8f40d vault: fix hyphenated key templates Brad Stein 2026-01-14 22:37:18 -03:00
• e8d004c1b9 comms: fix synapse vault patch Brad Stein 2026-01-14 22:34:02 -03:00
• c38f77302f vault: inject comms and grafana secrets Brad Stein 2026-01-14 22:29:27 -03:00