Commit Graph

Select branches

Hide Pull Requests

deploy

fea/titan24-gpu

feature/ariadne

feature/atlas-monitoring

feature/atlasbot

feature/bstein-dev-home

feature/ci-gitops

feature/mailu

feature/postgres-migration

feature/sso

feature/sso-hardening

feature/vault-consumption

main

restructure/hybrid-clusters

#1

#10

#11

#2

#3

#4

#5

#6

#7

#8

#9

Mono Color

• 4bb6c7e212 health: fix wger env template newlines Brad Stein 2026-01-14 22:23:48 -03:00
• e391a78f25 health: avoid surge rollout for wger Brad Stein 2026-01-14 22:16:36 -03:00
• 349a6cca3b health: load wger secrets without shell expansion Brad Stein 2026-01-14 22:11:55 -03:00
• 71f533ca1f harbor: fix vault env templates Brad Stein 2026-01-14 22:07:51 -03:00
• 9652d9d3cf health: escape wger env vars and fix nginx temp paths Brad Stein 2026-01-14 22:03:40 -03:00
• 22e3004b0a harbor: preserve required volume mounts Brad Stein 2026-01-14 21:29:40 -03:00
• 9743064ad3 vault: keep copy loop from clobbering args Brad Stein 2026-01-14 21:24:16 -03:00
• 8a750ac3ab harbor: fix vault secretKey file path Brad Stein 2026-01-14 21:17:05 -03:00
• eeeb69fb7a harbor: mount vault entrypoint script Brad Stein 2026-01-14 21:02:50 -03:00
• 713fedfe73 harbor: move secrets to vault sidecars Brad Stein 2026-01-14 20:46:46 -03:00
• c98d24e91e jenkins: load vault env via env Brad Stein 2026-01-14 17:57:10 -03:00
• 4ff2f3e889 jenkins: escape vault env values Brad Stein 2026-01-14 17:53:09 -03:00
• bb9a4e6d8b longhorn: read oauth2-proxy secrets from vault Brad Stein 2026-01-14 17:48:12 -03:00
• fb671865e5 vault: inject remaining services with wrappers Brad Stein 2026-01-14 17:29:09 -03:00
• fb9578b624 vault: inject monitoring exporter and health jobs Brad Stein 2026-01-14 14:49:41 -03:00
• 4f1fb62ab3 vault: bump job names for injector Brad Stein 2026-01-14 14:33:57 -03:00
• 98d67293bc vault: prepopulate injector for jobs Brad Stein 2026-01-14 14:29:29 -03:00
• f6fc250fe1 comms: add vault-secrets emptyDir for mas Brad Stein 2026-01-14 14:24:55 -03:00
• 393916ded9 comms: shorten vault inject file names Brad Stein 2026-01-14 14:21:58 -03:00
• e92cfa7dba vault: move comms and mailu workloads to injector Brad Stein 2026-01-14 14:17:26 -03:00
• d559aeb464 keycloak: schedule on arm64 workers Brad Stein 2026-01-14 13:49:37 -03:00
• 6ba509dbe1 gitea: tolerate oidc init failures Brad Stein 2026-01-14 13:46:34 -03:00
• ab50780f49 gitea: trim vault secret newlines Brad Stein 2026-01-14 13:43:56 -03:00
• 9c16d0fbc0 keycloak: bump job names Brad Stein 2026-01-14 13:42:08 -03:00
• 89f4b0dbdf vault: stabilize injector templates and add health apps Brad Stein 2026-01-14 13:40:29 -03:00
• 58c880d9ce keycloak: switch jobs to vault injector Brad Stein 2026-01-14 13:20:57 -03:00
• 92fbde08eb nextcloud: fix vault template keys Brad Stein 2026-01-14 13:00:21 -03:00
• 0aa16757e9 gitea: run vault init first Brad Stein 2026-01-14 12:44:49 -03:00
• 36fb225cbd bstein-dev-home: bump onboarding job Brad Stein 2026-01-14 12:34:02 -03:00
• 16c62d5a4a vault: move core apps to injector Brad Stein 2026-01-14 12:28:10 -03:00
• 1add32e683 infra: add vault injector Brad Stein 2026-01-14 11:46:13 -03:00
• b1f9df4d83 vault: sync harbor pulls Brad Stein 2026-01-14 10:07:31 -03:00
• b8e50bb0a6 monitoring: move grafana smtp to vault Brad Stein 2026-01-14 06:41:34 -03:00
• 37302664c2 vault: add remaining secret syncs Brad Stein 2026-01-14 06:16:42 -03:00
• 5683b3f941 jobs: bump names after vault tweaks Brad Stein 2026-01-14 05:47:21 -03:00
• 9ec08e1dc2 jobs: drop apk in kubectl image Brad Stein 2026-01-14 05:41:01 -03:00
• 6898641b0a comms: restore livekit token env Brad Stein 2026-01-14 05:35:51 -03:00
• 35369d53d8 jobs: bump names for immutability Brad Stein 2026-01-14 05:32:07 -03:00
• 96a7c67674 mailu: bump sync job name Brad Stein 2026-01-14 05:11:27 -03:00
• de3db3133b vault(consumption): sync secrets via CSI Brad Stein 2026-01-14 05:07:23 -03:00
• 8d526e383f vault: send oidc role payload as json Brad Stein 2026-01-14 03:45:03 -03:00
• bb2a3ba904 fix(gitea): inline vault secrets Brad Stein 2026-01-14 03:11:53 -03:00
• 3384533acd fix: resolve gitea mounts and bump portal job Brad Stein 2026-01-14 03:00:10 -03:00
• 4111fb079f vault: write bound_claims as file Brad Stein 2026-01-14 02:56:29 -03:00
• fd2ae6bdd5 vault: wire more services to CSI Brad Stein 2026-01-14 02:54:59 -03:00
• 8a358832f3 vault: fix oidc scopes parsing Brad Stein 2026-01-14 02:52:51 -03:00
• c3541b72c3 vault: run oidc config with sh Brad Stein 2026-01-14 02:28:38 -03:00
• 55234f8536 vault: align oidc roles with keycloak Brad Stein 2026-01-14 02:24:32 -03:00
• 50aec198a4 fix: detect vault initialized state correctly Brad Stein 2026-01-14 01:42:28 -03:00
• cb5796cb71 fix: make vault k8s auth script posix Brad Stein 2026-01-14 01:38:27 -03:00
• 5a9ceeab24 fix: run vault k8s auth config with sh Brad Stein 2026-01-14 01:35:06 -03:00
• b82195f2d7 feat: start vault consumption for outline and planka Brad Stein 2026-01-14 01:30:41 -03:00
• 1d894ea80f keycloak: fix harbor oidc job Brad Stein 2026-01-14 01:24:18 -03:00
• 537d304b36 keycloak: bump harbor oidc job Brad Stein 2026-01-14 01:22:30 -03:00
• e776f004c9 keycloak: ensure harbor oidc scope Brad Stein 2026-01-14 01:21:08 -03:00
• 8fa38268d9 chore: refresh knowledge catalog headers Brad Stein 2026-01-14 01:08:05 -03:00
• 4a1c4766b8 feat: add harbor/vault oidc automation Brad Stein 2026-01-14 01:07:47 -03:00
• bcc15c3e0a monitoring: allow grafana upgrade remediation Brad Stein 2026-01-13 21:18:42 -03:00
• 0b5dcde3a3 monitoring: align victoria-metrics PVC size Brad Stein 2026-01-13 21:15:10 -03:00
• 46777f9ec9 comms: restart atlasbot after MAS fixes Brad Stein 2026-01-13 21:09:41 -03:00
• 98554e5fa4 comms: rerun mas local user seed Brad Stein 2026-01-13 21:06:45 -03:00
• b97146f4d1 comms: disable synapse oidc with MAS Brad Stein 2026-01-13 21:04:29 -03:00
• 928b9379d8 comms: disable synapse password auth with MAS Brad Stein 2026-01-13 21:02:19 -03:00
• b710f45e5c comms: fix synapse runtime config injection Brad Stein 2026-01-13 20:59:35 -03:00
• e6a3ae5f7b comms: restore MAS and OIDC secrets in synapse Brad Stein 2026-01-13 20:55:36 -03:00
• 71fd00d845 comms: fix signing key job permissions Brad Stein 2026-01-13 20:49:11 -03:00
• fa8ec588a8 comms: add debug logging for signing key job Brad Stein 2026-01-13 20:47:54 -03:00
• 47f0d1736e comms: retry synapse signing key job Brad Stein 2026-01-13 20:45:14 -03:00
• 098a06e723 comms: seed synapse signing key for helm Brad Stein 2026-01-13 20:42:30 -03:00
• bcef167b50 harbor: enable keycloak oidc settings Brad Stein 2026-01-13 20:42:26 -03:00
• fbde129d4c fix(bstein-dev-home): drop invalid image overrides Brad Stein 2026-01-13 20:27:50 -03:00
• 4332ded0c3 comms: drop legacy synapse configmaps Brad Stein 2026-01-13 20:07:51 -03:00
• bbe5ded0a6 comms: bump ensure job names for new images Brad Stein 2026-01-13 20:03:11 -03:00
• 4602656578 vault: prep helm releases and image pins Brad Stein 2026-01-13 19:29:14 -03:00
• 8ee7d046d2 ops: prepare vault-consumption branch Brad Stein 2026-01-13 19:01:07 -03:00
• b7798db4f1 flux: track main Brad Stein 2026-01-13 17:57:10 -03:00
• c2bc8a9512 Merge branch 'feature/postgres-migration' Brad Stein 2026-01-13 17:53:25 -03:00
• 07fde43749 platform: move postgres to infrastructure feature/postgres-migration Brad Stein 2026-01-13 17:53:04 -03:00
• f6205b8df7 flux: track main feature/sso-hardening Brad Stein 2026-01-13 17:49:50 -03:00
• 730b9775a3 Merge pull request 'feature/sso-hardening' (#9) from feature/sso-hardening into main bstein 2026-01-13 20:23:24 +00:00
• b09100e787 chore(bstein-dev-home): automated image update flux-bot 2026-01-13 15:57:24 +00:00
• eefaf7df2e merge main into sso-hardening Brad Stein 2026-01-13 12:56:21 -03:00
• 073b44e0c3 gitea: auto-link oidc accounts Brad Stein 2026-01-13 12:47:41 -03:00
• 5aeec67bfb postgres: add flux + vault csi Brad Stein 2026-01-13 12:35:59 -03:00
• 3fc9f7bbdb iac: localize configmap scripts Brad Stein 2026-01-13 12:07:03 -03:00
• 6da576a707 iac: externalize ConfigMap scripts Brad Stein 2026-01-13 09:59:39 -03:00
• 17b733c65e chore(bstein-dev-home): automated image update flux-bot 2026-01-13 12:48:56 +00:00
• 6d213e5b25 chore(bstein-dev-home): automated image update flux-bot 2026-01-13 12:47:56 +00:00
• b01ac8da25 chore(bstein-dev-home): automated image update flux-bot 2026-01-13 12:00:52 +00:00
• 27460f8dc3 chore(bstein-dev-home): automated image update flux-bot 2026-01-13 11:59:53 +00:00
• 4d884bfcb1 chore(bstein-dev-home): automated image update flux-bot 2026-01-13 02:38:08 +00:00
• 606718459e chore(bstein-dev-home): automated image update flux-bot 2026-01-13 02:37:08 +00:00
• 4d6d0b89b2 planka: default users to project owners Brad Stein 2026-01-12 23:24:09 -03:00
• 35a19a2f7b outline: move to local storage Brad Stein 2026-01-12 23:13:53 -03:00
• 1a50f51115 planka: enable project owners via oidc Brad Stein 2026-01-12 23:13:30 -03:00
• ed9a41bd70 chore(bstein-dev-home): automated image update flux-bot 2026-01-13 01:58:04 +00:00
• e12d020c51 chore(bstein-dev-home): automated image update flux-bot 2026-01-13 01:57:04 +00:00
• 5a5766c9b5 planka: avoid mounting over assets Brad Stein 2026-01-12 22:47:23 -03:00
• 7a49e99e62 planka: fix init permissions Brad Stein 2026-01-12 22:02:07 -03:00
• 6376beebb1 services: fix outline pg ssl and planka init Brad Stein 2026-01-12 21:45:00 -03:00