Commit Graph

Select branches

Hide Pull Requests

deploy

fea/titan24-gpu

feature/ariadne

feature/atlas-monitoring

feature/atlasbot

feature/bstein-dev-home

feature/ci-gitops

feature/mailu

feature/postgres-migration

feature/sso

feature/sso-hardening

feature/vault-consumption

main

restructure/hybrid-clusters

#1

#10

#11

#2

#3

#4

#5

#6

#7

#8

#9

Mono Color

• 5d4a0814c1 flux: enable debug logging for image automation Brad Stein 2025-12-18 00:40:55 -03:00
• 61d9f05fef flux: update pegasus image automation api Brad Stein 2025-12-18 00:39:39 -03:00
• 609347991e flux: upgrade controllers to v2.7.5 Brad Stein 2025-12-18 00:38:32 -03:00
• 9816354d0f ci-demo: bump to v0.0.0-2 Brad Stein 2025-12-17 23:12:03 -03:00
• 39275db74e ci-demo: set tag v0.0.0-1 Brad Stein 2025-12-17 19:49:53 -03:00
• 9635100675 ci-demo: fix imagepolicy tag regex Brad Stein 2025-12-17 19:45:15 -03:00
• bbb84c1182 jenkins: add ci-demo job Brad Stein 2025-12-17 19:27:23 -03:00
• daa354e2cd ci-demo: add flux image automation Brad Stein 2025-12-17 19:18:29 -03:00
• 0a42289516 harbor: pin components to v2.14.1-arm64 Brad Stein 2025-12-17 17:54:50 -03:00
• b7246f5835 harbor: suspend automation, pin redis Brad Stein 2025-12-17 17:29:03 -03:00
• b7709b3f40 chore(harbor): update images to registry.bstein.dev/infra/harbor-redis:v2.14.1-arm64.14registry.bstein.dev/infra/harbor-core:v2.14.1-arm64.14registry.bstein.dev/infra/harbor-jobservice:v2.14.1-arm64.14registry.bstein.dev/infra/harbor-portal:v2.14.1-arm64.14registry.bstein.dev/infra/harbor-registry:v2.14.1-arm64.14registry.bstein.dev/infra/harbor-registryctl:v2.14.1-arm64.14registry.bstein.dev/infra/harbor-nginx:v2.14.1-arm64.14registry.bstein.dev/infra/harbor-prepare:v2.14.1-arm64.14 flux-bot 2025-12-17 19:38:57 +00:00
• bb8de41cdb harbor: run image automation in harbor ns Brad Stein 2025-12-17 16:38:37 -03:00
• 1d788a5dc4 harbor: fix imagepolicy tag setters Brad Stein 2025-12-17 16:32:42 -03:00
• 37a50622a2 harbor: fix image automation push schema Brad Stein 2025-12-17 16:25:16 -03:00
• cde135c59e harbor: enable image automation push Brad Stein 2025-12-17 16:17:07 -03:00
• 543f2a9ccd harbor: fix image policy tag regex Brad Stein 2025-12-17 13:16:57 -03:00
• efa6d92b69 harbor: automate nginx and prepare Brad Stein 2025-12-17 13:14:31 -03:00
• 2f66afd970 flux(atlas): use scoped health checks Brad Stein 2025-12-17 04:47:12 -03:00
• f55d3fd956 flux(atlas): limit kustomization health checks Brad Stein 2025-12-17 04:11:26 -03:00
• 1a8c6857e7 harbor: re-pin workloads to titan-05 Brad Stein 2025-12-17 03:30:31 -03:00
• f28d5680f2 harbor: add image automation Brad Stein 2025-12-17 03:21:35 -03:00
• 8d04f6c6c7 jenkins: pin controller to rpi4 Brad Stein 2025-12-17 02:53:23 -03:00
• d93d24d5ef jenkins: disable chart local auth realm Brad Stein 2025-12-17 02:30:41 -03:00
• 7dcfd5f6cf jenkins: stop JCasC resetting OIDC Brad Stein 2025-12-17 02:23:54 -03:00
• d3aa456bee jenkins: poll harbor-arm-build scm Brad Stein 2025-12-17 01:58:10 -03:00
• a52b811e5b jenkins: source pipeline creds from secrets Brad Stein 2025-12-17 01:47:33 -03:00
• cd1b9b57b0 harbor: add helm remediation and timeouts Brad Stein 2025-12-17 01:39:49 -03:00
• 5e6f9c6c83 chore: stop tracking NOTES.md Brad Stein 2025-12-17 01:29:48 -03:00
• f512e0fa29 jenkins: harden oidc and timeouts Brad Stein 2025-12-17 01:11:07 -03:00
• 4e479147ec jenkins: run jcasc cleanup initcontainer as jenkins user Brad Stein 2025-12-17 00:43:55 -03:00
• 1f98a5be12 jenkins: clean stale JCasC files on startup Brad Stein 2025-12-17 00:37:37 -03:00
• 30048a9ae5 jenkins: drop invalid JCasC OIDC realm (use init script) Brad Stein 2025-12-17 00:28:52 -03:00
• 60a8192f61 jenkins: enforce OIDC via JCasC (no node move) Brad Stein 2025-12-17 00:23:15 -03:00
• ce7631f896 jenkins: enforce OIDC via JCasC and pin to arm64 Brad Stein 2025-12-16 23:38:08 -03:00
• f3335028b1 jenkins: disable scm trigger for harbor arm build Brad Stein 2025-12-16 23:12:27 -03:00
• 0385a653af fix: use FullControlOnceLoggedIn auth strategy Brad Stein 2025-12-16 20:33:03 -03:00
• 6759871b43 fix: add casc support plugin Brad Stein 2025-12-16 20:27:41 -03:00
• 3e4a49e7fb fix: add job-dsl plugin for JCasC jobs Brad Stein 2025-12-16 20:21:33 -03:00
• b951058dc6 fix: enforce Jenkins OIDC via init groovy only Brad Stein 2025-12-16 20:16:18 -03:00
• cfa7bd8198 fix: jenkins casc OIDC using explicit endpoints Brad Stein 2025-12-16 20:13:52 -03:00
• 162fe3339f fix: pin Jenkins OIDC realm via JCasC Brad Stein 2025-12-16 20:04:21 -03:00
• fc858fc8df ci: seed harbor-arm-build pipeline in Jenkins Brad Stein 2025-12-16 19:26:46 -03:00
• 8b9fc8ff1c chore: remove zot stack Brad Stein 2025-12-16 14:10:04 -03:00
• 3066db793d harbor: bootstrap arm64 images on titan-05 Brad Stein 2025-12-16 11:16:34 -03:00
• 759a77c745 harbor: run arm64 images on rpi workers Brad Stein 2025-12-16 03:22:01 -03:00
• c661658a12 Add AC Infinity ingestion plan Brad Stein 2025-12-16 01:45:04 -03:00
• 144a860a88 harbor: use project paths for crypto/pegasus images Brad Stein 2025-12-16 00:15:22 -03:00
• bd64a36165 registry: point workloads to harbor Brad Stein 2025-12-16 00:08:11 -03:00
• 22b611f8ea harbor: set redis affinity to amd64 titan-22 first Brad Stein 2025-12-15 23:14:26 -03:00
• a8bde2edc7 harbor: pin to amd64, prefer titan-22 Brad Stein 2025-12-15 23:02:58 -03:00
• d51a19cab9 harbor: prefer rpi nodes Brad Stein 2025-12-15 23:00:11 -03:00
• 3e3cab6845 harbor: increase helm timeout Brad Stein 2025-12-15 22:32:29 -03:00
• 9cda32c0bf harbor: use astreae storageclass for pvc Brad Stein 2025-12-15 22:22:48 -03:00
• 0f49849761 Regenerate dashboards after availability thresholds tweak Brad Stein 2025-12-15 22:14:26 -03:00
• 252743e416 harbor: use existing secrets and correct admin key Brad Stein 2025-12-15 22:08:52 -03:00
• dba7cf00a4 harbor: deploy chart via flux Brad Stein 2025-12-15 22:05:40 -03:00
• aa0df1f62b harbor: add helm repo and deploy via helmrelease Brad Stein 2025-12-15 22:05:32 -03:00
• aa2bb09873 zot: allow upstream basic auth from oauth2-proxy Brad Stein 2025-12-15 14:22:48 -03:00
• 54406661f2 zot: forward authorization header to ui Brad Stein 2025-12-15 14:14:49 -03:00
• caef505677 zot ui: send basic creds from oauth2-proxy, remove traefik header Brad Stein 2025-12-15 14:08:18 -03:00
• 54eb9e1ac5 zot: restore UI basic header middleware Brad Stein 2025-12-15 14:01:18 -03:00
• 1899bb7677 zot: move basic auth to oauth2-proxy upstream Brad Stein 2025-12-15 13:53:53 -03:00
• 0416493f49 zot: fix htpasswd volume to avoid type conflict Brad Stein 2025-12-15 13:00:51 -03:00
• b87f06f6ff zot: add oauth proxy and user sync scripts Brad Stein 2025-12-15 12:57:02 -03:00
• 828f66d18c gitea: enable OIDC auto-registration Brad Stein 2025-12-14 23:08:38 -03:00
• 7a1f3bfc3f gitea: add proxy/session headers for OIDC Brad Stein 2025-12-14 22:25:46 -03:00
• 294542e718 gitea: reference secret via env; remove secret file Brad Stein 2025-12-14 22:16:49 -03:00
• c3a8c7ddae gitea: remove committed secret and env refs Brad Stein 2025-12-14 22:10:13 -03:00
• 29da4be557 gitea: pin secret/internal token and include secret manifest Brad Stein 2025-12-14 22:06:25 -03:00
• fc5b0cccf8 gitea: drop required claim constraint on keycloak auth Brad Stein 2025-12-14 21:58:36 -03:00
• c8b89c3120 gitea: enforce keycloak auth source via init container Brad Stein 2025-12-14 21:54:18 -03:00
• 9b994111cb gitea: remove bootstrap job (immutable error) Brad Stein 2025-12-14 21:49:07 -03:00
• a174e451d9 gitea: fix bootstrap job immutability Brad Stein 2025-12-14 21:47:50 -03:00
• d8dab08cd8 gitea: set trace logging for oidc Brad Stein 2025-12-14 21:44:43 -03:00
• 0d93929e3d gitea: relax required signin, set admin group+skip 2fa Brad Stein 2025-12-14 21:42:08 -03:00
• 2ffc906487 gitea: enable debug logging for oauth Brad Stein 2025-12-14 21:38:32 -03:00
• 37761fa118 jenkins: fix OIDC retriever null Brad Stein 2025-12-14 21:23:15 -03:00
• a46226bb0a ci: enable oidc for jenkins/gitops/gitea Brad Stein 2025-12-14 20:58:57 -03:00
• 04602a2914 jenkins: auto-configure OIDC via init script Brad Stein 2025-12-14 19:22:47 -03:00
• fc0fa59981 jenkins: drop JCasC OIDC script to unblock startup Brad Stein 2025-12-14 18:10:49 -03:00
• 0286f4f317 jenkins: restore plugin list without pinned versions Brad Stein 2025-12-14 17:59:48 -03:00
• 90bf1f7d8e jenkins: start without plugin installs to unblock bootstrap Brad Stein 2025-12-14 16:02:05 -03:00
• 6def1aa479 jenkins: use latest plugin versions to avoid 404 Brad Stein 2025-12-14 16:00:45 -03:00
• 4eff9ebcc1 jenkins: add helm release with ingress + astreae storage Brad Stein 2025-12-14 15:57:42 -03:00
• ccfc473521 cleanup: stop tracking extra md files; switch gitops cert to letsencrypt Brad Stein 2025-12-14 15:52:12 -03:00
• b575c64de1 chore: drop stray NOTES.md Brad Stein 2025-12-14 15:43:06 -03:00
• 39d732d74d git: ignore fixed Brad Stein 2025-12-14 15:39:27 -03:00
• b28e393524 gitops-ui: open ingress for acme solver Brad Stein 2025-12-14 15:14:11 -03:00
• 694bb4d12e gitops-ui: allow acme solver from kube-system traefik Brad Stein 2025-12-14 15:12:38 -03:00
• 6993f51ef7 gitops-ui: allow acme solver ingress from traefik Brad Stein 2025-12-14 15:08:44 -03:00
• 85cea34fe8 gitops-ui: cert + switch flux to feature/ci-gitops Brad Stein 2025-12-14 15:04:13 -03:00
• 055ce7d18c Merge pull request 'feature/mailu' (#5) from feature/mailu into main bstein 2025-12-14 17:48:02 +00:00
• 1a161b4d3c monitoring: longer data history feature/mailu Brad Stein 2025-12-14 14:47:20 -03:00
• f7bf990d62 flux: bump gitops-ui kustomization Brad Stein 2025-12-14 14:41:52 -03:00
• 63bf153c8b flux: add weave gitops ui Brad Stein 2025-12-14 14:38:08 -03:00
• 8fceebd7a7 nextcloud: integration with mailu & gitops-ui: initial install Brad Stein 2025-12-14 14:21:40 -03:00
• 0d0216c8f5 Add tests and dedupe nextcloud mail sync Brad Stein 2025-12-14 14:15:19 -03:00
• c8b49560b6 Keep nextcloud scripts single-sourced under scripts/ Brad Stein 2025-12-14 14:05:01 -03:00
• 327a7bed57 Extract nextcloud scripts to files Brad Stein 2025-12-14 13:59:16 -03:00
• aae09c5074 Normalize doc layout and README guidance Brad Stein 2025-12-14 13:47:59 -03:00