titan-iac

oneoffs

maintenance: expire completed one-off jobs

2026-07-14 17:10:18 -03:00

scripts

maintenance: raise node inotify limits

2026-06-10 05:43:23 -03:00

ariadne-deployment.yaml

game-stream: add Wolf portal access controls

2026-05-21 15:54:56 -03:00

ariadne-rbac.yaml

game-stream: deploy Wolf foundation

2026-05-21 02:07:17 -03:00

ariadne-service.yaml

feat: add Ariadne service and glue scheduling

2026-01-19 16:58:02 -03:00

ariadne-serviceaccount.yaml

feat: add Ariadne service and glue scheduling

2026-01-19 16:58:02 -03:00

disable-k3s-traefik-daemonset.yaml

maintenance: disable k3s traefik; keycloak portal admin roles

2026-01-16 07:53:04 -03:00

disable-k3s-traefik-rbac.yaml

maintenance: harden k3s traefik disable cleanup

2026-04-06 01:47:32 -03:00

disable-k3s-traefik-serviceaccount.yaml

maintenance: disable k3s traefik; keycloak portal admin roles

2026-01-16 07:53:04 -03:00

image-sweeper-cronjob.yaml

glue: centralize sync tasks in ariadne

2026-01-21 02:57:40 -03:00

image.yaml

maintenance(metis): track arch-specific images

2026-04-24 12:55:47 -03:00

k3s-agent-restart-daemonset.yaml

maintenance: add k3s agent restart daemonset

2026-01-17 01:28:13 -03:00

k3s-traefik-cleanup-rbac.yaml

maintenance: harden k3s traefik disable cleanup

2026-04-06 01:47:32 -03:00

kustomization.yaml

chore(maintenance): automated image update

2026-07-16 05:10:46 +00:00

metis-certificate.yaml

maintenance(metis): move ingress to recovery host

2026-04-24 10:51:09 -03:00

metis-configmap.yaml

chore(maintenance): automated image update

2026-07-16 01:41:07 +00:00

metis-data-pvc.yaml

maintenance(metis): move runtime state to longhorn

2026-05-05 06:15:22 -03:00

metis-deployment.yaml

metis: fix pvc rollout and sentinel pulls

2026-05-10 04:36:31 -03:00

metis-ingress.yaml

maintenance(metis): move ingress to recovery host

2026-04-24 10:51:09 -03:00

metis-inventory.yaml

maintenance(metis): add titan-16 replacement profile

2026-04-19 21:01:49 -03:00

metis-k3s-token-sync-cronjob.yaml

maintenance/vault: move Metis runtime secrets to Vault

2026-04-05 11:31:05 -03:00

metis-rbac.yaml

chore(metis): deploy scratch annotation sync

2026-04-22 04:28:08 -03:00

metis-sentinel-amd64-daemonset.yaml

chore(maintenance): automated image update

2026-07-16 01:36:55 +00:00

metis-sentinel-arm64-daemonset.yaml

chore(maintenance): automated image update

2026-07-16 01:41:55 +00:00

metis-service.yaml

monitoring: fix grafana no-data scrape gaps

2026-04-16 19:30:31 -03:00

metis-serviceaccount.yaml

metis: fix pvc rollout and sentinel pulls

2026-05-10 04:36:31 -03:00

metis-token-sync-serviceaccount.yaml

maintenance: harden metis recovery and fix harbor rollout

2026-03-31 14:55:48 -03:00

namespace.yaml

maintenance: sweep unused images on arm workers

2026-01-10 20:20:54 -03:00

node-image-sweeper-daemonset.yaml

ci: tighten agent spread and sweeper limits

2026-05-20 06:33:12 -03:00

node-image-sweeper-serviceaccount.yaml

maintenance: sweep unused images on arm workers

2026-01-10 20:20:54 -03:00

node-nofile-daemonset.yaml

maintenance: raise node inotify limits

2026-06-10 05:43:23 -03:00

node-nofile-serviceaccount.yaml

maintenance: sweep unused images on arm workers

2026-01-10 20:20:54 -03:00

NOTES.md

maintenance: document node recovery guardrails

2026-05-22 17:21:59 -03:00

oauth2-proxy-metis.yaml

maintenance(metis): move ingress to recovery host

2026-04-24 10:51:09 -03:00

oauth2-proxy-soteria-networkpolicy.yaml

maintenance(soteria): tighten oauth2 ingress and drill validation

2026-04-12 15:07:54 -03:00

oauth2-proxy-soteria.yaml

maintenance(soteria): harden ingress path and add backup alerts

2026-04-12 15:07:54 -03:00

pod-cleaner-cronjob.yaml

glue: centralize sync tasks in ariadne

2026-01-21 02:57:40 -03:00

pod-cleaner-rbac.yaml

maintenance: sweep unused images on arm workers

2026-01-10 20:20:54 -03:00

rpi-resource-reservation-daemonset.yaml

maintenance: document rpi reservation privileges

2026-05-19 18:52:45 -03:00

secretproviderclass.yaml

maintenance(soteria): move restic vault path to shared scope

2026-04-13 03:00:57 -03:00

soteria-certificate.yaml

maintenance(soteria): add protected UI, OIDC bootstrap, and backup health panel wiring

2026-04-12 15:07:53 -03:00

soteria-configmap.yaml

maintenance: use longhorn driver for soteria backups

2026-07-16 01:17:13 -03:00

soteria-deployment.yaml

maintenance: use longhorn driver for soteria backups

2026-07-16 01:17:13 -03:00

soteria-ingress.yaml

maintenance(soteria): add protected UI, OIDC bootstrap, and backup health panel wiring

2026-04-12 15:07:53 -03:00

soteria-networkpolicy.yaml

maintenance(soteria): harden ingress path and add backup alerts

2026-04-12 15:07:54 -03:00

soteria-rbac.yaml

maintenance: deploy soteria backup status wait

2026-07-16 01:56:53 -03:00

soteria-service.yaml

maintenance(soteria): fix prometheus scrape port to 8080

2026-04-12 22:36:51 -03:00

soteria-serviceaccount.yaml

maintenance(soteria): add serviceaccount and rbac manifests

2026-04-12 15:07:54 -03:00

titan-22-link-keeper-daemonset.yaml

maintenance: stabilize recovered worker nodes

2026-05-22 17:10:01 -03:00

titan-24-docker-daemonset.yaml

maintenance(titan-24): start Docker through host systemd

2026-05-21 01:58:27 -03:00

titan-24-docker-serviceaccount.yaml

maintenance(titan-24): install Docker for Wolf

2026-05-21 01:54:31 -03:00

vault-serviceaccount.yaml

feat: add Ariadne service and glue scheduling

2026-01-19 16:58:02 -03:00

vault-sync-deployment.yaml

scheduling: target hdd storage node exclusions

2026-05-22 14:02:17 -03:00