Brad Stein deefdb53ad maintenance(soteria): roll out 0.1.0-34

2026-04-13 14:23:24 -03:00

..

oneoffs

chore: organize one-off jobs

2026-01-28 01:48:32 -03:00

scripts

maintenance: remove pi-usb-scratch guard rollout

2026-04-12 01:02:41 -03:00

ariadne-deployment.yaml

maintenance: set explicit jenkins cleanup schedule

2026-04-12 11:36:50 -03:00

ariadne-rbac.yaml

maintenance: wire jenkins cleanup permissions

2026-04-12 11:00:50 -03:00

ariadne-service.yaml

feat: add Ariadne service and glue scheduling

2026-01-19 16:58:02 -03:00

ariadne-serviceaccount.yaml

feat: add Ariadne service and glue scheduling

2026-01-19 16:58:02 -03:00

disable-k3s-traefik-daemonset.yaml

maintenance: disable k3s traefik; keycloak portal admin roles

2026-01-16 07:53:04 -03:00

disable-k3s-traefik-rbac.yaml

maintenance: harden k3s traefik disable cleanup

2026-04-06 01:47:32 -03:00

disable-k3s-traefik-serviceaccount.yaml

maintenance: disable k3s traefik; keycloak portal admin roles

2026-01-16 07:53:04 -03:00

image.yaml

maintenance: add Metis service and sentinel manifests

2026-03-31 14:54:54 -03:00

k3s-agent-restart-daemonset.yaml

maintenance: add k3s agent restart daemonset

2026-01-17 01:28:13 -03:00

k3s-traefik-cleanup-rbac.yaml

maintenance: harden k3s traefik disable cleanup

2026-04-06 01:47:32 -03:00

kustomization.yaml

maintenance(soteria): roll out 0.1.0-34

2026-04-13 14:23:24 -03:00

metis-certificate.yaml

maintenance: issue sentinel-only certificate for metis

2026-03-31 17:01:23 -03:00

metis-configmap.yaml

maintenance/metis: bump runner tags to 0.1.0-23

2026-04-05 11:41:02 -03:00

metis-data-pvc.yaml

maintenance: harden metis recovery and fix harbor rollout

2026-03-31 14:55:48 -03:00

metis-deployment.yaml

maintenance: migrate metis ssh key names to ananke

2026-04-07 04:36:42 -03:00

metis-ingress.yaml

sso: route metis through dedicated oauth2 proxy

2026-03-31 17:32:19 -03:00

metis-rbac.yaml

maintenance: remoteize metis build and flash

2026-03-31 20:42:35 -03:00

metis-sentinel-amd64-daemonset.yaml

maintenance: split metis sentinel by architecture

2026-03-31 15:37:13 -03:00

metis-sentinel-arm64-daemonset.yaml

maintenance: split metis sentinel by architecture

2026-03-31 15:37:13 -03:00

metis-service.yaml

maintenance: add Metis service and sentinel manifests

2026-03-31 14:54:54 -03:00

metis-serviceaccount.yaml

maintenance: add Metis service and sentinel manifests

2026-03-31 14:54:54 -03:00

metis-token-sync-serviceaccount.yaml

maintenance: harden metis recovery and fix harbor rollout

2026-03-31 14:55:48 -03:00

namespace.yaml

maintenance: sweep unused images on arm workers

2026-01-10 20:20:54 -03:00

node-image-sweeper-daemonset.yaml

maintenance: harden sd-write controls and recovery workflow

2026-03-31 00:06:44 -03:00

node-image-sweeper-serviceaccount.yaml

maintenance: sweep unused images on arm workers

2026-01-10 20:20:54 -03:00

node-nofile-daemonset.yaml

maintenance: sweep unused images on arm workers

2026-01-10 20:20:54 -03:00

node-nofile-serviceaccount.yaml

maintenance: sweep unused images on arm workers

2026-01-10 20:20:54 -03:00

NOTES.md

maintenance(soteria): tighten oauth2 ingress and drill validation

2026-04-12 14:58:25 -03:00

oauth2-proxy-metis.yaml

monitoring/recovery: harden ananke checks and OIDC-gated service validation

2026-04-09 01:44:26 -03:00

oauth2-proxy-soteria-networkpolicy.yaml

maintenance(soteria): tighten oauth2 ingress and drill validation

2026-04-12 14:58:25 -03:00

oauth2-proxy-soteria.yaml

maintenance(soteria): harden ingress path and add backup alerts

2026-04-12 12:12:43 -03:00

pod-cleaner-rbac.yaml

maintenance: sweep unused images on arm workers

2026-01-10 20:20:54 -03:00

secretproviderclass.yaml

maintenance(soteria): move restic vault path to shared scope

2026-04-13 03:01:29 -03:00

soteria-certificate.yaml

maintenance(soteria): add protected UI, OIDC bootstrap, and backup health panel wiring

2026-04-12 11:16:29 -03:00

soteria-configmap.yaml

maintenance(soteria): switch to encrypted restic backups

2026-04-13 02:14:39 -03:00

soteria-deployment.yaml

maintenance(soteria): add protected UI, OIDC bootstrap, and backup health panel wiring

2026-04-12 11:16:29 -03:00

soteria-ingress.yaml

maintenance(soteria): add protected UI, OIDC bootstrap, and backup health panel wiring

2026-04-12 11:16:29 -03:00

soteria-networkpolicy.yaml

maintenance(soteria): harden ingress path and add backup alerts

2026-04-12 12:12:43 -03:00

soteria-rbac.yaml

maintenance(soteria): grant pod logs and roll out 0.1.0-32

2026-04-13 12:51:38 -03:00

soteria-service.yaml

maintenance(soteria): add protected UI, OIDC bootstrap, and backup health panel wiring

2026-04-12 11:16:29 -03:00

soteria-serviceaccount.yaml

maintenance(soteria): add serviceaccount and rbac manifests

2026-04-12 11:36:33 -03:00

vault-serviceaccount.yaml

feat: add Ariadne service and glue scheduling

2026-01-19 16:58:02 -03:00

vault-sync-deployment.yaml

maintenance(vault): roll sync pod after soteria secret mapping

2026-04-13 02:55:42 -03:00