169 Commits

Author SHA1 Message Date
flux-bot
4650b3a550 chore(maintenance): automated image update 2026-04-13 06:47:57 +00:00
97c4dcc3f0 maintenance(soteria): roll pvc-node pin fix and pod-read rbac 2026-04-13 03:31:57 -03:00
flux-bot
a6e21f06ab chore(maintenance): automated image update 2026-04-13 06:30:55 +00:00
a9dba19f76 maintenance(soteria): move restic vault path to shared scope 2026-04-13 03:00:57 -03:00
aa8418dad3 maintenance(vault): roll sync pod after soteria secret mapping 2026-04-13 02:55:14 -03:00
c5dc09c1ca maintenance(soteria): source restic credentials from vault 2026-04-13 02:53:38 -03:00
9bcecc41ee maintenance(ariadne): restart to pick jenkins api creds 2026-04-13 02:45:29 -03:00
b4851b14a3 maintenance(jenkins): provision ariadne api user for weather collector 2026-04-13 02:41:20 -03:00
flux-bot
d916cbefc9 chore(maintenance): automated image update 2026-04-13 05:31:46 +00:00
66c68315f4 maintenance(soteria): roll pods after restic config switch 2026-04-13 02:24:05 -03:00
87f142aadb maintenance(soteria): enable restic encrypted backup mode 2026-04-13 02:23:01 -03:00
41e4004eef maintenance(soteria): fix duplicate b2 config keys 2026-04-13 02:21:25 -03:00
e595aea295 maintenance(soteria): switch to encrypted restic backups 2026-04-13 02:15:46 -03:00
flux-bot
fc9e08e878 chore(maintenance): automated image update 2026-04-13 05:13:43 +00:00
flux-bot
d0d5ffc9d2 chore(maintenance): automated image update 2026-04-13 05:03:42 +00:00
96da525180 maintenance(soteria): avoid titan-10 scheduling 2026-04-13 01:16:59 -03:00
3a7d63e600 maintenance(soteria): roll snapshot-first backup fix image 2026-04-13 00:42:15 -03:00
ef3bbf800b monitoring(jobs): add jenkins build weather job list panels 2026-04-13 00:26:22 -03:00
e43778d265 maintenance(soteria): fix prometheus scrape port to 8080 2026-04-12 22:36:51 -03:00
10c547e304 maintenance(soteria): set explicit b2 endpoint and bucket 2026-04-12 20:31:02 -03:00
f286c25540 maintenance(ariadne): roll image to 0.1.0-103 for cleanup rollout 2026-04-12 20:06:03 -03:00
5d402458b0 maintenance(soteria): roll react ui image and wire b2 monitoring 2026-04-12 20:04:35 -03:00
62bb68391b maintenance(soteria): roll image to 0.1.0-22 for oauth2 headers 2026-04-12 18:55:09 -03:00
405770025b maintenance(soteria): re-enable flux management for workload resources 2026-04-12 18:41:56 -03:00
7aa85b952d merge: lane2 jenkins cleanup activate 2026-04-12 18:33:00 -03:00
e1221643c9 merge: lane2 jenkins cleanup wiring 2026-04-12 18:32:48 -03:00
cbcbbc3255 maintenance(soteria): tighten oauth2 ingress and drill validation 2026-04-12 15:07:54 -03:00
2e97ba062c maintenance(soteria): harden ingress path and add backup alerts 2026-04-12 15:07:54 -03:00
c9fad51696 maintenance(soteria): add serviceaccount and rbac manifests 2026-04-12 15:07:54 -03:00
518aa305f4 maintenance(soteria): add protected UI, OIDC bootstrap, and backup health panel wiring 2026-04-12 15:07:53 -03:00
194bf1323c maintenance(ariadne): activate jenkins workspace cleanup deletes 2026-04-12 15:01:35 -03:00
7b299b00e7 maintenance(ariadne): default jenkins cleanup to safe dry-run 2026-04-12 12:32:20 -03:00
d7519e0bbd maintenance/ariadne: add jenkins workspace cleanup schedule and RBAC 2026-04-12 04:47:19 -03:00
a125d76181 scheduling: keep app workloads off control-plane 2026-04-12 04:27:43 -03:00
70774e5b66 maintenance: remove pi-usb-scratch guard rollout 2026-04-12 01:04:23 -03:00
9221497eca maintenance(pi-usb-scratch): disable rollout jitter for initial cutover 2026-04-11 12:00:46 -03:00
4b61a83a77 maintenance(pi-usb-scratch): fix false mount conflict detection 2026-04-11 11:58:00 -03:00
9f5ac12598 maintenance: enforce Astraios + tmpfs /tmp on worker Pis 2026-04-11 11:55:49 -03:00
a59cd053a3 maintenance: add worker pi usb scratch rollout 2026-04-11 11:55:49 -03:00
764bfe189e monitoring/recovery: harden ananke checks and OIDC-gated service validation 2026-04-09 01:44:26 -03:00
a4631dee81 maintenance: migrate metis ssh key names to ananke 2026-04-07 04:36:42 -03:00
5e387e8e4d maintenance/metis: remove legacy hecate ssh key vars 2026-04-06 19:43:16 -03:00
1ccb04a18a maintenance/metis: default missing ananke ssh keys to empty 2026-04-06 19:36:01 -03:00
25ea022c2e maintenance/metis: migrate ssh key vars to ananke 2026-04-06 19:28:44 -03:00
801dde8242 maintenance: harden k3s traefik disable cleanup 2026-04-06 01:47:32 -03:00
2a9485d9e0 maintenance: disable ariadne vault auth/oidc policy sync cron 2026-04-05 17:40:40 -03:00
2799b54b08 maintenance: pin metis to available image tag 2026-04-05 17:05:31 -03:00
3ce7b2eeb7 maintenance/monitoring: wire reciprocal metis hecate key + dampen alert flapping 2026-04-05 13:51:57 -03:00
8d1be9672c maintenance/metis: bump runner tags to 0.1.0-23 2026-04-05 11:41:02 -03:00
deb52c424b maintenance/vault: move Metis runtime secrets to Vault 2026-04-05 11:31:05 -03:00