Jeffrey
|
14ef1c6e91
|
zipline: migrate to envFrom with per-container InfisicalSecrets
Flat CR narrowed to recursive: false so it keeps serving the SMB mount credentials that zipline-uploads-pv references by name.
|
2026-08-23 20:08:43 +02:00 |
|
Jeffrey
|
3bec829396
|
infisical: repoint secret CRs at the rebuilt machine identity
Also tracks the auth ServiceAccounts and RBAC in Git so a namespace rebuild restores Kubernetes auth on its own.
|
2026-08-23 20:08:28 +02:00 |
|
Jeffrey
|
7956c6b1b9
|
Migrate to using EnvFrom with the use of Infisical Secret sync for env vars
|
2026-08-23 18:23:56 +02:00 |
|
Jeffrey
|
1d026f8d57
|
infisical: migrate all InfisicalSecrets to Kubernetes auth; drop universal-auth secret
|
2026-07-16 21:18:47 +02:00 |
|
Jeffrey
|
fc4ca1f3f1
|
infisical(netbootxyz): use autoCreateServiceAccountToken (short-lived k8s auth)
|
2026-07-15 22:07:22 +02:00 |
|
Jeffrey
|
596fa5380a
|
infisical(netbootxyz): switch to Kubernetes auth (pilot)
|
2026-07-15 21:54:43 +02:00 |
|
Jeffrey
|
be9bd3a227
|
Add Outline
|
2026-06-22 23:32:35 +02:00 |
|
Jeffrey
|
c40577589d
|
Split manifests into infra/ and applications/
|
2026-06-21 12:23:20 +02:00 |
|