Jeffrey/Kubernetes-Manifests
1
0
Fork 0
Code Issues Pull Requests Actions Packages Projects Releases Wiki Activity
56 Commits 1 Branch 0 Tags
3bec829396ff50b05f0f84d7d7629703080bd7d0
Commit Graph
56 Commits
This Branch
This Branch
All Branches
Author SHA1 Message Date
Jeffrey 3bec829396 infisical: repoint secret CRs at the rebuilt machine identity 
Also tracks the auth ServiceAccounts and RBAC in Git so a namespace rebuild restores Kubernetes auth on its own.
 2026-08-23 20:08:28 +02:00
Jeffrey 7956c6b1b9 Migrate to using EnvFrom with the use of Infisical Secret sync for env vars 2026-08-23 18:23:56 +02:00
Jeffrey 19bab56874 Revert "infisical: add resource requests and limits to postgres and valkey" 
This reverts commit c72c6a322e.
 2026-08-22 17:04:27 +02:00
Jeffrey c72c6a322e infisical: add resource requests and limits to postgres and valkey 
Both ran as BestEffort QoS, making them first in line for eviction
under node memory pressure. Requests also give the scheduler real
numbers to place them with.
 2026-08-22 16:55:50 +02:00
Jeffrey 1a4c765fec Bump technitium to 15.4.0 2026-08-22 13:12:34 +02:00
Jeffrey 43af4997ab pelican: wings-ark backend is live at 10.8.11.51 2026-08-16 21:19:22 +02:00
Jeffrey 17c84d2ba8 pelican: split wings into wings-mc and wings-ark domains 2026-08-16 21:09:00 +02:00
Jeffrey 7403edf7d5 argocd: manage namespaces via manifests instead of CreateNamespace 2026-08-16 21:08:41 +02:00
Jeffrey 39f8a78306 fix: point postgres PGDATA at the actual mounted PVC for zipline and immich 2026-08-02 12:55:18 +02:00
Jeffrey 37737670b5 infisical: bring self-hosted stack under GitOps (postgres, valkey, backend); secret.yaml excluded template 2026-07-16 21:47:28 +02:00
Jeffrey 1d026f8d57 infisical: migrate all InfisicalSecrets to Kubernetes auth; drop universal-auth secret 2026-07-16 21:18:47 +02:00
Jeffrey 7526ea0a1b infisical: route infisical.jsme.be to infisical-backend service 2026-07-15 22:20:12 +02:00
Jeffrey fc4ca1f3f1 infisical(netbootxyz): use autoCreateServiceAccountToken (short-lived k8s auth) 2026-07-15 22:07:22 +02:00
Jeffrey 596fa5380a infisical(netbootxyz): switch to Kubernetes auth (pilot) 2026-07-15 21:54:43 +02:00
Jeffrey 571c5d5d0b Move Jenkins and ntfy to deprecated 2026-07-08 09:07:03 +02:00
Jeffrey e467340edd Upgrade storage on Jellyfin 2026-07-04 17:41:36 +02:00
Jeffrey fc54063272 Increate PVC size Jellyfin 2026-06-27 14:17:55 +02:00
Jeffrey 2505812fe7 Ignore Gateway certificateRefs group diff 2026-06-22 23:41:54 +02:00
Jeffrey 9841e6a55f Fix envoy-gateway-config to use kustomize 2026-06-22 23:40:18 +02:00
Jeffrey be9bd3a227 Add Outline 2026-06-22 23:32:35 +02:00
Jeffrey 62137018ea Track envoy-gateway-config app; move affine to deprecated in README 2026-06-21 12:45:21 +02:00
Jeffrey c40577589d Split manifests into infra/ and applications/ 2026-06-21 12:23:20 +02:00
Jeffrey 64e8bf7d78 Standardize manifest filenames to <app>-<kind>.yaml 2026-06-21 12:23:20 +02:00
Jeffrey edef407a7e Move affine to deprecated 2026-06-21 10:22:47 +02:00
Jeffrey e83fe33109 Up resource usage 2026-06-20 17:51:59 +02:00
Jeffrey 4512784ce4 Fix Env variables 2026-06-20 17:23:41 +02:00
Jeffrey 862dcf73a8 Update version and addition zone name + Gotify support 2026-06-20 17:08:14 +02:00
Gitea CI f776c85482 ci: update azure-ddns-python image to 1.1 2026-06-20 15:07:47 +00:00
Jeffrey 6a523b71a3 victoria-metrics: use Recreate strategy for grafana (single RWO PVC) 
RollingUpdate deadlocks on the ReadWriteOnce longhorn PVC: old and new
pods cannot both attach the volume. Recreate terminates the old pod first.
 2026-06-18 21:41:43 +02:00
Jeffrey 9775eee851 victoria-metrics: fix grafana admin secret to use existingSecret 
Resolves duplicate GF_SECURITY_ADMIN_PASSWORD env (chart default + envValueFrom)
that broke ArgoCD diff and left the grafana Deployment unable to sync.
 2026-06-18 21:37:38 +02:00
Jeffrey c314336f66 docs: update README with affine, harbor, pelican, stable-diffusion 2026-06-07 01:03:39 +02:00
Jeffrey a64516a56a add Pelican panel manifests 2026-06-07 00:51:34 +02:00
Jeffrey 86fbf4947c Remove useClientProtocol from MinIO BackendTrafficPolicy to fix HTTP/2 protocol error 2026-06-03 16:40:20 +02:00
Jeffrey 8c567053ee Add BackendTrafficPolicy for MinIO console and API to fix download timeouts 2026-06-03 16:32:33 +02:00
Jeffrey 017a38cf53 Add ClientTrafficPolicy for MinIO console listener to fix download timeouts 2026-06-03 16:24:42 +02:00
Jeffrey 3e179358bc envoy-gateway: add ClientTrafficPolicy for minio-aistor to support large file transfers 2026-06-03 16:17:58 +02:00
Jeffrey 7a8193cce5 authentik: upgrade to 2026.5.2 2026-06-03 12:18:29 +02:00
Jeffrey c9df702ae0 pelican: remove endpointslice, switch service to pod selector, use dynamic longhorn for mariadb 2026-06-03 10:22:12 +02:00
Jeffrey 8faa00448f pelican: add infisical secret 2026-06-03 09:55:13 +02:00
Jeffrey 640cdcfa6f pelican: add cdnjs.cloudflare.com to style-src and font-src for Monaco editor 2026-06-03 08:12:43 +02:00
Jeffrey 5f9f533081 pelican: allow cdnjs.cloudflare.com in CSP for Monaco editor 2026-06-03 08:06:59 +02:00
Jeffrey 3210ca7dcc Add wings.jsme.be to panel CSP connect-src to allow file uploads 2026-06-02 23:42:27 +02:00
Jeffrey fc29b7a437 Restrict Wings listener ALPN to http/1.1 to fix Guzzle broken pipe 2026-06-02 23:22:11 +02:00
Jeffrey 28fe08a2d5 Add Wings ClientTrafficPolicy to envoy-gateway kustomization 2026-06-02 22:50:41 +02:00
Jeffrey bb773f9ab8 Move Wings ClientTrafficPolicy to envoy-gateway dir 2026-06-02 22:49:08 +02:00
Jeffrey b2abc22217 Add Wings ClientTrafficPolicy for upload timeout 2026-06-02 22:47:50 +02:00
Jeffrey 34ae1a1a42 Remove Wings BackendTrafficPolicy 2026-06-02 22:41:57 +02:00
Jeffrey dbeeada821 Fix Wings BackendTrafficPolicy: remove useClientProtocol 2026-06-02 22:38:15 +02:00
Jeffrey 9ed764b2e3 Add Wings BackendTrafficPolicy for WebSocket support 2026-06-02 22:35:25 +02:00
Jeffrey 5d73cee1bf Add Wings HTTPS proxy via Envoy Gateway 2026-06-02 22:29:17 +02:00