Jeffrey/Kubernetes-Manifests
1
0
Fork 0
Code Issues Pull Requests Actions Packages Projects Releases Wiki Activity
66 Commits 1 Branch 0 Tags
3e13b76c6a1db32f92df9c726beb7efe77d99677
Commit Graph
66 Commits
This Branch
This Branch
All Branches
Author SHA1 Message Date
Jeffrey 3e13b76c6a react-resume: migrate to envFrom with per-container InfisicalSecrets 
Stores PRINTER_ENDPOINT pre-assembled instead of building it from CHROME_TOKEN via $() interpolation.
 2026-08-23 23:47:13 +02:00
Jeffrey 3c24cd4b9d gotify: migrate to envFrom with per-container InfisicalSecrets 
Stores the fully assembled database DSN in Infisical instead of building it from three helper vars with $() interpolation, which envFrom cannot feed.
 2026-08-23 23:38:16 +02:00
Jeffrey f382c87f58 pelican: migrate to envFrom with per-container InfisicalSecrets 
Folds the pelican-config ConfigMap into Infisical so the container has a single envFrom. Pins imagePullPolicy to IfNotPresent because ghcr.io/pelican-dev/panel no longer allows anonymous pulls.
 2026-08-23 23:16:37 +02:00
Jeffrey 647d82fe0f argocd: enable recurse on the ddns application 
azure-ddns now uses a component directory like the other apps, and without recurse ArgoCD stopped seeing its StatefulSet and InfisicalSecret.
 2026-08-23 22:51:15 +02:00
Jeffrey 0329546d87 azure-ddns: migrate to envFrom with a per-container InfisicalSecret 
Also moves the manifests into a component directory, matching the other migrated apps.
 2026-08-23 22:42:09 +02:00
Jeffrey c408522988 immich: migrate to envFrom with per-container InfisicalSecrets 
Flat CR narrowed to recursive: false so it keeps serving the SMB credentials that immich-data-smb references by name.
 2026-08-23 22:15:10 +02:00
Jeffrey 77b8bd4475 passbolt: migrate to envFrom with per-container InfisicalSecrets 
Also removes the now-stale flat CR files for searxng, outline and passbolt, which ArgoCD would otherwise recreate pointing at emptied folders.
 2026-08-23 21:54:06 +02:00
Jeffrey fccf9074d2 outline: migrate to envFrom with per-container InfisicalSecrets 
All 31 env entries, secrets and literals alike, now live in Infisical under /outline/outline and /outline/postgres. Manifest rationale carried across as Infisical secret comments.
 2026-08-23 20:55:21 +02:00
Jeffrey 10545c03be searxng: migrate to envFrom; move remaining literals into Infisical 
Non-secret config now lives in Infisical alongside the secrets, so containers carry envFrom only and no loose env entries.
 2026-08-23 20:34:38 +02:00
Jeffrey 14ef1c6e91 zipline: migrate to envFrom with per-container InfisicalSecrets 
Flat CR narrowed to recursive: false so it keeps serving the SMB mount credentials that zipline-uploads-pv references by name.
 2026-08-23 20:08:43 +02:00
Jeffrey 3bec829396 infisical: repoint secret CRs at the rebuilt machine identity 
Also tracks the auth ServiceAccounts and RBAC in Git so a namespace rebuild restores Kubernetes auth on its own.
 2026-08-23 20:08:28 +02:00
Jeffrey 7956c6b1b9 Migrate to using EnvFrom with the use of Infisical Secret sync for env vars 2026-08-23 18:23:56 +02:00
Jeffrey 19bab56874 Revert "infisical: add resource requests and limits to postgres and valkey" 
This reverts commit c72c6a322e.
 2026-08-22 17:04:27 +02:00
Jeffrey c72c6a322e infisical: add resource requests and limits to postgres and valkey 
Both ran as BestEffort QoS, making them first in line for eviction
under node memory pressure. Requests also give the scheduler real
numbers to place them with.
 2026-08-22 16:55:50 +02:00
Jeffrey 1a4c765fec Bump technitium to 15.4.0 2026-08-22 13:12:34 +02:00
Jeffrey 43af4997ab pelican: wings-ark backend is live at 10.8.11.51 2026-08-16 21:19:22 +02:00
Jeffrey 17c84d2ba8 pelican: split wings into wings-mc and wings-ark domains 2026-08-16 21:09:00 +02:00
Jeffrey 7403edf7d5 argocd: manage namespaces via manifests instead of CreateNamespace 2026-08-16 21:08:41 +02:00
Jeffrey 39f8a78306 fix: point postgres PGDATA at the actual mounted PVC for zipline and immich 2026-08-02 12:55:18 +02:00
Jeffrey 37737670b5 infisical: bring self-hosted stack under GitOps (postgres, valkey, backend); secret.yaml excluded template 2026-07-16 21:47:28 +02:00
Jeffrey 1d026f8d57 infisical: migrate all InfisicalSecrets to Kubernetes auth; drop universal-auth secret 2026-07-16 21:18:47 +02:00
Jeffrey 7526ea0a1b infisical: route infisical.jsme.be to infisical-backend service 2026-07-15 22:20:12 +02:00
Jeffrey fc4ca1f3f1 infisical(netbootxyz): use autoCreateServiceAccountToken (short-lived k8s auth) 2026-07-15 22:07:22 +02:00
Jeffrey 596fa5380a infisical(netbootxyz): switch to Kubernetes auth (pilot) 2026-07-15 21:54:43 +02:00
Jeffrey 571c5d5d0b Move Jenkins and ntfy to deprecated 2026-07-08 09:07:03 +02:00
Jeffrey e467340edd Upgrade storage on Jellyfin 2026-07-04 17:41:36 +02:00
Jeffrey fc54063272 Increate PVC size Jellyfin 2026-06-27 14:17:55 +02:00
Jeffrey 2505812fe7 Ignore Gateway certificateRefs group diff 2026-06-22 23:41:54 +02:00
Jeffrey 9841e6a55f Fix envoy-gateway-config to use kustomize 2026-06-22 23:40:18 +02:00
Jeffrey be9bd3a227 Add Outline 2026-06-22 23:32:35 +02:00
Jeffrey 62137018ea Track envoy-gateway-config app; move affine to deprecated in README 2026-06-21 12:45:21 +02:00
Jeffrey c40577589d Split manifests into infra/ and applications/ 2026-06-21 12:23:20 +02:00
Jeffrey 64e8bf7d78 Standardize manifest filenames to <app>-<kind>.yaml 2026-06-21 12:23:20 +02:00
Jeffrey edef407a7e Move affine to deprecated 2026-06-21 10:22:47 +02:00
Jeffrey e83fe33109 Up resource usage 2026-06-20 17:51:59 +02:00
Jeffrey 4512784ce4 Fix Env variables 2026-06-20 17:23:41 +02:00
Jeffrey 862dcf73a8 Update version and addition zone name + Gotify support 2026-06-20 17:08:14 +02:00
Gitea CI f776c85482 ci: update azure-ddns-python image to 1.1 2026-06-20 15:07:47 +00:00
Jeffrey 6a523b71a3 victoria-metrics: use Recreate strategy for grafana (single RWO PVC) 
RollingUpdate deadlocks on the ReadWriteOnce longhorn PVC: old and new
pods cannot both attach the volume. Recreate terminates the old pod first.
 2026-06-18 21:41:43 +02:00
Jeffrey 9775eee851 victoria-metrics: fix grafana admin secret to use existingSecret 
Resolves duplicate GF_SECURITY_ADMIN_PASSWORD env (chart default + envValueFrom)
that broke ArgoCD diff and left the grafana Deployment unable to sync.
 2026-06-18 21:37:38 +02:00
Jeffrey c314336f66 docs: update README with affine, harbor, pelican, stable-diffusion 2026-06-07 01:03:39 +02:00
Jeffrey a64516a56a add Pelican panel manifests 2026-06-07 00:51:34 +02:00
Jeffrey 86fbf4947c Remove useClientProtocol from MinIO BackendTrafficPolicy to fix HTTP/2 protocol error 2026-06-03 16:40:20 +02:00
Jeffrey 8c567053ee Add BackendTrafficPolicy for MinIO console and API to fix download timeouts 2026-06-03 16:32:33 +02:00
Jeffrey 017a38cf53 Add ClientTrafficPolicy for MinIO console listener to fix download timeouts 2026-06-03 16:24:42 +02:00
Jeffrey 3e179358bc envoy-gateway: add ClientTrafficPolicy for minio-aistor to support large file transfers 2026-06-03 16:17:58 +02:00
Jeffrey 7a8193cce5 authentik: upgrade to 2026.5.2 2026-06-03 12:18:29 +02:00
Jeffrey c9df702ae0 pelican: remove endpointslice, switch service to pod selector, use dynamic longhorn for mariadb 2026-06-03 10:22:12 +02:00
Jeffrey 8faa00448f pelican: add infisical secret 2026-06-03 09:55:13 +02:00
Jeffrey 640cdcfa6f pelican: add cdnjs.cloudflare.com to style-src and font-src for Monaco editor 2026-06-03 08:12:43 +02:00