Jeffrey/Kubernetes-Manifests
1
0
Fork 0
Code Issues Pull Requests Actions Packages Projects Releases Wiki Activity

Commit Graph

  • f53e8f5b00 jellyfin: upgrade to 12.0 main Jeffrey 2026-09-13 12:56:38 +02:00
  • 30f9c63c9b authentik: spell out API-defaulted fields on the LDAP route and listeners Jeffrey 2026-09-13 11:39:35 +02:00
  • c1287fa343 authentik: serve LDAP via an outpost behind the internal gateway Jeffrey 2026-09-13 11:24:23 +02:00
  • 7ee7db2346 minio-aistor: restore the backend traffic policy to its pre-4207459 state Jeffrey 2026-08-29 19:08:17 +02:00
  • 1593166803 argocd: restore argocd-install.yaml to its pre-4207459 state Jeffrey 2026-08-29 19:07:16 +02:00
  • 42074599e9 gitea-runner: add the missing Application manifest Jeffrey 2026-08-29 18:56:36 +02:00
  • a775c8b837 victoria-metrics: pin back to chart 0.77.0 after a failed 0.91.2 upgrade Jeffrey 2026-08-29 18:39:49 +02:00
  • 02c43d8b85 victoria-metrics: point the values ref at applications/ Jeffrey 2026-08-29 18:18:27 +02:00
  • d5e073131d infisical: ignore every volumeClaimTemplate field the api server injects Jeffrey 2026-08-29 18:16:18 +02:00
  • 8fa2cb558e infisical: ignore the volumeClaimTemplate fields argocd cannot reconcile Jeffrey 2026-08-29 18:00:35 +02:00
  • 7a937dae07 gitea: drop the orphaned runner pvc that could never bind Jeffrey 2026-08-29 18:00:28 +02:00
  • f67cbf4465 netbox: send a Host header on the probes Jeffrey 2026-08-27 20:56:16 +02:00
  • cfd9317086 netbox: add NetBox 4.6.8 with postgres, valkey and rqworker Jeffrey 2026-08-27 20:46:34 +02:00
  • 2d078e10c0 pelican: expose wings-mc and wings-ark on the public gateway Jeffrey 2026-08-26 21:54:49 +02:00
  • 1849703886 pelican: expose the panel on the public gateway Jeffrey 2026-08-26 20:41:28 +02:00
  • 193b9db359 envoy-gateway: comment out netbox entries so the kustomization builds Jeffrey 2026-08-26 20:18:44 +02:00
  • 304c8e71db envoy-gateway: comment out orphaned listeners and certificates Jeffrey 2026-08-26 20:10:20 +02:00
  • 3451b755d4 envoy-gateway: enable CrowdSec ext_authz on the public gateway Jeffrey 2026-08-26 17:31:19 +02:00
  • 16e265239b crowdsec: cut lapi and appsec cpu requests so they schedule Jeffrey 2026-08-26 17:05:56 +02:00
  • dcb127e9e8 crowdsec: add LAPI + AppSec and the Envoy ext_authz bouncer Jeffrey 2026-08-26 17:00:34 +02:00
  • 63056b313a pelican: move panel image to ghcr.io/pelican/panel and pin beta38 Jeffrey 2026-08-26 16:59:06 +02:00
  • 023f233f99 Revert reactive-resume to v5.0 Jeffrey 2026-08-24 23:18:47 +02:00
  • a57860a576 Update application and chart versions to latest Jeffrey 2026-08-24 23:12:22 +02:00
  • 38a03bb131 infisical: add resource requests and limits to postgres and valkey Jeffrey 2026-08-24 00:46:31 +02:00
  • c505924d27 longhorn: track the longhorn-static StorageClass in Git Jeffrey 2026-08-24 00:43:26 +02:00
  • a7f4618d4f argocd: enable directory recurse on the remaining Directory apps Jeffrey 2026-08-24 00:35:31 +02:00
  • 0177c73fa9 gitea: migrate to envFrom with per-container InfisicalSecrets Jeffrey 2026-08-24 00:20:29 +02:00
  • 079830a8ff authentik: migrate to envFrom with per-container InfisicalSecrets Jeffrey 2026-08-24 00:16:26 +02:00
  • 3e13b76c6a react-resume: migrate to envFrom with per-container InfisicalSecrets Jeffrey 2026-08-23 23:47:13 +02:00
  • 3c24cd4b9d gotify: migrate to envFrom with per-container InfisicalSecrets Jeffrey 2026-08-23 23:38:16 +02:00
  • f382c87f58 pelican: migrate to envFrom with per-container InfisicalSecrets Jeffrey 2026-08-23 23:16:37 +02:00
  • 647d82fe0f argocd: enable recurse on the ddns application Jeffrey 2026-08-23 22:51:15 +02:00
  • 0329546d87 azure-ddns: migrate to envFrom with a per-container InfisicalSecret Jeffrey 2026-08-23 22:42:09 +02:00
  • c408522988 immich: migrate to envFrom with per-container InfisicalSecrets Jeffrey 2026-08-23 22:15:10 +02:00
  • 77b8bd4475 passbolt: migrate to envFrom with per-container InfisicalSecrets Jeffrey 2026-08-23 21:54:06 +02:00
  • fccf9074d2 outline: migrate to envFrom with per-container InfisicalSecrets Jeffrey 2026-08-23 20:55:21 +02:00
  • 10545c03be searxng: migrate to envFrom; move remaining literals into Infisical Jeffrey 2026-08-23 20:34:38 +02:00
  • 14ef1c6e91 zipline: migrate to envFrom with per-container InfisicalSecrets Jeffrey 2026-08-23 20:08:43 +02:00
  • 3bec829396 infisical: repoint secret CRs at the rebuilt machine identity Jeffrey 2026-08-23 20:08:28 +02:00
  • 7956c6b1b9 Migrate to using EnvFrom with the use of Infisical Secret sync for env vars Jeffrey 2026-08-23 18:23:56 +02:00
  • 19bab56874 Revert "infisical: add resource requests and limits to postgres and valkey" Jeffrey 2026-08-22 17:04:27 +02:00
  • c72c6a322e infisical: add resource requests and limits to postgres and valkey Jeffrey 2026-08-22 16:55:50 +02:00
  • 1a4c765fec Bump technitium to 15.4.0 Jeffrey 2026-08-22 13:12:34 +02:00
  • 43af4997ab pelican: wings-ark backend is live at 10.8.11.51 Jeffrey 2026-08-16 21:19:22 +02:00
  • 17c84d2ba8 pelican: split wings into wings-mc and wings-ark domains Jeffrey 2026-08-16 21:09:00 +02:00
  • 7403edf7d5 argocd: manage namespaces via manifests instead of CreateNamespace Jeffrey 2026-08-16 21:08:41 +02:00
  • 39f8a78306 fix: point postgres PGDATA at the actual mounted PVC for zipline and immich Jeffrey 2026-08-02 11:52:22 +02:00
  • 37737670b5 infisical: bring self-hosted stack under GitOps (postgres, valkey, backend); secret.yaml excluded template Jeffrey 2026-07-16 21:47:28 +02:00
  • 1d026f8d57 infisical: migrate all InfisicalSecrets to Kubernetes auth; drop universal-auth secret Jeffrey 2026-07-16 21:18:47 +02:00
  • 7526ea0a1b infisical: route infisical.jsme.be to infisical-backend service Jeffrey 2026-07-15 22:20:12 +02:00
  • fc4ca1f3f1 infisical(netbootxyz): use autoCreateServiceAccountToken (short-lived k8s auth) Jeffrey 2026-07-15 22:07:22 +02:00
  • 596fa5380a infisical(netbootxyz): switch to Kubernetes auth (pilot) Jeffrey 2026-07-15 21:54:43 +02:00
  • 571c5d5d0b Move Jenkins and ntfy to deprecated Jeffrey 2026-07-08 09:07:03 +02:00
  • e467340edd Upgrade storage on Jellyfin Jeffrey 2026-07-04 17:41:36 +02:00
  • fc54063272 Increate PVC size Jellyfin Jeffrey 2026-06-27 14:17:55 +02:00
  • 2505812fe7 Ignore Gateway certificateRefs group diff Jeffrey 2026-06-22 23:41:54 +02:00
  • 9841e6a55f Fix envoy-gateway-config to use kustomize Jeffrey 2026-06-22 23:40:18 +02:00
  • be9bd3a227 Add Outline Jeffrey 2026-06-22 23:32:35 +02:00
  • 62137018ea Track envoy-gateway-config app; move affine to deprecated in README Jeffrey 2026-06-21 12:45:21 +02:00
  • c40577589d Split manifests into infra/ and applications/ Jeffrey 2026-06-21 12:14:38 +02:00
  • 64e8bf7d78 Standardize manifest filenames to <app>-<kind>.yaml Jeffrey 2026-06-21 11:55:33 +02:00
  • edef407a7e Move affine to deprecated Jeffrey 2026-06-21 10:22:47 +02:00
  • e83fe33109 Up resource usage Jeffrey 2026-06-20 17:51:59 +02:00
  • 4512784ce4 Fix Env variables Jeffrey 2026-06-20 17:23:41 +02:00
  • 862dcf73a8 Update version and addition zone name + Gotify support Jeffrey 2026-06-20 17:04:19 +02:00
  • f776c85482 ci: update azure-ddns-python image to 1.1 Gitea CI 2026-06-20 15:07:47 +00:00
  • 6a523b71a3 victoria-metrics: use Recreate strategy for grafana (single RWO PVC) Jeffrey 2026-06-18 21:41:43 +02:00
  • 9775eee851 victoria-metrics: fix grafana admin secret to use existingSecret Jeffrey 2026-06-18 21:37:38 +02:00
  • c314336f66 docs: update README with affine, harbor, pelican, stable-diffusion Jeffrey 2026-06-07 01:03:39 +02:00
  • a64516a56a add Pelican panel manifests Jeffrey 2026-06-07 00:51:34 +02:00
  • 86fbf4947c Remove useClientProtocol from MinIO BackendTrafficPolicy to fix HTTP/2 protocol error Jeffrey 2026-06-03 16:40:20 +02:00
  • 8c567053ee Add BackendTrafficPolicy for MinIO console and API to fix download timeouts Jeffrey 2026-06-03 16:32:33 +02:00
  • 017a38cf53 Add ClientTrafficPolicy for MinIO console listener to fix download timeouts Jeffrey 2026-06-03 16:24:42 +02:00
  • 3e179358bc envoy-gateway: add ClientTrafficPolicy for minio-aistor to support large file transfers Jeffrey 2026-06-03 16:17:58 +02:00
  • 7a8193cce5 authentik: upgrade to 2026.5.2 Jeffrey 2026-06-03 12:18:29 +02:00
  • c9df702ae0 pelican: remove endpointslice, switch service to pod selector, use dynamic longhorn for mariadb Jeffrey 2026-06-03 10:22:12 +02:00
  • 8faa00448f pelican: add infisical secret Jeffrey 2026-06-03 09:55:13 +02:00
  • 640cdcfa6f pelican: add cdnjs.cloudflare.com to style-src and font-src for Monaco editor Jeffrey 2026-06-03 08:12:43 +02:00
  • 5f9f533081 pelican: allow cdnjs.cloudflare.com in CSP for Monaco editor Jeffrey 2026-06-03 08:06:59 +02:00
  • 3210ca7dcc Add wings.jsme.be to panel CSP connect-src to allow file uploads Jeffrey 2026-06-02 23:42:27 +02:00
  • fc29b7a437 Restrict Wings listener ALPN to http/1.1 to fix Guzzle broken pipe Jeffrey 2026-06-02 23:22:11 +02:00
  • 28fe08a2d5 Add Wings ClientTrafficPolicy to envoy-gateway kustomization Jeffrey 2026-06-02 22:50:41 +02:00
  • bb773f9ab8 Move Wings ClientTrafficPolicy to envoy-gateway dir Jeffrey 2026-06-02 22:49:08 +02:00
  • b2abc22217 Add Wings ClientTrafficPolicy for upload timeout Jeffrey 2026-06-02 22:47:50 +02:00
  • 34ae1a1a42 Remove Wings BackendTrafficPolicy Jeffrey 2026-06-02 22:41:57 +02:00
  • dbeeada821 Fix Wings BackendTrafficPolicy: remove useClientProtocol Jeffrey 2026-06-02 22:38:15 +02:00
  • 9ed764b2e3 Add Wings BackendTrafficPolicy for WebSocket support Jeffrey 2026-06-02 22:35:25 +02:00
  • 5d73cee1bf Add Wings HTTPS proxy via Envoy Gateway Jeffrey 2026-06-02 22:28:39 +02:00
  • 911f2c4b8f Update pelican/httproute.yaml Jeffrey 2026-06-02 19:41:40 +00:00
  • 5e2feec8bb Update pelican/httproute.yaml Jeffrey 2026-06-02 19:35:00 +00:00
  • cb7ec67524 Fix kustomization: remove shelfmark/docuseal, recreate affine gateway files Jeffrey 2026-06-02 19:32:03 +02:00
  • d7bf168d17 Add Pelican panel — EndpointSlice, HTTPRoute, certificate, gateway listener Jeffrey 2026-06-02 19:23:31 +02:00
  • a939c77a04 Remove hardcoded volumeName from searxng PVC Jeffrey 2026-06-01 11:12:26 +02:00
  • 2ab124916d Reset git history for making manifests public Jeffrey 2026-06-01 11:06:25 +02:00