homelab-frontend

4 Commits

Include renames

Author	SHA1	Message	Date
Admin Botandpoimen	d40a0946e1	feat: route qwen2.5:3b-instruct to CPU service on cp-2 CI / CI (pull_request) Successful in 3m12s Details Model moved from ornith-predictor GPU to dedicated qwen-cpu Deployment on talos-cp-2 (CPU). Frees 1 GPU for ComfyUI. Co-authored-by: poimen <[email protected]>	2026-09-08 18:26:32 -07:00
poimenandrock	ddee0f2dc9	feat(config): add tokenUrl, clientId, clientSecret to auth config (#17 ) CI / CI (push) Successful in 3m20s Details Closes homelab#12 (P3.7) ## Changes - `AuthConfig`: added `TokenURL`, `ClientID`, `ClientSecret` fields - `loader.go`: reads `tokenUrl`/`clientId` from YAML, `ClientSecret` from `AUTH_CLIENT_SECRET` env - `deployment.yaml`: `AUTH_CLIENT_SECRET` from `api-gw-client-secret` Secret (optional) - `gateway-config-secret.enc.yaml` + `configmap.yaml`: added `tokenUrl` and `clientId` ## Secret never in YAML `clientSecret` deliberately omitted from YAML struct. Loaded from env only. ## Tests 3 tests: full config load, env-only secret, backward compat (missing fields = zero). Co-authored-by: poimen <[email protected]>	2026-09-08 23:43:29 +00:00
Admin Bot	c87463c850	fix(s3): correct MinIO service port and allow egress CI / CI (pull_request) Successful in 3m16s Details MinIO ClusterIP service listens on port 80 (targetPort 9000). Config had port 9000 which caused 30s timeout then 502 — gateway connected to service port 9000 which doesn't exist on the ClusterIP. Changes: - configmap.yaml: S3 upstream :9000 → :80 - gateway-config-secret.enc.yaml: same - network-policy.yaml: add port 80 egress to storage namespace Verified: S3 adapter now reaches MinIO (403 AccessDenied = auth issue, not connectivity).	2026-09-08 09:58:36 -07:00
Admin Bot	11ca4a5902	fix: move gateway config from plaintext ConfigMap to SOPS-encrypted Secret CI / Build and push image (push) Canceled after 0s Details CI / Vet, test, build (push) Canceled after 2m52s Details	2026-09-05 00:28:45 -07:00