rock
227839c27a
feat(poimen): consolidate into single multi-source ArgoCD app
...
- Merge poimen-workflows + poimen-memory + db + frontend into one app
- Delete duplicate apps: poimen-workflows, poimen-memory-app (kubectl done)
- Delete poimen-memory ArgoCD app file (replaced by multi-source source 2)
- Delete poimen-memory-database (replaced by source 3 → k8s/infra/poimen/)
- Move memory-db CNPG cluster to k8s/infra/poimen/ (isolated from other tenants)
- Remove memory-db from k8s/infra/databases/kustomization.yaml
- Add frontend manifests (Deployment, Service, Ingress) to k8s/apps/poimen/
- Add frontend NetworkPolicy: egress to api-gw (api:8080), memory (poimen:8080),
Gotify (notifications:80), Authentik (iam:9000/9443), DNS (kube-system:53)
- Sync-wave -1 on CNPG cluster ensures DB ready before app pods (wave 0)
- Image updater: workflows + memory + frontend tracked in one annotation block
- poimen-toolkit stays separate (CRD management, independent rollback)
2026-09-28 08:51:31 +08:00
rock
0d55e77bc4
chore: remove unused obsidian-vault PVC
...
No pods mount it. Obsidian integration was retired in favor of memory graph.
2026-09-12 23:18:18 +09:00
rock
8e6ebed984
restore: authentik-db cluster (was accidentally deleted)
2026-09-12 18:07:57 +09:00
rock
afc023ff2b
temp: remove authentik-db from kustomization (corruption recovery)
2026-09-12 18:04:38 +09:00
rock
6d09f896f3
feat: add obsidian-vault PVC (RWX) to infra/databases
...
Shared by obsidian-server (REST API) and obsidian-ui (noVNC).
ReadWriteMany so both pods can mount on different nodes.
2026-08-28 20:42:13 -07:00
Story Crater Bot
e8e5acfb13
feat: add paperless-ngx with OIDC, CNPG db, cp-3 HDD media, MinIO backup
...
Fixes controlplane.tftpl's install.wipe:true (should be false, live CPs already run false) and syncs coredns Corefile back to what's actually deployed (drops an unrolled-out, stale Kong-era rewrite).
2026-08-25 11:11:37 -07:00
Story Crater Bot
aa6b2ae9c3
Add Poimen Memory to ArgoCD wave 2 deployment (namespace: poimen)
2026-08-22 23:09:02 -07:00
Story Crater Bot
41f5b05395
refactor(k8s): consolidate to infra/+apps/ single-source tree, dedicated per-app CNPG (authentik-db/temporal-db), wire monitoring-config, forgejo→cicd ns, drop orphan/stale (data-schemas, ollama, story-crater, sqs/argocd, key-rotation)
2026-08-18 15:08:03 -07:00
rock
Story Crater Bot