 Story Crater Bot
|
bd99208754
|
fix(homarr): add auth-oidc-secret + db-encryption Secrets via ksops — homarr chart's envSecrets expect these exact names (oidc-client-id/secret, db-encryption-key); were never created so homarr CreateContainerConfigError
|
2026-08-18 15:08:04 -07:00 |
|
|
Story Crater Bot
|
40fcbd036c
|
fix(cert-manager): regenerate homelab-ca cert with basicConstraints CA:TRUE — old self-signed cert lacked CA:TRUE so the homelab-ca ClusterIssuer rejected it ('certificate is not a CA'); regen keypair Secret + trust-bundle ConfigMaps (4 ns) with matching CA cert
|
2026-08-18 15:08:04 -07:00 |
|
|
Story Crater Bot
|
69b5fc371d
|
fix: deploy authentik/loki/vault Secrets via ksops (were dead helm-values fragments, causing CreateContainerConfigError)
|
2026-08-18 15:08:04 -07:00 |
|
|
Story Crater Bot
|
828e3fb287
|
refactor(argocd): replace SOPS CMP with ksops kustomize generator, rotate age key — CMP discover glob silently shadowed kustomize rendering of any app whose path held a .enc.yaml (MinIO Tenant/cloudflared/authentik jobs never applied); centralize 8 Secret manifests under k8s/argocd/secrets, defer 4 helm-values fragments
|
2026-08-18 15:08:04 -07:00 |
|