 Story Crater Bot
|
5cfd84f85b
|
feat(forgejo): add runner-token Secret via ksops — forgejo-runner register initContainer needs the registration token (from gitea actions generate-runner-token); was missing so runner deploy stuck 0/1
|
2026-08-12 16:19:38 -07:00 |
|
|
Story Crater Bot
|
191918762a
|
fix(homarr): add auth-oidc-secret + db-encryption Secrets via ksops — homarr chart's envSecrets expect these exact names (oidc-client-id/secret, db-encryption-key); were never created so homarr CreateContainerConfigError
|
2026-08-12 14:08:18 -07:00 |
|
|
Story Crater Bot
|
6706be76d1
|
fix(cert-manager): regenerate homelab-ca cert with basicConstraints CA:TRUE — old self-signed cert lacked CA:TRUE so the homelab-ca ClusterIssuer rejected it ('certificate is not a CA'); regen keypair Secret + trust-bundle ConfigMaps (4 ns) with matching CA cert
|
2026-08-12 13:56:37 -07:00 |
|
|
Story Crater Bot
|
0a3d45606e
|
feat(vault): add vault-unseal-keys Secret via ksops after operator init — vault was never initialized (empty S3 bucket), unseal keys captured from init; pod postStart auto-unseals on restart
|
2026-08-12 13:53:09 -07:00 |
|
|
Story Crater Bot
|
28e66ccf63
|
fix(logging): deploy loki-s3-creds as kind:Secret via ksops — was a helm-values fragment wired to nothing, loki extraEnvFrom secretRef loki-s3-creds never resolved (CreateContainerConfigError); provides access_key_id/secret_access_key for MinIO S3 backend
|
2026-08-12 13:46:07 -07:00 |
|
|
Story Crater Bot
|
078d8d25d4
|
fix(iam): deploy authentik-secrets as kind:Secret via ksops — was a helm-values fragment wired to nothing, so envFrom secretRef authentik-secrets never resolved (CreateContainerConfigError); provides AUTHENTIK_SECRET_KEY/BOOTSTRAP_PASSWORD/BOOTSTRAP_TOKEN
|
2026-08-12 13:37:39 -07:00 |
|
|
Story Crater Bot
|
cc263e0581
|
refactor(argocd): replace SOPS CMP with ksops kustomize generator, rotate age key — CMP discover glob silently shadowed kustomize rendering of any app whose path held a .enc.yaml (MinIO Tenant/cloudflared/authentik jobs never applied); centralize 8 Secret manifests under k8s/argocd/secrets, defer 4 helm-values fragments
|
2026-08-12 13:16:15 -07:00 |
|