 Story Crater Bot
|
0a3d45606e
|
feat(vault): add vault-unseal-keys Secret via ksops after operator init — vault was never initialized (empty S3 bucket), unseal keys captured from init; pod postStart auto-unseals on restart
|
2026-08-12 13:53:09 -07:00 |
|
|
Story Crater Bot
|
28e66ccf63
|
fix(logging): deploy loki-s3-creds as kind:Secret via ksops — was a helm-values fragment wired to nothing, loki extraEnvFrom secretRef loki-s3-creds never resolved (CreateContainerConfigError); provides access_key_id/secret_access_key for MinIO S3 backend
|
2026-08-12 13:46:07 -07:00 |
|
|
Story Crater Bot
|
078d8d25d4
|
fix(iam): deploy authentik-secrets as kind:Secret via ksops — was a helm-values fragment wired to nothing, so envFrom secretRef authentik-secrets never resolved (CreateContainerConfigError); provides AUTHENTIK_SECRET_KEY/BOOTSTRAP_PASSWORD/BOOTSTRAP_TOKEN
|
2026-08-12 13:37:39 -07:00 |
|
|
Story Crater Bot
|
cc263e0581
|
refactor(argocd): replace SOPS CMP with ksops kustomize generator, rotate age key — CMP discover glob silently shadowed kustomize rendering of any app whose path held a .enc.yaml (MinIO Tenant/cloudflared/authentik jobs never applied); centralize 8 Secret manifests under k8s/argocd/secrets, defer 4 helm-values fragments
|
2026-08-12 13:16:15 -07:00 |
|