chore(comfyui): retire the app for good #97

2026-11-03T19:44:13Z

rock commented

2026-11-03 19:44:13 +00:00

comfyui served nothing and its oauth2-proxy could not start — the Secret carried only client-secret while the Deployment asked for client-id, cookie-secret and client-secret. Retire it from every layer instead of repairing it.

Removes: the app manifests + ArgoCD Application, the cloudflared tunnel rule, the CoreDNS rewrite in the tracked Corefile, the Cloudflare DNS record, the ZITADEL OIDC app, both rotation tables, and the KeyRotation object.

Leaves untouched: the unrelated in-flight llm-serving and longhorn work.

The comfyui namespace and its 50Gi PVC are not ArgoCD-owned, so they are deleted by hand after the prune.

comfyui served nothing and its oauth2-proxy could not start — the Secret carried only client-secret while the Deployment asked for client-id, cookie-secret and client-secret. Retire it from every layer instead of repairing it. Removes: the app manifests + ArgoCD Application, the cloudflared tunnel rule, the CoreDNS rewrite in the tracked Corefile, the Cloudflare DNS record, the ZITADEL OIDC app, both rotation tables, and the KeyRotation object. Leaves untouched: the unrelated in-flight llm-serving and longhorn work. The comfyui namespace and its 50Gi PVC are not ArgoCD-owned, so they are deleted by hand after the prune.

rock added 2 commits 2026-11-03 19:44:14 +00:00

fix(key-rotation): read MINIO_IDENTITY_OPENID_CLIENT_SECRET, not client-secret af45e0f3ac

The rotation wrote a key the tenant never read, so minio restarted into
CreateContainerConfigError. The key name must match the consumer's
secretKeyRef, not a house style.

chore(comfyui): retire the app for good b8f934806e

comfyui served nothing and its oauth2-proxy could not start: the Secret
carried only client-secret while the Deployment asked for client-id,
cookie-secret and client-secret. Rather than repair a service nobody used,
remove it from every layer.

Gone:
  - k8s/apps/comfyui/* and its ArgoCD Application
  - the cloudflared tunnel rule for comfyui.riotpiao.com
  - the CoreDNS rewrite in the terraform Corefile (the tracked source)
  - the Cloudflare DNS record (terraform tfvars)
  - the ZITADEL OIDC app and its two rotation tables
  - the KeyRotation object

Not gone by this commit: the comfyui namespace and its 50Gi PVC. ArgoCD does
not own either, so a person deletes both by hand after the prune. The local
cluster-config/talos-*.yaml copies are gitignored; they carry the same
removal and need an apply-config to reach the live CoreDNS.

rock merged commit b45ae269fd into main

2026-11-03 19:44:19 +00:00

Sign in to join this conversation.

1 Participants

Notifications

Due Date

No due date set.

Dependencies

No dependencies set.

Reference: riotpiao-poimen/homelab#97