poimenandrock 86986013d7 fix: use CiliumNetworkPolicy for kube-apiserver egress (#49) ...

Standard K8s NetworkPolicy ipBlock rules don't work under Cilium for API server access. Use Cilium-native kube-apiserver entity instead.

Tested: runner pod can now reach K8s API server.
Required by: homelab-frontend PR #25 (Tekton CI).

---------

Co-authored-by: rock <[email protected]>
Reviewed-on: #49
Co-authored-by: poimen <[email protected]>

2026-09-13 14:04:35 +00:00

..

argocd-image-updater

fix(argocd-image-updater): remove duplicate ARGOCD_GRPC_WEB env var

2026-09-11 11:06:05 +09:00

cluster-maintenance

feat(ops): add cluster-wide stale job/pod cleanup CronJob

2026-08-30 07:27:50 -07:00

databases

chore: remove unused obsidian-vault PVC

2026-09-12 23:18:18 +09:00

forgejo-runner

fix: use CiliumNetworkPolicy for kube-apiserver egress (#49)

2026-09-13 14:04:35 +00:00

iam

fix: authentik probe timeouts blocking DB migration on fresh cluster

2026-09-13 06:02:28 +09:00

logging

fix(grafana): give homelab-admins Admin org role, akadmin GrafanaAdmin

2026-09-04 23:41:22 -07:00

longhorn

fix(longhorn): remove invalid ext4 mount options uid=26,gid=26 from longhorn-cnpg

2026-09-12 18:49:21 +09:00

minio

feat(iam): rock user with Forgejo email, email password recovery, encrypt SMTP creds

2026-09-12 23:44:26 +09:00

monitoring

feat: vLLM Prometheus metrics scraping (#37)

2026-09-11 10:46:15 +09:00

rbac

fix: remove spec wrapper from ClusterRoleBinding

2026-09-05 15:04:00 -07:00

tekton

fix: vendor Tekton release.yaml for proper ArgoCD management

2026-09-13 15:10:39 +09:00

tracing

feat: add tempo and otel-collector for distributed tracing

2026-08-31 15:02:15 -07:00