Story Crater BotandClaude Sonnet 5 c364ce2e1a fix: grant queue-operator create/delete RBAC on temporalworkers ...

ClusterRole only had get/list/watch/update/patch on temporalworkers
(inherited from a combined queues+temporalworkers rule), missing create
needed by reconcileTemporalWorker's cross-namespace (sqs -> temporal)
CreateOrUpdate call. Split into separate rule blocks per resource so each
carries its own correct verb set.

Co-Authored-By: Claude Sonnet 5 <[email protected]>

2026-08-17 09:39:01 -07:00

..

agent-pod

fix(agent-pod): route /run and /sessions through Kong too

2026-08-16 10:29:40 -07:00

api

feat(api): add Kong RED metrics for LLM routes

2026-08-16 07:01:15 -07:00

cloudflared

refactor(argocd): replace SOPS CMP with ksops kustomize generator, rotate age key — CMP discover glob silently shadowed kustomize rendering of any app whose path held a .enc.yaml (MinIO Tenant/cloudflared/authentik jobs never applied); centralize 8 Secret manifests under k8s/argocd/secrets, defer 4 helm-values fragments

2026-08-12 13:16:15 -07:00

homarr

fix(homarr): raise CPU limit 500m->2 + disable analytics cron — Next.js aborted with exit 134 (SIGABRT) under CPU throttle during icon-updater/analytics, self-restarting in a loop and 502ing at the ingress

2026-08-13 08:03:22 -07:00

llm-serving

fix(llm-serving): ornith 504 on cold start

2026-08-15 22:58:24 -07:00

messaging

fix: grant queue-operator create/delete RBAC on temporalworkers

2026-08-17 09:39:01 -07:00

portainer

fix(portainer): pin to az-b (talos-cp-2), the real Longhorn storage node

2026-08-11 16:12:13 -07:00

sms

feat(sms): add BlueBubbles iMessage delivery (Docker-OSX macOS VM pinned to worker-2) + ArgoCD app + dedicated longhorn-imessage-local SC — default longhorn SC can't schedule a 3-replica 200Gi volume (only worker-1 has 200Gi free at 100% over-provisioning) and Immediate binding would pin the qcow2 to the wrong node

2026-08-13 07:15:02 -07:00

temporal

refactor(argocd): replace SOPS CMP with ksops kustomize generator, rotate age key — CMP discover glob silently shadowed kustomize rendering of any app whose path held a .enc.yaml (MinIO Tenant/cloudflared/authentik jobs never applied); centralize 8 Secret manifests under k8s/argocd/secrets, defer 4 helm-values fragments

2026-08-12 13:16:15 -07:00