7 Commits

Include renames

Author	SHA1	Message	Date
Story Crater Bot	04ec157c19	fix(vault): correct MinIO endpoint to minio-cluster-hl service	2026-07-21 14:46:54 -07:00
Story Crater Bot	3e7238f71c	fix(prometheus): scrapeTimeout must be <= scrapeInterval — authentik/nginx SMs (60s>30s) + global (60s>30s) blocked operator config gen, no Prometheus STS created	2026-07-21 11:08:23 -07:00
Story Crater Bot	4363739d59	fix(loki,vault,iam): loki minio endpoint :80 not :9000, emit vault-minio-creds via CMP, drop redundant broken authentik-migrations job	2026-07-21 09:24:52 -07:00
Story Crater Bot	9117fd777a	fix(authentik): drop redundant authentik-migrate init container — server entrypoint migrates; old-image manage migrate tripped version-history precheck on empty DB	2026-07-20 23:40:08 -07:00
Story Crater Bot	2ec6eba9d2	fix(sops-cmp): correct loki s3 path (.loki.storage.s3), emit authentik-secrets separately, drop broken discover — merge via server/worker/migrate envFrom ... Loki keys are under .loki.storage.s3 not .loki.s3 (returned null). Emit a separate authentik-secrets Secret (not 'authentik', which the Helm chart owns) and merge it via envFrom on server/worker/migrate. Remove discover fileName (caused MatchRepository timeouts; app names the plugin explicitly).	2026-07-20 22:55:23 -07:00
Story Crater Bot	578a707867	feat(gitops): migrate domain to riotpiao.com, add CNPG + Forgejo HA on Redis/Postgres, wire ArgoCD apps — enables cluster rebuild after etcd wipe and unblocks the git-source chicken-egg via standalone Helm-source Applications	2026-07-19 09:29:17 -07:00
Story Crater Bot	2d7330798b	refactor(k8s): Reorganize into 5-layer structure with production kustomizations	2026-07-16 14:28:19 -07:00