 Story Crater Bot
|
1fb0b62d7d
|
feat(forgejo): add runner-token Secret via ksops — forgejo-runner register initContainer needs the registration token (from gitea actions generate-runner-token); was missing so runner deploy stuck 0/1
|
2026-08-12 16:19:38 -07:00 |
|
|
Story Crater Bot
|
555b4b4050
|
fix(homarr): add auth-oidc-secret + db-encryption Secrets via ksops — homarr chart's envSecrets expect these exact names (oidc-client-id/secret, db-encryption-key); were never created so homarr CreateContainerConfigError
|
2026-08-12 14:08:18 -07:00 |
|
|
Story Crater Bot
|
5e97c5cf64
|
feat(vault): add vault-unseal-keys Secret via ksops after operator init — vault was never initialized (empty S3 bucket), unseal keys captured from init; pod postStart auto-unseals on restart
|
2026-08-12 13:53:09 -07:00 |
|
|
Story Crater Bot
|
b7b1f15084
|
fix(logging): deploy loki-s3-creds as kind:Secret via ksops — was a helm-values fragment wired to nothing, loki extraEnvFrom secretRef loki-s3-creds never resolved (CreateContainerConfigError); provides access_key_id/secret_access_key for MinIO S3 backend
|
2026-08-12 13:46:07 -07:00 |
|
|
Story Crater Bot
|
d51713ad6a
|
fix(iam): deploy authentik-secrets as kind:Secret via ksops — was a helm-values fragment wired to nothing, so envFrom secretRef authentik-secrets never resolved (CreateContainerConfigError); provides AUTHENTIK_SECRET_KEY/BOOTSTRAP_PASSWORD/BOOTSTRAP_TOKEN
|
2026-08-12 13:37:39 -07:00 |
|
|
Story Crater Bot
|
beb3cb21a0
|
refactor(argocd): replace SOPS CMP with ksops kustomize generator, rotate age key — CMP discover glob silently shadowed kustomize rendering of any app whose path held a .enc.yaml (MinIO Tenant/cloudflared/authentik jobs never applied); centralize 8 Secret manifests under k8s/argocd/secrets, defer 4 helm-values fragments
|
2026-08-12 13:16:15 -07:00 |
|