5 Commits

Include renames

Author	SHA1	Message	Date
Story Crater Bot	2845ded626	fix(ingress): switch riotpiao-com-tls to letsencrypt-prod issuer ... Wildcard cert was left on letsencrypt-staging; staging root is not browser-trusted so HTTPS to *.riotpiao.com fails cert validation. Switch issuerRef to letsencrypt-prod to issue a trusted wildcard.	2026-08-18 15:08:02 -07:00
Story Crater Bot	96b4064ec7	fix(prometheus): scrapeTimeout must be <= scrapeInterval — authentik/nginx SMs (60s>30s) + global (60s>30s) blocked operator config gen, no Prometheus STS created	2026-08-18 15:08:02 -07:00
Story Crater Bot	d9ae0a6c44	feat(substrate): deploy cert-manager/ingress-nginx/reloader + privileged PodSecurity for ingress-nginx	2026-08-18 15:08:02 -07:00
Story Crater Bot	54bfb5ade6	feat(gitops): migrate domain to riotpiao.com, add CNPG + Forgejo HA on Redis/Postgres, wire ArgoCD apps — enables cluster rebuild after etcd wipe and unblocks the git-source chicken-egg via standalone Helm-source Applications	2026-08-18 15:08:02 -07:00
Story Crater Bot	0f30d77288	refactor(k8s): Reorganize into 5-layer structure with production kustomizations	2026-08-18 15:08:01 -07:00