 Story Crater Bot
|
a3f261f548
|
k8s/ci-cd: add forgejo gitops and argocd deployment
- Forgejo git forge + OCI registry
- Argo CD pull-based GitOps
- Private CA TLS (self-signed 10-year cert)
- Machine credentials scoped to repositories
|
2026-08-18 15:08:00 -07:00 |
|
|
Story Crater Bot
|
0af06b1239
|
k8s/monitoring: add prometheus grafana loki observability
- Loki log aggregation (MinIO backed, 10-day retention)
- Promtail daemonset (pod + talos journal logs)
- Prometheus + kube-state-metrics
- Grafana dashboards (6-row template per service)
|
2026-08-18 15:08:00 -07:00 |
|
|
Story Crater Bot
|
831dd50805
|
k8s/iam: add cloudnativepg postgres and vault + authentik
- PostgreSQL 3-replica HA with pgvector
- Vault S3 storage backend (MinIO)
- Authentik federated OIDC provider
- Vault auto-unseal via postStart hook
|
2026-08-18 15:08:00 -07:00 |
|
|
Story Crater Bot
|
7da222e243
|
k8s/storage: add minio s3 with 3-way replication and oidc
- MinIO 3-node site replication (az-a/b/c)
- S3 backend for Loki chunks (10-day retention)
- OIDC integration with Authentik
- envFrom for secret injection
|
2026-08-18 15:08:00 -07:00 |
|
|
Story Crater Bot
|
df777fb829
|
k8s: add base namespace and pod disruption budgets
- Namespace setup script with PSP/RBAC
- PodDisruptionBudgets for all services (zero-downtime drain)
|
2026-08-18 15:08:00 -07:00 |
|
|
Story Crater Bot
|
cb4b7a078a
|
infra: add helmfile and talos cluster configuration
- helmfile: 18 releases across 22 namespaces
- Pod disruption budgets for zero-downtime drain
- Nginx ingress with LoadBalancer + Cilium LB-IPAM
- Cluster bootstrap hooks
|
2026-08-18 15:07:59 -07:00 |
|
|
Story Crater Bot
|
5b00616f41
|
docs: add foundation docs and cluster configuration templates
- README: cluster architecture, quick start, use cases
- USAGE: stack topology, custom CLI reference
- TROUBLESHOOTING: operational safety rules
- .env.example: configuration template
- Makefile: build shortcuts
|
2026-07-11 19:16:34 -07:00 |
|