Story Crater Bot
c661d7eb77
fix(temporal): enable cassandra sub-chart with storage disabled, server uses PostgreSQL
2026-07-21 13:53:08 -07:00
Story Crater Bot
edc12c388f
fix(temporal): add minimal cassandra config stub to satisfy chart template
2026-07-21 13:47:40 -07:00
Story Crater Bot
f0178b3bc5
fix(temporal): set cassandra.port even when disabled (chart requirement)
2026-07-21 13:44:25 -07:00
Story Crater Bot
e82c4b36a4
fix(temporal): switch to PostgreSQL (CNPG ddb-cluster) instead of broken Cassandra/ES setup
2026-07-21 13:41:12 -07:00
Story Crater Bot
4ea25620dd
fix(temporal): cassandra hosts as list (array) not string
2026-07-21 13:32:44 -07:00
Story Crater Bot
0588cb91b4
fix(temporal): scale elasticsearch to 1 replica (cluster constraint on single schedulable node)
2026-07-21 13:22:59 -07:00
Story Crater Bot
fd07b3cff2
fix(sqs): add RBAC for temporalworkers resource
2026-07-21 13:07:42 -07:00
Story Crater Bot
dc0bb63a01
fix(sqs): grant queue-operator deployments RBAC, install TemporalWorker CRD
2026-07-21 13:06:28 -07:00
Story Crater Bot
b2191509fb
fix(temporal): correct elasticsearch hostname to elasticsearch-master-headless
2026-07-21 12:54:14 -07:00
Story Crater Bot
328a713f4f
Revert "fix(temporal): deploy Cassandra + Elasticsearch, pin chart to v0.74.0 (older version with sub-chart support)"
...
This reverts commit cc5325d905
2026-07-21 12:42:16 -07:00
Story Crater Bot
cc5325d905
fix(temporal): deploy Cassandra + Elasticsearch, pin chart to v0.74.0 (older version with sub-chart support)
2026-07-21 12:18:53 -07:00
Story Crater Bot
7fb73d6a4c
fix(scheduling): pin portainer+forgejo-runner to az-a, add nodeSelector to runner chart template — WFFC alone insufficient with single Longhorn node (cp-1 only)
2026-07-20 23:51:46 -07:00
Story Crater Bot
e0b24c83d0
fix(storage): add longhorn-wffc WaitForFirstConsumer default SC, repoint portainer/forgejo-runner — Immediate binding placed PVCs on non-storage nodes (cp-2/cp-3), attach failed
2026-07-20 23:49:01 -07:00
Story Crater Bot
063308308f
feat(cloudflared): wire tunnel token secret and document bootstrap
...
- Create SOPS-encrypted cloudflared-secrets.enc.yaml with tunnel token
- Add Cloudflare vars to .env.example (CLOUDFLARE_CONNECTOR_TOKEN, ACCOUNT_ID, TUNNEL_ID, API_TOKEN)
- Document Phase 0 cloudflared-token Secret creation in BOOTSTRAP.md (manual step until CMP plugin wires it)
- Note: Cloudflare-side TCP routing (cp1.homelab -> 192.168.1.213:6443, etc.) must be configured manually in Zero Trust dashboard
Tunnel already deployed as ArgoCD Application in k8s/argocd/apps/60-applications.yaml (wave 8); this closes the missing Secret gap and documents the bootstrap path.
2026-07-20 10:50:20 -07:00
Story Crater Bot
578a707867
feat(gitops): migrate domain to riotpiao.com, add CNPG + Forgejo HA on Redis/Postgres, wire ArgoCD apps — enables cluster rebuild after etcd wipe and unblocks the git-source chicken-egg via standalone Helm-source Applications
2026-07-19 09:29:17 -07:00
Story Crater Bot
2d7330798b
refactor(k8s): Reorganize into 5-layer structure with production kustomizations
2026-07-16 14:28:19 -07:00
Story Crater Bot