Commit Graph
5 Commits
Author SHA1 Message Date
Story Crater Bot cd3abede11 fix(homarr): configure proper liveness/readiness probes
App takes ~30-45s to fully initialize:
- DB migrations
- Redis startup
- Icon repository cache fetch (27k+ icons)
- WebSocket server start
- Analytics cron initialization

Probes need:
- initialDelaySeconds: 45-60s (not 10s default)
- timeoutSeconds: 5s (not 1s default)
- periodSeconds: 15-30s for stable health checks

Previous issue: 1s timeout + 10s initialDelay killed healthy container
before app finished initialization.
2026-07-22 10:53:16 -07:00
Story Crater Bot 21fb58e1d3 fix(homarr): minimal config - chart doesn't support our persistence/env syntax 2026-07-22 09:54:35 -07:00
Story Crater Bot 0cbd5c16dd fix(homarr): use latest tag instead of non-existent 1.0.0 2026-07-22 09:50:04 -07:00
Story Crater Bot af30c189fe fix(homarr): add chart repo to AppProject + simplify values schema
Two fixes:
1. Added https://homarr-labs.github.io/charts to homelab AppProject sourceRepos
   (ArgoCD rejected: "application repo is not permitted in project")

2. Removed env array from homarr-values.yaml
   (Chart template error: "can't evaluate field AUTH_PROVIDERS in type interface {}")

   Chart expects env as key-value object or doesn't support custom env at all.
   Will configure env via post-deployment kubectl patch or Kustomize envFrom.

Allows Homarr Application to sync successfully.
2026-07-22 09:48:37 -07:00
Story Crater Bot 9836d20b06 feat(sso): complete MinIO OIDC env + add Homarr landing page base config
MinIO (Part B):
- k8s/infrastructure/minio/minio-tenant.yaml: added full OIDC env block
  (CONFIG_URL, CLIENT_ID, CLIENT_SECRET from minio-oidc secret, CLAIM_NAME,
  REDIRECT_URI, DISPLAY_NAME, SCOPES) — MinIO console SSO login will now work

Homarr (Part C1 - base):
- k8s/applications/homarr/homarr-values.yaml: official chart config with
  Authentik SSO (AUTH_PROVIDERS=oidc, all OIDC env vars, client creds from
  homarr-oidc secret, SECRET_ENCRYPTION_KEY from SOPS secret)
- k8s/applications/homarr/homarr-secrets.enc.yaml: age-encrypted
  SECRET_ENCRYPTION_KEY (stable key — rotating it breaks saved integrations)
- k8s/applications/homarr/kustomization.yaml: namespace dashboard

Still TODO for Homarr:
- Add 'homarr' to authentik-provision.py SERVICES dict
- Add Application to 60-applications.yaml (multi-source: chart + values)
- Add ingress rule (k8s/bootstrap/ingress/ingress.yaml)
- Add CoreDNS rewrite (k8s/bootstrap/coredns/coredns-configmap.yaml)
- Add dashboard RoleBinding for authentik-provisioner SA
2026-07-22 08:59:51 -07:00