 Story Crater Bot
|
ce7a8bad81
|
fix(homarr): patch probes via PostSync hook
Chart v8.23.0 (homarr-labs/charts) doesn't support probe customization.
All attempts failed:
- probes.liveness.spec: ignored
- controller.probes: ignored
- livenessProbe.enabled: ignored
Solution: PostSync hook Job patches deployment after Helm sync.
Probe config:
- Liveness: 60s initial, 30s period, 5s timeout
- Readiness: 45s initial, 15s period, 5s timeout
App needs 30-45s for DB migrations, Redis, icon cache (27k+ icons).
|
2026-07-22 10:55:33 -07:00 |
|
|
Story Crater Bot
|
acf8184680
|
fix(homarr): add proper probes via Kustomize patch
Chart version 8.23.0 doesn't support probe customization via values.
Using strategic merge patch instead.
Probe configuration:
- Liveness: 60s initial delay, 30s period, 5s timeout
- Readiness: 45s initial delay, 15s period, 5s timeout
App initialization timeline:
0-5s: DB migrations, Redis startup
6s: WebSocket server ready
27-30s: Icon cache populated (27k+ icons)
30s+: Analytics cron initialized, fully operational
|
2026-07-22 10:54:14 -07:00 |
|
|
Story Crater Bot
|
9836d20b06
|
feat(sso): complete MinIO OIDC env + add Homarr landing page base config
MinIO (Part B):
- k8s/infrastructure/minio/minio-tenant.yaml: added full OIDC env block
(CONFIG_URL, CLIENT_ID, CLIENT_SECRET from minio-oidc secret, CLAIM_NAME,
REDIRECT_URI, DISPLAY_NAME, SCOPES) — MinIO console SSO login will now work
Homarr (Part C1 - base):
- k8s/applications/homarr/homarr-values.yaml: official chart config with
Authentik SSO (AUTH_PROVIDERS=oidc, all OIDC env vars, client creds from
homarr-oidc secret, SECRET_ENCRYPTION_KEY from SOPS secret)
- k8s/applications/homarr/homarr-secrets.enc.yaml: age-encrypted
SECRET_ENCRYPTION_KEY (stable key — rotating it breaks saved integrations)
- k8s/applications/homarr/kustomization.yaml: namespace dashboard
Still TODO for Homarr:
- Add 'homarr' to authentik-provision.py SERVICES dict
- Add Application to 60-applications.yaml (multi-source: chart + values)
- Add ingress rule (k8s/bootstrap/ingress/ingress.yaml)
- Add CoreDNS rewrite (k8s/bootstrap/coredns/coredns-configmap.yaml)
- Add dashboard RoleBinding for authentik-provisioner SA
|
2026-07-22 08:59:51 -07:00 |
|