Story Crater Bot
dca0e7cb9a
feat(cloudflared): wire tunnel token secret and document bootstrap
...
- Create SOPS-encrypted cloudflared-secrets.enc.yaml with tunnel token
- Add Cloudflare vars to .env.example (CLOUDFLARE_CONNECTOR_TOKEN, ACCOUNT_ID, TUNNEL_ID, API_TOKEN)
- Document Phase 0 cloudflared-token Secret creation in BOOTSTRAP.md (manual step until CMP plugin wires it)
- Note: Cloudflare-side TCP routing (cp1.homelab -> 192.168.1.213:6443, etc.) must be configured manually in Zero Trust dashboard
Tunnel already deployed as ArgoCD Application in k8s/argocd/apps/60-applications.yaml (wave 8); this closes the missing Secret gap and documents the bootstrap path.
2026-08-18 15:08:02 -07:00
Story Crater Bot
8f86a03828
refactor(argocd): replace wave/layer/phase schemes with two-phase bootstrap + app-of-apps and document both CD scopes — fixes self-hosted-git chicken-egg and stale paths
2026-08-18 15:08:02 -07:00
Story Crater Bot
5b34e71111
feat(terraform): restructure control planes into a 3-node map with LAN etcd advertise and live machine CA — enables talos-cp-1/2/3 HA and drops worker configs
2026-08-18 15:08:02 -07:00
Story Crater Bot
54bfb5ade6
feat(gitops): migrate domain to riotpiao.com, add CNPG + Forgejo HA on Redis/Postgres, wire ArgoCD apps — enables cluster rebuild after etcd wipe and unblocks the git-source chicken-egg via standalone Helm-source Applications
2026-08-18 15:08:02 -07:00
Story Crater Bot
0f30d77288
refactor(k8s): Reorganize into 5-layer structure with production kustomizations
2026-08-18 15:08:01 -07:00
Story Crater Bot
f16f439feb
feat: Terraform CI via Forgejo Actions + MinIO S3 state backend
...
- ArgoCD manages MinIO (phase 0), Terraform manages infrastructure
- Runner workflow: pulls state from S3, validates, plans, applies
- 34 resources imported to state, S3 backend operational
- Fixed AppProject repos, S3 endpoint deprecation, runner package manager
2026-08-18 15:08:01 -07:00
Story Crater Bot
5e887b4da3
feat(argocd): migrate phase3 (authentik) to ArgoCD, keep temporal on helmfile
2026-08-18 15:08:01 -07:00
Story Crater Bot
2060d4c493
feat(argocd): migrate phase2 releases (CNPG/Loki/Grafana/Forgejo/Forgejo-Runner) to ArgoCD
2026-08-18 15:08:01 -07:00
Story Crater Bot
3e0a1c86ba
feat(argocd): migrate phase1 hookless releases to ArgoCD
2026-08-18 15:08:01 -07:00
Story Crater Bot
22e18c6f33
feat(minio): add loki storage buckets (chunks/ruler/admin/index)
2026-08-18 15:08:01 -07:00
Story Crater Bot
80e146e106
feat(minio): migrate to official MinIO Operator chart, TF-owned
2026-08-18 15:08:01 -07:00
Story Crater Bot
68dc426e53
feat(argocd): phase2 app-of-apps for 19 workloads + AppProject sourceRepos fix
2026-08-18 15:08:01 -07:00
Story Crater Bot