Story Crater Bot 2845ded626 fix(ingress): switch riotpiao-com-tls to letsencrypt-prod issuer ...

Wildcard cert was left on letsencrypt-staging; staging root is not
browser-trusted so HTTPS to *.riotpiao.com fails cert validation.
Switch issuerRef to letsencrypt-prod to issue a trusted wildcard.

2026-08-18 15:08:02 -07:00

..

applications

fix(storage): add longhorn-wffc SC + pin portainer/forgejo-runner to az-a — fixes PVC attach

2026-08-18 15:08:02 -07:00

argocd

fix: set logging/monitoring namespaces privileged PSS for promtail/node-exporter hostPath access

2026-08-18 15:08:02 -07:00

bootstrap

fix(ingress): switch riotpiao-com-tls to letsencrypt-prod issuer

2026-08-18 15:08:02 -07:00

data

feat(data): add CNPG managed roles + Database CRs for authentik/temporal — replaces missing helmfile post-sync user creation

2026-08-18 15:08:02 -07:00

infrastructure

fix(minio,loki): declare loki-chunks/ruler/admin buckets in minio Tenant — loki failed with NoSuchBucket

2026-08-18 15:08:02 -07:00

platform

fix(prometheus): scrapeTimeout must be <= scrapeInterval — authentik/nginx SMs (60s>30s) + global (60s>30s) blocked operator config gen, no Prometheus STS created

2026-08-18 15:08:02 -07:00

security

fix(prometheus): scrapeTimeout must be <= scrapeInterval — authentik/nginx SMs (60s>30s) + global (60s>30s) blocked operator config gen, no Prometheus STS created

2026-08-18 15:08:02 -07:00