Story Crater Bot 2ec6eba9d2 fix(sops-cmp): correct loki s3 path (.loki.storage.s3), emit authentik-secrets separately, drop broken discover — merge via server/worker/migrate envFrom ...

Loki keys are under .loki.storage.s3 not .loki.s3 (returned null). Emit a separate
authentik-secrets Secret (not 'authentik', which the Helm chart owns) and merge it
via envFrom on server/worker/migrate. Remove discover fileName (caused MatchRepository
timeouts; app names the plugin explicitly).

2026-07-20 22:55:23 -07:00

..

applications

feat(cloudflared): wire tunnel token secret and document bootstrap

2026-07-20 10:50:20 -07:00

argocd

feat(argocd): wire SOPS ConfigManagementPlugin properly — initContainer installs sops/yq, sidecar decrypts *.enc.yaml into app Secrets

2026-07-20 13:13:47 -07:00

bootstrap

feat(substrate): deploy cert-manager, ingress-nginx, reloader + LE staging issuers via app-of-apps — restores substrate ownership after Terraform removal

2026-07-20 12:50:02 -07:00

data

fix(k8s,docs): scale ddb-cluster to single instance, pin minio to storage namespace, document 3-CP topology in USAGE

2026-07-20 08:22:53 -07:00

infrastructure

fix(minio): use configuration secret (config.env) for root creds, valid image tag — tenant now boots and authenticates

2026-07-20 12:42:15 -07:00

platform

feat(argocd): deploy SOPS CMP plugin for secret decryption — Stage 0 grafana

2026-07-20 11:30:06 -07:00

security

fix(sops-cmp): correct loki s3 path (.loki.storage.s3), emit authentik-secrets separately, drop broken discover — merge via server/worker/migrate envFrom

2026-07-20 22:55:23 -07:00