Story Crater Bot 3a95f57b8f fix(loki): wire S3 creds from loki-s3-creds Secret via expand-env + extraEnvFrom — replaces empty helmfile-injected access keys

2026-07-20 23:00:51 -07:00

..

applications

feat(cloudflared): wire tunnel token secret and document bootstrap

2026-07-20 10:50:20 -07:00

argocd

feat(argocd): wire SOPS ConfigManagementPlugin properly — initContainer installs sops/yq, sidecar decrypts *.enc.yaml into app Secrets

2026-07-20 13:13:47 -07:00

bootstrap

feat(substrate): deploy cert-manager, ingress-nginx, reloader + LE staging issuers via app-of-apps — restores substrate ownership after Terraform removal

2026-07-20 12:50:02 -07:00

data

fix(k8s,docs): scale ddb-cluster to single instance, pin minio to storage namespace, document 3-CP topology in USAGE

2026-07-20 08:22:53 -07:00

infrastructure

fix(minio): use configuration secret (config.env) for root creds, valid image tag — tenant now boots and authenticates

2026-07-20 12:42:15 -07:00

platform

fix(loki): wire S3 creds from loki-s3-creds Secret via expand-env + extraEnvFrom — replaces empty helmfile-injected access keys

2026-07-20 23:00:51 -07:00

security

fix(sops-cmp): correct loki s3 path (.loki.storage.s3), emit authentik-secrets separately, drop broken discover — merge via server/worker/migrate envFrom

2026-07-20 22:55:23 -07:00