Story Crater Bot 40fcbd036c fix(cert-manager): regenerate homelab-ca cert with basicConstraints CA:TRUE — old self-signed cert lacked CA:TRUE so the homelab-ca ClusterIssuer rejected it ('certificate is not a CA'); regen keypair Secret + trust-bundle ConfigMaps (4 ns) with matching CA cert

2026-08-18 15:08:04 -07:00

..

cert-manager-values.yaml

feat(substrate): deploy cert-manager/ingress-nginx/reloader + privileged PodSecurity for ingress-nginx

2026-08-18 15:08:02 -07:00

homelab-ca-configmap.yaml

fix(cert-manager): regenerate homelab-ca cert with basicConstraints CA:TRUE — old self-signed cert lacked CA:TRUE so the homelab-ca ClusterIssuer rejected it ('certificate is not a CA'); regen keypair Secret + trust-bundle ConfigMaps (4 ns) with matching CA cert

2026-08-18 15:08:04 -07:00

homelab-ca-issuer.yaml

feat(cert-manager): add self-signed homelab-ca ClusterIssuer + trust bundle, fix grafana-oidc secret

2026-08-18 15:08:04 -07:00

kustomization.yaml

fix(cert-manager): cert-manager-issuers directory.include renders empty — switch to explicit resources list, restore automated sync

2026-08-18 15:08:04 -07:00

letsencrypt-issuer.yaml

feat(gitops): migrate domain to riotpiao.com, add CNPG + Forgejo HA on Redis/Postgres, wire ArgoCD apps — enables cluster rebuild after etcd wipe and unblocks the git-source chicken-egg via standalone Helm-source Applications

2026-08-18 15:08:02 -07:00