Story Crater Bot 9117fd777a fix(authentik): drop redundant authentik-migrate init container — server entrypoint migrates; old-image manage migrate tripped version-history precheck on empty DB

2026-07-20 23:40:08 -07:00

..

applications

feat(cloudflared): wire tunnel token secret and document bootstrap

2026-07-20 10:50:20 -07:00

argocd

feat(argocd): wire SOPS ConfigManagementPlugin properly — initContainer installs sops/yq, sidecar decrypts *.enc.yaml into app Secrets

2026-07-20 13:13:47 -07:00

bootstrap

feat(substrate): deploy cert-manager, ingress-nginx, reloader + LE staging issuers via app-of-apps — restores substrate ownership after Terraform removal

2026-07-20 12:50:02 -07:00

data

feat(data): add CNPG managed roles + Database CRs for authentik/temporal — replaces missing helmfile post-sync user creation

2026-07-20 23:36:21 -07:00

infrastructure

fix(minio): use configuration secret (config.env) for root creds, valid image tag — tenant now boots and authenticates

2026-07-20 12:42:15 -07:00

platform

fix(logging): pin grafana + loki to az-a (talos-cp-1) — sole Longhorn node, PVC fails to attach on cp-2/cp-3

2026-07-20 23:04:19 -07:00

security

fix(authentik): drop redundant authentik-migrate init container — server entrypoint migrates; old-image manage migrate tripped version-history precheck on empty DB

2026-07-20 23:40:08 -07:00