Story Crater Bot a77e2b6579 fix(kmsvc-redis): use bitnamilegacy/redis mirror + allowInsecureImages — docker.io/bitnami pulled version-pinned tags, ImagePullBackOff blocked redis + queue-operator

2026-08-18 15:08:02 -07:00

..

applications

fix(storage): add longhorn-wffc SC + pin portainer/forgejo-runner to az-a — fixes PVC attach

2026-08-18 15:08:02 -07:00

argocd

fix(kmsvc-redis): use bitnamilegacy/redis mirror + allowInsecureImages — docker.io/bitnami pulled version-pinned tags, ImagePullBackOff blocked redis + queue-operator

2026-08-18 15:08:02 -07:00

bootstrap

feat(substrate): deploy cert-manager/ingress-nginx/reloader + privileged PodSecurity for ingress-nginx

2026-08-18 15:08:02 -07:00

data

feat(data): add CNPG managed roles + Database CRs for authentik/temporal — replaces missing helmfile post-sync user creation

2026-08-18 15:08:02 -07:00

infrastructure

fix(minio,loki): declare loki-chunks/ruler/admin buckets in minio Tenant — loki failed with NoSuchBucket

2026-08-18 15:08:02 -07:00

platform

fix(loki,vault,iam): loki minio endpoint :80 not :9000, emit vault-minio-creds via CMP, drop redundant broken authentik-migrations job

2026-08-18 15:08:02 -07:00

security

fix(forgejo-runner): add fsGroup 1000 so runner user can write /data/.runner — register hit permission denied on root-owned Longhorn PVC

2026-08-18 15:08:02 -07:00