Story Crater Bot ce1fc4e296 fix(ingress-nginx): set privileged PodSecurity via managedNamespaceMetadata — hostPort 80/443 blocked by default baseline enforce, makes label permanent in IaC

2026-07-20 12:56:05 -07:00

..

applications

feat(cloudflared): wire tunnel token secret and document bootstrap

2026-07-20 10:50:20 -07:00

argocd

fix(ingress-nginx): set privileged PodSecurity via managedNamespaceMetadata — hostPort 80/443 blocked by default baseline enforce, makes label permanent in IaC

2026-07-20 12:56:05 -07:00

bootstrap

feat(substrate): deploy cert-manager, ingress-nginx, reloader + LE staging issuers via app-of-apps — restores substrate ownership after Terraform removal

2026-07-20 12:50:02 -07:00

data

fix(k8s,docs): scale ddb-cluster to single instance, pin minio to storage namespace, document 3-CP topology in USAGE

2026-07-20 08:22:53 -07:00

infrastructure

fix(minio): use configuration secret (config.env) for root creds, valid image tag — tenant now boots and authenticates

2026-07-20 12:42:15 -07:00

platform

feat(argocd): deploy SOPS CMP plugin for secret decryption — Stage 0 grafana

2026-07-20 11:30:06 -07:00

security

refactor(argocd): simplify secrets approach — use directory source, manual Secrets for Stage 0

2026-07-20 11:49:23 -07:00