Story Crater Bot ce1fc4e296 fix(ingress-nginx): set privileged PodSecurity via managedNamespaceMetadata — hostPort 80/443 blocked by default baseline enforce, makes label permanent in IaC

2026-07-20 12:56:05 -07:00

..

apps

fix(ingress-nginx): set privileged PodSecurity via managedNamespaceMetadata — hostPort 80/443 blocked by default baseline enforce, makes label permanent in IaC

2026-07-20 12:56:05 -07:00

bootstrap

feat(argocd): deploy SOPS CMP plugin for secret decryption — Stage 0 grafana

2026-07-20 11:30:06 -07:00

projects

feat(substrate): deploy cert-manager, ingress-nginx, reloader + LE staging issuers via app-of-apps — restores substrate ownership after Terraform removal

2026-07-20 12:50:02 -07:00

root

refactor(argocd): replace wave/layer/phase schemes with two-phase bootstrap + app-of-apps and document both CD scopes — fixes self-hosted-git chicken-egg and stale paths

2026-07-20 08:22:53 -07:00