rock
4403913b39
fix: remove unused vault PVC from memory deployment
...
Build and Push / Test (push) Failing after 6s
Build and Push / Build and push image (push) Skipped
Memory service stores in pgvector, not local files.
PVC was RWO causing multi-node scheduling failures with 2 replicas.
MEM_HOME points to /tmp (emptyDir) for any scratch needs.
2026-08-30 07:23:18 -07:00
rock
05c0943bd4
fix: add PodSecurity contexts to all poimen deployments
...
Build and Push / Test (push) Successful in 6m55s
Build and Push / Build and push image (push) Successful in 23s
- runAsNonRoot, runAsUser 1000, seccompProfile RuntimeDefault
- Drop ALL capabilities, no privilege escalation
- readOnlyRootFilesystem on memory (with /tmp emptyDir)
- git-sync init runs as root with only CHOWN+DAC_OVERRIDE caps
- All pods use their service accounts
2026-08-30 07:20:08 -07:00
rock
fcdcd2d037
fix: remove obsidian-remote UI (too glitchy via noVNC)
Build and Push / Test (push) Failing after 7s
Build and Push / Build and push image (push) Skipped
2026-08-29 09:37:07 -07:00
rock
cc94174e63
fix: chown vault to uid 1000 after git-sync (obsidian runs as 1000)
Build and Push / Test (push) Failing after 4s
Build and Push / Build and push image (push) Skipped
2026-08-28 20:44:38 -07:00
rock
236e88127e
fix: add safe.directory for git-sync init container
Build and Push / Test (push) Failing after 5s
Build and Push / Build and push image (push) Skipped
2026-08-28 20:43:40 -07:00
rock
1cd6aa3248
fix: move obsidian vault PVC to homelab repo (infra-managed)
Build and Push / Test (push) Failing after 4s
Build and Push / Build and push image (push) Skipped
2026-08-28 20:42:18 -07:00
rock
5cae438e58
fix: obsidian vault PVC ReadWriteMany for shared access
Build and Push / Test (push) Failing after 3s
Build and Push / Build and push image (push) Skipped
2026-08-28 20:28:37 -07:00
rock
19e776d311
fix: add obsidian + obsidian-ui to kustomization.yaml
Build and Push / Test (push) Failing after 4s
Build and Push / Build and push image (push) Skipped
2026-08-28 17:22:12 -07:00
rock
174ed0f2af
feat: add obsidian-remote UI for browsable vault in browser
...
Build and Push / Test (push) Failing after 4s
Build and Push / Build and push image (push) Skipped
sytone/obsidian-remote provides full Obsidian Desktop via noVNC.
Shares vault PVC with obsidian-server (REST API stays for memory system).
UI accessible at obsidian.riotpiao.com
2026-08-28 17:20:35 -07:00
rock
2e20c762b8
fix: move obsidian ingress to homelab repo, use obsidian.riotpiao.com
...
Build and Push / Test (push) Failing after 4s
Build and Push / Build and push image (push) Skipped
vault.riotpiao.com was already taken by HashiCorp Vault.
Ingress now managed centrally in homelab/k8s/bootstrap/ingress/ingress.yaml
2026-08-28 16:43:36 -07:00
rock
8f49d1a682
fix: remove broken auth annotations from obsidian ingress
...
Build and Push / Test (push) Failing after 4s
Build and Push / Build and push image (push) Skipped
Bearer auth-url was misconfigured (pointed to token endpoint, not
forward-auth). No Authentik outpost deployed yet. Remove for now,
vault.riotpiao.com accessible directly. TODO: add forward-auth
once outpost is set up.
2026-08-28 16:42:00 -07:00
rock
89f933c394
feat: obsidian git-sync from poimen-obesdient-memory repo
...
Build and Push / Test (push) Successful in 4m52s
Build and Push / Build and push image (push) Successful in 23s
- Add git-sync init container to clone/pull vault content
- Add SOPS-encrypted SSH deploy key (obsidian-git-ssh-secret.enc.yaml)
- Add .sops.yaml config (age encryption, same key as homelab)
- Repo: ssh://[email protected] :2222/rock/poimen-obesdient-memory.git
- Deploy key added to Forgejo repo (read-only)
2026-08-28 16:31:48 -07:00
Story Crater Bot
4524d62568
fix: Obsidian service port and health checks, use Longhorn storage
Build and Push / Test (push) Failing after 1m40s
Build and Push / Build and push image (push) Skipped
2026-08-27 21:37:47 -07:00
Story Crater Bot
cb8fade9d9
refactor: replace Obsidian projector with standalone service (ppatlabs/obsidian)
Build and Push / Test (push) Failing after 1m57s
Build and Push / Build and push image (push) Skipped
2026-08-27 21:35:07 -07:00
Story Crater Bot
959c596b1d
chore: Archive completed task files (M0, M1, M3, M3.5, M4.1-2, M3.6.1)
...
Deleted 31 completed task files:
- M0.x: 8 tasks (cargo, domain types, recordsource, tokenizer, adapters, gate)
- M1.x: 8 tasks (llm-chat, standing-query, prompt template, parser, loop, log, e2e, gate)
- M3.x: 4 tasks (l2-synthesis, rerank, mem-query, gate)
- M3.5.x: 8 tasks (http-server, ingest, query, federation, skills, projects, rate-limiting, gate)
- M3.6.1: DocCorpusSource (heading-boundary chunking)
- M4.1-2: skill-draft, derived-filter
Updated INDEX.md:
- Removed M0 & M1 phase sections (archived in git history)
- Updated progress table: 65 active tasks (42✅ + 2🟡 + 21⬜ )
- Updated status: M0/M1 complete, M3/M3.5 gates passing, M4.1-2 done
- Noted M3.5.10 JWT auth implementation complete (awaiting image rollout)
- Cleaned up broken links to deleted task files
Total test count: 239 passing, 2 ignored (up from 196 at M3.4)
Ready for M4.3 gate composition, M5 post-training, M7 source connectors.
2026-08-27 20:25:05 -07:00
rock
a4a4053d57
feat: add Obsidian vault projection with Longhorn storage ( #13 )
Build and Push / Test (push) Successful in 3m37s
Build and Push / Build and push image (push) Successful in 2m45s
2026-08-24 01:58:39 +00:00
Story Crater Bot
43239d24ce
Implement M3.6.1: DocCorpusSource with heading-boundary chunking (196 tests)
ci / markdown (push) Waiting to run
2026-08-23 09:42:09 -07:00
Story Crater Bot
a0ebc1183c
Add K8s app deployment, Dockerfile, and CI workflow (Option A)
ci / markdown (push) Waiting to run
2026-08-23 00:01:30 -07:00
rock
Story Crater Bot