6dfae38adf
Platform: re-keyscan Argo CD GitOps SSH host on every apply
...
The argocd_private_repo provisioner only ran when its static triggers
(namespace, repo_url, ssh_key_path) changed. When the Gitea SSH host key
rotated (container rebuild / Debian rekey), the trigger set stayed
identical so tofu apply never re-ran the ssh-keyscan, silently leaving
Argo CD with 'knownhosts: key is unknown' and all Applications in
ComparisonError.
Add a timestamp()-based scan_revision trigger so the keyscan +
configmap/secret merge runs on EVERY apply, self-healing the host key
in argocd-ssh-known-hosts-cm. The provisioner is idempotent (reads the
existing configmap, merges the fresh scan, sorts, reapplies), so
re-running is safe.
2026-09-16 11:54:25 -05:00
dce4fa6022
Edge matrix vhost, node-exporter scrape, arr/rpi refinements
...
- bootstrap/edge: add matrix-vhost template + matrix.conf mount
(isolated cert path), config_hash includes matrix.conf so tofu
regenerates edge config when it changes; add node-exporter sidecar
- bootstrap/platform: prometheus additionalScrapeConfigs for rpi-node
and oci-edge-node targets, plus node-exporter edge port 9100
- apps/homelab-alerts: host filesystem >85% alert
- infra/arr-stack + rpi-services: compose refinements
- .gitignore: ignore tofu tfstate backups (*.tfstate.*.backup)
2026-09-16 11:37:35 -05:00
d6e33250f4
Gates for pimoc workers with less than 2 cpus
2026-07-23 13:16:11 -06:00
fb605ffa8b
Increase argocd limits
2026-07-23 11:32:23 -06:00
005a3c4b84
Make helm do not block
2026-07-22 23:10:11 -06:00
318ba53eb0
Fixes stale helm
2026-07-22 22:22:54 -06:00
de990cdfb3
adding platform agument
2026-07-02 21:38:48 -06:00
7a0a54b60b
untrim srgocd after adding 2nd worker
2026-07-02 21:20:14 -06:00
8c07e3f27b
wait on iptables lock
2026-07-02 21:02:49 -06:00
41db105b8b
disabling dex in argo
2026-07-02 20:38:52 -06:00
d5458a3482
Limit diagnostic to failed component
2026-07-02 20:21:31 -06:00
1e63d0cbc8
Fixing k8s api timing
2026-07-02 19:26:43 -06:00
8bc44edaf8
Adding limits
2026-07-02 17:32:25 -06:00
36126132db
Adding k8s metrics server
2026-07-02 13:38:21 -06:00
d278355d68
exportin inventory vars
2026-07-02 12:38:47 -06:00
dd15faabb0
Add Grafana dashboards for Jeannie checks
2026-06-29 18:32:46 -06:00
3494220923
Allow edge traffic through Traefik service
2026-06-02 17:08:51 -06:00
57a6a7283c
Fix Argo CD Gitea SSH access
2026-06-02 16:44:42 -06:00
740755ea4e
Fix Argo CD ingress behind Traefik
2026-06-02 17:29:33 -05:00
2838fe13db
Adding traefik to the mix
2026-06-02 16:14:56 -06:00
ad81d37119
Adding traefik to the mix
2026-06-02 13:59:15 -06:00
47c018b6dc
Add durable platform workload scheduling
2026-05-29 09:44:43 -06:00
73d512f13d
Move Kyverno hook jobs to app workers
2026-05-28 18:45:49 -06:00
99d6600598
Move Kyverno to app workers
2026-05-28 15:52:09 -06:00
a2b9d33f57
Move Argo CD to app workers
2026-05-28 15:36:24 -06:00
b0a2c44bbb
Move Prometheus stack to worker nodes
2026-05-28 12:46:54 -06:00
0919c33972
Disable Mimir by default
2026-05-27 23:47:36 -06:00
53bfdc10f1
Fix NodeLocal DNS manifest readback
2026-05-27 23:39:05 -06:00
1108e21b1b
Fix MetalLB pool apply ordering
2026-05-26 23:12:22 -06:00
7c0a74cf51
Add optional MetalLB platform support
2026-05-26 23:09:09 -06:00
40662b2b74
Add NodeLocal DNSCache platform component
2026-05-26 23:05:21 -06:00
ffb530694c
Add Kyverno audit policy baseline
2026-05-26 22:57:44 -06:00
11ea473c7f
Add homelab provisioning automation
2026-05-26 11:46:38 -06:00
b0a5a0bd67
Fix Prometheus operator TLS mount
2026-05-25 22:23:37 -06:00
009e6ce927
Add observability platform stack
2026-05-25 21:50:53 -06:00
06c963d8e6
Adding gitea backups and exposing it to the internet read only
2026-05-25 11:42:13 -06:00
c551b8e8ee
calico ip first-found to false
2026-05-24 16:42:26 -05:00
c4773afaea
Pin Calico node address autodetection
2026-05-24 16:36:07 -05:00
cf45edce74
fixing dns issue in rpi
2026-05-23 22:51:03 -06:00
66d7dd39a7
fixing stale calico helm
2026-05-23 22:34:48 -06:00
8c96d4ce10
redesign
2026-05-23 21:00:28 -06:00
69ae88a416
chore: redirect argocd gitops source to laptop ssh git server engine
2026-05-19 08:21:12 -05:00
199a06aae8
migration: incorporate repository secrets and apply clean application definitions
2026-05-19 08:06:40 -05:00
jv
juvenal.diaz
jv