sirius0xdev
0e60fff9a6
fix secret values
2026-05-04 02:53:03 +00:00
sirius0xdev
78c354bd72
Merge branch 'master' of github.com:sirius0xdev/gcloud-lab
...
hhh#
2026-05-04 02:46:43 +00:00
sirius0xdev
eb50df5356
fix secret key values
2026-05-04 02:46:37 +00:00
sirius0xdev
035ff4d428
Fix Tailscale operator: set runAsUser/runAsGroup for non-root image
...
The tailscale/k8s-operator image runs as root by default, conflicting
with runAsNonRoot=true. Set runAsUser:65532 (nobody) to satisfy both
PodSecurity and container runtime.
2026-05-04 02:36:59 +00:00
sirius0xdev
2ab4a78825
Fix Tailscale operator: add securityContext for PodSecurity restricted policy
...
The merged PR was missing securityContext/podSecurityContext values
required by the namespace's restricted:latest PodSecurity policy.
Without these, pods fail to create with FailedCreate errors.
2026-05-04 02:26:09 +00:00
sirius0xdev
21cebbc763
fix secret name in kustomization
2026-05-04 02:05:59 +00:00
sirius0xdev
80fe227e3c
add dummy secret
2026-05-04 02:03:08 +00:00
sirius0xdev
b10ca9ab7d
remove secret
2026-05-04 01:54:41 +00:00
sirius0xdev
59cd6af863
Merge pull request #91 from sirius0xdev/fix/tailscale-timeout
...
Fix Tailscale operator HelmRelease for v1.96.x + PodSecurity
2026-05-03 21:47:36 -04:00
sirius0xdev
484d4f1d1f
Merge branch 'master' into fix/tailscale-timeout
2026-05-03 21:47:26 -04:00
sirius0xdev
6ca9871dfe
Merge pull request #89 from sirius0xdev/fix/age-key-encryption
...
fix: re-encrypt authkey secret with correct age key
2026-05-03 21:42:44 -04:00
sirius0xdev
116ac9ca48
Fix Tailscale operator HelmRelease for v1.96.x + PodSecurity
...
- Bump chart version 1.86.x -> 1.96.x
- Migrate operator: -> operatorConfig: (new chart structure)
- Disable OAuth/OIDC to use existing authkey secret
- Add securityContext for restricted:latest PodSecurity policy
- Add podSecurityContext.runAsNonRoot
- Drop ALL capabilities, disable privilege escalation
- Add RuntimeDefault seccomp profile
2026-05-04 01:41:50 +00:00
sirius0xdev
b40ffc68cb
update release
2026-05-04 01:17:40 +00:00
sirius0xdev
dc400a364d
fix tsproxy issue
2026-05-04 01:09:48 +00:00
sirius0xdev
896ecc8c51
Merge branch 'master' of github.com:sirius0xdev/gcloud-lab
...
i am the captain #
2026-05-04 01:07:18 +00:00
sirius0xdev
3874014c85
fix kustomizations
2026-05-04 01:07:09 +00:00
sirius0xdev
69964e5cbc
Merge pull request #90 from sirius0xdev/fix/tailscale-timeout
...
Fix/tailscale timeout
2026-05-03 20:53:59 -04:00
sirius0xdev
503e8c4813
Merge branch 'master' into fix/age-key-encryption
2026-05-03 20:53:40 -04:00
sirius0xdev
bf4a2b260f
fix: increase tailscale-operator HelmRelease timeout to 15m
2026-05-04 00:50:43 +00:00
sirius0xdev
2b6225c4e8
fix: increase tailscale-operator HelmRelease timeout to 10m (install was timing out)
2026-05-04 00:48:09 +00:00
sirius0xdev
852d2c76c1
fix: update tailscale operator authkey with fresh single-use key
2026-05-04 00:43:59 +00:00
sirius0xdev
caf08571c1
fix: re-encrypt authkey secret with correct age key
2026-05-04 00:41:27 +00:00
sirius0xdev
64bc378884
Merge pull request #88 from sirius0xdev/fix/remove-wait
...
fix: remove wait: true from infrastructure-controllers (dependsOn + F…
2026-05-03 20:36:45 -04:00
sirius0xdev
508c5c048e
fix: remove wait: true from infrastructure-controllers (dependsOn + Flux retry is sufficient)
2026-05-04 00:35:52 +00:00
sirius0xdev
1e91fa71e8
Merge pull request #87 from sirius0xdev/fix/separate-monitoring-controllers
...
fix: separate monitoring from controllers so broken prometheus-stack …
2026-05-03 20:31:19 -04:00
sirius0xdev
61165c2b00
fix: separate monitoring from controllers so broken prometheus-stack doesn't block tailnet chain
2026-05-04 00:30:02 +00:00
sirius0xdev
f614d925de
Merge pull request #86 from sirius0xdev/temp-fix-wait
...
fix(tailnet): add wait: true to infrastructure-controllers so HelmRel…
2026-05-03 20:26:12 -04:00
sirius0xdev
88dd60498f
fix(tailnet): add wait: true to infrastructure-controllers so HelmRelease completes before downstream dependsOn
2026-05-04 00:25:45 +00:00
sirius0xdev
d1cfb262c4
Merge pull request #85 from sirius0xdev/temp-fix
...
fix(tailnet): move tsproxy-rtx6000.yaml into tailnet dir for Flux build
2026-05-03 20:18:18 -04:00
sirius0xdev
5e3b34646c
fix(tailnet): move tsproxy-rtx6000.yaml into tailnet dir for Flux build
2026-05-04 00:17:17 +00:00
sirius0xdev
9c322003f0
Merge pull request #84 from sirius0xdev/fix/tsproxy-depends-on-operator
...
fix(tailnet): move TsProxy to separate Kustomization that depends on …
2026-05-03 20:08:25 -04:00
sirius0xdev
83b70951c6
fix(tailnet): move TsProxy to separate Kustomization that depends on operator
...
- Remove TsProxy from infrastructure-controllers to avoid CRD timing issue
- Create infrastructure/tailnet/ Kustomization for TsProxy resources
- Add infrastructure-tailnet Flux Kustomization with dependsOn
- Add dependsOn to customer1 Kustomization for trade-dashboard TsProxy
2026-05-04 00:06:51 +00:00
sirius0xdev
c8d54c68d7
Merge pull request #83 from sirius0xdev/feat/tailscale-operator-authkey-tsproxy
...
feat(tailscale): add operator authkey secret and rtx6000-brain TsProxy
2026-05-03 20:02:09 -04:00
sirius0xdev
5f9b55af55
feat(tailscale): add operator authkey secret and rtx6000-brain TsProxy
...
- Add SOPS-encrypted tailscale-operator-authkey secret for operator auth
- Add TsProxy to expose rtx6000-brain-service on tailnet (port 8000)
- Enable trade-dashboard TsProxy (was waiting for operator install)
2026-05-03 23:30:28 +00:00
sirius0xdev
7e7794d3f5
start vllm server
2026-05-03 22:29:58 +00:00
sirius0xdev
8d8d4853b6
add async_session
2026-05-03 22:15:19 +00:00
sirius0xdev
dd09bcf218
fix alembic issue in main.py
2026-05-03 22:10:32 +00:00
sirius0xdev
0d949ce48c
fix tradedashboard python
2026-05-03 21:53:06 +00:00
sirius0xdev
c8baff8a19
Merge branch 'master' of github.com:sirius0xdev/gcloud-lab
...
whateever#
2026-05-03 21:45:29 +00:00
sirius0xdev
2d552e3ff9
fix workflow
2026-05-03 21:45:16 +00:00
sirius0xdev
ea8224b3d2
Update Docker build context for trade-dashboard
2026-05-03 17:35:14 -04:00
sirius0xdev
2716694876
Update workflow path for trade-dashboard
2026-05-03 17:31:42 -04:00
sirius0xdev
c5dd91d112
fix docker file and move trade-dashboard
2026-05-03 21:31:25 +00:00
sirius0xdev
12ab52de91
fix dashboards python script
2026-05-03 21:06:36 +00:00
sirius0xdev
698d4aec3d
Update kustomization.yaml
2026-05-02 19:44:14 -04:00
sirius0xdev
5bc7f60f35
Update kustomization.yaml
2026-05-02 19:43:59 -04:00
sirius0xdev
3db7c1fb00
Merge pull request #81 from sirius0xdev/fix/trade-dashboard-db-user
...
fix(trade-dashboard): get DB_USER from secret instead of configmap
2026-05-02 19:42:08 -04:00
sirius0xdev
105d29de7e
fix(trade-dashboard): get DB_USER from secret instead of configmap
2026-05-02 23:35:04 +00:00
sirius0xdev
b574c8e6f4
Merge pull request #80 from sirius0xdev/fix/trade-dashboard-imports
...
Fix/trade dashboard imports
2026-05-02 18:54:05 -04:00
sirius0xdev
23c7c707d8
fix(trade-dashboard): fix import errors and alembic migration
...
- database.py: remove dead pre-definition of DATABASE_URL with
undefined db_user/db_pass variables
- models.py: add missing Table import from sqlalchemy
- alembic/env.py: replace deprecated run_async() with asyncio.run()
(removed in SQLAlchemy 2.0)
- alembic 001_initial: use raw SQL for CREATE TYPE instead of
op.create_enum() which requires alembic_postgresql_enum
Migration 001_initial successfully applied to trading_data DB.
2026-05-02 22:44:38 +00:00
