sirius/gcloud-lab
1
0
Fork 0
Code Issues Pull requests Projects Releases Packages Wiki Activity Actions
544 commits 1 branch 0 tags 1.5 MiB
Commit graph

4 commits

Author SHA1 Message Date
sirius0xdev
116ac9ca48 Fix Tailscale operator HelmRelease for v1.96.x + PodSecurity 
- Bump chart version 1.86.x -> 1.96.x
- Migrate operator: -> operatorConfig: (new chart structure)
- Disable OAuth/OIDC to use existing authkey secret
- Add securityContext for restricted:latest PodSecurity policy
- Add podSecurityContext.runAsNonRoot
- Drop ALL capabilities, disable privilege escalation
- Add RuntimeDefault seccomp profile
 2026-05-04 01:41:50 +00:00
sirius0xdev
bf4a2b260f fix: increase tailscale-operator HelmRelease timeout to 15m 2026-05-04 00:50:43 +00:00
sirius0xdev
2b6225c4e8 fix: increase tailscale-operator HelmRelease timeout to 10m (install was timing out) 2026-05-04 00:48:09 +00:00
Hermes Agent
6183159974 feat: add Prometheus, Grafana, and Tailscale monitoring stack 
- Install Prometheus + Grafana via kube-prometheus-stack (ClusterIP only, no public ingress)
- Deploy Tailscale Operator for secure VPN access to internal services
- Add CNPG/PostgreSQL monitoring dashboards
- Add vLLM inference monitoring dashboards (tokens, latency, GPU)
- Add Cilium networking dashboards (policy, traffic, drops)
- Update infra-controllers staging kustomization to include all controllers
- Add monitoring-configs Flux sync for dashboard deployment
- Update README with monitoring architecture and access instructions
- Remove broken stale monitoring files (Azure Key Vault refs, wrong domains)

Access: kubectl port-forward or Tailscale VPN (replace auth key before deploy)
 2026-04-26 02:31:53 +00:00