Commit graph

712 commits

Author SHA1 Message Date
sirius0xdev
882be08f17
Update rtx6000-vllm.yaml 2026-05-04 22:01:15 -04:00
sirius0xdev
16c8ebc41b
Update rtx6000-vllm.yaml 2026-05-04 21:59:35 -04:00
sirius0xdev
e0971380ad vllm deploy 2026-05-05 01:03:33 +00:00
sirius0xdev
4f82d918bd fix deoloyment 2026-05-05 00:51:36 +00:00
sirius0xdev
3625b08119 fix 2026-05-05 00:47:13 +00:00
sirius0xdev
a942dc291c change image 2026-05-05 00:28:48 +00:00
sirius0xdev
d86b65448b
Merge pull request #97 from sirius0xdev/fix/paaas-landing-probes
fix: correct port + robust probes for paaas-landing
2026-05-04 19:15:04 -04:00
sirius0xdev
2c106ef6aa fix: correct port to 8080 + robust startup/readiness/liveness probes for paaas-landing
- Fixed containerPort, Service targetPort, and all probes to use 8080
- Added startupProbe (15s delay, 30 failure threshold) to prevent connection refused errors
- Improved readiness and liveness probes with better timing and timeoutSeconds
- Resolves 'fault filter abort' and 'connection refused' probe failures
2026-05-04 23:13:09 +00:00
sirius0xdev
246047d336 fix liveness probe 2026-05-04 23:07:13 +00:00
sirius0xdev
86a3ae58c5 fix liveness probe 2026-05-04 22:56:39 +00:00
sirius0xdev
200e5c2938 image 2026-05-04 22:50:09 +00:00
sirius0xdev
ac3c23428d fix liveness probe port 2026-05-04 22:24:50 +00:00
sirius0xdev
e4335ed3e7 image issue 2026-05-04 22:19:49 +00:00
sirius0xdev
20f2aafe79 fix paaas landing image 2026-05-04 22:12:42 +00:00
sirius0xdev
680a16e4a8 try new vllm config 2026-05-04 21:53:08 +00:00
sirius0xdev
a066eea5b3 disbable sidecar 2026-05-04 21:23:44 +00:00
sirius0xdev
8234afec1d fix typo 2026-05-04 21:11:40 +00:00
sirius0xdev
fd2b973e45 fix folders error 2026-05-04 20:59:17 +00:00
sirius0xdev
d8506d0d72 debug folders error 2026-05-04 20:53:15 +00:00
sirius0xdev
7317c6e9dc change release.yaml to display dashboards 2026-05-04 20:47:28 +00:00
sirius0xdev
4aea901a09 add dashboards to namespace 2026-05-04 20:38:22 +00:00
sirius0xdev
e6eb28587a fix operator tag 2026-05-04 20:25:07 +00:00
sirius0xdev
6a999fd1ee disable grafana proxy group 2026-05-04 20:16:14 +00:00
sirius0xdev
eafddc9051 fix service annotations 2026-05-04 19:57:09 +00:00
sirius0xdev
b7249cbae4 fix proxy 2026-05-04 19:25:02 +00:00
sirius0xdev
3772cd846d fix proxy name 2026-05-04 19:23:43 +00:00
sirius0xdev
73f82dc57c
Update rtx6000-vllm.yaml 2026-05-04 15:11:43 -04:00
sirius0xdev
089ba22373
Merge pull request #96 from sirius0xdev/fix/proxygroup-correct-names
fix: update Grafana ProxyGroup to use proper service monitoring-kube-prometheus-operator
2026-05-04 11:58:15 -04:00
sirius0xdev
dbc6543eba fix: update grafana ProxyGroup to use proper service monitoring-kube-prometheus-operator 2026-05-04 15:57:26 +00:00
sirius0xdev
1d67725855 clean up tsproxies 2026-05-04 14:55:37 +00:00
sirius0xdev
74f7015613 add to kustomize 2026-05-04 14:54:30 +00:00
sirius0xdev
202a59b2a0 fix proxy type 2026-05-04 14:50:12 +00:00
sirius0xdev
5cab120a52 fix proxy type 2026-05-04 14:48:14 +00:00
sirius0xdev
d83a865bfd
Merge pull request #95 from sirius0xdev/fix/proxygroup-add-namespace
fix: add namespace to ProxyGroups (customer1 for rtx6000-brain, monitoring for grafana)
2026-05-04 02:02:34 -04:00
sirius0xdev
89e61cf53b fix: add namespace to ProxyGroups (customer1/monitoring) 2026-05-04 05:59:34 +00:00
sirius0xdev
84a4913b9a
Merge pull request #94 from sirius0xdev/feat/expose-grafana-dashboard
feat: expose Grafana dashboard via Tailscale ProxyGroup
2026-05-04 01:35:00 -04:00
sirius0xdev
804013d60f feat: expose Grafana dashboard via Tailscale ProxyGroup 2026-05-04 05:31:42 +00:00
sirius0xdev
6f985281c7
Merge pull request #93 from sirius0xdev/fix/tsproxy-to-proxygroup
fix: correct ProxyGroup tag to tag:k8s-operator
2026-05-04 01:26:37 -04:00
sirius0xdev
9391242ba2 fix: use correct tag:k8s-operator in rtx6000-brain ProxyGroup 2026-05-04 05:23:56 +00:00
sirius0xdev
6e58dc741b
Update kustomization.yaml 2026-05-04 00:55:38 -04:00
sirius0xdev
02da0a5d74
Merge pull request #92 from sirius0xdev/fix/tsproxy-to-proxygroup
fix: replace non-existent TsProxy CRD with ProxyGroup
2026-05-04 00:54:20 -04:00
sirius0xdev
ed39dcf598 fix: replace non-existent TsProxy CRD with ProxyGroup
TsProxy is not a CRD shipped by the Tailscale operator (v1.96.x).
The operator provides: ProxyClass, ProxyGroup, ProxyGroupPolicy,
DNSConfig, Tailnet, Connector, and Recorder.

Replace TsProxy with ProxyGroup (type: ingress) and annotate
rtx6000-brain-service with tailscale.com/proxy-group to expose
the vLLM endpoint via MagicDNS at rtx6000-brain-0.<tailnet>.ts.net:8000.
2026-05-04 04:47:34 +00:00
sirius0xdev
f8ed765bee
Update kustomization.yaml 2026-05-04 00:15:26 -04:00
sirius0xdev
69db1cf1f2 Remove invalid Tailscale operator tags
The tag:k8s-operator and tag:tailnet tags don't exist in tailnet ACLs,
causing 400 errors on key creation. Set tags to empty for now.
2026-05-04 03:59:08 +00:00
sirius0xdev
f30cb6e8fb fix secret 2026-05-04 03:52:25 +00:00
sirius0xdev
189b7a73d6 Fix Tailscale operator secret name to 'operator' 2026-05-04 03:20:46 +00:00
sirius0xdev
0b80ba0068 Remove SOPS-encrypted authkey secret from Kustomize
Flux can't decrypt SOPS files in this setup. The secret will be
created manually on the cluster and won't be garbage collected by
Flux since it's not in the Kustomization resources.
2026-05-04 03:10:50 +00:00
sirius0xdev
904152754d Add SOPS-encrypted Tailscale operator authkey secret
Replaces manual secret creation with a repo-managed encrypted secret.
Decrypted value contains the operator authkey for tailscale login.
2026-05-04 03:09:16 +00:00
sirius0xdev
28fc3202a3 Fix Tailscale operator PodSecurity issues
- Change namespace from enforce:restricted to warn:restricted to allow operator to run without PodSecurity blocking
- Remove runAsUser:0 from operator as it's no longer needed
- This allows the Tailscale operator to run with its default configuration
2026-05-04 03:02:09 +00:00
sirius0xdev
fbf3e4a55b Fix Tailscale operator: run as root (no longer needs restricted PodSecurity)
The Tailscale operator requires /.config and root-level paths.
Namespace 'tailscale' had its pod-security.kubernetes.io/enforce label
removed, so runAsNonRoot is no longer required.
2026-05-04 02:54:30 +00:00