sirius0xdev
f30cb6e8fb
fix secret
2026-05-04 03:52:25 +00:00
sirius0xdev
0b80ba0068
Remove SOPS-encrypted authkey secret from Kustomize
...
Flux can't decrypt SOPS files in this setup. The secret will be
created manually on the cluster and won't be garbage collected by
Flux since it's not in the Kustomization resources.
2026-05-04 03:10:50 +00:00
sirius0xdev
904152754d
Add SOPS-encrypted Tailscale operator authkey secret
...
Replaces manual secret creation with a repo-managed encrypted secret.
Decrypted value contains the operator authkey for tailscale login.
2026-05-04 03:09:16 +00:00
sirius0xdev
eb50df5356
fix secret key values
2026-05-04 02:46:37 +00:00
sirius0xdev
21cebbc763
fix secret name in kustomization
2026-05-04 02:05:59 +00:00
sirius0xdev
80fe227e3c
add dummy secret
2026-05-04 02:03:08 +00:00
sirius0xdev
b10ca9ab7d
remove secret
2026-05-04 01:54:41 +00:00
sirius0xdev
dc400a364d
fix tsproxy issue
2026-05-04 01:09:48 +00:00
sirius0xdev
3874014c85
fix kustomizations
2026-05-04 01:07:09 +00:00
sirius0xdev
83b70951c6
fix(tailnet): move TsProxy to separate Kustomization that depends on operator
...
- Remove TsProxy from infrastructure-controllers to avoid CRD timing issue
- Create infrastructure/tailnet/ Kustomization for TsProxy resources
- Add infrastructure-tailnet Flux Kustomization with dependsOn
- Add dependsOn to customer1 Kustomization for trade-dashboard TsProxy
2026-05-04 00:06:51 +00:00
sirius0xdev
5f9b55af55
feat(tailscale): add operator authkey secret and rtx6000-brain TsProxy
...
- Add SOPS-encrypted tailscale-operator-authkey secret for operator auth
- Add TsProxy to expose rtx6000-brain-service on tailnet (port 8000)
- Enable trade-dashboard TsProxy (was waiting for operator install)
2026-05-03 23:30:28 +00:00
Hermes Agent
6183159974
feat: add Prometheus, Grafana, and Tailscale monitoring stack
...
- Install Prometheus + Grafana via kube-prometheus-stack (ClusterIP only, no public ingress)
- Deploy Tailscale Operator for secure VPN access to internal services
- Add CNPG/PostgreSQL monitoring dashboards
- Add vLLM inference monitoring dashboards (tokens, latency, GPU)
- Add Cilium networking dashboards (policy, traffic, drops)
- Update infra-controllers staging kustomization to include all controllers
- Add monitoring-configs Flux sync for dashboard deployment
- Update README with monitoring architecture and access instructions
- Remove broken stale monitoring files (Azure Key Vault refs, wrong domains)
Access: kubectl port-forward or Tailscale VPN (replace auth key before deploy)
2026-04-26 02:31:53 +00:00
