sirius/gcloud-lab
1
0
Fork 0
Code Issues Pull requests Projects Releases Packages Wiki Activity Actions
636 commits 1 branch 0 tags 1.5 MiB
Commit graph

4 commits

Author SHA1 Message Date
Hermes Agent
72866d0044 fix: force plain HTTP on hermes-webui Tailscale proxy 
tailscale.com/https-only: 'false' still attempts TLS termination,
causing ERR_SSL_PROTOCOL_ERROR when the backend speaks plain HTTP.

Replaced with tailscale.com/ports: 'http:8080' to explicitly tell
the operator to serve unencrypted HTTP on this port.
 2026-05-06 18:50:09 +00:00
Hermes Agent
bac231097e fix(open-webui): add tailscale.com/https-only: false 
Tailscale defaults to HTTPS (443) but Open WebUI only serves HTTP (8080).

- Add tailscale.com/https-only: "false" annotation
- Now hermes-webui.tail14a963.ts.net:8080 works without SSL errors

Fixes ERR_SSL_PROTOCOL_ERROR
 2026-05-06 18:05:02 +00:00
Hermes Agent
e285401341 fix: use Grafana Tailscale annotations on Open WebUI service 
- tailscale.com/expose: "true"
- tailscale.com/hostname: "hermes-webui"
- tailscale.com/tags: "tag:k8s-operator"
- port: 8080 -> 8080 (match Open WebUI default)
- type: ClusterIP explicit
 2026-05-06 16:00:17 +00:00
Hermes Agent
214133d062 feat: add Open WebUI with Tailscale exposure 
- Enable Hermes API Server (port 8642) in gateway deployment
- Add Open WebUI deployment connected to Hermes API Server
- Expose Open WebUI via Tailscale using Service annotations
- Create ClusterIP Service for Hermes Agent API Server
- All deployments follow PodSecurity restricted policy
 2026-05-06 15:36:27 +00:00