sirius0xdev
|
80fe227e3c
|
add dummy secret
|
2026-05-04 02:03:08 +00:00 |
|
sirius0xdev
|
b10ca9ab7d
|
remove secret
|
2026-05-04 01:54:41 +00:00 |
|
sirius0xdev
|
484d4f1d1f
|
Merge branch 'master' into fix/tailscale-timeout
|
2026-05-03 21:47:26 -04:00 |
|
sirius0xdev
|
6ca9871dfe
|
Merge pull request #89 from sirius0xdev/fix/age-key-encryption
fix: re-encrypt authkey secret with correct age key
|
2026-05-03 21:42:44 -04:00 |
|
sirius0xdev
|
116ac9ca48
|
Fix Tailscale operator HelmRelease for v1.96.x + PodSecurity
- Bump chart version 1.86.x -> 1.96.x
- Migrate operator: -> operatorConfig: (new chart structure)
- Disable OAuth/OIDC to use existing authkey secret
- Add securityContext for restricted:latest PodSecurity policy
- Add podSecurityContext.runAsNonRoot
- Drop ALL capabilities, disable privilege escalation
- Add RuntimeDefault seccomp profile
|
2026-05-04 01:41:50 +00:00 |
|
sirius0xdev
|
b40ffc68cb
|
update release
|
2026-05-04 01:17:40 +00:00 |
|
sirius0xdev
|
dc400a364d
|
fix tsproxy issue
|
2026-05-04 01:09:48 +00:00 |
|
sirius0xdev
|
896ecc8c51
|
Merge branch 'master' of github.com:sirius0xdev/gcloud-lab
i am the captain #
|
2026-05-04 01:07:18 +00:00 |
|
sirius0xdev
|
3874014c85
|
fix kustomizations
|
2026-05-04 01:07:09 +00:00 |
|
sirius0xdev
|
503e8c4813
|
Merge branch 'master' into fix/age-key-encryption
|
2026-05-03 20:53:40 -04:00 |
|
sirius0xdev
|
bf4a2b260f
|
fix: increase tailscale-operator HelmRelease timeout to 15m
|
2026-05-04 00:50:43 +00:00 |
|
sirius0xdev
|
2b6225c4e8
|
fix: increase tailscale-operator HelmRelease timeout to 10m (install was timing out)
|
2026-05-04 00:48:09 +00:00 |
|
sirius0xdev
|
852d2c76c1
|
fix: update tailscale operator authkey with fresh single-use key
|
2026-05-04 00:43:59 +00:00 |
|
sirius0xdev
|
caf08571c1
|
fix: re-encrypt authkey secret with correct age key
|
2026-05-04 00:41:27 +00:00 |
|
sirius0xdev
|
83b70951c6
|
fix(tailnet): move TsProxy to separate Kustomization that depends on operator
- Remove TsProxy from infrastructure-controllers to avoid CRD timing issue
- Create infrastructure/tailnet/ Kustomization for TsProxy resources
- Add infrastructure-tailnet Flux Kustomization with dependsOn
- Add dependsOn to customer1 Kustomization for trade-dashboard TsProxy
|
2026-05-04 00:06:51 +00:00 |
|
sirius0xdev
|
5f9b55af55
|
feat(tailscale): add operator authkey secret and rtx6000-brain TsProxy
- Add SOPS-encrypted tailscale-operator-authkey secret for operator auth
- Add TsProxy to expose rtx6000-brain-service on tailnet (port 8000)
- Enable trade-dashboard TsProxy (was waiting for operator install)
|
2026-05-03 23:30:28 +00:00 |
|
Hermes Agent
|
6183159974
|
feat: add Prometheus, Grafana, and Tailscale monitoring stack
- Install Prometheus + Grafana via kube-prometheus-stack (ClusterIP only, no public ingress)
- Deploy Tailscale Operator for secure VPN access to internal services
- Add CNPG/PostgreSQL monitoring dashboards
- Add vLLM inference monitoring dashboards (tokens, latency, GPU)
- Add Cilium networking dashboards (policy, traffic, drops)
- Update infra-controllers staging kustomization to include all controllers
- Add monitoring-configs Flux sync for dashboard deployment
- Update README with monitoring architecture and access instructions
- Remove broken stale monitoring files (Azure Key Vault refs, wrong domains)
Access: kubectl port-forward or Tailscale VPN (replace auth key before deploy)
|
2026-04-26 02:31:53 +00:00 |
|