sirius0xdev
|
904152754d
|
Add SOPS-encrypted Tailscale operator authkey secret
Replaces manual secret creation with a repo-managed encrypted secret.
Decrypted value contains the operator authkey for tailscale login.
|
2026-05-04 03:09:16 +00:00 |
|
sirius0xdev
|
eb50df5356
|
fix secret key values
|
2026-05-04 02:46:37 +00:00 |
|
sirius0xdev
|
21cebbc763
|
fix secret name in kustomization
|
2026-05-04 02:05:59 +00:00 |
|
sirius0xdev
|
80fe227e3c
|
add dummy secret
|
2026-05-04 02:03:08 +00:00 |
|
sirius0xdev
|
b10ca9ab7d
|
remove secret
|
2026-05-04 01:54:41 +00:00 |
|
sirius0xdev
|
dc400a364d
|
fix tsproxy issue
|
2026-05-04 01:09:48 +00:00 |
|
sirius0xdev
|
3874014c85
|
fix kustomizations
|
2026-05-04 01:07:09 +00:00 |
|
sirius0xdev
|
83b70951c6
|
fix(tailnet): move TsProxy to separate Kustomization that depends on operator
- Remove TsProxy from infrastructure-controllers to avoid CRD timing issue
- Create infrastructure/tailnet/ Kustomization for TsProxy resources
- Add infrastructure-tailnet Flux Kustomization with dependsOn
- Add dependsOn to customer1 Kustomization for trade-dashboard TsProxy
|
2026-05-04 00:06:51 +00:00 |
|
sirius0xdev
|
5f9b55af55
|
feat(tailscale): add operator authkey secret and rtx6000-brain TsProxy
- Add SOPS-encrypted tailscale-operator-authkey secret for operator auth
- Add TsProxy to expose rtx6000-brain-service on tailnet (port 8000)
- Enable trade-dashboard TsProxy (was waiting for operator install)
|
2026-05-03 23:30:28 +00:00 |
|
Hermes Agent
|
6183159974
|
feat: add Prometheus, Grafana, and Tailscale monitoring stack
- Install Prometheus + Grafana via kube-prometheus-stack (ClusterIP only, no public ingress)
- Deploy Tailscale Operator for secure VPN access to internal services
- Add CNPG/PostgreSQL monitoring dashboards
- Add vLLM inference monitoring dashboards (tokens, latency, GPU)
- Add Cilium networking dashboards (policy, traffic, drops)
- Update infra-controllers staging kustomization to include all controllers
- Add monitoring-configs Flux sync for dashboard deployment
- Update README with monitoring architecture and access instructions
- Remove broken stale monitoring files (Azure Key Vault refs, wrong domains)
Access: kubectl port-forward or Tailscale VPN (replace auth key before deploy)
|
2026-04-26 02:31:53 +00:00 |
|