sirius0xdev
1094e69788
Update kustomization.yaml
2026-05-06 10:19:47 -04:00
sirius0xdev
a9edd2df51
Update kustomization.yaml
2026-05-06 00:36:23 -04:00
sirius0xdev
bb86f0fc3f
fix cuddagraph issue
2026-05-06 02:08:48 +00:00
sirius0xdev
2102ea882f
image hell
2026-05-06 01:57:29 +00:00
sirius0xdev
2b6fc11986
vllm image issue
2026-05-06 01:54:58 +00:00
sirius0xdev
e05e71d0fc
vllm image error fix
2026-05-06 01:42:12 +00:00
sirius0xdev
2200006c41
fix vllm error
2026-05-06 01:31:45 +00:00
sirius0xdev
5247e6caee
fix vllm deployment
2026-05-06 01:22:07 +00:00
sirius0xdev
b0e77ea84f
fuck me
2026-05-06 01:18:24 +00:00
sirius0xdev
7410d84f57
fix vllm
2026-05-06 01:14:00 +00:00
sirius0xdev
94565b7c3b
Update rtx6000-vllm.yaml
2026-05-05 20:44:49 -04:00
sirius0xdev
6c60731177
Update kustomization.yaml
2026-05-04 22:53:56 -04:00
sirius0xdev
882be08f17
Update rtx6000-vllm.yaml
2026-05-04 22:01:15 -04:00
sirius0xdev
16c8ebc41b
Update rtx6000-vllm.yaml
2026-05-04 21:59:35 -04:00
sirius0xdev
e0971380ad
vllm deploy
2026-05-05 01:03:33 +00:00
sirius0xdev
680a16e4a8
try new vllm config
2026-05-04 21:53:08 +00:00
sirius0xdev
a066eea5b3
disbable sidecar
2026-05-04 21:23:44 +00:00
sirius0xdev
8234afec1d
fix typo
2026-05-04 21:11:40 +00:00
sirius0xdev
fd2b973e45
fix folders error
2026-05-04 20:59:17 +00:00
sirius0xdev
d8506d0d72
debug folders error
2026-05-04 20:53:15 +00:00
sirius0xdev
7317c6e9dc
change release.yaml to display dashboards
2026-05-04 20:47:28 +00:00
sirius0xdev
e6eb28587a
fix operator tag
2026-05-04 20:25:07 +00:00
sirius0xdev
6a999fd1ee
disable grafana proxy group
2026-05-04 20:16:14 +00:00
sirius0xdev
eafddc9051
fix service annotations
2026-05-04 19:57:09 +00:00
sirius0xdev
b7249cbae4
fix proxy
2026-05-04 19:25:02 +00:00
sirius0xdev
3772cd846d
fix proxy name
2026-05-04 19:23:43 +00:00
sirius0xdev
73f82dc57c
Update rtx6000-vllm.yaml
2026-05-04 15:11:43 -04:00
sirius0xdev
dbc6543eba
fix: update grafana ProxyGroup to use proper service monitoring-kube-prometheus-operator
2026-05-04 15:57:26 +00:00
sirius0xdev
74f7015613
add to kustomize
2026-05-04 14:54:30 +00:00
sirius0xdev
89e61cf53b
fix: add namespace to ProxyGroups (customer1/monitoring)
2026-05-04 05:59:34 +00:00
sirius0xdev
804013d60f
feat: expose Grafana dashboard via Tailscale ProxyGroup
2026-05-04 05:31:42 +00:00
sirius0xdev
6f985281c7
Merge pull request #93 from sirius0xdev/fix/tsproxy-to-proxygroup
...
fix: correct ProxyGroup tag to tag:k8s-operator
2026-05-04 01:26:37 -04:00
sirius0xdev
9391242ba2
fix: use correct tag:k8s-operator in rtx6000-brain ProxyGroup
2026-05-04 05:23:56 +00:00
sirius0xdev
6e58dc741b
Update kustomization.yaml
2026-05-04 00:55:38 -04:00
sirius0xdev
02da0a5d74
Merge pull request #92 from sirius0xdev/fix/tsproxy-to-proxygroup
...
fix: replace non-existent TsProxy CRD with ProxyGroup
2026-05-04 00:54:20 -04:00
sirius0xdev
ed39dcf598
fix: replace non-existent TsProxy CRD with ProxyGroup
...
TsProxy is not a CRD shipped by the Tailscale operator (v1.96.x).
The operator provides: ProxyClass, ProxyGroup, ProxyGroupPolicy,
DNSConfig, Tailnet, Connector, and Recorder.
Replace TsProxy with ProxyGroup (type: ingress) and annotate
rtx6000-brain-service with tailscale.com/proxy-group to expose
the vLLM endpoint via MagicDNS at rtx6000-brain-0.<tailnet>.ts.net:8000.
2026-05-04 04:47:34 +00:00
sirius0xdev
f8ed765bee
Update kustomization.yaml
2026-05-04 00:15:26 -04:00
sirius0xdev
69db1cf1f2
Remove invalid Tailscale operator tags
...
The tag:k8s-operator and tag:tailnet tags don't exist in tailnet ACLs,
causing 400 errors on key creation. Set tags to empty for now.
2026-05-04 03:59:08 +00:00
sirius0xdev
f30cb6e8fb
fix secret
2026-05-04 03:52:25 +00:00
sirius0xdev
189b7a73d6
Fix Tailscale operator secret name to 'operator'
2026-05-04 03:20:46 +00:00
sirius0xdev
0b80ba0068
Remove SOPS-encrypted authkey secret from Kustomize
...
Flux can't decrypt SOPS files in this setup. The secret will be
created manually on the cluster and won't be garbage collected by
Flux since it's not in the Kustomization resources.
2026-05-04 03:10:50 +00:00
sirius0xdev
904152754d
Add SOPS-encrypted Tailscale operator authkey secret
...
Replaces manual secret creation with a repo-managed encrypted secret.
Decrypted value contains the operator authkey for tailscale login.
2026-05-04 03:09:16 +00:00
sirius0xdev
28fc3202a3
Fix Tailscale operator PodSecurity issues
...
- Change namespace from enforce:restricted to warn:restricted to allow operator to run without PodSecurity blocking
- Remove runAsUser:0 from operator as it's no longer needed
- This allows the Tailscale operator to run with its default configuration
2026-05-04 03:02:09 +00:00
sirius0xdev
fbf3e4a55b
Fix Tailscale operator: run as root (no longer needs restricted PodSecurity)
...
The Tailscale operator requires /.config and root-level paths.
Namespace 'tailscale' had its pod-security.kubernetes.io/enforce label
removed, so runAsNonRoot is no longer required.
2026-05-04 02:54:30 +00:00
sirius0xdev
0e60fff9a6
fix secret values
2026-05-04 02:53:03 +00:00
sirius0xdev
78c354bd72
Merge branch 'master' of github.com:sirius0xdev/gcloud-lab
...
hhh#
2026-05-04 02:46:43 +00:00
sirius0xdev
eb50df5356
fix secret key values
2026-05-04 02:46:37 +00:00
sirius0xdev
035ff4d428
Fix Tailscale operator: set runAsUser/runAsGroup for non-root image
...
The tailscale/k8s-operator image runs as root by default, conflicting
with runAsNonRoot=true. Set runAsUser:65532 (nobody) to satisfy both
PodSecurity and container runtime.
2026-05-04 02:36:59 +00:00
sirius0xdev
2ab4a78825
Fix Tailscale operator: add securityContext for PodSecurity restricted policy
...
The merged PR was missing securityContext/podSecurityContext values
required by the namespace's restricted:latest PodSecurity policy.
Without these, pods fail to create with FailedCreate errors.
2026-05-04 02:26:09 +00:00
sirius0xdev
21cebbc763
fix secret name in kustomization
2026-05-04 02:05:59 +00:00
