Commit Graph

473 Commits

Author SHA1 Message Date
svc.kargo 16ef99ed6a chore(kargo): update image tag store to 0.23.0 on staging (#317) 2026-05-31 17:42:52 +02:00
svc.kargo 01421644eb chore(kargo): update image tag core to 0.46.0 on htwg-1-prod (#315) 2026-05-31 17:41:30 +02:00
svc.kargo ddc9488075 chore(kargo): update image tag core to 0.46.0 on staging (#314) 2026-05-31 17:41:03 +02:00
svc.kargo 4f66d87daa chore(kargo): update image tag store to 0.22.0 on eu-central-1-prod (#313) 2026-05-30 15:35:00 +02:00
svc.kargo 1594659240 chore(kargo): update image tag store to 0.22.0 on htwg-1-prod (#312) 2026-05-30 15:34:49 +02:00
svc.kargo 188455ac08 chore(kargo): update image tag store to 0.21.0 on eu-central-1-prod (#311) 2026-05-30 15:34:39 +02:00
Janis Eccarius 5d715f6c0c feat(promotion): add htwg-1-prod stage and update promotion policies 2026-05-30 15:33:27 +02:00
Janis Eccarius d2d89f4ddf feat(promotion): add htwg-1-prod stage and update promotion policies 2026-05-30 15:26:45 +02:00
Janis Eccarius 821c7c256b feat(secrets): add sealed secret for GHCR image credentials 2026-05-30 15:08:03 +02:00
Janis Eccarius c530ee493b feat(secrets): add sealed secret for PostgreSQL credentials 2026-05-30 14:48:18 +02:00
Janis Eccarius 2d0c02b5e2 feat(secrets): add sealed secret for PostgreSQL credentials 2026-05-30 14:38:55 +02:00
Janis Eccarius e08bb654b5 feat(secrets): add sealed secrets for database and internal configurations 2026-05-30 14:35:06 +02:00
Janis Eccarius 1ed4fc4c33 feat(deploy): add scripts for k3d installation and SSH tunnel setup 2026-05-30 14:30:44 +02:00
Janis Eccarius cb28dc88b1 feat(deploy): add scripts for k3d installation and SSH tunnel setup 2026-05-30 14:13:58 +02:00
Janis Eccarius dcdcaff3b0 feat(secrets): add initial configuration for FluxCD, including sealed secrets and Helm releases 2026-05-30 13:23:19 +02:00
Janis Eccarius cc038fbb27 feat(secrets): add sealed-secrets management and Grafana monitoring installation 2026-05-30 12:52:00 +02:00
Janis Eccarius 24b9c52e90 chore(secrets): delete duplicate sealed secret files
git-pull-secret.yaml: duplicate of redis/github-pull-secret.yaml
gitea-secret.yaml: duplicate (empty creds) of nowchess/kargo/github-image-secret.yaml

Co-Authored-By: Claude Sonnet 4.6 <noreply@anthropic.com>
2026-05-30 12:42:23 +02:00
Janis Eccarius 63d0234f63 fix(secrets): remove duplicate git-pull-secret from kustomization
github/git-pull-secret.yaml was sealed with redis namespace — same secret
as redis/github-pull-secret.yaml which was sealed from live cluster.
Keeping the correctly placed redis/ version.

Co-Authored-By: Claude Sonnet 4.6 <noreply@anthropic.com>
2026-05-30 12:41:28 +02:00
Janis Eccarius afd88caf47 fix(secrets): remove duplicate gitea-secret from kustomization
github-image-secret.yaml covers same name/namespace with real credentials.
gitea-secret.yaml had empty creds — was a placeholder.

Co-Authored-By: Claude Sonnet 4.6 <noreply@anthropic.com>
2026-05-30 12:32:32 +02:00
Janis Eccarius d509ebec88 feat(secrets): seal cluster secrets missing from GitOps
Sealed from live cluster state — no plaintext ever on disk:
- redis/github (dockerconfigjson pull secret)
- nowchess/remotek6-certs (prod, staging, kargo)

Added to kustomization:
- kargo/discord-webhook-secret
- nowchess/kargo/github-image-secret
- redis/github-pull-secret
- remotek6-certs for all three namespaces

Co-Authored-By: Claude Sonnet 4.6 <noreply@anthropic.com>
2026-05-30 12:29:18 +02:00
Janis Eccarius a40831d55f feat(secrets): update ghcr-pull-secret with new encrypted docker config for nowchess and nowchess-staging 2026-05-30 12:20:46 +02:00
Janis Eccarius 007846f09c fix(secrets): rename git-nowchess-image-secret to avoid duplicate SealedSecret id 2026-05-30 12:07:48 +02:00
Janis Eccarius 666aab1e70 feat(sealed-secrets): add multiple SealedSecrets for various services and configurations 2026-05-30 12:02:34 +02:00
Janis Eccarius a4d9c41c27 feat(secrets): migrate secrets to SealedSecrets format and update configurations 2026-05-30 11:55:49 +02:00
Janis Eccarius 797776ee5b feat(sealed-secrets): add sealed secrets management scripts and configurations 2026-05-30 11:45:02 +02:00
svc.kargo d0d65af04b chore(kargo): update image tag argo-rollouts to 2.40.10 (#310) 2026-05-29 02:49:22 +02:00
Janis e0137da620 feat(metrics): refactor Redis exporter configuration to use environment variables 2026-05-24 13:39:32 +02:00
Janis 2ebd722b06 feat(metrics): add Redis exporter deployment and update kustomization 2026-05-24 13:36:00 +02:00
Janis ed1c104f07 feat(metrics): add Redis exporter deployment and update kustomization 2026-05-24 13:23:09 +02:00
Janis baa60b1e4a feat(metrics): allow insecure images in global security settings 2026-05-24 13:19:19 +02:00
Janis 1a3365c4b9 feat(metrics): update Redis exporter image configuration to use version v1.66.0 2026-05-24 13:18:00 +02:00
Janis 3c0a4041d5 feat(metrics): disable bearer token for annotation autodiscovery and enable metrics 2026-05-24 13:16:24 +02:00
Janis 074ec412ab feat(metrics): add HTTP protocol to OTLP endpoint and update discovery rules 2026-05-24 12:56:28 +02:00
svc.kargo bfe100f4af chore(kargo): update image tag store to 0.22.0 on prod (#309) 2026-05-22 12:07:58 +02:00
svc.kargo a518241e07 chore(kargo): update image tag store to 0.22.0 on staging (#308) 2026-05-22 12:07:29 +02:00
svc.kargo c17e58928a chore(kargo): update image tag store to 0.21.0 on prod (#307) 2026-05-22 11:00:09 +02:00
svc.kargo bc9ea5a4b5 chore(kargo): update image tag store to 0.21.0 on staging (#306) 2026-05-22 10:59:33 +02:00
svc.kargo 69ca14579f chore(kargo): update image tag account to 0.18.0 on prod (#305) 2026-05-21 11:44:54 +02:00
svc.kargo 4224209161 chore(kargo): update image tag account to 0.18.0 on staging (#304) 2026-05-21 11:44:19 +02:00
svc.kargo 380afad0dc chore(kargo): update image tag account to 0.17.0 on prod (#303) 2026-05-19 16:04:34 +02:00
svc.kargo b8d88a3d5f chore(kargo): update image tag account to 0.17.0 on staging (#302) 2026-05-19 16:03:51 +02:00
svc.kargo 0a39ef2f20 chore(kargo): update image tag store to 0.20.0 on prod (#301) 2026-05-19 13:50:30 +02:00
svc.kargo 11e0008815 chore(kargo): update image tag store to 0.20.0 on staging (#300) 2026-05-19 13:49:23 +02:00
svc.kargo 569df02c43 chore(kargo): update image tag store to 0.19.0 on prod (#299) 2026-05-19 11:17:00 +02:00
svc.kargo a99f38305d chore(kargo): update image tag store to 0.19.0 on staging (#298) 2026-05-19 11:16:24 +02:00
svc.kargo 3691498397 chore(kargo): update image tag store to 0.18.0 on prod (#297) 2026-05-19 10:24:20 +02:00
svc.kargo 23f81931e9 chore(kargo): update image tag store to 0.18.0 on staging (#296) 2026-05-19 10:23:49 +02:00
Janis e9c1dec3e6 feat(nowchess): reorder ingress paths for account service and WebSocket routing 2026-05-19 09:33:51 +02:00
Janis c070ce727f feat(nowchess): update ingress configuration to add WebSocket paths and improve routing 2026-05-19 09:32:27 +02:00
svc.kargo 05f5f8ad38 chore(kargo): update image tag core to 0.45.0 on prod (#295) 2026-05-19 09:25:41 +02:00