Janis Eccarius
bece58af95
chore(metrics-server): comment out metrics-server application configuration
2026-06-01 22:05:56 +02:00
Janis Eccarius
cead18430c
feat(kargo): add x86_v2 tag suffix for htwg-1-prod and 5m soak time for staging
...
- Add tagSuffix var to promotion template (default empty) so htwg-1-prod
can append -x86_v2 to all image tags without affecting other stages
- Add requiredSoakTime: 5m to all staging freight sources
Co-Authored-By: Claude Sonnet 4.6 <noreply@anthropic.com >
2026-06-01 19:17:16 +02:00
svc.kargo
0088b8e74b
chore(kargo): update image tag store to 0.23.0 on eu-central-1-prod ( #320 )
2026-06-01 18:45:16 +02:00
svc.kargo
ced778faf5
chore(kargo): update image tag core to 0.46.0 on eu-central-1-prod ( #316 )
2026-06-01 18:44:56 +02:00
svc.kargo
59724cd40e
chore(kargo): update image tag kargo to 1.10.5 ( #319 )
2026-06-01 18:42:26 +02:00
svc.kargo
b515d24d4e
chore(kargo): update image tag store to 0.23.0 on htwg-1-prod ( #318 )
2026-05-31 17:43:21 +02:00
svc.kargo
16ef99ed6a
chore(kargo): update image tag store to 0.23.0 on staging ( #317 )
2026-05-31 17:42:52 +02:00
svc.kargo
01421644eb
chore(kargo): update image tag core to 0.46.0 on htwg-1-prod ( #315 )
2026-05-31 17:41:30 +02:00
svc.kargo
ddc9488075
chore(kargo): update image tag core to 0.46.0 on staging ( #314 )
2026-05-31 17:41:03 +02:00
svc.kargo
4f66d87daa
chore(kargo): update image tag store to 0.22.0 on eu-central-1-prod ( #313 )
2026-05-30 15:35:00 +02:00
svc.kargo
1594659240
chore(kargo): update image tag store to 0.22.0 on htwg-1-prod ( #312 )
2026-05-30 15:34:49 +02:00
svc.kargo
188455ac08
chore(kargo): update image tag store to 0.21.0 on eu-central-1-prod ( #311 )
2026-05-30 15:34:39 +02:00
Janis Eccarius
5d715f6c0c
feat(promotion): add htwg-1-prod stage and update promotion policies
2026-05-30 15:33:27 +02:00
Janis Eccarius
d2d89f4ddf
feat(promotion): add htwg-1-prod stage and update promotion policies
2026-05-30 15:26:45 +02:00
Janis Eccarius
821c7c256b
feat(secrets): add sealed secret for GHCR image credentials
2026-05-30 15:08:03 +02:00
Janis Eccarius
c530ee493b
feat(secrets): add sealed secret for PostgreSQL credentials
2026-05-30 14:48:18 +02:00
Janis Eccarius
2d0c02b5e2
feat(secrets): add sealed secret for PostgreSQL credentials
2026-05-30 14:38:55 +02:00
Janis Eccarius
e08bb654b5
feat(secrets): add sealed secrets for database and internal configurations
2026-05-30 14:35:06 +02:00
Janis Eccarius
1ed4fc4c33
feat(deploy): add scripts for k3d installation and SSH tunnel setup
2026-05-30 14:30:44 +02:00
Janis Eccarius
cb28dc88b1
feat(deploy): add scripts for k3d installation and SSH tunnel setup
2026-05-30 14:13:58 +02:00
Janis Eccarius
dcdcaff3b0
feat(secrets): add initial configuration for FluxCD, including sealed secrets and Helm releases
2026-05-30 13:23:19 +02:00
Janis Eccarius
cc038fbb27
feat(secrets): add sealed-secrets management and Grafana monitoring installation
2026-05-30 12:52:00 +02:00
Janis Eccarius
24b9c52e90
chore(secrets): delete duplicate sealed secret files
...
git-pull-secret.yaml: duplicate of redis/github-pull-secret.yaml
gitea-secret.yaml: duplicate (empty creds) of nowchess/kargo/github-image-secret.yaml
Co-Authored-By: Claude Sonnet 4.6 <noreply@anthropic.com >
2026-05-30 12:42:23 +02:00
Janis Eccarius
63d0234f63
fix(secrets): remove duplicate git-pull-secret from kustomization
...
github/git-pull-secret.yaml was sealed with redis namespace — same secret
as redis/github-pull-secret.yaml which was sealed from live cluster.
Keeping the correctly placed redis/ version.
Co-Authored-By: Claude Sonnet 4.6 <noreply@anthropic.com >
2026-05-30 12:41:28 +02:00
Janis Eccarius
afd88caf47
fix(secrets): remove duplicate gitea-secret from kustomization
...
github-image-secret.yaml covers same name/namespace with real credentials.
gitea-secret.yaml had empty creds — was a placeholder.
Co-Authored-By: Claude Sonnet 4.6 <noreply@anthropic.com >
2026-05-30 12:32:32 +02:00
Janis Eccarius
d509ebec88
feat(secrets): seal cluster secrets missing from GitOps
...
Sealed from live cluster state — no plaintext ever on disk:
- redis/github (dockerconfigjson pull secret)
- nowchess/remotek6-certs (prod, staging, kargo)
Added to kustomization:
- kargo/discord-webhook-secret
- nowchess/kargo/github-image-secret
- redis/github-pull-secret
- remotek6-certs for all three namespaces
Co-Authored-By: Claude Sonnet 4.6 <noreply@anthropic.com >
2026-05-30 12:29:18 +02:00
Janis Eccarius
a40831d55f
feat(secrets): update ghcr-pull-secret with new encrypted docker config for nowchess and nowchess-staging
2026-05-30 12:20:46 +02:00
Janis Eccarius
007846f09c
fix(secrets): rename git-nowchess-image-secret to avoid duplicate SealedSecret id
2026-05-30 12:07:48 +02:00
Janis Eccarius
666aab1e70
feat(sealed-secrets): add multiple SealedSecrets for various services and configurations
2026-05-30 12:02:34 +02:00
Janis Eccarius
a4d9c41c27
feat(secrets): migrate secrets to SealedSecrets format and update configurations
2026-05-30 11:55:49 +02:00
Janis Eccarius
797776ee5b
feat(sealed-secrets): add sealed secrets management scripts and configurations
2026-05-30 11:45:02 +02:00
svc.kargo
d0d65af04b
chore(kargo): update image tag argo-rollouts to 2.40.10 ( #310 )
2026-05-29 02:49:22 +02:00
Janis
e0137da620
feat(metrics): refactor Redis exporter configuration to use environment variables
2026-05-24 13:39:32 +02:00
Janis
2ebd722b06
feat(metrics): add Redis exporter deployment and update kustomization
2026-05-24 13:36:00 +02:00
Janis
ed1c104f07
feat(metrics): add Redis exporter deployment and update kustomization
2026-05-24 13:23:09 +02:00
Janis
baa60b1e4a
feat(metrics): allow insecure images in global security settings
2026-05-24 13:19:19 +02:00
Janis
1a3365c4b9
feat(metrics): update Redis exporter image configuration to use version v1.66.0
2026-05-24 13:18:00 +02:00
Janis
3c0a4041d5
feat(metrics): disable bearer token for annotation autodiscovery and enable metrics
2026-05-24 13:16:24 +02:00
Janis
074ec412ab
feat(metrics): add HTTP protocol to OTLP endpoint and update discovery rules
2026-05-24 12:56:28 +02:00
svc.kargo
bfe100f4af
chore(kargo): update image tag store to 0.22.0 on prod ( #309 )
2026-05-22 12:07:58 +02:00
svc.kargo
a518241e07
chore(kargo): update image tag store to 0.22.0 on staging ( #308 )
2026-05-22 12:07:29 +02:00
svc.kargo
c17e58928a
chore(kargo): update image tag store to 0.21.0 on prod ( #307 )
2026-05-22 11:00:09 +02:00
svc.kargo
bc9ea5a4b5
chore(kargo): update image tag store to 0.21.0 on staging ( #306 )
2026-05-22 10:59:33 +02:00
svc.kargo
69ca14579f
chore(kargo): update image tag account to 0.18.0 on prod ( #305 )
2026-05-21 11:44:54 +02:00
svc.kargo
4224209161
chore(kargo): update image tag account to 0.18.0 on staging ( #304 )
2026-05-21 11:44:19 +02:00
svc.kargo
380afad0dc
chore(kargo): update image tag account to 0.17.0 on prod ( #303 )
2026-05-19 16:04:34 +02:00
svc.kargo
b8d88a3d5f
chore(kargo): update image tag account to 0.17.0 on staging ( #302 )
2026-05-19 16:03:51 +02:00
svc.kargo
0a39ef2f20
chore(kargo): update image tag store to 0.20.0 on prod ( #301 )
2026-05-19 13:50:30 +02:00
svc.kargo
11e0008815
chore(kargo): update image tag store to 0.20.0 on staging ( #300 )
2026-05-19 13:49:23 +02:00
svc.kargo
569df02c43
chore(kargo): update image tag store to 0.19.0 on prod ( #299 )
2026-05-19 11:17:00 +02:00