svc.kargo
db23f6d909
chore(kargo): update image tag bot-platform to 0.11.0-x86_v2 on htwg-1-prod ( #321 )
2026-06-01 23:40:27 +02:00
d159c2abfa
fix(template): update remotek6-client image reference to ghcr.io/16janis12
2026-06-01 23:30:46 +02:00
1d0335f478
fix(rollouts): add previewReplicaCount: 1 to all blue-green rollouts
...
During rollout, active RS (HPA-scaled) + preview RS (also HPA-scaled) = 2x
pod count, exhausting node memory request budgets. Setting previewReplicaCount: 1
caps the preview RS at 1 pod regardless of HPA until promotion completes.
Co-Authored-By: Claude Sonnet 4.6 <noreply@anthropic.com >
2026-06-01 23:27:24 +02:00
5ff4745191
feat(analysis): add performance tests analysis template and update promotion template
2026-06-01 23:15:19 +02:00
747363209a
fix(resources): lower memory requests to fix ArgoCD controller scheduling
...
metrics-server activation triggered simultaneous HPA scale-ups, exhausting
node request budgets despite sufficient physical RAM. ArgoCD application-
controller (256Mi request) could not schedule on either node.
- argocd controller: 256Mi → 128Mi request (unblocks scheduling immediately)
- nowchess services: 128Mi → 96Mi request (prevents HPA cascade from filling nodes)
Co-Authored-By: Claude Sonnet 4.6 <noreply@anthropic.com >
2026-06-01 22:51:26 +02:00
ef25dad952
fix(kargo): fix soak time format and add tagSuffix to staging stages
...
Change requiredSoakTime from 5m to 5m0s (Kargo duration format).
Add explicit tagSuffix="" to staging and eu-central-1-prod stages to
satisfy Kargo 1.10.x admission webhook variable resolution.
Co-Authored-By: Claude Sonnet 4.6 <noreply@anthropic.com >
2026-06-01 22:40:32 +02:00
e589e08c2d
chore(secrets): updated secrets in Passwords.kdbx
2026-06-01 22:35:03 +02:00
9d02420e2b
feat(metrics-server): uncomment metrics-server application configuration
2026-06-01 22:29:34 +02:00
4cd6bb54d9
feat(metrics-server): uncomment metrics-server application configuration
2026-06-01 22:27:46 +02:00
74a1fb8746
chore(secrets): updated secrets
2026-06-01 22:12:03 +02:00
bece58af95
chore(metrics-server): comment out metrics-server application configuration
2026-06-01 22:05:56 +02:00
cead18430c
feat(kargo): add x86_v2 tag suffix for htwg-1-prod and 5m soak time for staging
...
- Add tagSuffix var to promotion template (default empty) so htwg-1-prod
can append -x86_v2 to all image tags without affecting other stages
- Add requiredSoakTime: 5m to all staging freight sources
Co-Authored-By: Claude Sonnet 4.6 <noreply@anthropic.com >
2026-06-01 19:17:16 +02:00
svc.kargo
0088b8e74b
chore(kargo): update image tag store to 0.23.0 on eu-central-1-prod ( #320 )
2026-06-01 18:45:16 +02:00
svc.kargo
ced778faf5
chore(kargo): update image tag core to 0.46.0 on eu-central-1-prod ( #316 )
2026-06-01 18:44:56 +02:00
svc.kargo
59724cd40e
chore(kargo): update image tag kargo to 1.10.5 ( #319 )
2026-06-01 18:42:26 +02:00
svc.kargo
b515d24d4e
chore(kargo): update image tag store to 0.23.0 on htwg-1-prod ( #318 )
2026-05-31 17:43:21 +02:00
svc.kargo
16ef99ed6a
chore(kargo): update image tag store to 0.23.0 on staging ( #317 )
2026-05-31 17:42:52 +02:00
svc.kargo
01421644eb
chore(kargo): update image tag core to 0.46.0 on htwg-1-prod ( #315 )
2026-05-31 17:41:30 +02:00
svc.kargo
ddc9488075
chore(kargo): update image tag core to 0.46.0 on staging ( #314 )
2026-05-31 17:41:03 +02:00
svc.kargo
4f66d87daa
chore(kargo): update image tag store to 0.22.0 on eu-central-1-prod ( #313 )
2026-05-30 15:35:00 +02:00
svc.kargo
1594659240
chore(kargo): update image tag store to 0.22.0 on htwg-1-prod ( #312 )
2026-05-30 15:34:49 +02:00
svc.kargo
188455ac08
chore(kargo): update image tag store to 0.21.0 on eu-central-1-prod ( #311 )
2026-05-30 15:34:39 +02:00
5d715f6c0c
feat(promotion): add htwg-1-prod stage and update promotion policies
2026-05-30 15:33:27 +02:00
d2d89f4ddf
feat(promotion): add htwg-1-prod stage and update promotion policies
2026-05-30 15:26:45 +02:00
821c7c256b
feat(secrets): add sealed secret for GHCR image credentials
2026-05-30 15:08:03 +02:00
c530ee493b
feat(secrets): add sealed secret for PostgreSQL credentials
2026-05-30 14:48:18 +02:00
2d0c02b5e2
feat(secrets): add sealed secret for PostgreSQL credentials
2026-05-30 14:38:55 +02:00
e08bb654b5
feat(secrets): add sealed secrets for database and internal configurations
2026-05-30 14:35:06 +02:00
1ed4fc4c33
feat(deploy): add scripts for k3d installation and SSH tunnel setup
2026-05-30 14:30:44 +02:00
cb28dc88b1
feat(deploy): add scripts for k3d installation and SSH tunnel setup
2026-05-30 14:13:58 +02:00
dcdcaff3b0
feat(secrets): add initial configuration for FluxCD, including sealed secrets and Helm releases
2026-05-30 13:23:19 +02:00
cc038fbb27
feat(secrets): add sealed-secrets management and Grafana monitoring installation
2026-05-30 12:52:00 +02:00
24b9c52e90
chore(secrets): delete duplicate sealed secret files
...
git-pull-secret.yaml: duplicate of redis/github-pull-secret.yaml
gitea-secret.yaml: duplicate (empty creds) of nowchess/kargo/github-image-secret.yaml
Co-Authored-By: Claude Sonnet 4.6 <noreply@anthropic.com >
2026-05-30 12:42:23 +02:00
63d0234f63
fix(secrets): remove duplicate git-pull-secret from kustomization
...
github/git-pull-secret.yaml was sealed with redis namespace — same secret
as redis/github-pull-secret.yaml which was sealed from live cluster.
Keeping the correctly placed redis/ version.
Co-Authored-By: Claude Sonnet 4.6 <noreply@anthropic.com >
2026-05-30 12:41:28 +02:00
afd88caf47
fix(secrets): remove duplicate gitea-secret from kustomization
...
github-image-secret.yaml covers same name/namespace with real credentials.
gitea-secret.yaml had empty creds — was a placeholder.
Co-Authored-By: Claude Sonnet 4.6 <noreply@anthropic.com >
2026-05-30 12:32:32 +02:00
d509ebec88
feat(secrets): seal cluster secrets missing from GitOps
...
Sealed from live cluster state — no plaintext ever on disk:
- redis/github (dockerconfigjson pull secret)
- nowchess/remotek6-certs (prod, staging, kargo)
Added to kustomization:
- kargo/discord-webhook-secret
- nowchess/kargo/github-image-secret
- redis/github-pull-secret
- remotek6-certs for all three namespaces
Co-Authored-By: Claude Sonnet 4.6 <noreply@anthropic.com >
2026-05-30 12:29:18 +02:00
a40831d55f
feat(secrets): update ghcr-pull-secret with new encrypted docker config for nowchess and nowchess-staging
2026-05-30 12:20:46 +02:00
007846f09c
fix(secrets): rename git-nowchess-image-secret to avoid duplicate SealedSecret id
2026-05-30 12:07:48 +02:00
666aab1e70
feat(sealed-secrets): add multiple SealedSecrets for various services and configurations
2026-05-30 12:02:34 +02:00
a4d9c41c27
feat(secrets): migrate secrets to SealedSecrets format and update configurations
2026-05-30 11:55:49 +02:00
797776ee5b
feat(sealed-secrets): add sealed secrets management scripts and configurations
2026-05-30 11:45:02 +02:00
svc.kargo
d0d65af04b
chore(kargo): update image tag argo-rollouts to 2.40.10 ( #310 )
2026-05-29 02:49:22 +02:00
Janis
e0137da620
feat(metrics): refactor Redis exporter configuration to use environment variables
2026-05-24 13:39:32 +02:00
Janis
2ebd722b06
feat(metrics): add Redis exporter deployment and update kustomization
2026-05-24 13:36:00 +02:00
Janis
ed1c104f07
feat(metrics): add Redis exporter deployment and update kustomization
2026-05-24 13:23:09 +02:00
Janis
baa60b1e4a
feat(metrics): allow insecure images in global security settings
2026-05-24 13:19:19 +02:00
Janis
1a3365c4b9
feat(metrics): update Redis exporter image configuration to use version v1.66.0
2026-05-24 13:18:00 +02:00
Janis
3c0a4041d5
feat(metrics): disable bearer token for annotation autodiscovery and enable metrics
2026-05-24 13:16:24 +02:00
Janis
074ec412ab
feat(metrics): add HTTP protocol to OTLP endpoint and update discovery rules
2026-05-24 12:56:28 +02:00
svc.kargo
bfe100f4af
chore(kargo): update image tag store to 0.22.0 on prod ( #309 )
2026-05-22 12:07:58 +02:00
svc.kargo
Janis Eccarius
Janis