K3S-HOME/applications
1
0
Fork 0
Code Issues Pull Requests Actions Packages Projects Releases Wiki Activity
145 Commits 1 Branch 0 Tags
fd1548c70c5b6971bf6cd02811bc954c9e5f7f08
Commit Graph

13 Commits

Author SHA1 Message Date
Mayne0213
fd1548c70c FEAT(applications): enable HA with replica 2 and soft anti-affinity 
- Add replicaCount: 2 to docusaurus, headlamp, homer, mas, umami
- Add soft pod anti-affinity for node distribution
- Enable high availability across multiple nodes
 2026-01-09 21:38:09 +09:00
Mayne0213
a051b67030 PERF(resources): remove CPU limits - keep memory limits only 
- CPU throttling prevents app startup, not crashes
- Memory OOM is the real cascading failure cause
- CPU request ensures fair scheduling
 2026-01-07 23:48:31 +09:00
Mayne0213
b5517f757a PERF(resources): increase CPU limit to VPA × 3 for startup burst 
- Change CPU limit multiplier from 1.5x to 3x
- Prevents throttling during app startup
- Affected: code-server, crafty, docusaurus, gitea, headlamp,
  homer, immich, mas, umami
 2026-01-07 23:35:06 +09:00
Mayne0213
3bc0b76135 PERF(repo): apply CPU/Memory limits based on VPA 
- Set CPU request to VPA recommendation
- Set CPU limit to VPA × 1.5 for burst allowance
- Set Memory limit to VPA × 1.5 to prevent OOM
- Prevent cascading failure on node failure
 2026-01-07 23:07:30 +09:00
Mayne0213
2bb0b693db FIX(headlamp): skip TLS verification for OIDC 
- Add -oidc-skip-tls-verify flag via extraArgs
- Workaround for CA cert validation issue
 2026-01-07 01:30:57 +09:00
Mayne0213
753543648b FIX(headlamp): update ingress for chart 0.39.0 
- Update ingress hosts configuration for new chart version
- Fix breaking changes in Headlamp Helm chart
 2026-01-06 15:30:07 +09:00
Mayne0213
fb0fb44251 REFACTOR(apps): integrate ingress to helm-values 
- code-server: move ingress to helm-values, rbac to manifests
- headlamp: move ingress to helm-values, external-secret to manifests
 2026-01-06 01:57:21 +09:00
Mayne0213
fbe5734fc1 FIX(headlamp): restore oidc config for k3s 
- Restore OIDC configuration for K3s cluster
- Fix authentication settings
 2026-01-05 00:43:51 +09:00
Mayne0213
362ebd6c7d REFACTOR(headlamp): switch to authelia 
- Remove OIDC config from helm-values
- Remove ExternalSecret (not needed)
- Add Authelia middleware to ingress
- Headlamp uses ServiceAccount for K8s API access
 2026-01-05 00:43:51 +09:00
Mayne0213
b74bc14950 FIX(headlamp): set baseURL to empty string 
- Change baseURL to empty string
- Fix path routing configuration
 2026-01-05 00:43:51 +09:00
Mayne0213
6d19c01bf1 FIX(headlamp): use ExternalSecret for OIDC config 
- Use externalSecret.enabled instead of env
- Add template to ExternalSecret with all OIDC fields
 2026-01-05 00:43:51 +09:00
Mayne0213
f17bbe3514 FEAT(headlamp): configure Headlamp OIDC with Authelia 
- Add OIDC configuration (clientID, issuerURL, scopes)
- Add ExternalSecret for OIDC client secret from Vault
- Remove Authelia middleware (using direct OIDC auth)
 2026-01-05 00:43:51 +09:00
Mayne0213
5227d9361d REFACTOR(headlamp): replace k8s-dash with Headlamp 2026-01-05 00:43:51 +09:00