7eba5c06c4
FEAT(velero): activate HTTPS in Falco and update Velero version
...
- Enable HTTPS for Falco UI
- Update Velero chart version
2026-01-04 23:41:39 +09:00
cf249930a7
REFACTOR(traefik): migrate all ingresses
...
- from NGINX to HAProxy
- Changed all ingressClassName from nginx to haproxy
- Updated NGINX to ClusterIP mode (backup)
- Set HAProxy as default ingress controller
- Affected files:
- ingress-nginx/ingress.yaml (22 ingresses)
- vault/helm-values/vault.yaml (1 ingress)
- haproxy/argocd/haproxy.yaml (controller config)
- ingress-nginx/helm-values/ingress-nginx.yaml (backup mode)
This completes the migration to HAProxy as the primary ingress
controller.
2026-01-04 23:41:39 +09:00
25d0bc2c55
FIX(falco): disable SSL redirect for Falco UI
...
- Disable SSL redirect on ingress
- Fix routing configuration
2026-01-04 23:41:39 +09:00
fe6cc1f9e7
REFACTOR(falco): move Falco Ingress to falco folder
...
- Move ingress configuration to falco directory
- Disable SSL redirect
2026-01-04 23:41:39 +09:00
81e000260f
FEAT(falco): add Falco UI Ingress via infrastructure
...
- Add ingress for Falco UI
- Configure routing
2026-01-04 23:41:39 +09:00
c5c5a7e469
FEAT(falco): add HAProxy Ingress for Falco UI
...
- Add HAProxy ingress at falco0213.kro.kr
- Configure SSL/TLS
2026-01-04 23:41:39 +09:00
ac5fde6ba4
FIX(repo): simplify ignoreDiff for all StatefulSets
...
- Simplify ignoreDifferences configuration
- Reduce complexity
2026-01-04 23:41:39 +09:00
70eb551871
FIX(falco): disable selfHeal for Falco
...
- Prevent StatefulSet drift issues
- Disable automatic healing
2026-01-04 23:41:39 +09:00
3f18a3cdf8
FEAT(repo): enhance syncPolicy and ignoreDiff for StatefulSet
...
- Add enhanced sync policy
- Configure ignoreDifferences for StatefulSet
2026-01-04 23:41:39 +09:00
c2b9175b8b
FIX(storage): improve ignoreDiff for StatefulSet PVC retention
...
- Improve ignoreDifferences configuration
- Handle PVC retention policy
2026-01-04 23:41:39 +09:00
18dac6b77f
FIX(falco): change Falco driver to modern_ebpf
...
- Use modern_ebpf driver for kernel 6.14 compatibility
- Fix kernel module issues
2026-01-04 23:41:39 +09:00
10308d48d0
FEAT(velero): Add Velero, Falco,
...
- and CNPG infrastructure components
Add three critical infrastructure components via GitOps:
- Velero: Backup and disaster recovery solution
- Configured with Minio S3 backend
- Daily full cluster backups (30-day retention)
- Hourly backups for critical namespaces (7-day retention)
- Credentials managed via External Secrets from Vault
- Falco: Runtime security monitoring
- eBPF-based threat detection
- Custom rules for container security
- Falcosidekick for alert forwarding
- Prometheus metrics enabled
- CNPG (CloudNativePG): PostgreSQL operator
- Kubernetes-native PostgreSQL management
- Automated failover and backups
- Will replace Bitnami PostgreSQL
All components follow existing GitOps patterns:
- Helm charts deployed via ArgoCD
- Values managed in Git
- Automated sync with selfHeal enabled
2026-01-04 23:41:39 +09:00
fa24f224ee
FEAT(vault): add clustersecretstore
...
- for vault-backend
- Create cluster-wide secret store for External Secrets Operator
- Configure Kubernetes auth with external-secrets service account
- Enable all namespaces to access Vault secrets via ClusterSecretStore
2026-01-04 23:41:39 +09:00
05a5de7c0f
CHORE(argocd): update ArgoCD applications to point to cluster-infrastructure
...
- Update repoURL to cluster-infrastructure repo
- Change source repository reference
2025-12-17 15:12:46 +09:00
2a89801d5e
INIT(repo): cluster infrastructure setup
2025-12-17 15:04:56 +09:00
