|
|
c51cca27d8
|
CHORE(falco): disable sidekick-ui and Redis
- Use Grafana dashboard instead
- Set webui.enabled: false (disables UI and Redis)
- Remove ingress.yaml for falco-ui
- Saves ~384Mi memory (Redis 256Mi + UI 128Mi)
|
2026-01-05 00:40:26 +09:00 |
|
|
|
765104bb4e
|
REFACTOR(authelia): remove falco-ui-secret
- Use Authelia SSO instead
- Remove basic auth secret
|
2026-01-04 23:41:39 +09:00 |
|
|
|
a2682e292b
|
REFACTOR(goldilocks): use managedNamespaceMetadata for namespace labels
- Remove namespace.yaml files
- Add managedNamespaceMetadata with Goldilocks label
- Set CreateNamespace=true in syncOptions
- Update kustomization.yaml to remove namespace.yaml references
|
2026-01-04 23:41:39 +09:00 |
|
|
|
7653a33ffa
|
CHORE(repo): clean kustomization files
- Remove unused entries from kustomization
- Clean up configuration
|
2026-01-04 23:41:39 +09:00 |
|
|
|
34a1c9f783
|
REFACTOR(repo): restructure infra folder structure
- Remove argocd/, helm-values/, ingress/ subdirectories
- Move files to parent directory with standardized names
- Add namespace.yaml to all apps with Goldilocks labels
- Preserve vault/ subdirectories (falco, velero)
- Update main kustomization.yaml to reference argocd.yaml files directly
- Comment out argocd.yaml in each app's kustomization.yaml to prevent
circular reference
Applications restructured:
- cert-manager (2 ArgoCD apps)
- external-secrets
- reloader
- vault (2 ArgoCD apps)
- velero (2 ArgoCD apps)
- falco
- cnpg
- haproxy
- metallb
- vpa
- argocd
|
2026-01-04 23:41:39 +09:00 |
|
|
|
90c7883c37
|
FEAT(velero): add velero and falco UI auth
- secrets from Vault
|
2026-01-04 23:41:39 +09:00 |
|
|
|
fe6cc1f9e7
|
REFACTOR(falco): move Falco Ingress to falco folder
- Move ingress configuration to falco directory
- Disable SSL redirect
|
2026-01-04 23:41:39 +09:00 |
|
|
|
81e000260f
|
FEAT(falco): add Falco UI Ingress via infrastructure
- Add ingress for Falco UI
- Configure routing
|
2026-01-04 23:41:39 +09:00 |
|
|
|
c5c5a7e469
|
FEAT(falco): add HAProxy Ingress for Falco UI
- Add HAProxy ingress at falco0213.kro.kr
- Configure SSL/TLS
|
2026-01-04 23:41:39 +09:00 |
|
|
|
10308d48d0
|
FEAT(velero): Add Velero, Falco,
- and CNPG infrastructure components
Add three critical infrastructure components via GitOps:
- Velero: Backup and disaster recovery solution
- Configured with Minio S3 backend
- Daily full cluster backups (30-day retention)
- Hourly backups for critical namespaces (7-day retention)
- Credentials managed via External Secrets from Vault
- Falco: Runtime security monitoring
- eBPF-based threat detection
- Custom rules for container security
- Falcosidekick for alert forwarding
- Prometheus metrics enabled
- CNPG (CloudNativePG): PostgreSQL operator
- Kubernetes-native PostgreSQL management
- Automated failover and backups
- Will replace Bitnami PostgreSQL
All components follow existing GitOps patterns:
- Helm charts deployed via ArgoCD
- Values managed in Git
- Automated sync with selfHeal enabled
|
2026-01-04 23:41:39 +09:00 |
|
