804207b02b
FEAT(authelia): add authelia sso
...
- to minio console and pgweb
- minio: Add Authelia middleware to console ingress (API excluded for S3
access)
- pgweb: Add Authelia middleware to ingress
2026-01-05 00:39:12 +09:00
57524aaa93
REFACTOR(traefik): switch ingress to Traefik
...
- Update ingressClassName from haproxy to traefik
- Remove nginx annotations from minio ingress
2026-01-05 00:39:12 +09:00
c537136c1d
CHORE(pgweb): use ClusterSecretStore instead of namespace Secret
...
- Change to ClusterSecretStore
- Simplify secret management
2026-01-05 00:39:12 +09:00
ab80e14e0a
CHORE(external-secrets): update ESO API version from v1beta1 to v1
...
- Update ExternalSecret API version
- Migrate to stable API
2026-01-05 00:39:12 +09:00
a586febc4c
REFACTOR(gitea): migrate repoURL from Gitea to GitHub
...
- Update repository URL to GitHub
- Change source control provider
2026-01-05 00:39:12 +09:00
9abcdfa98d
REFACTOR(goldilocks): use managedNamespaceMetadata for namespace labels
...
- Remove namespace.yaml files
- Add managedNamespaceMetadata with Goldilocks label
- Set CreateNamespace=true in syncOptions
- Update kustomization.yaml to remove namespace.yaml references
2026-01-05 00:39:12 +09:00
a39ec16b35
FIX(pgweb): pgweb namespace duplication
...
- Remove namespace definition from deployment.yaml
- Namespace now only defined in namespace.yaml
- Fixes ComparisonError: may not add resource with already registered id
2026-01-04 23:47:13 +09:00
d9df80bca3
REFACTOR(postgresql): restructure pgweb
...
- and pg-dev folder str...
- Remove argocd/, helm-values/ subdirectories
- Move files to parent directory with standardized names
- Add namespace.yaml to both apps with Goldilocks labels
- Preserve vault/ subdirectories (pgweb: 3 files, postgresql-dev: 1
file)
- Update main kustomization.yaml to reference argocd.yaml files directly
- Update postgresql-dev helm valueFiles path
- Comment out argocd.yaml in each app's kustomization.yaml to prevent
circular reference
Applications restructured:
- pgweb
- postgresql-dev
2026-01-04 23:47:13 +09:00
a15cb1510f
PERF(grafana): optimize cpu requests based on
...
- actual usage from grafa...
- external-secrets: 20m → 5m (actual: 1m)
- external-secrets-webhook: 10m → 2m (actual: 1m)
- external-secrets-cert: 10m → 2m (actual: 1m)
- cnpg: 100m → 5m (actual: 2m)
- haproxy-ingress: 100m → 15m (actual: 9-10m)
2026-01-04 23:47:13 +09:00
f1b99f0bdf
FEAT(traefik): add per-application ingress
...
- management
- Added ingress files for MinIO (API and Console) and pgweb
- Updated kustomization files to include ingress resources
- Migrated from centralized ingress management to per-app architecture
2026-01-04 23:47:13 +09:00
b6802a45e6
REFACTOR(vault): update Vault secret paths
...
- Update secret paths for databases/*
- Reorganize secret structure
2025-12-17 21:32:31 +09:00
26378b9143
FEAT(minio): add minio and pgweb
...
- move from applications to databases
2025-12-17 15:17:45 +09:00