9c0fddb0ef
REFACTOR(secrets): flatten Vault paths
...
- Change secret paths from <category>/<app> to <app>
- databases/postgresql → postgresql
- databases/minio → minio
- databases/pgweb → pgweb
- cluster-infrastructure/velero → velero
2026-01-06 16:52:54 +09:00
b5f93b3812
REFACTOR(repo): move vault/ to manifests/
...
- Move ExternalSecret files from vault/ to manifests/secret.yaml
- Merge multiple secrets with --- separator (postgresql)
- Update kustomization.yaml references
- Remove vault/ folders
Apps: postgresql, postgresql-dev, pgweb, minio, velero
2026-01-06 16:42:24 +09:00
927b15b631
FIX(pgweb): update app-template chart repo URL
...
- Change repo URL from bjw-s to bjw-s-labs
- Fix Helm chart repository reference
2026-01-06 15:44:18 +09:00
ef8bef964b
REFACTOR(pgweb): migrate to bjw-s/app-template
...
- Replace deployment.yaml with helm-values.yaml
- ArgoCD uses app-template chart v3.6.1
- Ingress now defined in helm-values.yaml
2026-01-06 15:41:55 +09:00
44f773b827
REFACTOR(storage): storage repo structure
...
- Add application.yaml for ArgoCD app-of-apps
- Add kustomization.yaml with storage components
- Add renovate.json for automated updates
- Update all component argocd.yaml repoURLs to storage repo
Components: longhorn, minio, postgresql, postgresql-dev, pgweb, cnpg,
velero
2026-01-05 00:39:12 +09:00
c2cda8ee36
REFACTOR(repo): migrate repoURL to K3S-HOME
...
- Update repository URL to K3S-HOME organization
- Change from personal to organization repo
2026-01-05 00:39:12 +09:00
684bf03e3e
REFACTOR(authelia): remove pgweb basic auth
...
- use Authelia SSO
2026-01-05 00:39:12 +09:00
804207b02b
FEAT(authelia): add authelia sso
...
- to minio console and pgweb
- minio: Add Authelia middleware to console ingress (API excluded for S3
access)
- pgweb: Add Authelia middleware to ingress
2026-01-05 00:39:12 +09:00
57524aaa93
REFACTOR(traefik): switch ingress to Traefik
...
- Update ingressClassName from haproxy to traefik
- Remove nginx annotations from minio ingress
2026-01-05 00:39:12 +09:00
c537136c1d
CHORE(pgweb): use ClusterSecretStore instead of namespace Secret
...
- Change to ClusterSecretStore
- Simplify secret management
2026-01-05 00:39:12 +09:00
ab80e14e0a
CHORE(external-secrets): update ESO API version from v1beta1 to v1
...
- Update ExternalSecret API version
- Migrate to stable API
2026-01-05 00:39:12 +09:00
a586febc4c
REFACTOR(gitea): migrate repoURL from Gitea to GitHub
...
- Update repository URL to GitHub
- Change source control provider
2026-01-05 00:39:12 +09:00
9abcdfa98d
REFACTOR(goldilocks): use managedNamespaceMetadata for namespace labels
...
- Remove namespace.yaml files
- Add managedNamespaceMetadata with Goldilocks label
- Set CreateNamespace=true in syncOptions
- Update kustomization.yaml to remove namespace.yaml references
2026-01-05 00:39:12 +09:00
a39ec16b35
FIX(pgweb): pgweb namespace duplication
...
- Remove namespace definition from deployment.yaml
- Namespace now only defined in namespace.yaml
- Fixes ComparisonError: may not add resource with already registered id
2026-01-04 23:47:13 +09:00
d9df80bca3
REFACTOR(postgresql): restructure pgweb
...
- and pg-dev folder str...
- Remove argocd/, helm-values/ subdirectories
- Move files to parent directory with standardized names
- Add namespace.yaml to both apps with Goldilocks labels
- Preserve vault/ subdirectories (pgweb: 3 files, postgresql-dev: 1
file)
- Update main kustomization.yaml to reference argocd.yaml files directly
- Update postgresql-dev helm valueFiles path
- Comment out argocd.yaml in each app's kustomization.yaml to prevent
circular reference
Applications restructured:
- pgweb
- postgresql-dev
2026-01-04 23:47:13 +09:00
a15cb1510f
PERF(grafana): optimize cpu requests based on
...
- actual usage from grafa...
- external-secrets: 20m → 5m (actual: 1m)
- external-secrets-webhook: 10m → 2m (actual: 1m)
- external-secrets-cert: 10m → 2m (actual: 1m)
- cnpg: 100m → 5m (actual: 2m)
- haproxy-ingress: 100m → 15m (actual: 9-10m)
2026-01-04 23:47:13 +09:00
f1b99f0bdf
FEAT(traefik): add per-application ingress
...
- management
- Added ingress files for MinIO (API and Console) and pgweb
- Updated kustomization files to include ingress resources
- Migrated from centralized ingress management to per-app architecture
2026-01-04 23:47:13 +09:00
b6802a45e6
REFACTOR(vault): update Vault secret paths
...
- Update secret paths for databases/*
- Reorganize secret structure
2025-12-17 21:32:31 +09:00
26378b9143
FEAT(minio): add minio and pgweb
...
- move from applications to databases
2025-12-17 15:17:45 +09:00