3767a6edea
CHORE(traefik): split centralized ingress
...
- management to per-applicati...
- Moved ArgoCD ingress to argocd/ingress/
- Moved Velero ingress to velero/ingress/
- Removed centralized ingress/ingresses.yaml (single point of failure)
- Updated root kustomization.yaml to reference argocd and velero
directories
- Each application now manages its own ingress independently
2026-01-04 23:47:13 +09:00
311e8a1cc1
FEAT(velero): Add Velero UI
...
- with HAProxy Ingress at velero0213.kro.kr
2026-01-04 23:47:13 +09:00
3366a6b5b8
FEAT(velero): Add Velero, Falco,
...
- and CNPG infrastructure components
Add three critical infrastructure components via GitOps:
- Velero: Backup and disaster recovery solution
- Configured with Minio S3 backend
- Daily full cluster backups (30-day retention)
- Hourly backups for critical namespaces (7-day retention)
- Credentials managed via External Secrets from Vault
- Falco: Runtime security monitoring
- eBPF-based threat detection
- Custom rules for container security
- Falcosidekick for alert forwarding
- Prometheus metrics enabled
- CNPG (CloudNativePG): PostgreSQL operator
- Kubernetes-native PostgreSQL management
- Automated failover and backups
- Will replace Bitnami PostgreSQL
All components follow existing GitOps patterns:
- Helm charts deployed via ArgoCD
- Values managed in Git
- Automated sync with selfHeal enabled
2026-01-04 23:47:13 +09:00
b6802a45e6
REFACTOR(vault): update Vault secret paths
...
- Update secret paths for databases/*
- Reorganize secret structure
2025-12-17 21:32:31 +09:00
26378b9143
FEAT(minio): add minio and pgweb
...
- move from applications to databases
2025-12-17 15:17:45 +09:00
a096efe80d
CHORE(argocd): update ArgoCD applications to point to databases repo
...
- Update repoURL to databases repo
- Change source repository reference
2025-12-17 15:13:05 +09:00
27838e5bad
INIT(postgresql): databases setup
...
- with pg and pg-dev
2025-12-17 15:09:48 +09:00