K3S-HOME/storage
1
0
Fork 0
Code Issues Pull Requests Actions Packages Projects Releases Wiki Activity
119 Commits 1 Branch 0 Tags
df311073b3b5c523291db8a3c1213c25ce202a26
Commit Graph

119 Commits

This Branch
This Branch
All Branches
Author SHA1 Message Date
Mayne0213
e0143b153f FEAT(postgresql): add master node toleration 
- to PostgreSQL
- Allows postgresql pods to run on master with NoExecute taint
- Required because PV is on master node
 2026-01-05 00:39:12 +09:00
Mayne0213
8698780758 FEAT(minio): add master node toleration to MinIO 
- minio-0 disk is on master node, requires toleration for NoExecute
  taint
- Allows minio-0 to schedule on master with taint
 2026-01-05 00:39:12 +09:00
Mayne0213
e1d4b1f717 FIX(postgresql): use primary.persistence 
- for pg-dev storage
 2026-01-05 00:39:12 +09:00
Mayne0213
f038c62b2f PERF(postgresql): reduce pg-dev storage 
- from 10Gi to 1Gi with...
 2026-01-05 00:39:12 +09:00
Mayne0213
00f8b62dd9 REFACTOR(authelia): remove kanidm 
- and restore authelia
- Delete kanidm folder
- Remove oauth2-proxy from velero
- Restore velero ingress to use authelia middleware
- Update kustomization.yaml to use authelia instead of kanidm
 2026-01-05 00:39:12 +09:00
Mayne0213
8545e1984b FEAT(velero): add oauth2-proxy 
- for velero with Kanidm OIDC
- Replace authelia middleware with oauth2-proxy
- Configure OIDC authentication via Kanidm
- Update ingress to route through oauth2-proxy
 2026-01-05 00:39:12 +09:00
Mayne0213
efa56d156e FEAT(authelia): add authelia sso to velero ingress 2026-01-05 00:39:12 +09:00
Mayne0213
09e841d025 FEAT(authelia): add authelia 
- to manually created databases list
 2026-01-05 00:39:12 +09:00
Mayne0213
962767dfb2 REFACTOR(authentik): remove authentik 
- migrating to kanidm
 2026-01-05 00:39:12 +09:00
Mayne0213
a466073a6f REFACTOR(velero): remove velero weekly backup 
- schedule (manual daily ...
 2026-01-05 00:39:12 +09:00
Mayne0213
bc3445e170 REFACTOR(cnpg): remove managed databases section 
- (not supported by CN...
- CNPG operator version doesn't support spec.managed.databases
- authentik database created manually via psql
 2026-01-05 00:39:12 +09:00
Mayne0213
72f1ae1e11 FEAT(postgresql): add authentik database 
- to main pg cluster
- Add managed database 'authentik' owned by 'app' user
- Consolidate from separate authentik-postgres CNPG cluster
 2026-01-05 00:39:12 +09:00
Mayne0213
a978a4a10e FEAT(authentik): add authentik sso 
- with traefik forwardauth
- Add Authentik helm chart and ArgoCD application
- Configure Traefik ForwardAuth middleware for SSO
- Add External Secrets for Vault integration
- Apply SSO middleware to Velero UI as test
 2026-01-05 00:39:12 +09:00
Mayne0213
acbd999abe REFACTOR(longhorn): remove default-disk 
- from Longhorn nodes - use onl...
 2026-01-05 00:39:12 +09:00
Mayne0213
30ce6f96d5 FEAT(prometheus): enable longhorn servicemonitor 
- for prometheus
 2026-01-05 00:39:12 +09:00
Mayne0213
4a4dbb7937 REFACTOR(argocd): remove serversideapply 
- from argocd applications
- Fixes OutOfSync issues caused by operator-added default values
- ServerSideApply causes stricter field management that conflicts with
  CRD defaults
 2026-01-05 00:39:12 +09:00
Mayne0213
57524aaa93 REFACTOR(traefik): switch ingress to Traefik 
- Update ingressClassName from haproxy to traefik
- Remove nginx annotations from minio ingress
 2026-01-05 00:39:12 +09:00
Mayne0213
e47760e680 REFACTOR(traefik): switch from HAProxy 
- to Traefik ingress controller
- Update all ingress files to use ingressClassName: traefik
- Update cert-manager ClusterIssuer to use traefik class
- Remove haproxy.org annotations from ingress files
- Update vault helm-values to use traefik
 2026-01-05 00:39:12 +09:00
Mayne0213
a41dce6acb FIX(minio): fix MinIO ingress service names 
- Correct service name references
- Fix ingress routing
 2026-01-05 00:39:12 +09:00
Mayne0213
c537136c1d CHORE(pgweb): use ClusterSecretStore instead of namespace Secret 
- Change to ClusterSecretStore
- Simplify secret management
 2026-01-05 00:39:12 +09:00
Mayne0213
588861a53b REFACTOR(vault): remove Vault database and user 
- Vault uses file storage instead
- Remove database dependencies
 2026-01-05 00:39:12 +09:00
Mayne0213
ab80e14e0a CHORE(external-secrets): update ESO API version from v1beta1 to v1 
- Update ExternalSecret API version
- Migrate to stable API
 2026-01-05 00:39:12 +09:00
Mayne0213
eee7b68c6b REFACTOR(postgresql): rename pg-cnpg.yaml to pg.yaml 
- Standardize file naming
- Simplify configuration
 2026-01-05 00:39:12 +09:00
Mayne0213
75a165b474 REFACTOR(postgresql): rename pg-cnpg namespace and folder 
- Rename to postgresql
- Standardize naming convention
 2026-01-05 00:39:12 +09:00
Mayne0213
a586febc4c REFACTOR(gitea): migrate repoURL from Gitea to GitHub 
- Update repository URL to GitHub
- Change source control provider
 2026-01-05 00:39:12 +09:00
Mayne0213
0f9f427e44 FEAT(minio): add minio storageclass 
- and persistentvolumes for local d...
 2026-01-05 00:39:12 +09:00
Mayne0213
8ac235fb17 CHORE(cnpg): update CNPG chart version to 0.27.0 
- Upgrade CloudNativePG chart
- Apply dependency updates
 2026-01-05 00:39:12 +09:00
Mayne0213
edb90dcb25 REFACTOR(longhorn): change Longhorn namespace 
- Change from longhorn-system to longhorn
- Standardize namespace naming
 2026-01-05 00:39:12 +09:00
Mayne0213
9abcdfa98d REFACTOR(goldilocks): use managedNamespaceMetadata for namespace labels 
- Remove namespace.yaml files
- Add managedNamespaceMetadata with Goldilocks label
- Set CreateNamespace=true in syncOptions
- Update kustomization.yaml to remove namespace.yaml references
 2026-01-05 00:39:12 +09:00
Mayne0213
66890d8f66 FEAT(velero): add kustomize source 
- to velero for ingress deployment
 2026-01-04 23:47:13 +09:00
Mayne0213
fc8ddebf6e REFACTOR(longhorn): migrate longhorn 
- from worker-1 to master
- Enable scheduling on mayne-vcn (master)
- Disable scheduling and request eviction on mayne-worker-1
- Longhorn will use only master and worker-2
 2026-01-04 23:47:13 +09:00
Mayne0213
6bc8359180 CHORE(repo): disable scheduling and request eviction on mayne-vcn 
- Disable scheduling on master node
- Request eviction of existing workloads
 2026-01-04 23:47:13 +09:00
Mayne0213
50c3ad5e9e REFACTOR(minio): arrange folder structure for Longhorn and MinIO 
- Reorganize folder structure
- Clean up configuration files
 2026-01-04 23:47:13 +09:00
Mayne0213
54f7f152da REFACTOR(cnpg): change CNPG namespace 
- Update namespace configuration
- Standardize naming
 2026-01-04 23:47:13 +09:00
Mayne0213
b17eb6309a CHORE(repo): clean kustomization files 
- Remove unused entries from kustomization
- Clean up configuration
 2026-01-04 23:47:13 +09:00
Mayne0213
6b4cd0dce8 REFACTOR(velero): simplify vault 
- and velero configs
- vault: Fix CreateNamespace conflict (set to false)
- velero: Consolidate ExternalSecrets into vault/velero-secrets.yaml
- velero: Clean up kustomization.yaml
 2026-01-04 23:47:13 +09:00
Mayne0213
f7610c9a3e FEAT(cert-manager): integrate cert-manager, 
- vault, velero
 2026-01-04 23:47:13 +09:00
Mayne0213
a39ec16b35 FIX(pgweb): pgweb namespace duplication 
- Remove namespace definition from deployment.yaml
- Namespace now only defined in namespace.yaml
- Fixes ComparisonError: may not add resource with already registered id
 2026-01-04 23:47:13 +09:00
Mayne0213
ad12f641a2 FIX(argocd): helm valueFiles paths in ArgoCD 
- Applications
- Update valueFiles paths from helm-values/<app>.yaml to helm-
  values.yaml
- Fixes ComparisonError after folder restructuring

Applications fixed:
- cert-manager
- cnpg
- external-secrets
- vault
- vpa
- velero
 2026-01-04 23:47:13 +09:00
Mayne0213
d9df80bca3 REFACTOR(postgresql): restructure pgweb 
- and pg-dev folder str...
- Remove argocd/, helm-values/ subdirectories
- Move files to parent directory with standardized names
- Add namespace.yaml to both apps with Goldilocks labels
- Preserve vault/ subdirectories (pgweb: 3 files, postgresql-dev: 1
  file)
- Update main kustomization.yaml to reference argocd.yaml files directly
- Update postgresql-dev helm valueFiles path
- Comment out argocd.yaml in each app's kustomization.yaml to prevent
  circular reference

Applications restructured:
- pgweb
- postgresql-dev
 2026-01-04 23:47:13 +09:00
Mayne0213
55380edbd4 REFACTOR(repo): restructure infra folder structure 
- Remove argocd/, helm-values/, ingress/ subdirectories
- Move files to parent directory with standardized names
- Add namespace.yaml to all apps with Goldilocks labels
- Preserve vault/ subdirectories (falco, velero)
- Update main kustomization.yaml to reference argocd.yaml files directly
- Comment out argocd.yaml in each app's kustomization.yaml to prevent
  circular reference

Applications restructured:
- cert-manager (2 ArgoCD apps)
- external-secrets
- reloader
- vault (2 ArgoCD apps)
- velero (2 ArgoCD apps)
- falco
- cnpg
- haproxy
- metallb
- vpa
- argocd
 2026-01-04 23:47:13 +09:00
Mayne0213
abbc4304fc FIX(longhorn): longhorn crd sync loop by ignoring 
- preserveunknownfields
- Add .spec.preserveUnknownFields to ignoreDifferences for all Longhorn
  CRDs
- Prevents OutOfSync status caused by Kubernetes auto-adding this field
- Affects: engines, engineimages, instancemanagers, nodes, replicas,
  settings, volumes
 2026-01-04 23:47:13 +09:00
Mayne0213
cfb6e9db5b CHORE(velero): clean up velero configuration 
Remove unused repository maintenance job configuration.
 2026-01-04 23:47:13 +09:00
Mayne0213
9276070f86 CHORE(grafana): disable cnpg grafana dashboard 
- auto-creation
Dashboard JSON exceeds Kubernetes ConfigMap annotation size limit.
Dashboard can be manually imported from Grafana.com (ID: 20417).
 2026-01-04 23:47:13 +09:00
Mayne0213
4c408901e6 FEAT(grafana): enable grafana dashboard 
- auto-creation for cnpg operator
Add monitoring.grafanaDashboard.create=true to automatically deploy
the official CNPG Grafana dashboard as a ConfigMap that Grafana can
discover and import.
 2026-01-04 23:47:13 +09:00
Mayne0213
a76543660b FEAT(repo): add repositoryMaintenanceJob 
- auto-cleanup: keep only late...
 2026-01-04 23:47:13 +09:00
Mayne0213
3b2768c9f0 FIX(velero): velero-ui auth: use explicit env 
- instead of en...
 2026-01-04 23:47:13 +09:00
Mayne0213
044cae85e3 FEAT(velero): add velero and falco UI auth 
- secrets from Vault
 2026-01-04 23:47:13 +09:00
Mayne0213
cd9e2822f4 FIX(velero): velero-s3-credentials ExternalSecret 
- to use databases/minio
 2026-01-04 23:47:13 +09:00
Mayne0213
de0a0f6629 REFACTOR(postgresql): remove bitnami pg after 
- successful migr...
All applications (gitea, jaejadle, todo, mas, umami) have been
successfully
migrated to CloudNativePG. All databases verified working on CNPG
cluster.
 2026-01-04 23:47:13 +09:00