e0143b153f
FEAT(postgresql): add master node toleration
...
- to PostgreSQL
- Allows postgresql pods to run on master with NoExecute taint
- Required because PV is on master node
2026-01-05 00:39:12 +09:00
09e841d025
FEAT(authelia): add authelia
...
- to manually created databases list
2026-01-05 00:39:12 +09:00
bc3445e170
REFACTOR(cnpg): remove managed databases section
...
- (not supported by CN...
- CNPG operator version doesn't support spec.managed.databases
- authentik database created manually via psql
2026-01-05 00:39:12 +09:00
72f1ae1e11
FEAT(postgresql): add authentik database
...
- to main pg cluster
- Add managed database 'authentik' owned by 'app' user
- Consolidate from separate authentik-postgres CNPG cluster
2026-01-05 00:39:12 +09:00
4a4dbb7937
REFACTOR(argocd): remove serversideapply
...
- from argocd applications
- Fixes OutOfSync issues caused by operator-added default values
- ServerSideApply causes stricter field management that conflicts with
CRD defaults
2026-01-05 00:39:12 +09:00
588861a53b
REFACTOR(vault): remove Vault database and user
...
- Vault uses file storage instead
- Remove database dependencies
2026-01-05 00:39:12 +09:00
ab80e14e0a
CHORE(external-secrets): update ESO API version from v1beta1 to v1
...
- Update ExternalSecret API version
- Migrate to stable API
2026-01-05 00:39:12 +09:00
eee7b68c6b
REFACTOR(postgresql): rename pg-cnpg.yaml to pg.yaml
...
- Standardize file naming
- Simplify configuration
2026-01-05 00:39:12 +09:00
75a165b474
REFACTOR(postgresql): rename pg-cnpg namespace and folder
...
- Rename to postgresql
- Standardize naming convention
2026-01-05 00:39:12 +09:00
de0a0f6629
REFACTOR(postgresql): remove bitnami pg after
...
- successful migr...
All applications (gitea, jaejadle, todo, mas, umami) have been
successfully
migrated to CloudNativePG. All databases verified working on CNPG
cluster.
2026-01-04 23:47:13 +09:00
a15cb1510f
PERF(grafana): optimize cpu requests based on
...
- actual usage from grafa...
- external-secrets: 20m → 5m (actual: 1m)
- external-secrets-webhook: 10m → 2m (actual: 1m)
- external-secrets-cert: 10m → 2m (actual: 1m)
- cnpg: 100m → 5m (actual: 2m)
- haproxy-ingress: 100m → 15m (actual: 9-10m)
2026-01-04 23:47:13 +09:00
b0cd9274b1
FEAT(velero): configure velero
...
- for full k3s cluster backup
- Enable node-agent for PV file-system backups
- Add defaultVolumesToFsBackup configuration
- Optimize backup schedule (daily, 7-day retention)
- Exclude non-essential namespaces (postgresql-dev, harbor)
- Update Velero to v1.17.1
- Update velero-plugin-for-aws to v1.13.1
Full cluster disaster recovery backup now active.
2026-01-04 23:47:13 +09:00
b6802a45e6
REFACTOR(vault): update Vault secret paths
...
- Update secret paths for databases/*
- Reorganize secret structure
2025-12-17 21:32:31 +09:00
a096efe80d
CHORE(argocd): update ArgoCD applications to point to databases repo
...
- Update repoURL to databases repo
- Change source repository reference
2025-12-17 15:13:05 +09:00
27838e5bad
INIT(postgresql): databases setup
...
- with pg and pg-dev
2025-12-17 15:09:48 +09:00
