Alexander Rogov
270e348bde
disable webhooks in opensearch operator (not supported in v2.8.0 binary)
2026-07-12 18:28:15 +03:00
Alexander Rogov
e1b78252c3
revert opensearch operator to stable v2.8.2
2026-07-12 18:21:15 +03:00
Alexander Rogov
1098d6f354
revert opensearch operator to v3.0.2
2026-07-12 17:47:38 +03:00
Alexander Rogov
288e9ff25a
fix opensearch readiness probes to use https
2026-07-12 17:42:32 +03:00
Alexander Rogov
951bf4f21a
downgrade opensearch operator to stable v2.8.2
2026-07-12 17:32:50 +03:00
Alexander Rogov
994479a817
add accessModes to opensearch cluster pvc config
2026-07-12 17:14:44 +03:00
Alexander Rogov
313c1bbd98
add os password
2026-07-12 17:10:29 +03:00
Alexander Rogov
e22e3dabb3
fix opensearch cluster apiVersion to opensearch.org/v1
2026-07-12 16:59:48 +03:00
Alexander Rogov
3cfe450911
add ServerSideApply to opensearch-operator for large CRDs
2026-07-12 16:57:05 +03:00
Alexander Rogov
a7b94cb3fa
migrate opensearch to operator pattern (operator + cluster CR)
2026-07-12 16:50:51 +03:00
Alexander Rogov
e7e1456acb
fix redis hostname to redis-master
2026-07-12 16:41:15 +03:00
Alexander Rogov
ab09853a24
add missing mastodon secrets and es credentials
2026-07-12 16:34:12 +03:00
Alexander Rogov
187af870aa
fix mastodon smtp placement
2026-07-12 16:29:48 +03:00
Alexander Rogov
8dbfb89ea9
add mastodon database CR and argo app
2026-07-12 16:26:14 +03:00
Alexander Rogov
15a6567a62
add opensearch app
2026-07-12 16:06:29 +03:00
Alexander Rogov
07d5dab9f1
add redis app
2026-07-12 15:53:34 +03:00
Alexander Rogov
289fa79f2c
add minio app
2026-07-12 15:38:57 +03:00
Alexander Rogov
6ea04b01cf
switch oauth2 username attr to sub, delete all users
2026-06-28 18:39:01 +03:00
Alexander Rogov
8fe06e1f0a
add missing oauth2 display_name attribute mapping
2026-06-28 18:35:21 +03:00
Alexander Rogov
71bb073e1b
add missing oauth2 username attribute mapping
2026-06-28 18:32:11 +03:00
Alexander Rogov
a970da9436
configure oauth2 sso with mas, disable email registration
2026-06-28 18:28:09 +03:00
Alexander Rogov
6901fc63ea
enable email registration and set session secret for hedgedoc
2026-06-28 18:09:43 +03:00
Alexander Rogov
299096ea1c
remove secret from manifest
2026-06-28 17:57:00 +03:00
Alexander Rogov
c42e9e56c1
replace hedgedoc helm with manifests
2026-06-28 17:54:11 +03:00
Alexander Rogov
00b861f5d5
add hedgedoc app
2026-06-28 17:36:08 +03:00
Alexander Rogov
8696c74ef8
matrix-roglog: enable MAS self-service registration
...
Set password_registration_enabled=true, disable email requirement,
password recovery, and registration tokens for now.
2026-06-27 20:15:51 +03:00
Alexander Rogov
a19775a9fb
grafana: set root_url to https://grafana.prod.t01tt.tech
2026-06-27 17:28:47 +03:00
Alexander Rogov
022161f491
hookshot: enable JS transformation functions
2026-06-27 16:47:31 +03:00
Alexander Rogov
dad9ca0bce
matrix-t0rt1k: fix OOM kill on federation-sender
...
- federation-sender: replicas 1→2, memory requests 192Mi→256Mi, limits 256Mi→512Mi
- client-reader: memory limits 256Mi→512Mi
Both pods were OOMKilled due to insufficient memory for federation workload.
2026-06-27 16:10:54 +03:00
Alexander Rogov
04bb0d0301
add traefik prometheus entrypoint/router/service labels
2026-06-26 21:07:20 +03:00
Alexander Rogov
1c866af113
add dedicated extras app for infrastructure VMPodScrapes
2026-06-26 20:51:18 +03:00
Alexander Rogov
5335b8e14d
add traefik VMPodScrape via cnpg-cluster manifests instead of multi-source
2026-06-26 20:50:07 +03:00
Alexander Rogov
4374c8cead
add traefik VMPodScrape for prometheus metrics collection
2026-06-26 20:46:58 +03:00
Alexander Rogov
763eb4b5b5
revert traefik level parsing - unknown level is acceptable
2026-06-26 20:37:16 +03:00
Alexander Rogov
c656c535f2
fix traefik level template: capture first digit, avoid printf
2026-06-26 20:30:03 +03:00
Alexander Rogov
7764e306bf
fix alloy block label: hyphens not allowed, use underscore
2026-06-26 20:23:14 +03:00
Alexander Rogov
fafd398d4a
add traefik access log level parsing in alloy (status code -> level)
2026-06-26 20:19:24 +03:00
Alexander Rogov
4f657d5001
add loki.process filter to drop fsnotify/inotify noise logs
2026-06-26 20:11:32 +03:00
Alexander Rogov
6b5c6258b3
revert inotify sysctls - kernel param not allowlisted on managed k8s
2026-06-26 20:07:18 +03:00
Alexander Rogov
66a6722b72
switch loki and argocd inotify fixes from initContainers to pod-level sysctls
2026-06-26 20:04:07 +03:00
Alexander Rogov
5f718347b5
add sysctl init container for argocd-repo-server inotify limits
2026-06-26 20:01:15 +03:00
Alexander Rogov
27aa031082
add sysctl init container for loki inotify limits
2026-06-26 20:00:14 +03:00
Alexander Rogov
5077a25530
pin all helm chart versions to currently deployed revisions
2026-06-26 19:42:22 +03:00
Alexander Rogov
85c9bafbc2
initial: yandex-prod gitops infrastructure
...
Gitea + ArgoCD + cert-manager + Traefik + CNPG + monitoring + loki + alloy
Matrix homeservers for mrt0rtikize.ru, t0rt1k.tech, roglog.space
2026-06-26 19:14:05 +03:00
