gitea_admin/Homelabv4
1
0
Fork 0
mirror of https://gitlab.kube.huskypup.net/Scooby/Homelabv4.git synced 2026-08-20 23:16:49 +00:00
Code Issues Packages Projects Releases Wiki Activity
14 Commits 1 Branch 0 Tags
6ffce0723073ba8294f72af6689ce8e74e2c0d31
Commit Graph
14 Commits
This Branch
This Branch
All Branches
Author SHA1 Message Date
Scooby HuskyandClaude Opus 4.6 6ffce07230 Disable auto-sync for rook-ceph-operator ArgoCD app 
The Rook operator reconciles OSD deployments and removes the
expand-bluefs=/bin/true workaround patches needed for BlueStore UUID
mismatch. Keep operator scaled to 0 with manual sync only until the
underlying issue is resolved.

Co-Authored-By: Claude Opus 4.6 <noreply@anthropic.com>
 2026-03-10 06:37:44 -05:00
Scooby HuskyandClaude Opus 4.6 ee6a0bb402 Add FOWNER capability to frigate for chmod on shm logs 
s6-overlay's log-prepare needs chmod on /dev/shm/logs/* which
requires CAP_FOWNER when all capabilities are dropped.

Co-Authored-By: Claude Opus 4.6 <noreply@anthropic.com>
 2026-03-10 06:25:11 -05:00
Scooby HuskyandClaude Opus 4.6 782a271e17 Revert Ceph to v19.2.0 - v19.2.3 has same expand-bluefs issue 
BlueStore has UUID inconsistency at block position 0x0 that causes
expand_devices assertion in both v19.2.0 and v19.2.3. The OSD
daemon itself runs fine; only expand-bluefs init container crashes.
Will use deployment patches with do-not-reconcile annotation instead.

Co-Authored-By: Claude Opus 4.6 <noreply@anthropic.com>
 2026-03-10 06:00:45 -05:00
Scooby HuskyandClaude Opus 4.6 ce23f9282c Fix prometheus secret namespace and frigate capabilities 
- Revert talos-client-cert secret to prometheus namespace (prometheus
  pods mount this secret, not kube-system pods)
- Add CHOWN/DAC_OVERRIDE/SETUID/SETGID capabilities to frigate
  (s6-overlay needs chown for log directories)

Co-Authored-By: Claude Opus 4.6 <noreply@anthropic.com>
 2026-03-10 05:59:23 -05:00
Scooby HuskyandClaude Opus 4.6 fefa183db7 Upgrade Ceph to v19.2.3, fix netbird webhook failurePolicy 
- Ceph v19.2.0 has BlueStore::expand_devices assertion bug that
  crashes OSD expand-bluefs init containers. v19.2.3 includes fixes.
- NetBird operator webhook failurePolicy: Fail blocks all pod
  creation cluster-wide when webhook service is unreachable.
  Changed to Ignore.

Co-Authored-By: Claude Opus 4.6 <noreply@anthropic.com>
 2026-03-10 05:29:39 -05:00
Scooby HuskyandClaude Opus 4.6 2446acc82e Fix envoy-gateway and netbird-operator chart repo URLs 
Envoy Gateway moved to OCI registry (docker.io/envoyproxy).
NetBird operator charts moved to https://netbirdio.github.io/helms
with chart name kubernetes-operator.

Co-Authored-By: Claude Opus 4.6 <noreply@anthropic.com>
 2026-03-10 05:08:57 -05:00
Scooby HuskyandClaude Opus 4.6 aff4ce7441 Fix talos-client-cert secret namespace to match deployment (kube-system) 
Co-Authored-By: Claude Opus 4.6 <noreply@anthropic.com>
 2026-03-10 04:17:03 -05:00
Scooby HuskyandClaude Opus 4.6 1cdc6ac68c Fix crowdsec duplicate REGISTRATION_TOKEN env var 
The chart auto-generates this env var; remove the manual one from values.

Co-Authored-By: Claude Opus 4.6 <noreply@anthropic.com>
 2026-03-10 04:10:01 -05:00
Scooby HuskyandClaude Opus 4.6 7436462a10 Fix nextcloud PVC size to match cluster capacity (200Gi) 
Co-Authored-By: Claude Opus 4.6 <noreply@anthropic.com>
 2026-03-10 04:09:14 -05:00
Scooby HuskyandClaude Opus 4.6 7640fb895b Fix degraded ArgoCD applications 
- frigate: Remove duplicate PVCs (Helm manages them), update config size to 15Gi
- gitlab: Fix sync-admin-job secretKeyRef schema error, fetch password via kubectl
- nextcloud: Remove duplicate PVC, remove invalid pod-level securityContext
- rook-ceph: Update cephfs-smb-pvc to 50Gi, remove unsupported dashboard.config
- nessus: Add privileged PSS label for NET_ADMIN/NET_RAW capabilities
- scylla-manager: Add privileged PSS label for SYS_NICE capability
- n8n: Create missing n8n-main-persistence PVC
- projects: Add authentik namespace to applications project destinations

Co-Authored-By: Claude Opus 4.6 <noreply@anthropic.com>
 2026-03-10 00:05:29 -05:00
Scooby Husky 4b28424719 Fix ArgoCD RBAC: add Scooby user and preferred_username scope 2026-03-09 22:51:46 -05:00
Scooby Husky 086a2bf406 Fix degraded apps: add nessus to project, remove duplicate guacamole route, update prometheus CRDs to v0.89.0 2026-03-09 22:32:15 -05:00
Scooby Husky 11eddf4971 Set GitLab repo URL and update ArgoCD hostAliases 2026-03-09 22:18:26 -05:00
Scooby Husky aacb8eebbe Initial commit 2026-03-09 20:21:35 -05:00