Scooby HuskyandClaude Sonnet 5 ca94282552 GitLab cross-site replication Phase 1b: secret material sync ...

PushSecret (home) + ExternalSecret (VPS) pairs for the four
chart-generated secrets whose values must match before Phase 1c's
Postgres replication goes live: gitlab-rails-secret (secret_key_base/
db_key_base/otp_key_base/openid_connect_signing_key, all in one
secrets.yml key - confirmed live, not four separate keys as first
assumed), gitlab-gitlab-shell-secret, gitlab-gitaly-secret,
gitlab-praefect-secret (the latter two also needed for Phase 2's
cross-site gRPC auth). Same pattern as
infrastructure/authentik/manifests/ha-postgres-app-pushsecret.yaml.

Co-Authored-By: Claude Sonnet 5 <noreply@anthropic.com>

2026-08-22 13:08:22 -05:00

..

authentik

Deploy real GitLab on the VPS (not just Gitea)

2026-08-20 21:04:48 -05:00

cert-manager

Fix DDNS/failover Cloudflare zone name and add restricted PSS securityContext

2026-08-17 15:55:47 -05:00

checkov/manifests

Initial commit

2026-03-09 20:21:35 -05:00

cilium

Fix CNPG operator -> instance status communication + add CNPG health check

2026-08-17 16:41:11 -05:00

coredns/manifests

GitLab cross-site replication Phase 1a: Postgres network plumbing

2026-08-22 12:47:03 -05:00

crowdsec

Commit crowdsec-firewall-bouncer headless-service fix (was uncommitted)

2026-08-17 20:51:47 -05:00

envoy-gateway

Fix ArgoCD ServerSideDiff permanent OutOfSync diffs

2026-03-10 17:32:59 -05:00

external-dns

Fix real cause of VPS authentik's DB timeout loop + repo secrets cleanup

2026-08-20 18:47:50 -05:00

external-secrets

Initial commit

2026-03-09 20:21:35 -05:00

grafana

Move all 8 Authentik OIDC client_secrets out of plaintext git

2026-08-20 20:04:22 -05:00

ha-failover/manifests

authentik HA: floating DNS hostname + failover-watcher

2026-08-20 17:43:08 -05:00

istio

GitLab cross-site replication Phase 1a: Postgres network plumbing

2026-08-22 12:47:03 -05:00

kiali

Scale down non-critical replicas for homelab resource savings

2026-03-15 23:00:48 -05:00

kyverno

Multi-site active failover pilot: home etcd member + Postgres NodePort exposure

2026-08-18 21:12:45 -05:00

metrics-server

Initial commit

2026-03-09 20:21:35 -05:00

mosquitto/manifests

Initial commit

2026-03-09 20:21:35 -05:00

netbird

Build real pod-egress routing to the VPS, fix everything blocked by its absence

2026-08-17 20:36:13 -05:00

netbird-operator

Fix netbird-operator: add self-hosted management URL

2026-03-15 16:08:51 -05:00

percona-everest

Initial commit

2026-03-09 20:21:35 -05:00

prometheus

Scale down non-critical replicas for homelab resource savings

2026-03-15 23:00:48 -05:00

reloader

Initial commit

2026-03-09 20:21:35 -05:00

rook-ceph

Enable CephFS CSI driver for SMB gateway and CephFS volumes

2026-03-15 12:27:00 -05:00

scylla

Scale down non-critical replicas for homelab resource savings

2026-03-15 23:00:48 -05:00

tetragon

Add followChildren default to tetragon shell-execution TracingPolicy

2026-03-10 17:39:38 -05:00

unpoller

Initial commit

2026-03-09 20:21:35 -05:00

vault

Move all 8 Authentik OIDC client_secrets out of plaintext git

2026-08-20 20:04:22 -05:00

vps-eso/manifests

Fix real cause of VPS authentik's DB timeout loop + repo secrets cleanup

2026-08-20 18:47:50 -05:00

vps-standby

GitLab cross-site replication Phase 1b: secret material sync

2026-08-22 13:08:22 -05:00