43 Commits

Author	SHA1	Message	Date
MichaelFisher1997	561cd67b0c	Enable Hetzner CCM and CSI for cloud provider integration ... - Enable --kubelet-arg=cloud-provider=external on all nodes (control planes and workers) - Activate CCM Kustomization with 10m timeout for Hetzner cloud-controller-manager - Activate CSI Kustomization with dependsOn CCM and 10m timeout for hcloud-csi - Update deploy workflow to wait for CCM/CSI readiness (600s timeout) - Add providerID verification to post-deploy health checks This enables proper cloud provider integration with Hetzner CCM for node labeling and Hetzner CSI for persistent volume provisioning.	2026-03-22 22:26:21 +00:00
MichaelFisher1997	7b5d794dfc	fix: update health checks for deferred observability	2026-03-22 01:04:27 +00:00
MichaelFisher1997	8643bbfc12	fix: defer observability to get clean baseline	2026-03-22 01:03:55 +00:00
MichaelFisher1997	84f446c2e6	fix: restore observability timeouts to 5 minutes	2026-03-22 00:43:37 +00:00
MichaelFisher1997	989848fa89	fix: increase observability timeouts to 10 minutes	2026-03-21 19:34:43 +00:00
MichaelFisher1997	56e5807474	fix: create doppler ClusterSecretStore after ESO is installed	2026-03-21 19:19:43 +00:00
MichaelFisher1997	a01cf435d4	fix: skip ccm/csi waits for stable baseline - using k3s embedded	2026-03-21 18:40:53 +00:00
MichaelFisher1997	84f77c4a68	fix: use kubectl patch instead of apply for flux controller nodeSelector	2026-03-21 18:05:41 +00:00
MichaelFisher1997	2e4196688c	fix: bootstrap flux in phases - crds first, then resources	2026-03-21 17:42:39 +00:00
MichaelFisher1997	fcf7f139ff	fix: use public api endpoint for flux bootstrap	2026-03-21 00:07:51 +00:00
MichaelFisher1997	7139ae322d	fix: bootstrap flux during cluster deploy	2026-03-20 10:37:11 +00:00
MichaelFisher1997	522626a52b	refactor: simplify stable cluster baseline	2026-03-20 02:24:37 +00:00
MichaelFisher1997	3e41f71b1b	fix: harden terraform destroy workflow	2026-03-19 23:26:03 +00:00
MichaelFisher1997	6f2e056b98	feat: sync runtime secrets from doppler	2026-03-09 00:25:41 +00:00
MichaelFisher1997	6177b581e4	fix: correct dashboard verification checks and retry helm upgrade lock	2026-03-04 08:48:30 +00:00
MichaelFisher1997	b1e21c4a4b	fix: speed up dashboards workflow firewall apply and set TF_VAR env	2026-03-04 03:54:56 +00:00
MichaelFisher1997	2f166ed9e7	feat: manage grafana content as code with fast dashboard workflow	2026-03-04 03:36:01 +00:00
MichaelFisher1997	1c39274df7	feat: stabilize tailscale observability exposure with declarative proxy class	2026-03-04 01:37:00 +00:00
MichaelFisher1997	63247b79a6	fix: harden Tailscale operator rollout with preflight and diagnostics	2026-03-02 21:39:47 +00:00
MichaelFisher1997	b30977a158	feat: deploy lightweight observability stack via Ansible	2026-03-02 01:33:41 +00:00
MichaelFisher1997	d92bde78f4	chore: enforce CSI smoke test and add post-deploy health checks	2026-03-01 23:45:27 +00:00
MichaelFisher1997	2bc9749b81	feat: switch kubeconfig to tailnet endpoint and deploy Hetzner CSI	2026-03-01 17:12:12 +00:00
MichaelFisher1997	54717cccad	fix: allow current CI runner IP through firewall before Ansible	2026-03-01 14:50:55 +00:00
MichaelFisher1997	fffd3876fb	fix: remove empty TF_VAR CIDR envs causing plan parse errors	2026-03-01 14:47:32 +00:00
MichaelFisher1997	86c38e385f	fix: remove CI tailscale dependency and allow runner CIDR exception	2026-03-01 14:08:08 +00:00
MichaelFisher1997	d29a428f2d	fix: robust tailscaled startup in CI runner	2026-03-01 13:57:12 +00:00
MichaelFisher1997	a8ef173713	fix: start tailscaled daemon before tailscale up in CI	2026-03-01 13:52:20 +00:00
MichaelFisher1997	41d0abda16	fix: auto-import existing Hetzner servers into Terraform state in CI	2026-03-01 13:27:02 +00:00
MichaelFisher1997	011c220f59	fix: avoid server replacement; install tailscale via Ansible	2026-03-01 04:51:19 +00:00
MichaelFisher1997	1eebfe77df	feat: integrate tailscale access and lock SSH/API to tailnet	2026-03-01 04:04:56 +00:00
MichaelFisher1997	7230b2b6c8	fix: Use --break-system-packages for pip on Debian 12	2026-02-28 22:50:31 +00:00
MichaelFisher1997	f40a090c7c	fix: Install pip via apt before installing Python packages	2026-02-28 22:47:24 +00:00
MichaelFisher1997	19ba491c54	fix: Use system Python instead of setup-python action	2026-02-28 22:45:50 +00:00
MichaelFisher1997	34c2b6895e	fix: Use Python 3.12 instead of 3.11	2026-02-28 22:44:46 +00:00
MichaelFisher1997	2fcc8cff77	fix: Ansible fetches outputs directly from Terraform state instead of artifacts	2026-02-28 22:43:26 +00:00
MichaelFisher1997	683f994905	fix: Create outputs directory before saving terraform outputs	2026-02-28 22:27:24 +00:00
MichaelFisher1997	ebe86cfacf	fix: Typo in chmod path id_ed255 -> id_ed25519	2026-02-28 21:27:37 +00:00
MichaelFisher1997	cbd0e0c2c8	fix: Write SSH keys to files before Terraform plan/apply	2026-02-28 21:26:14 +00:00
MichaelFisher1997	4f0402decf	fix: Add TF_VAR_s3_endpoint and TF_VAR_s3_bucket env vars	2026-02-28 21:12:48 +00:00
MichaelFisher1997	109a6a241e	fix: Revert to endpoint for CLI backend config	2026-02-28 21:01:58 +00:00
MichaelFisher1997	cd16545ad3	fix: Add skip_requesting_account_id and use endpoints.s3 for Backblaze B2	2026-02-28 20:58:40 +00:00
MichaelFisher1997	2ce0cc018e	fix: Combine workflows for Gitea compatibility, use artifact v3	2026-02-28 20:28:25 +00:00
MichaelFisher1997	3b3084b997	feat: Add HA Kubernetes cluster with Terraform + Ansible ... - 3x CX23 control plane nodes (HA) - 4x CX33 worker nodes - k3s with embedded etcd - Hetzner CCM for load balancers - Gitea CI/CD workflows - Backblaze B2 for Terraform state	2026-02-28 20:24:55 +00:00