This website requires JavaScript.
ceefcc3b29
cleanup: Remove obsolete port-forwarding, deferred Traefik files, and CI workaround
main
MichaelFisher1997
2026-04-02 01:21:23 +00:00
0d339b3163
fix: Use rancher/kubectl image for rancher-backup hook
MichaelFisher1997
2026-04-02 01:00:27 +00:00
30ccf13c82
fix: Use postRenderer to replace broken kuberlr-kubectl image in rancher-backup hook
MichaelFisher1997
2026-04-02 00:51:50 +00:00
75e3604f30
fix: Skip post-install hooks for rancher-backup HelmRelease
MichaelFisher1997
2026-04-02 00:45:03 +00:00
e4235a6e58
fix: Correct Flux UI pod selector labels to match deployed weave-gitops labels
MichaelFisher1997
2026-04-01 02:08:12 +00:00
ea2d534171
fix: Use admin.existingSecret for Grafana creds from Doppler
MichaelFisher1997
2026-04-01 01:41:49 +00:00
a1b9fe6aa6
fix: Use Flux valuesFrom to inject Doppler Grafana creds as Helm values
MichaelFisher1997
2026-03-31 23:40:54 +00:00
33765657ec
fix: Correct pod selectors for Prometheus and Flux Tailscale services, use Doppler for Grafana creds
MichaelFisher1997
2026-03-31 22:54:57 +00:00
b8f64fa952
feat: Expose Grafana, Prometheus, and Flux UI via Tailscale LoadBalancer services
MichaelFisher1997
2026-03-31 08:53:28 +00:00
569d741751
push
MichaelFisher1997
2026-03-31 02:46:55 +00:00
89e53d9ec9
fix: Handle restricted B2 keys and safe JSON parsing in restore step
MichaelFisher1997
2026-03-31 01:43:04 +00:00
5a2551f40a
fix: Fix flux CLI download URL - use correct GitHub URL with v prefix on version
MichaelFisher1997
2026-03-30 03:11:40 +00:00
8c7b62c024
feat: Automate Rancher backup restore in CI pipeline
MichaelFisher1997
2026-03-30 01:56:29 +00:00
a1f07f863a
docs: Update restore template with real Backup CR format
MichaelFisher1997
2026-03-30 00:09:53 +00:00
2c3a49c2e0
fix: Rename B2 secret keys to match rancher-backup operator expectations
MichaelFisher1997
2026-03-30 00:05:13 +00:00
a7ce3dcc1a
fix: Remove s3 block from rancher-backup HelmRelease values
MichaelFisher1997
2026-03-29 23:47:21 +00:00
0ab9418458
fix: Re-add HTTPS port to Tailscale LB for Rancher
MichaelFisher1997
2026-03-29 23:04:49 +00:00
c251672618
fix: Configure S3 bucketName for rancher-backup operator
MichaelFisher1997
2026-03-29 23:01:18 +00:00
89364e8f37
fix: Add dependsOn for rancher-backup operator to wait for CRDs
MichaelFisher1997
2026-03-29 22:57:22 +00:00
20d7a6f777
fix: Install rancher-backup CRD chart before operator
MichaelFisher1997
2026-03-29 22:51:34 +00:00
22ce5fd6f4
feat: Add cert-manager as dependency for Rancher
MichaelFisher1997
2026-03-29 22:36:30 +00:00
afb1782d38
fix: Separate Backup CRs into their own kustomization
MichaelFisher1997
2026-03-29 22:22:29 +00:00
48870433bf
fix: Remove tls:external from Rancher HelmRelease
MichaelFisher1997
2026-03-29 22:19:23 +00:00
f2c506b350
refactor: Replace CNPG external DB with rancher-backup operator
MichaelFisher1997
2026-03-29 21:53:16 +00:00
efdf13976a
fix: Handle missing 'online' field in Tailscale API response
MichaelFisher1997
2026-03-29 13:52:23 +00:00
5269884408
feat: Auto-cleanup stale Tailscale devices before cluster boot
MichaelFisher1997
2026-03-29 11:47:53 +00:00
6e5b0518be
feat: Add kubeconfig refresh script and fix Ansible Finalize to use public IP
MichaelFisher1997
2026-03-29 03:31:36 +00:00
905d069e91
fix: Add serverName to CNPG externalClusters for B2 recovery
MichaelFisher1997
2026-03-29 03:22:19 +00:00
25ba4b7115
fix: Add skipEmptyWalArchiveCheck annotation and B2 secret healthcheck to CNPG
MichaelFisher1997
2026-03-29 03:15:23 +00:00
6a593fd559
feat: Add B2 recovery bootstrap to CNPG cluster
MichaelFisher1997
2026-03-29 00:22:24 +00:00
936f54a1b5
fix: Restore canonical Rancher tailnet hostname
MichaelFisher1997
2026-03-29 00:00:39 +00:00
c9df11e65f
fix: Align Rancher tailnet hostname with live proxy
MichaelFisher1997
2026-03-28 23:47:09 +00:00
a3c238fda9
fix: Apply Rancher server URL after chart install
MichaelFisher1997
2026-03-28 23:12:59 +00:00
a15fa50302
fix: Use Doppler-backed Rancher bootstrap password
MichaelFisher1997
2026-03-28 22:51:38 +00:00
0f4f0b09fb
fix: Add Rancher DB password ExternalSecret
MichaelFisher1997
2026-03-28 22:42:05 +00:00
4c002a870c
fix: Remove invalid Rancher server-url manifest
MichaelFisher1997
2026-03-28 22:39:31 +00:00
43d11ac7e6
docs: Add agent guidance and sync Rancher docs
MichaelFisher1997
2026-03-28 22:13:37 +00:00
8c5edcf0a1
fix: Set Rancher server URL to tailnet hostname
MichaelFisher1997
2026-03-28 04:07:44 +00:00
a81da0d178
feat: Expose Rancher via Tailscale hostname
MichaelFisher1997
2026-03-28 03:59:02 +00:00
2a72527c79
fix: Switch Traefik from LoadBalancer to NodePort, remove unused Hetzner LB
MichaelFisher1997
2026-03-28 03:21:19 +00:00
7cb3b84ecb
feat: Replace custom pgdump job with CNPG ScheduledBackup
MichaelFisher1997
2026-03-28 03:15:39 +00:00
d4930235fa
fix: Point CNPG backups at the existing B2 bucket
MichaelFisher1997
2026-03-26 23:35:19 +00:00
ee8dc4b451
fix: Add Role for B2 credentials access
MichaelFisher1997
2026-03-26 23:04:40 +00:00
144d40e7ac
feat: Add RBAC for CNP to read B2 credentials secret
MichaelFisher1997
2026-03-26 22:56:00 +00:00
cc14e32572
fix: Use gzip instead of lzop for backup compression
MichaelFisher1997
2026-03-26 22:51:10 +00:00
a207a5a7fd
fix: Remove invalid encryption field from CNP backup config
MichaelFisher1997
2026-03-26 22:49:29 +00:00
4e1772c175
feat: Add B2 backup configuration to CNP Cluster
MichaelFisher1997
2026-03-26 22:47:31 +00:00
ff70b12084
chore: Add HTTP/HTTPS firewall rules for Load Balancer
MichaelFisher1997
2026-03-26 22:36:13 +00:00
a3963c56e6
cleanup: Remove traefik-config, simplify traefik helmrelease
MichaelFisher1997
2026-03-26 03:16:56 +00:00
612435c42c
fix: Add Hetzner LB health check config to Traefik
MichaelFisher1997
2026-03-26 03:11:10 +00:00
ac42f671a2
fix: Remove addon-traefik-config dependency from flux-ui
MichaelFisher1997
2026-03-26 03:05:58 +00:00
dbe7ec0468
fix: Remove expose boolean from traefik ports config
MichaelFisher1997
2026-03-26 03:01:13 +00:00
816ac8b3c0
fix: Use official Traefik helm repo instead of rancher-stable
MichaelFisher1997
2026-03-26 02:59:00 +00:00
6f7998639f
fix: Use standard kustomize API in traefik addon
MichaelFisher1997
2026-03-26 02:56:52 +00:00
7a14f89ad1
fix: Correct traefik kustomization path and sourceRef
MichaelFisher1997
2026-03-26 02:55:37 +00:00
786901c5d7
fix: Correct traefik kustomization reference (directory not file)
MichaelFisher1997
2026-03-26 02:54:29 +00:00
46f3d1130b
feat: Add Flux-managed Traefik HelmRelease with Hetzner LB config
MichaelFisher1997
2026-03-26 02:52:49 +00:00
2fe5a626d4
fix: Add Hetzner network zone annotation to Traefik LoadBalancer
MichaelFisher1997
2026-03-26 02:30:43 +00:00
2ef68c8087
fix: Remove deprecated enablePodMonitor field in CNP Cluster
MichaelFisher1997
2026-03-26 01:01:53 +00:00
e2cae18f5f
fix: Remove backup config for initial deployment - add backup after DB is running
MichaelFisher1997
2026-03-26 00:46:50 +00:00
e0c1e41ee9
fix: Remove bootstrap recovery - create fresh DB (recovery only needed after first backup)
MichaelFisher1997
2026-03-26 00:43:49 +00:00
63533de901
fix: Fix retentionPolicy format (14d not keep14)
MichaelFisher1997
2026-03-26 00:41:44 +00:00
1b39710f63
fix: Move retentionPolicy to correct location in backup spec
MichaelFisher1997
2026-03-26 00:39:25 +00:00
8c034323dc
fix: Fix Cluster CR with correct barmanObjectStore schema
MichaelFisher1997
2026-03-26 00:35:23 +00:00
5fa2b411ee
fix: Fix Cluster CR schema - use barmanObjectStore instead of b2
MichaelFisher1997
2026-03-26 00:33:04 +00:00
3ea28e525f
fix: Fix CNP operator image repository (cloudnative-pg not postgresql)
MichaelFisher1997
2026-03-26 00:21:09 +00:00
4b95ba113d
fix: Remove LPP helm (already installed by k3s), fix CNP chart version to 0.27.1
MichaelFisher1997
2026-03-26 00:13:22 +00:00
13627bf81f
fix: Split CNP operator from CNP cluster to fix CRD dependency
MichaelFisher1997
2026-03-26 00:06:34 +00:00
ef3fb2489a
fix: Convert kustomization-lpp and kustomization-cnpg to Flux Kustomization CRs
MichaelFisher1997
2026-03-26 00:03:53 +00:00
7097495d72
fix: Add missing metadata.name to kustomization-lpp and kustomization-cnpg
MichaelFisher1997
2026-03-25 23:39:45 +00:00
9d601dc77c
feat: Add CloudNativePG with B2 backups for persistent Rancher database
MichaelFisher1997
2026-03-25 23:06:45 +00:00
f36445d99a
Fix CNI: configure flannel to use private network interface (enp7s0) instead of public
MichaelFisher1997
2026-03-25 01:44:33 +00:00
89c2c99963
Fix Rancher: remove conflicting LoadBalancer, add HTTPS port-forward, use tailscale serve only
MichaelFisher1997
2026-03-25 00:59:16 +00:00
4a35cfb549
Fix Rancher: use correct targetPort 444 for HTTPS
MichaelFisher1997
2026-03-24 23:30:58 +00:00
3d50bfc534
Fix Rancher service selector: use cattle-system-rancher label
MichaelFisher1997
2026-03-24 23:25:36 +00:00
ab2f287bfb
Fix Rancher: use correct service name cattle-system-rancher
MichaelFisher1997
2026-03-24 22:30:49 +00:00
dcb2675b67
Upgrade Rancher to 2.13.3 for K8s 1.34 compatibility
MichaelFisher1997
2026-03-24 21:42:51 +00:00
b40bec7e0e
Fix Rancher: use Doppler secret instead of hardcoded password
MichaelFisher1997
2026-03-24 21:13:23 +00:00
efe0c0cfd5
Fix Rancher: upgrade to 2.10.3 for K8s 1.34 compatibility
MichaelFisher1997
2026-03-24 20:29:38 +00:00
c61d9f9c1d
Remove traefik-config dependency from Rancher
MichaelFisher1997
2026-03-24 20:02:08 +00:00
60ceac4624
Fix Rancher access: add kubectl port-forward + tailscale serve setup
MichaelFisher1997
2026-03-24 20:01:57 +00:00
47b384a337
Fix Rancher access: add Tailscale service for Traefik with port 9442, fix deployment order
MichaelFisher1997
2026-03-24 19:40:37 +00:00
ecf17113fb
Fix Rancher deployment: add cattle-system namespace, fix Traefik config with port 9442
MichaelFisher1997
2026-03-24 19:09:28 +00:00
4ffbcfa312
Add Rancher management UI
MichaelFisher1997
2026-03-24 01:53:04 +00:00
8745bcda47
Fix Weave GitOps image tag - remove invalid v0.41.0
MichaelFisher1997
2026-03-24 01:39:48 +00:00
e47ec2a3e7
Update Weave GitOps to v0.41.0 to support HelmRelease v2 API
MichaelFisher1997
2026-03-24 01:33:10 +00:00
45c899d2bd
Configure Weave GitOps to use Doppler-managed admin credentials
MichaelFisher1997
2026-03-24 01:01:30 +00:00
0e52d8f159
Use Tailscale DNS names instead of IPs for TLS SANs
MichaelFisher1997
2026-03-23 23:50:48 +00:00
4726db2b5b
Add Tailscale IPs to k3s TLS SANs for secure tailnet access
MichaelFisher1997
2026-03-23 23:04:00 +00:00
90d105e5ea
Fix kube_api_endpoint variable passing for HA cluster
MichaelFisher1997
2026-03-23 03:01:53 +00:00
952a80a742
Fix HA cluster join via Load Balancer private IP
MichaelFisher1997
2026-03-23 02:56:41 +00:00
4965017b86
Fix Load Balancer network attachment
MichaelFisher1997
2026-03-23 02:44:35 +00:00
b2b9c38b91
Fix Load Balancer output attribute - use ipv4 instead of ipv4_address
MichaelFisher1997
2026-03-23 02:40:50 +00:00
ff31cb4e74
Implement HA control plane with Load Balancer (3-3 topology)
MichaelFisher1997
2026-03-23 02:39:39 +00:00
8b4a445b37
Update STABLE_BASELINE.md - CCM/CSI integration achieved
MichaelFisher1997
2026-03-23 02:25:00 +00:00
e447795395
Install helm binary in ccm-deploy role before using it
MichaelFisher1997
2026-03-23 00:07:39 +00:00
31b82c9371
Deploy CCM via Ansible before workers join to fix external cloud provider
MichaelFisher1997
2026-03-22 23:58:03 +00:00
cadfedacf1
Fix providerID health check - use shell module for piped grep
MichaelFisher1997
2026-03-22 22:55:55 +00:00
561cd67b0c
Enable Hetzner CCM and CSI for cloud provider integration
MichaelFisher1997
2026-03-22 22:26:21 +00:00
4eebbca648
docs: update README for deferred observability baseline
MichaelFisher1997
2026-03-22 01:04:53 +00:00