11 Commits

Include renames

Author	SHA1	Message	Date
micqdf	68dbd2e5b7	fix: Reserve Tailscale service hostnames and tag exposed proxies ... Reserve grafana/prometheus/flux alongside rancher during rebuild cleanup so stale tailnet devices do not force -1 hostnames. Tag the exposed Tailscale services so operator-managed proxies are provisioned with explicit prod/service tags from the tailnet policy.	2026-04-18 05:48:26 +00:00
micqdf	e4235a6e58	fix: Correct Flux UI pod selector labels to match deployed weave-gitops labels ... Actual labels are app.kubernetes.io/name=weave-gitops and app.kubernetes.io/instance=flux-system-weave-gitops.	2026-04-01 02:08:12 +00:00
micqdf	33765657ec	fix: Correct pod selectors for Prometheus and Flux Tailscale services, use Doppler for Grafana creds ... Prometheus needs operator.prometheus.io/name label selector. Flux UI pods are labeled gitops-server not weave-gitops. Grafana now reads admin creds from Doppler via ExternalSecret instead of hardcoded values.	2026-03-31 22:54:57 +00:00
micqdf	b8f64fa952	feat: Expose Grafana, Prometheus, and Flux UI via Tailscale LoadBalancer services ... Replace Ansible port-forwarding + tailscale serve with direct Tailscale LB services matching the existing Rancher pattern. Each service gets its own tailnet hostname (grafana/prometheus/flux.silverside-gopher.ts.net).	2026-03-31 08:53:28 +00:00
micqdf	47b384a337	Fix Rancher access: add Tailscale service for Traefik with port 9442, fix deployment order	2026-03-24 19:40:37 +00:00
micqdf	ecf17113fb	Fix Rancher deployment: add cattle-system namespace, fix Traefik config with port 9442	2026-03-24 19:09:28 +00:00
micqdf	8745bcda47	Fix Weave GitOps image tag - remove invalid v0.41.0 ... The version v0.41.0 doesn't exist in the registry. Removing explicit image tag to let the chart use its default compatible version.	2026-03-24 01:39:48 +00:00
micqdf	e47ec2a3e7	Update Weave GitOps to v0.41.0 to support HelmRelease v2 API ... Fixes error: 'no matches for kind HelmRelease in version v2beta1' The cluster uses HelmRelease v2 API but Weave GitOps v0.38.0 was looking for the old v2beta1 API. Updated image tag to v0.41.0 which supports the newer API version.	2026-03-24 01:33:10 +00:00
micqdf	45c899d2bd	Configure Weave GitOps to use Doppler-managed admin credentials ... Changes: - Enable adminUser creation but disable Helm-managed secret - Use ExternalSecret (cluster-user-auth) from Doppler instead - Doppler secrets: WEAVE_GITOPS_ADMIN_USERNAME and WEAVE_GITOPS_ADMIN_PASSWORD_BCRYPT_HASH - Added cluster-user-auth to viewSecretsResourceNames for RBAC Login credentials are now managed via Doppler and External Secrets Operator.	2026-03-24 01:01:30 +00:00
micqdf	6f2e056b98	feat: sync runtime secrets from doppler	2026-03-09 00:25:41 +00:00
micqdf	7c15ac5846	feat: add flux ui on shared tailscale endpoint	2026-03-07 12:30:17 +00:00