-
9c0523e880
fix: pre-pull Rancher images and reset Rancher release during bootstrap
micqdf
2026-04-22 11:00:54 +00:00
-
8372d562ad
fix: reset and force nfs helmrelease during bootstrap
micqdf
2026-04-22 10:35:32 +00:00
-
1bb11dfe3a
fix: force nfs storage reconcile during flux bootstrap
micqdf
2026-04-22 10:08:20 +00:00
-
624cd5aab6
fix: point NFS provisioner at active Proxmox host export
micqdf
2026-04-22 09:46:01 +00:00
-
71bdc6a709
fix: extend Flux bootstrap timeouts on fresh clusters
micqdf
2026-04-22 08:36:27 +00:00
-
714f20417b
fix: tolerate control-plane taint when pinning Flux to cp1
micqdf
2026-04-22 05:05:15 +00:00
-
c32bec34bc
fix: quote kube-vip readiness jsonpath in bootstrap role
micqdf
2026-04-22 04:41:48 +00:00
-
6519a7673d
fix: wait for kube-vip on primary node during bootstrap
micqdf
2026-04-22 04:29:29 +00:00
-
d1c31cdb91
fix: rely on k3s service readiness instead of installer exit code
micqdf
2026-04-22 04:14:31 +00:00
-
b3e88712bd
fix: derive cluster network interface from host facts
micqdf
2026-04-22 03:50:03 +00:00
-
06366ee5e6
fix: accept cloud-init exit code 2 after first boot
micqdf
2026-04-22 03:40:55 +00:00
-
9a2d213114
fix: wait for cloud-init before package install during bootstrap
micqdf
2026-04-22 03:34:53 +00:00
-
9482a0f551
fix: skip clone storage override for linked Proxmox clones
micqdf
2026-04-22 03:22:50 +00:00
-
5c53b8e06e
fix: normalize Proxmox endpoint and stop dashboards self-trigger
micqdf
2026-04-22 03:13:22 +00:00
-
b1dae28aa5
feat: migrate cluster baseline from Hetzner to Proxmox
micqdf
2026-04-22 03:02:13 +00:00
-
6c6b9d20ca
update README
hetzner
micqdf
2026-04-22 01:14:21 +00:00
-
c3a2f25c94
docs: record validated Rancher restore drill
micqdf
2026-04-18 21:27:42 +00:00
-
7385c2263e
fix: add tailnet smoke checks and move Tailscale operator to stable
micqdf
2026-04-18 19:59:13 +00:00
-
60f466ab98
remove Weave GitOps addon
micqdf
2026-04-18 18:44:55 +00:00
-
b20356e9fe
fix: only clean stale Tailscale names before proxies exist
micqdf
2026-04-18 18:16:27 +00:00
-
2ba6b6a896
fix: remove unused Flux CLI install from deploy workflow
micqdf
2026-04-18 17:45:59 +00:00
-
9126de1423
fix: Align Prometheus external URL with Tailscale service port
micqdf
2026-04-18 17:11:16 +00:00
-
4532b9ed74
chore: trigger rebuild
micqdf
2026-04-18 06:09:54 +00:00
-
68dbd2e5b7
fix: Reserve Tailscale service hostnames and tag exposed proxies
micqdf
2026-04-18 05:48:26 +00:00
-
ceefcc3b29
cleanup: Remove obsolete port-forwarding, deferred Traefik files, and CI workaround
micqdf
2026-04-02 01:21:23 +00:00
-
0d339b3163
fix: Use rancher/kubectl image for rancher-backup hook
micqdf
2026-04-02 01:00:27 +00:00
-
30ccf13c82
fix: Use postRenderer to replace broken kuberlr-kubectl image in rancher-backup hook
micqdf
2026-04-02 00:51:50 +00:00
-
75e3604f30
fix: Skip post-install hooks for rancher-backup HelmRelease
micqdf
2026-04-02 00:45:03 +00:00
-
e4235a6e58
fix: Correct Flux UI pod selector labels to match deployed weave-gitops labels
micqdf
2026-04-01 02:08:12 +00:00
-
ea2d534171
fix: Use admin.existingSecret for Grafana creds from Doppler
micqdf
2026-04-01 01:41:49 +00:00
-
a1b9fe6aa6
fix: Use Flux valuesFrom to inject Doppler Grafana creds as Helm values
micqdf
2026-03-31 23:40:54 +00:00
-
33765657ec
fix: Correct pod selectors for Prometheus and Flux Tailscale services, use Doppler for Grafana creds
micqdf
2026-03-31 22:54:57 +00:00
-
b8f64fa952
feat: Expose Grafana, Prometheus, and Flux UI via Tailscale LoadBalancer services
micqdf
2026-03-31 08:53:28 +00:00
-
569d741751
push
micqdf
2026-03-31 02:46:55 +00:00
-
89e53d9ec9
fix: Handle restricted B2 keys and safe JSON parsing in restore step
micqdf
2026-03-31 01:43:04 +00:00
-
5a2551f40a
fix: Fix flux CLI download URL - use correct GitHub URL with v prefix on version
micqdf
2026-03-30 03:11:40 +00:00
-
8c7b62c024
feat: Automate Rancher backup restore in CI pipeline
micqdf
2026-03-30 01:56:29 +00:00
-
a1f07f863a
docs: Update restore template with real Backup CR format
micqdf
2026-03-30 00:09:53 +00:00
-
2c3a49c2e0
fix: Rename B2 secret keys to match rancher-backup operator expectations
micqdf
2026-03-30 00:05:13 +00:00
-
a7ce3dcc1a
fix: Remove s3 block from rancher-backup HelmRelease values
micqdf
2026-03-29 23:47:21 +00:00
-
0ab9418458
fix: Re-add HTTPS port to Tailscale LB for Rancher
micqdf
2026-03-29 23:04:49 +00:00
-
c251672618
fix: Configure S3 bucketName for rancher-backup operator
micqdf
2026-03-29 23:01:18 +00:00
-
89364e8f37
fix: Add dependsOn for rancher-backup operator to wait for CRDs
micqdf
2026-03-29 22:57:22 +00:00
-
20d7a6f777
fix: Install rancher-backup CRD chart before operator
micqdf
2026-03-29 22:51:34 +00:00
-
22ce5fd6f4
feat: Add cert-manager as dependency for Rancher
micqdf
2026-03-29 22:36:30 +00:00
-
afb1782d38
fix: Separate Backup CRs into their own kustomization
micqdf
2026-03-29 22:22:29 +00:00
-
48870433bf
fix: Remove tls:external from Rancher HelmRelease
micqdf
2026-03-29 22:19:23 +00:00
-
f2c506b350
refactor: Replace CNPG external DB with rancher-backup operator
micqdf
2026-03-29 21:53:16 +00:00
-
efdf13976a
fix: Handle missing 'online' field in Tailscale API response
micqdf
2026-03-29 13:52:23 +00:00
-
5269884408
feat: Auto-cleanup stale Tailscale devices before cluster boot
micqdf
2026-03-29 11:47:53 +00:00
-
6e5b0518be
feat: Add kubeconfig refresh script and fix Ansible Finalize to use public IP
micqdf
2026-03-29 03:31:36 +00:00
-
905d069e91
fix: Add serverName to CNPG externalClusters for B2 recovery
micqdf
2026-03-29 03:22:19 +00:00
-
25ba4b7115
fix: Add skipEmptyWalArchiveCheck annotation and B2 secret healthcheck to CNPG
micqdf
2026-03-29 03:15:23 +00:00
-
6a593fd559
feat: Add B2 recovery bootstrap to CNPG cluster
micqdf
2026-03-29 00:22:24 +00:00
-
936f54a1b5
fix: Restore canonical Rancher tailnet hostname
micqdf
2026-03-29 00:00:39 +00:00
-
c9df11e65f
fix: Align Rancher tailnet hostname with live proxy
micqdf
2026-03-28 23:47:09 +00:00
-
a3c238fda9
fix: Apply Rancher server URL after chart install
micqdf
2026-03-28 23:12:59 +00:00
-
a15fa50302
fix: Use Doppler-backed Rancher bootstrap password
micqdf
2026-03-28 22:51:38 +00:00
-
0f4f0b09fb
fix: Add Rancher DB password ExternalSecret
micqdf
2026-03-28 22:42:05 +00:00
-
4c002a870c
fix: Remove invalid Rancher server-url manifest
micqdf
2026-03-28 22:39:31 +00:00
-
43d11ac7e6
docs: Add agent guidance and sync Rancher docs
micqdf
2026-03-28 22:13:37 +00:00
-
8c5edcf0a1
fix: Set Rancher server URL to tailnet hostname
micqdf
2026-03-28 04:07:44 +00:00
-
a81da0d178
feat: Expose Rancher via Tailscale hostname
micqdf
2026-03-28 03:59:02 +00:00
-
2a72527c79
fix: Switch Traefik from LoadBalancer to NodePort, remove unused Hetzner LB
micqdf
2026-03-28 03:21:19 +00:00
-
7cb3b84ecb
feat: Replace custom pgdump job with CNPG ScheduledBackup
micqdf
2026-03-28 03:15:39 +00:00
-
d4930235fa
fix: Point CNPG backups at the existing B2 bucket
micqdf
2026-03-26 23:35:19 +00:00
-
ee8dc4b451
fix: Add Role for B2 credentials access
micqdf
2026-03-26 23:04:40 +00:00
-
144d40e7ac
feat: Add RBAC for CNP to read B2 credentials secret
micqdf
2026-03-26 22:56:00 +00:00
-
cc14e32572
fix: Use gzip instead of lzop for backup compression
micqdf
2026-03-26 22:51:10 +00:00
-
a207a5a7fd
fix: Remove invalid encryption field from CNP backup config
micqdf
2026-03-26 22:49:29 +00:00
-
4e1772c175
feat: Add B2 backup configuration to CNP Cluster
micqdf
2026-03-26 22:47:31 +00:00
-
ff70b12084
chore: Add HTTP/HTTPS firewall rules for Load Balancer
micqdf
2026-03-26 22:36:13 +00:00
-
a3963c56e6
cleanup: Remove traefik-config, simplify traefik helmrelease
micqdf
2026-03-26 03:16:56 +00:00
-
612435c42c
fix: Add Hetzner LB health check config to Traefik
micqdf
2026-03-26 03:11:10 +00:00
-
ac42f671a2
fix: Remove addon-traefik-config dependency from flux-ui
micqdf
2026-03-26 03:05:58 +00:00
-
dbe7ec0468
fix: Remove expose boolean from traefik ports config
micqdf
2026-03-26 03:01:13 +00:00
-
816ac8b3c0
fix: Use official Traefik helm repo instead of rancher-stable
micqdf
2026-03-26 02:59:00 +00:00
-
6f7998639f
fix: Use standard kustomize API in traefik addon
micqdf
2026-03-26 02:56:52 +00:00
-
7a14f89ad1
fix: Correct traefik kustomization path and sourceRef
micqdf
2026-03-26 02:55:37 +00:00
-
786901c5d7
fix: Correct traefik kustomization reference (directory not file)
micqdf
2026-03-26 02:54:29 +00:00
-
46f3d1130b
feat: Add Flux-managed Traefik HelmRelease with Hetzner LB config
micqdf
2026-03-26 02:52:49 +00:00
-
2fe5a626d4
fix: Add Hetzner network zone annotation to Traefik LoadBalancer
micqdf
2026-03-26 02:30:43 +00:00
-
2ef68c8087
fix: Remove deprecated enablePodMonitor field in CNP Cluster
micqdf
2026-03-26 01:01:53 +00:00
-
e2cae18f5f
fix: Remove backup config for initial deployment - add backup after DB is running
micqdf
2026-03-26 00:46:50 +00:00
-
e0c1e41ee9
fix: Remove bootstrap recovery - create fresh DB (recovery only needed after first backup)
micqdf
2026-03-26 00:43:49 +00:00
-
63533de901
fix: Fix retentionPolicy format (14d not keep14)
micqdf
2026-03-26 00:41:44 +00:00
-
1b39710f63
fix: Move retentionPolicy to correct location in backup spec
micqdf
2026-03-26 00:39:25 +00:00
-
8c034323dc
fix: Fix Cluster CR with correct barmanObjectStore schema
micqdf
2026-03-26 00:35:23 +00:00
-
5fa2b411ee
fix: Fix Cluster CR schema - use barmanObjectStore instead of b2
micqdf
2026-03-26 00:33:04 +00:00
-
3ea28e525f
fix: Fix CNP operator image repository (cloudnative-pg not postgresql)
micqdf
2026-03-26 00:21:09 +00:00
-
4b95ba113d
fix: Remove LPP helm (already installed by k3s), fix CNP chart version to 0.27.1
micqdf
2026-03-26 00:13:22 +00:00
-
13627bf81f
fix: Split CNP operator from CNP cluster to fix CRD dependency
micqdf
2026-03-26 00:06:34 +00:00
-
ef3fb2489a
fix: Convert kustomization-lpp and kustomization-cnpg to Flux Kustomization CRs
micqdf
2026-03-26 00:03:53 +00:00
-
7097495d72
fix: Add missing metadata.name to kustomization-lpp and kustomization-cnpg
micqdf
2026-03-25 23:39:45 +00:00
-
9d601dc77c
feat: Add CloudNativePG with B2 backups for persistent Rancher database
micqdf
2026-03-25 23:06:45 +00:00
-
f36445d99a
Fix CNI: configure flannel to use private network interface (enp7s0) instead of public
micqdf
2026-03-25 01:44:33 +00:00
-
89c2c99963
Fix Rancher: remove conflicting LoadBalancer, add HTTPS port-forward, use tailscale serve only
micqdf
2026-03-25 00:59:16 +00:00
-
4a35cfb549
Fix Rancher: use correct targetPort 444 for HTTPS
micqdf
2026-03-24 23:30:58 +00:00
-
3d50bfc534
Fix Rancher service selector: use cattle-system-rancher label
micqdf
2026-03-24 23:25:36 +00:00
-
ab2f287bfb
Fix Rancher: use correct service name cattle-system-rancher
micqdf
2026-03-24 22:30:49 +00:00