Commit Graph

  • 9c0523e880 fix: pre-pull Rancher images and reset Rancher release during bootstrap micqdf 2026-04-22 11:00:54 +00:00
  • 8372d562ad fix: reset and force nfs helmrelease during bootstrap micqdf 2026-04-22 10:35:32 +00:00
  • 1bb11dfe3a fix: force nfs storage reconcile during flux bootstrap micqdf 2026-04-22 10:08:20 +00:00
  • 624cd5aab6 fix: point NFS provisioner at active Proxmox host export micqdf 2026-04-22 09:46:01 +00:00
  • 71bdc6a709 fix: extend Flux bootstrap timeouts on fresh clusters micqdf 2026-04-22 08:36:27 +00:00
  • 714f20417b fix: tolerate control-plane taint when pinning Flux to cp1 micqdf 2026-04-22 05:05:15 +00:00
  • c32bec34bc fix: quote kube-vip readiness jsonpath in bootstrap role micqdf 2026-04-22 04:41:48 +00:00
  • 6519a7673d fix: wait for kube-vip on primary node during bootstrap micqdf 2026-04-22 04:29:29 +00:00
  • d1c31cdb91 fix: rely on k3s service readiness instead of installer exit code micqdf 2026-04-22 04:14:31 +00:00
  • b3e88712bd fix: derive cluster network interface from host facts micqdf 2026-04-22 03:50:03 +00:00
  • 06366ee5e6 fix: accept cloud-init exit code 2 after first boot micqdf 2026-04-22 03:40:55 +00:00
  • 9a2d213114 fix: wait for cloud-init before package install during bootstrap micqdf 2026-04-22 03:34:53 +00:00
  • 9482a0f551 fix: skip clone storage override for linked Proxmox clones micqdf 2026-04-22 03:22:50 +00:00
  • 5c53b8e06e fix: normalize Proxmox endpoint and stop dashboards self-trigger micqdf 2026-04-22 03:13:22 +00:00
  • b1dae28aa5 feat: migrate cluster baseline from Hetzner to Proxmox micqdf 2026-04-22 03:02:13 +00:00
  • 6c6b9d20ca update README hetzner micqdf 2026-04-22 01:14:21 +00:00
  • c3a2f25c94 docs: record validated Rancher restore drill micqdf 2026-04-18 21:27:42 +00:00
  • 7385c2263e fix: add tailnet smoke checks and move Tailscale operator to stable micqdf 2026-04-18 19:59:13 +00:00
  • 60f466ab98 remove Weave GitOps addon micqdf 2026-04-18 18:44:55 +00:00
  • b20356e9fe fix: only clean stale Tailscale names before proxies exist micqdf 2026-04-18 18:16:27 +00:00
  • 2ba6b6a896 fix: remove unused Flux CLI install from deploy workflow micqdf 2026-04-18 17:45:59 +00:00
  • 9126de1423 fix: Align Prometheus external URL with Tailscale service port micqdf 2026-04-18 17:11:16 +00:00
  • 4532b9ed74 chore: trigger rebuild micqdf 2026-04-18 06:09:54 +00:00
  • 68dbd2e5b7 fix: Reserve Tailscale service hostnames and tag exposed proxies micqdf 2026-04-18 05:48:26 +00:00
  • ceefcc3b29 cleanup: Remove obsolete port-forwarding, deferred Traefik files, and CI workaround micqdf 2026-04-02 01:21:23 +00:00
  • 0d339b3163 fix: Use rancher/kubectl image for rancher-backup hook micqdf 2026-04-02 01:00:27 +00:00
  • 30ccf13c82 fix: Use postRenderer to replace broken kuberlr-kubectl image in rancher-backup hook micqdf 2026-04-02 00:51:50 +00:00
  • 75e3604f30 fix: Skip post-install hooks for rancher-backup HelmRelease micqdf 2026-04-02 00:45:03 +00:00
  • e4235a6e58 fix: Correct Flux UI pod selector labels to match deployed weave-gitops labels micqdf 2026-04-01 02:08:12 +00:00
  • ea2d534171 fix: Use admin.existingSecret for Grafana creds from Doppler micqdf 2026-04-01 01:41:49 +00:00
  • a1b9fe6aa6 fix: Use Flux valuesFrom to inject Doppler Grafana creds as Helm values micqdf 2026-03-31 23:40:54 +00:00
  • 33765657ec fix: Correct pod selectors for Prometheus and Flux Tailscale services, use Doppler for Grafana creds micqdf 2026-03-31 22:54:57 +00:00
  • b8f64fa952 feat: Expose Grafana, Prometheus, and Flux UI via Tailscale LoadBalancer services micqdf 2026-03-31 08:53:28 +00:00
  • 569d741751 push micqdf 2026-03-31 02:46:55 +00:00
  • 89e53d9ec9 fix: Handle restricted B2 keys and safe JSON parsing in restore step micqdf 2026-03-31 01:43:04 +00:00
  • 5a2551f40a fix: Fix flux CLI download URL - use correct GitHub URL with v prefix on version micqdf 2026-03-30 03:11:40 +00:00
  • 8c7b62c024 feat: Automate Rancher backup restore in CI pipeline micqdf 2026-03-30 01:56:29 +00:00
  • a1f07f863a docs: Update restore template with real Backup CR format micqdf 2026-03-30 00:09:53 +00:00
  • 2c3a49c2e0 fix: Rename B2 secret keys to match rancher-backup operator expectations micqdf 2026-03-30 00:05:13 +00:00
  • a7ce3dcc1a fix: Remove s3 block from rancher-backup HelmRelease values micqdf 2026-03-29 23:47:21 +00:00
  • 0ab9418458 fix: Re-add HTTPS port to Tailscale LB for Rancher micqdf 2026-03-29 23:04:49 +00:00
  • c251672618 fix: Configure S3 bucketName for rancher-backup operator micqdf 2026-03-29 23:01:18 +00:00
  • 89364e8f37 fix: Add dependsOn for rancher-backup operator to wait for CRDs micqdf 2026-03-29 22:57:22 +00:00
  • 20d7a6f777 fix: Install rancher-backup CRD chart before operator micqdf 2026-03-29 22:51:34 +00:00
  • 22ce5fd6f4 feat: Add cert-manager as dependency for Rancher micqdf 2026-03-29 22:36:30 +00:00
  • afb1782d38 fix: Separate Backup CRs into their own kustomization micqdf 2026-03-29 22:22:29 +00:00
  • 48870433bf fix: Remove tls:external from Rancher HelmRelease micqdf 2026-03-29 22:19:23 +00:00
  • f2c506b350 refactor: Replace CNPG external DB with rancher-backup operator micqdf 2026-03-29 21:53:16 +00:00
  • efdf13976a fix: Handle missing 'online' field in Tailscale API response micqdf 2026-03-29 13:52:23 +00:00
  • 5269884408 feat: Auto-cleanup stale Tailscale devices before cluster boot micqdf 2026-03-29 11:47:53 +00:00
  • 6e5b0518be feat: Add kubeconfig refresh script and fix Ansible Finalize to use public IP micqdf 2026-03-29 03:31:36 +00:00
  • 905d069e91 fix: Add serverName to CNPG externalClusters for B2 recovery micqdf 2026-03-29 03:22:19 +00:00
  • 25ba4b7115 fix: Add skipEmptyWalArchiveCheck annotation and B2 secret healthcheck to CNPG micqdf 2026-03-29 03:15:23 +00:00
  • 6a593fd559 feat: Add B2 recovery bootstrap to CNPG cluster micqdf 2026-03-29 00:22:24 +00:00
  • 936f54a1b5 fix: Restore canonical Rancher tailnet hostname micqdf 2026-03-29 00:00:39 +00:00
  • c9df11e65f fix: Align Rancher tailnet hostname with live proxy micqdf 2026-03-28 23:47:09 +00:00
  • a3c238fda9 fix: Apply Rancher server URL after chart install micqdf 2026-03-28 23:12:59 +00:00
  • a15fa50302 fix: Use Doppler-backed Rancher bootstrap password micqdf 2026-03-28 22:51:38 +00:00
  • 0f4f0b09fb fix: Add Rancher DB password ExternalSecret micqdf 2026-03-28 22:42:05 +00:00
  • 4c002a870c fix: Remove invalid Rancher server-url manifest micqdf 2026-03-28 22:39:31 +00:00
  • 43d11ac7e6 docs: Add agent guidance and sync Rancher docs micqdf 2026-03-28 22:13:37 +00:00
  • 8c5edcf0a1 fix: Set Rancher server URL to tailnet hostname micqdf 2026-03-28 04:07:44 +00:00
  • a81da0d178 feat: Expose Rancher via Tailscale hostname micqdf 2026-03-28 03:59:02 +00:00
  • 2a72527c79 fix: Switch Traefik from LoadBalancer to NodePort, remove unused Hetzner LB micqdf 2026-03-28 03:21:19 +00:00
  • 7cb3b84ecb feat: Replace custom pgdump job with CNPG ScheduledBackup micqdf 2026-03-28 03:15:39 +00:00
  • d4930235fa fix: Point CNPG backups at the existing B2 bucket micqdf 2026-03-26 23:35:19 +00:00
  • ee8dc4b451 fix: Add Role for B2 credentials access micqdf 2026-03-26 23:04:40 +00:00
  • 144d40e7ac feat: Add RBAC for CNP to read B2 credentials secret micqdf 2026-03-26 22:56:00 +00:00
  • cc14e32572 fix: Use gzip instead of lzop for backup compression micqdf 2026-03-26 22:51:10 +00:00
  • a207a5a7fd fix: Remove invalid encryption field from CNP backup config micqdf 2026-03-26 22:49:29 +00:00
  • 4e1772c175 feat: Add B2 backup configuration to CNP Cluster micqdf 2026-03-26 22:47:31 +00:00
  • ff70b12084 chore: Add HTTP/HTTPS firewall rules for Load Balancer micqdf 2026-03-26 22:36:13 +00:00
  • a3963c56e6 cleanup: Remove traefik-config, simplify traefik helmrelease micqdf 2026-03-26 03:16:56 +00:00
  • 612435c42c fix: Add Hetzner LB health check config to Traefik micqdf 2026-03-26 03:11:10 +00:00
  • ac42f671a2 fix: Remove addon-traefik-config dependency from flux-ui micqdf 2026-03-26 03:05:58 +00:00
  • dbe7ec0468 fix: Remove expose boolean from traefik ports config micqdf 2026-03-26 03:01:13 +00:00
  • 816ac8b3c0 fix: Use official Traefik helm repo instead of rancher-stable micqdf 2026-03-26 02:59:00 +00:00
  • 6f7998639f fix: Use standard kustomize API in traefik addon micqdf 2026-03-26 02:56:52 +00:00
  • 7a14f89ad1 fix: Correct traefik kustomization path and sourceRef micqdf 2026-03-26 02:55:37 +00:00
  • 786901c5d7 fix: Correct traefik kustomization reference (directory not file) micqdf 2026-03-26 02:54:29 +00:00
  • 46f3d1130b feat: Add Flux-managed Traefik HelmRelease with Hetzner LB config micqdf 2026-03-26 02:52:49 +00:00
  • 2fe5a626d4 fix: Add Hetzner network zone annotation to Traefik LoadBalancer micqdf 2026-03-26 02:30:43 +00:00
  • 2ef68c8087 fix: Remove deprecated enablePodMonitor field in CNP Cluster micqdf 2026-03-26 01:01:53 +00:00
  • e2cae18f5f fix: Remove backup config for initial deployment - add backup after DB is running micqdf 2026-03-26 00:46:50 +00:00
  • e0c1e41ee9 fix: Remove bootstrap recovery - create fresh DB (recovery only needed after first backup) micqdf 2026-03-26 00:43:49 +00:00
  • 63533de901 fix: Fix retentionPolicy format (14d not keep14) micqdf 2026-03-26 00:41:44 +00:00
  • 1b39710f63 fix: Move retentionPolicy to correct location in backup spec micqdf 2026-03-26 00:39:25 +00:00
  • 8c034323dc fix: Fix Cluster CR with correct barmanObjectStore schema micqdf 2026-03-26 00:35:23 +00:00
  • 5fa2b411ee fix: Fix Cluster CR schema - use barmanObjectStore instead of b2 micqdf 2026-03-26 00:33:04 +00:00
  • 3ea28e525f fix: Fix CNP operator image repository (cloudnative-pg not postgresql) micqdf 2026-03-26 00:21:09 +00:00
  • 4b95ba113d fix: Remove LPP helm (already installed by k3s), fix CNP chart version to 0.27.1 micqdf 2026-03-26 00:13:22 +00:00
  • 13627bf81f fix: Split CNP operator from CNP cluster to fix CRD dependency micqdf 2026-03-26 00:06:34 +00:00
  • ef3fb2489a fix: Convert kustomization-lpp and kustomization-cnpg to Flux Kustomization CRs micqdf 2026-03-26 00:03:53 +00:00
  • 7097495d72 fix: Add missing metadata.name to kustomization-lpp and kustomization-cnpg micqdf 2026-03-25 23:39:45 +00:00
  • 9d601dc77c feat: Add CloudNativePG with B2 backups for persistent Rancher database micqdf 2026-03-25 23:06:45 +00:00
  • f36445d99a Fix CNI: configure flannel to use private network interface (enp7s0) instead of public micqdf 2026-03-25 01:44:33 +00:00
  • 89c2c99963 Fix Rancher: remove conflicting LoadBalancer, add HTTPS port-forward, use tailscale serve only micqdf 2026-03-25 00:59:16 +00:00
  • 4a35cfb549 Fix Rancher: use correct targetPort 444 for HTTPS micqdf 2026-03-24 23:30:58 +00:00
  • 3d50bfc534 Fix Rancher service selector: use cattle-system-rancher label micqdf 2026-03-24 23:25:36 +00:00
  • ab2f287bfb Fix Rancher: use correct service name cattle-system-rancher micqdf 2026-03-24 22:30:49 +00:00