 ahmza
|
ae278d8ba1
|
Mark demo.ahmza.com TLS as live in network map
|
2026-09-03 05:28:42 +01:00 |
|
|
ahmza
|
e88819f222
|
Switch demo.ahmza.com to production Let's Encrypt certificate
|
2026-09-03 05:19:44 +01:00 |
|
|
ahmza
|
a5f4041d47
|
Add encrypted Cloudflare API token for cert-manager
|
2026-09-03 04:07:53 +00:00 |
|
|
ahmza
|
4affbaf973
|
Add cert-manager with Cloudflare DNS-01 ClusterIssuers
|
2026-09-03 05:03:10 +01:00 |
|
|
ahmza
|
e6a42a39a8
|
Reclaim demo's former dedicated address in network map
|
2026-09-03 04:57:47 +01:00 |
|
|
ahmza
|
bb69db8041
|
Route demo app through Ingress at demo.ahmza.com
|
2026-09-03 04:44:41 +01:00 |
|
|
ahmza
|
923cdd5162
|
Add ingress-nginx
|
2026-09-03 04:37:04 +01:00 |
|
|
ahmza
|
4fe5a921ff
|
Remove SOPS pipeline test secret
|
2026-09-03 03:34:53 +00:00 |
|
|
ahmza
|
2ca52e4829
|
Move test secret into Helm templates/ so Argo CD actually applies it
|
2026-09-03 03:33:51 +00:00 |
|
|
ahmza
|
095e7b3244
|
Add end-to-end SOPS pipeline test secret
|
2026-09-03 03:32:41 +00:00 |
|
|
ahmza
|
7e9406dff0
|
Fix .sops.yaml to scope encryption to secret payload fields only
|
2026-09-03 04:31:03 +01:00 |
|
|
ahmza
|
0a733a7d76
|
Add SOPS+age secrets pipeline
|
2026-09-03 04:24:38 +01:00 |
|
|
ahmza
|
41dfd195a1
|
Align 09-growing-up with actual control-plane/worker split
|
2026-09-03 04:01:12 +01:00 |
|
|
ahmza
|
c34b58e0b2
|
Add cascade-delete finalizer to stateless apps; document the distinction
|
2026-09-03 03:58:47 +01:00 |
|
|
ahmza
|
8037f24e82
|
delete whoami
|
2026-09-03 02:56:28 +00:00 |
|
|
ahmza
|
f5cb20ad6b
|
Add whoami as a second real app (docs/08 hands-on exercise)
|
2026-09-03 03:52:11 +01:00 |
|
|
ahmza
|
574d3032db
|
Align 08-adding-new-apps with Gitea repo and Pod Security lesson
|
2026-09-03 03:50:43 +01:00 |
|
|
ahmza
|
b45a633b99
|
update the demo page header
|
2026-09-03 02:39:15 +00:00 |
|
|
ahmza
|
a8d26a946f
|
Fix Longhorn default StorageClass to actually use 2 replicas
|
2026-09-03 03:33:14 +01:00 |
|
|
ahmza
|
170ef2d116
|
Give demo app a real Longhorn-backed PVC
|
2026-09-03 03:29:28 +01:00 |
|
|
ahmza
|
39e04e43d0
|
Update Longhorn docs for two-worker topology
|
2026-09-03 03:28:13 +01:00 |
|
|
ahmza
|
9bb29eee5a
|
Allow Longhorn's privileged storage Pods via namespace Pod Security labels
|
2026-09-03 03:09:39 +01:00 |
|
|
ahmza
|
49d3f5c092
|
Fix BGPPeer nodeSelector to match empty-string node-role label convention
|
2026-09-03 03:04:17 +01:00 |
|
|
ahmza
|
3d2aea2d1f
|
Allow MetalLB's privileged networking Pods via namespace Pod Security labels
|
2026-09-03 02:37:13 +01:00 |
|
|
ahmza
|
502de4fdf0
|
Configure MetalLB BGP service network
|
2026-09-03 02:19:46 +01:00 |
|
|
ahmza
|
4cb6bc9ec4
|
Persist worker and Longhorn node labels
|
2026-09-03 02:00:24 +01:00 |
|
|
ahmza
|
b6f8f36c5b
|
Point Argo CD at Gitea and configure storage workers
|
2026-09-03 01:54:37 +01:00 |
|
|
ahmza
|
a5ddf11992
|
Adapt Talos config for five-node mixed architecture cluster
|
2026-09-02 22:50:34 +01:00 |
|