Commit graph

283 commits

Author SHA1 Message Date
f136d404cc Test if renovate will update synapse container
All checks were successful
/ build-synapse (push) Successful in 50s
2024-09-20 11:03:34 -07:00
6f154ff4b4 terraform refactor + keycloak terraform tests 2024-09-16 23:56:35 -07:00
341809bd18 Add forgejo-dev 2024-09-12 15:47:30 -07:00
2e16e58e6c vault mounts: drop test, create a more prod kv store 2024-09-10 12:11:33 -07:00
f497e9ba55 bao policies: to use tf template 2024-09-10 10:36:12 -07:00
6f568ffc4e fix openbao image again
All checks were successful
/ render-helm (push) Successful in 19s
2024-09-10 10:08:09 -07:00
eae6bccbd3 chore(deps): update actions/checkout action to v4
All checks were successful
/ render-helm (push) Successful in 19s
2024-09-10 17:01:21 +00:00
375d7b2b4f Update openbao version
All checks were successful
/ render-helm (push) Successful in 19s
2024-09-10 09:58:07 -07:00
cb7222c78e update all workflows to use ** to recursively check for file changes
Some checks are pending
/ render-helm (push) Waiting to run
/ build-openbao-csi-provider (push) Successful in 17s
/ build-keycloak (push) Successful in 50s
/ build-synapse (push) Successful in 46s
/ build-traefik-forward-auth (push) Successful in 40s
/ build-openbao (push) Successful in 10m32s
2024-09-10 09:57:38 -07:00
db49b77556 fix helm validate workflow 2024-09-10 09:57:11 -07:00
c593120e46 Add workflow to render all helm charts and verify it does not cause a git diff 2024-09-10 09:44:22 -07:00
0749802038 Fix openbao csi driver images maybe 2024-09-10 09:39:36 -07:00
4511625be7 Update rendered external-secrets 2024-09-10 09:22:21 -07:00
3597cd82d4 Fix OpenBao image 2024-09-10 09:19:54 -07:00
de602d98f2 Initial bao authorization stuff for k8s service accounts working! 2024-09-10 09:19:25 -07:00
e18324dfc4 add envrc 2024-09-10 00:33:09 -07:00
3acaaf6d09 use opentofu to configure openbao + other bao fixes 2024-09-10 00:32:48 -07:00
8f7fa85bb8 chore(deps): update golang docker tag to v1.23
All checks were successful
/ build-openbao-csi-provider (push) Successful in 1m12s
2024-09-09 22:01:24 +00:00
4d6dd966a4 Build openbao-csi-provider container image
All checks were successful
/ build-openbao-csi-provider (push) Successful in 1m24s
2024-09-09 14:56:52 -07:00
a582752fc0 chore(deps): update helm release external-secrets to v0.10.3 2024-09-09 17:04:04 +00:00
d1a494e295 Add WIP secret store CSI driver with openbao 2024-09-09 10:02:39 -07:00
c4342647f0 chore(deps): update docker/build-push-action action to v6
All checks were successful
/ build-keycloak (push) Successful in 35s
/ build-synapse (push) Successful in 50s
/ build-traefik-forward-auth (push) Successful in 42s
/ build-openbao (push) Successful in 11m11s
2024-09-08 07:02:03 +00:00
62d0e4ba6c forgejo: change default PR merge strategy to rebase 2024-09-07 23:27:58 -07:00
3a39864ca6 chore(deps): update helm release openbao to v0.5.0
All checks were successful
/ build-traefik-forward-auth (push) Successful in 41s
/ build-openbao (push) Successful in 10m48s
2024-09-08 06:08:11 +00:00
a8da55a6b3 chore(deps): update golang docker tag to v1.23
All checks were successful
/ build-traefik-forward-auth (push) Successful in 1m5s
/ build-openbao (push) Successful in 10m17s
2024-09-08 06:02:16 +00:00
d9072b15e0 chore(deps): update dependency zalando/postgres-operator to v1.13.0 2024-09-08 05:08:43 +00:00
843793e150 chore(deps): update entanglementgarden/actions action to v0.2
All checks were successful
/ build (push) Successful in 52s
2024-09-08 05:03:08 +00:00
1ce70c5010 tweak traefik dashboard rule 2024-09-07 21:56:18 -07:00
f116012a37 Add renovatebot 2024-09-07 21:56:18 -07:00
2433b112c9 fix MAS ingressrule 2024-09-07 21:56:18 -07:00
ccb985d32b chore(deps): update quay.io/thanos/thanos docker tag to v0.36.1 2024-09-08 04:54:47 +00:00
76d27f4c03 chore(deps): update helm release external-secrets to v0.10.2 2024-09-08 04:45:16 +00:00
a9a2ac8bd1 Add renovate.json 2024-09-08 04:38:20 +00:00
b4e71c3e73 snipeit: force TLS 2024-09-02 19:49:23 -07:00
318dcf3fe1 thanos compactor: use emptydir instead of a longhorn volume 2024-09-02 13:41:56 -07:00
bc283bd014 fix matrix ingressroute 2024-09-02 13:41:48 -07:00
fb04f4bc3c increase thanos compactor volume size even more 2024-09-01 21:51:53 -07:00
ac86495db7 thanos fixes: set replica label and bump memory limits 2024-09-01 19:57:31 -07:00
5b210cd0cd Increase volume sizes that were filling up 2024-09-01 19:21:47 -07:00
99eb5598c7 fix homeserver url 2024-09-01 18:36:45 -07:00
8d7ab62a3a alertmanager matrix receiver 2024-09-01 18:07:04 -07:00
ba35dc9b32 add openbao ingress 2024-09-01 16:12:06 -07:00
3ef702fb52 Add longhorn monitoring + alerting 2024-09-01 16:11:26 -07:00
3ef7c7edaf openbao booted successfully 2024-08-29 23:20:33 -07:00
ae5b2cd2f8 Add openbao image build
All checks were successful
/ build-openbao (push) Successful in 10m6s
2024-08-29 11:29:08 -07:00
49d2740813 Fix helm stuff 2024-08-26 22:52:41 -07:00
129d0d5b02 Initial openbao 2024-08-26 22:50:51 -07:00
b8e56eab20 matrix: add services required for ElementX to work (sliding-sync + MAS) 2024-08-22 12:33:22 -07:00
afe3974f2f add easily togglable access logs 2024-08-21 16:16:19 -07:00
e69179cbb5 Use External Secrets 2024-08-20 11:13:23 -07:00