gitea-admin pushed to main at Home-Network/home-network-k3s-impl 2026-09-12 22:16:32 +00:00
3ec67bafdd merge: platform-admins may reach the media app UIs
5da116b34d fix(oauth2-proxy): platform-admins may reach the media UIs — the immediate 403
Compare 2 commits »
gitea-admin pushed to main at Home-Network/home-network-k3s-impl 2026-09-12 21:35:40 +00:00
6b953cc56b fix(arrs): the config PVC was mounted where the app never looks
gitea-admin pushed to main at Home-Network/home-network-k3s-impl 2026-09-12 21:26:35 +00:00
f5e62d9169 merge: bulk NFS volumes for plex, sonarr, radarr and nextcloud
daac05e7e8 feat(bulk): prod mounts the NFS export through pfSense's WAN address
da8a0eac04 test(l0): R-STATE-04 gets a real check — bulk storage provably is not the replicated tier
82aff4d053 feat(apps): attach the media library and the legacy Nextcloud dataset over NFS
2590bc4317 feat(env): BULK_NFS_SERVER — the one knob prod cannot answer yet, and why it is a placeholder
Compare 6 commits »
gitea-admin pushed to main at Home-Network/home-network-k3s-impl 2026-09-08 04:54:43 +00:00
cac413e87a feat(cnpg): synchronous replication, quorum of 1, dataDurability preferred
gitea-admin pushed to main at Home-Network/home-network-k3s-impl 2026-09-08 04:48:52 +00:00
e8d8601ca6 feat(cnpg): required pod anti-affinity + switchover primary rolls
gitea-admin pushed to main at Home-Network/home-network-k3s-impl 2026-09-08 04:41:49 +00:00
f338e91770 feat(cnpg): instances 3 on all three Clusters — a standby to fail over to
gitea-admin pushed to main at Home-Network/home-network-k3s-impl 2026-09-08 04:07:13 +00:00
a624c638ef merge: docs/node-1-drive-replaced
90b39de527 merge: fix/swap-off-persists-across-reboot
0247d796a3 merge: fix/founder-moved-to-node-2
c9e9dcf960 merge: fix/r-env-03-overlay-selected-credentials
89cf59ffb7 docs(conformance): the GIVEN/WHEN/THEN header states the exception it now allows
Compare 13 commits »
gitea-admin pushed to main at Home-Network/home-network-k3s-impl 2026-09-07 07:46:51 +00:00
863af01062 docs: the §2 shared-device measurement came back, and it does not hold
f7a9229d81 fix(ansible): the NVMe node would have died on an undefined variable
a819c50ffe feat(ansible): arbitrate the shared etcd/Longhorn device — and prove it landed
efc6db6c1f feat(obs): alert on I/O pressure — the metric that missed the prod-1 outage
Compare 4 commits »
gitea-admin pushed to main at Home-Network/home-network-k3s-impl 2026-09-07 07:12:50 +00:00
09265e0381 merge: OIDC issuer/callback URLs become per-environment
e65a76dc51 docs(log): record the prod OIDC-URL outage and the rule it establishes
6548f9a89c fix(semaphore): per-environment OIDC URLs — same latent break as Headlamp
bfa39bc5d0 fix(headlamp): per-environment OIDC URLs — prod was dialing DEV's Keycloak
Compare 4 commits »
gitea-admin pushed to main at Home-Network/home-network-k3s-impl 2026-09-07 07:07:46 +00:00
bc9c93d2ab fix(keycloak): the reconciler could not read its own Secret
gitea-admin pushed to main at Home-Network/home-network-k3s-impl 2026-09-07 06:55:59 +00:00
3ca4ad6011 merge: R2 off-cluster backups + per-environment backup credentials
708a05dfc1 fix(devcontainer): restore multi-cluster kubeconfig selection
161430d915 feat(backup): the overlay picks the credential — BACKUP_CREDENTIALS_SUFFIX
e7c4a95c2d feat(backup): the four backup credentials become TWO objects each, one per environment
0a0527e7db feat(backup): prod's off-cluster DR lands on R2 — and stops the WAL clock
Compare 6 commits »
gitea-admin pushed to main at Home-Network/home-network-k3s-impl 2026-09-07 06:49:44 +00:00
dc2d1ce17e fix(conformance): the R-NET-04 scan descended into nested agent worktrees
6a8953e288 feat(prod): observability for the two failure modes that went unseen, plus OIDC self-healing
Compare 2 commits »
gitea-admin pushed to main at Home-Network/home-network-k3s-impl 2026-09-07 03:17:44 +00:00
d1a6628a97 feat(ha): the CNI dials the control-plane VIP — kube-vip becomes a CNI prerequisite
f178d85c71 fix(kyverno): unblock CDI imports by SATISFYING the label requirement, not exempting it
Compare 2 commits »
gitea-admin pushed to main at Home-Network/home-network-k3s-impl 2026-09-07 03:14:33 +00:00
f21e89d9d2 fix(gitops): CDI cold-start deadlock repaired IN THE GRAPH, not by a pre-apply
gitea-admin pushed to main at Home-Network/home-network-k3s-impl 2026-09-07 03:04:22 +00:00
2d7d302c7e feat(prod): cut prod's GitOps source over to prod's OWN in-cluster Gitea
gitea-admin pushed to main at Home-Network/home-network-k3s-impl 2026-09-07 03:02:14 +00:00
c8c1d2935d feat(dns): per-environment BASE_DOMAIN — prod moves to its own subdomain
9b8979a427 feat(prod): temp Gitea source + wireless disabled + flux bootstrap path
05baae90ec feat(prod): kernel fix + disk layout — prod nodes ready for k3s
8e913fdd7b fix(node_health): "Failed to map" does NOT mean memory lost — plus survey results
b19c5db9ae feat(prod): node 3 onboarded — and it is NOT immune; BIOS-setting hypothesis disproven
Compare 6 commits »
gitea-admin created branch migration/dns-apex-inversion in Home-Network/home-network-k3s-impl 2026-09-07 02:56:09 +00:00
gitea-admin created branch prod/deliver-fixes in Home-Network/home-network-k3s-impl 2026-09-07 02:56:09 +00:00
gitea-admin pushed to prod/deliver-fixes at Home-Network/home-network-k3s-impl 2026-09-07 02:56:09 +00:00
422e1dc7e8 feat(ha): the CNI dials the control-plane VIP — kube-vip becomes a CNI prerequisite
b7d6ba3d5f fix(kyverno): unblock CDI imports by SATISFYING the label requirement, not exempting it
834928c237 fix(gitops): CDI cold-start deadlock repaired IN THE GRAPH, not by a pre-apply
Compare 3 commits »