Nikholas Pcenicni
|
10fdaf873c
|
Update .gitignore to include .tmp files, remove Trivy namespace from kustomization.yaml, and add Trivy dashboard application to app-of-apps kustomization. Delete obsolete Trivy namespace and values files to streamline deployment configuration.
|
2026-05-14 17:10:00 -04:00 |
|
Nikholas Pcenicni
|
a5869c242a
|
Update documentation and playbook to clarify Trivy Operator installation via Argo CD, removing direct Ansible role references. Adjust README and related files to reflect the new deployment order and ensure proper resource ownership, enhancing overall clarity for users.
|
2026-05-14 17:04:25 -04:00 |
|
Nikholas Pcenicni
|
1e6d84f0f3
|
Refactor noble.yml playbook to apply Argo CD Application manifests after all Helm roles, ensuring proper resource ownership and avoiding SSA conflicts. Update related documentation to reflect the new execution order and clarify the role of Argo CD in the deployment process.
|
2026-05-14 16:46:45 -04:00 |
|
Nikholas Pcenicni
|
1a50599cb4
|
Enhance Authentik role by updating README with detailed troubleshooting steps for Headlamp OIDC integration, including handling of scopes and PKCE settings. Adjust default variables for Headlamp OIDC scopes and ensure proper application of Kubernetes RBAC for OIDC groups. Update Helm tasks to apply necessary static manifests for Headlamp, improving overall deployment and authentication reliability.
|
2026-05-14 16:11:57 -04:00 |
|
Nikholas Pcenicni
|
4bc8da0225
|
Enhance Authentik role by adding Helm wait timeout for oauth2-proxy and improving task conditions for admin access and OAuth2 provider upserts. Update README with new variable descriptions and adjust Longhorn deployment tasks to ensure proper rollout before Loki installation, enhancing overall deployment reliability.
|
2026-05-14 15:52:42 -04:00 |
|
Nikholas Pcenicni
|
5e5c6ef671
|
Enhance Authentik role in noble cluster setup by adding support for resolving OAuth2 flow, signing key, and scope mapping UUIDs from the worker database, improving API access under 2026+ RBAC. Update README with troubleshooting steps for common OAuth2 provider issues and adjust default variables for better configuration management. Ensure seamless integration with oauth2-proxy by allowing unverified email handling in development environments.
|
2026-05-14 14:26:43 -04:00 |
|
Nikholas Pcenicni
|
c392ce1e5a
|
Enhance Authentik integration in noble cluster setup by adding support for OAuth2 flow primary keys in configuration. Update README with troubleshooting steps for common API errors and improve deployment reliability with tasks to wait for Authentik worker rollout and API readiness. Adjust Helm chart values for Grafana and Headlamp to accommodate new OIDC settings, ensuring seamless authentication and authorization processes.
|
2026-05-14 01:29:49 -04:00 |
|
Nikholas Pcenicni
|
15d0e120d3
|
Update Ansible configuration and documentation to reflect new inventory structure. Migrate group_vars to inventory/group_vars/ and enhance README with updated paths for variable files, improving clarity for users.
|
2026-05-14 00:39:29 -04:00 |
|
Nikholas Pcenicni
|
78b524a044
|
Add Authentik and oauth2-proxy support to noble cluster setup, including environment variables, playbook tags, and landing URLs. Update README and kustomization.yaml to reflect new OIDC integration, enhancing security and user authentication capabilities.
|
2026-05-14 00:23:48 -04:00 |
|
Nikholas Pcenicni
|
2bf7277917
|
Enhance csi-snapshot-controller README with troubleshooting guidance for CrashLoopBackOff issues and update kustomization.yaml to include deployment patch. This improves user experience and deployment reliability.
|
2026-05-13 23:59:30 -04:00 |
|
Nikholas Pcenicni
|
663ebc5001
|
Add Trivy integration to noble cluster setup, including namespace and application configurations. Update README and playbook tags to reflect new security scanning capabilities. Enhance Longhorn and kube-prometheus-stack deployment reliability with increased timeout settings and retry mechanisms.
|
2026-05-13 23:48:12 -04:00 |
|
Nikholas Pcenicni
|
0acb5856b4
|
Update Longhorn Helm chart version to 1.11.2 in Argo CD configuration and tasks, ensuring compatibility and consistency across deployments.
|
2026-05-13 18:41:57 -04:00 |
|
Nikholas Pcenicni
|
61895ddf31
|
Remove namespace.yaml from Headlamp kustomization to prevent SharedResourceWarning due to multiple Applications owning the same Namespace.
|
2026-05-13 17:50:28 -04:00 |
|
Nikholas Pcenicni
|
e448e6264e
|
Add new repository configuration for Headlamp in Argo CD application manifest to enhance deployment management and streamline application synchronization.
|
2026-05-13 17:47:21 -04:00 |
|
Nikholas Pcenicni
|
8694773593
|
Disable pre-upgrade job in Longhorn values.yaml to prevent failures during Argo CD syncs when Longhorn is already healthy, ensuring cleaner deployments.
|
2026-05-13 17:40:00 -04:00 |
|
Nikholas Pcenicni
|
d378a8c70d
|
Add ServerSideApply option to Argo CD application configurations for improved deployment management
|
2026-05-13 17:35:43 -04:00 |
|
Nikholas Pcenicni
|
a9d6cbb6c5
|
Refine Argo CD configuration for kube-prometheus-stack to clarify CRD management and server-side apply limitations, ensuring compatibility and preventing last-applied-configuration overflow during deployments.
|
2026-05-13 17:29:09 -04:00 |
|
Nikholas Pcenicni
|
b26099342c
|
Update Argo CD configuration to improve handling of managed fields and enhance compatibility with server-side apply, ensuring smoother deployments and conflict resolution.
|
2026-05-13 17:23:54 -04:00 |
|
Nikholas Pcenicni
|
91b32407f8
|
Enable ServerSideApply for kube-prometheus-stack CRDs in Argo CD configuration to avoid last-applied-configuration limit issues during deployments.
|
2026-05-13 17:19:47 -04:00 |
|
Nikholas Pcenicni
|
c4e000d2d5
|
Refactor Argo CD application deployment by removing obsolete tasks and updating README for clarity. Introduce new task inclusion for Argo CD applications post-platform Helm installation, ensuring proper application order and synchronization.
|
2026-05-13 16:57:51 -04:00 |
|
Nikholas Pcenicni
|
aeffc7d6dd
|
Remove Argo CD application configurations for Fluent Bit, Headlamp, Loki, kube-prometheus, and associated kustomization files from the noble bootstrap directory. This cleanup streamlines the project by eliminating unused resources and simplifies the deployment structure.
|
2026-04-01 02:14:49 -04:00 |
|
Nikholas Pcenicni
|
0f88a33216
|
Remove deprecated Argo CD application configurations for various components including cert-manager, Cilium, CSI snapshot controllers, kube-vip, and others. Update README.md to reflect the current state of leaf applications and clarify optional components. Adjust kustomization files to streamline resource management for bootstrap workloads.
|
2026-04-01 02:13:15 -04:00 |
|
Nikholas Pcenicni
|
bfb72cb519
|
Update Argo CD documentation and kustomization files to include additional applications and namespace resources. Enhance README.md with current leaf applications and clarify optional components. This improves deployment clarity and organization for bootstrap workloads.
|
2026-04-01 02:11:19 -04:00 |
|
Nikholas Pcenicni
|
51eb64dd9d
|
Add applications to Argo CD kustomization.yaml for enhanced deployment
|
2026-04-01 02:05:10 -04:00 |
|
Nikholas Pcenicni
|
f259285f6e
|
Enhance Argo CD integration by adding support for a bootstrap root application. Update group_vars/all.yml and role defaults to include noble_argocd_apply_bootstrap_root_application. Modify tasks to apply the bootstrap application conditionally. Revise documentation to clarify the GitOps workflow and the relationship between the core platform and optional applications. Remove outdated references and streamline the README for better user guidance.
|
2026-04-01 01:55:41 -04:00 |
|
Nikholas Pcenicni
|
c312ceeb56
|
Remove Eclipse Che application configurations and related documentation from the repository. This includes the deletion of application-checluster.yaml, application-devworkspace.yaml, application-operator.yaml, checluster.yaml, dwoc.yaml, kustomization.yaml, and README.md, streamlining the project by eliminating outdated resources.
|
2026-04-01 01:21:32 -04:00 |
|
Nikholas Pcenicni
|
3a6e5dff5b
|
Update Ansible configuration to integrate SOPS for managing secrets. Enhance README.md with SOPS usage instructions and prerequisites. Remove External Secrets Operator references and related configurations from the bootstrap process, streamlining the deployment. Adjust playbooks and roles to apply SOPS-encrypted secrets automatically, improving security and clarity in secret management.
|
2026-03-30 22:42:52 -04:00 |
|
Nikholas Pcenicni
|
023ebfee5d
|
Enhance Eclipse Che configuration in checluster.yaml by adding externalTLSConfig for secure workspace subdomains. This change ensures cert-manager can issue TLS certificates, preventing issues with unavailable servers when opening workspaces.
|
2026-03-29 02:03:57 -04:00 |
|
Nikholas Pcenicni
|
27fb4113eb
|
Refactor DevWorkspaceOperatorConfig in dwoc.yaml to simplify configuration structure. This change removes the unnecessary spec.config nesting, aligning with the v1alpha1 API requirements and improving clarity for users configuring development workspaces.
|
2026-03-28 19:58:18 -04:00 |
|
Nikholas Pcenicni
|
4026591f0b
|
Update README.md with troubleshooting steps for Eclipse Che and enhance kustomization.yaml to include DevWorkspaceOperatorConfig. This improves guidance for users facing deployment issues and ensures proper configuration for development workspace management.
|
2026-03-28 19:56:07 -04:00 |
|
Nikholas Pcenicni
|
8a740019ad
|
Add Eclipse Che applications to kustomization.yaml for improved development workspace management. This update includes application-devworkspace, application-operator, and application-checluster resources, enhancing the deployment capabilities for the Noble cluster.
|
2026-03-28 19:53:01 -04:00 |
|
Nikholas Pcenicni
|
544f75b0ee
|
Enhance documentation and configuration for Velero integration. Update README.md to clarify Velero's lack of web UI and usage instructions for CLI. Add CSI Volume Snapshot support in playbooks and roles, and include Velero service details in noble_landing_urls. Adjust kustomization.yaml to include VolumeSnapshotClass configuration, ensuring proper setup for backups. Improve overall clarity in related documentation.
|
2026-03-28 19:34:43 -04:00 |
|
Nikholas Pcenicni
|
33a10dc7e9
|
Add Velero configuration to .env.sample, README.md, and Ansible playbooks. Update group_vars to include noble_velero_install variable. Enhance documentation for optional Velero installation and S3 integration, improving clarity for backup and restore processes.
|
2026-03-28 18:39:22 -04:00 |
|
Nikholas Pcenicni
|
90509bacc5
|
Update homepage values.yaml to replace external siteMonitor URLs with in-cluster service URLs for improved reliability. Enhance comments for clarity on service monitoring and Prometheus widget configurations. Adjust description for better accuracy regarding uptime checks and resource monitoring.
|
2026-03-28 17:13:57 -04:00 |
|
Nikholas Pcenicni
|
e4741ecd15
|
Enhance homepage values.yaml by adding support for RBAC, service account creation, and site monitoring for various services. Update widget configurations for Prometheus and introduce new widgets for datetime and Kubernetes resource monitoring. Adjust layout and styling settings for improved UI presentation.
|
2026-03-28 17:11:01 -04:00 |
|
Nikholas Pcenicni
|
f6647056be
|
Add homepage entry to noble_landing_urls and update kustomization.yaml to include homepage resource
|
2026-03-28 17:07:06 -04:00 |
|
Nikholas Pcenicni
|
76eb7df18c
|
Refactor noble cluster configurations to transition from the deprecated apps structure to a streamlined bootstrap approach. Update paths in various YAML files and README documentation to reflect the new organization under clusters/noble/bootstrap. This change enhances clarity and consistency across the deployment process, ensuring that all components are correctly referenced and documented for user guidance.
|
2026-03-28 17:03:15 -04:00 |
|
Nikholas Pcenicni
|
90fd8fb8a6
|
Refactor noble cluster configurations by removing deprecated Argo CD application management files and transitioning to a streamlined Ansible-driven installation approach. Update kustomization.yaml files to reflect the new structure, ensuring clarity on resource management. Introduce new namespaces and configurations for cert-manager, external-secrets, and logging components, enhancing the overall deployment process. Add detailed README.md documentation for each component to guide users through the setup and management of the noble lab environment.
|
2026-03-28 17:02:50 -04:00 |
|
Nikholas Pcenicni
|
41841abc84
|
Update Kyverno policies-values.yaml to enhance namespace exclusions for policy enforcement. Add detailed comments on the exclusion strategy and provide instructions for refreshing PolicyReports. This change aims to improve clarity and management of policy violations across various namespaces.
|
2026-03-28 16:56:13 -04:00 |
|
Nikholas Pcenicni
|
7a62489ad6
|
Enhance noble_landing_urls role by adding support for generating a Headlamp ServiceAccount token with a configurable duration. Update documentation to reflect changes in the markdown output for Headlamp sign-in. Modify fetch_credentials task to include token generation alongside existing credential fetching. These updates improve the usability and security of the Headlamp integration.
|
2026-03-28 16:38:47 -04:00 |
|
Nikholas Pcenicni
|
0e8eaa2f0d
|
Update .gitignore to include generated noble-lab-ui-urls.md and enhance README.md with new role documentation. Refactor noble.yml to incorporate noble_landing_urls role for improved URL management. Add ingress configurations for alertmanager, prometheus, longhorn, and vault to support TLS termination via Traefik. Update network policies and values.yaml for vault to allow traffic from Traefik. These changes aim to streamline deployment and enhance service accessibility.
|
2026-03-28 16:32:21 -04:00 |
|
Nikholas Pcenicni
|
a48ac16c14
|
Update .gitignore to include .env file and enhance README.md with instructions for deploying secrets. Refactor noble.yml to improve Kubernetes health check handling and update templates for error reporting. Modify cert-manager and metallb tasks to apply secrets from .env and adjust timeout settings. Clarify Newt installation requirements in tasks. These changes aim to streamline deployment processes and improve documentation clarity.
|
2026-03-28 15:36:52 -04:00 |
|
Nikholas Pcenicni
|
46cedc965f
|
Refactor Argo CD application management by removing noble-kyverno and noble-platform configurations, transitioning to Ansible-driven installations. Update documentation to clarify the optional nature of app-of-apps and the role of kustomization.yaml as an empty resource holder. Ensure users are informed about the need to delete stale Applications when migrating from previous configurations.
|
2026-03-28 15:17:54 -04:00 |
|
Nikholas Pcenicni
|
207cdca0cf
|
Enhance Kyverno configuration in values.yaml by adding support for two replicas and enabling API priority and fairness. This update aims to improve resilience during rolling restarts and manage API traffic more effectively under load.
|
2026-03-28 02:55:47 -04:00 |
|
Nikholas Pcenicni
|
bf185b71a9
|
Enhance Kyverno's performance by increasing Kubernetes client QPS and burst limits in values.yaml to prevent rate limiting issues under load. This adjustment aims to improve the stability of the Kyverno health lease during high API/etcd usage.
|
2026-03-28 02:50:23 -04:00 |
|
Nikholas Pcenicni
|
fc985932fe
|
Update cert-manager configurations to use DNS-01 challenge with Cloudflare for both production and staging ClusterIssuers. Modify README.md to reflect the new DNS-01 setup and provide instructions for creating the necessary Cloudflare API token secret. This change enhances certificate issuance reliability when using Cloudflare's proxy services.
|
2026-03-28 02:41:51 -04:00 |
|
Nikholas Pcenicni
|
ee7669c788
|
Update Argo CD application configurations for noble-platform to include sync wave annotations and enhance documentation. Remove redundant Helm chart definitions, clarify application roles in README.md, and implement retry logic for improved deployment resilience.
|
2026-03-28 02:29:23 -04:00 |
|
Nikholas Pcenicni
|
90cd34c34f
|
Enable cert-manager for admission webhook TLS in kube-prometheus-stack values.yaml to prevent Kyverno pre-hook Job failures during Argo sync. Update noble-platform.yaml to adjust Helm chart sources and maintain proper order for Kyverno and kube-prometheus-stack, ensuring correct resource management and deployment flow.
|
2026-03-28 02:25:59 -04:00 |
|
Nikholas Pcenicni
|
1a3c8378d4
|
Update Argo CD application configuration to use HEAD as the target revision in both root-application.yaml and noble-platform.yaml, enhancing clarity in documentation regarding repository tracking. This change supports a more dynamic reference to the latest code in the repository.
|
2026-03-28 02:20:35 -04:00 |
|
Nikholas Pcenicni
|
05717c7e6a
|
Refactor Argo CD application configuration to adopt a multi-source approach for noble-platform, removing Helm chart definitions from kustomization.yaml. Update noble-platform.yaml to directly reference Helm chart sources and clarify documentation in README.md and apps/README.md regarding the new structure and resource representation in the UI.
|
2026-03-28 02:18:02 -04:00 |
|