Nikholas Pcenicni gsdavidp
  • Joined on 2025-12-22
gsdavidp pushed to main at gsdavidp/home-server 2026-05-14 22:55:23 +00:00
2321209626 Update Helm chart versions across multiple components to latest stable releases, including Argo CD (9.5.14), cert-manager (v1.20.2), Cilium (1.19.4), kube-prometheus-stack (85.0.3), Loki (7.0.0), Fluent Bit (0.57.5), Headlamp (0.42.0), Traefik (40.2.0), and Kyverno (3.8.0). Adjusted related documentation and values files to reflect these changes for improved deployment consistency and compatibility.
gsdavidp pushed to main at gsdavidp/home-server 2026-05-14 22:35:54 +00:00
95b1866144 Update .gitignore to exclude all .tmp files and enhance clarity in middleware-https-proto.yaml by adding X-Forwarded-Host and X-Forwarded-Port headers for improved redirect handling in Headlamp.
86df02f9bd Update Traefik Ingress middleware reference in values.yaml for Headlamp to align with CRD naming conventions and improve documentation clarity.
Compare 2 commits »
gsdavidp pushed to main at gsdavidp/home-server 2026-05-14 22:27:47 +00:00
af3ab32de8 Add middleware-https-proto.yaml to enforce HTTPS scheme for Headlamp and update kustomization.yaml and values.yaml accordingly
gsdavidp pushed to main at gsdavidp/home-server 2026-05-14 21:36:24 +00:00
8e42777a1d Update Longhorn runbook documentation for clarity and compliance. Adjusted section references for consistency and added details on security and compliance measures regarding RBAC and namespace management.
gsdavidp pushed to main at gsdavidp/home-server 2026-05-14 21:24:25 +00:00
24cd07015d Update Trivy dashboard application manifest to specify the OCI Helm path as '.' for compatibility with Argo CD documentation, ensuring correct deployment of the trivy-operator-dashboard.
gsdavidp pushed to main at gsdavidp/home-server 2026-05-14 21:21:52 +00:00
e48283fc43 Update Trivy configuration paths in Ansible tasks and Argo CD application manifests to reflect new directory structure. Adjust references in values.yaml and dashboard-values.yaml for consistency and clarity in deployment processes.
gsdavidp pushed to main at gsdavidp/home-server 2026-05-14 21:18:45 +00:00
c347416668 Refactor Argo CD application management by removing the obsolete root-application.yaml and updating the bootstrap-root-application.yaml to include optional add-on Application manifests from clusters/noble/apps. Adjust documentation to clarify the deployment order and resource ownership, ensuring a streamlined GitOps process with Ansible and Argo CD.
gsdavidp pushed to main at gsdavidp/home-server 2026-05-14 21:13:21 +00:00
4cb8574109 Update kustomization.yaml to include additional Trivy resources: namespace.yaml, values.yaml, and dashboard-values.yaml, enhancing security scanning configuration.
gsdavidp pushed to main at gsdavidp/home-server 2026-05-14 21:12:34 +00:00
cea59e501c Update kustomization.yaml to include all Trivy resources, streamlining configuration for security scanning.
gsdavidp pushed to main at gsdavidp/home-server 2026-05-14 21:10:03 +00:00
10fdaf873c Update .gitignore to include .tmp files, remove Trivy namespace from kustomization.yaml, and add Trivy dashboard application to app-of-apps kustomization. Delete obsolete Trivy namespace and values files to streamline deployment configuration.
gsdavidp pushed to main at gsdavidp/home-server 2026-05-14 21:04:30 +00:00
a5869c242a Update documentation and playbook to clarify Trivy Operator installation via Argo CD, removing direct Ansible role references. Adjust README and related files to reflect the new deployment order and ensure proper resource ownership, enhancing overall clarity for users.
gsdavidp pushed to main at gsdavidp/home-server 2026-05-14 20:58:26 +00:00
c3c89b8f0a Add Ansible getting started guide for Proxmox to Talos deployment process and update README with narrative walkthrough. This enhances documentation clarity and provides a structured approach for users to set up the noble cluster.
gsdavidp pushed to main at gsdavidp/home-server 2026-05-14 20:46:49 +00:00
1e6d84f0f3 Refactor noble.yml playbook to apply Argo CD Application manifests after all Helm roles, ensuring proper resource ownership and avoiding SSA conflicts. Update related documentation to reflect the new execution order and clarify the role of Argo CD in the deployment process.
gsdavidp pushed to main at gsdavidp/home-server 2026-05-14 20:12:01 +00:00
1a50599cb4 Enhance Authentik role by updating README with detailed troubleshooting steps for Headlamp OIDC integration, including handling of scopes and PKCE settings. Adjust default variables for Headlamp OIDC scopes and ensure proper application of Kubernetes RBAC for OIDC groups. Update Helm tasks to apply necessary static manifests for Headlamp, improving overall deployment and authentication reliability.
gsdavidp pushed to main at gsdavidp/home-server 2026-05-14 19:52:46 +00:00
4bc8da0225 Enhance Authentik role by adding Helm wait timeout for oauth2-proxy and improving task conditions for admin access and OAuth2 provider upserts. Update README with new variable descriptions and adjust Longhorn deployment tasks to ensure proper rollout before Loki installation, enhancing overall deployment reliability.
gsdavidp pushed to main at gsdavidp/home-server 2026-05-14 18:26:47 +00:00
5e5c6ef671 Enhance Authentik role in noble cluster setup by adding support for resolving OAuth2 flow, signing key, and scope mapping UUIDs from the worker database, improving API access under 2026+ RBAC. Update README with troubleshooting steps for common OAuth2 provider issues and adjust default variables for better configuration management. Ensure seamless integration with oauth2-proxy by allowing unverified email handling in development environments.
gsdavidp pushed to main at gsdavidp/home-server 2026-05-14 05:29:54 +00:00
c392ce1e5a Enhance Authentik integration in noble cluster setup by adding support for OAuth2 flow primary keys in configuration. Update README with troubleshooting steps for common API errors and improve deployment reliability with tasks to wait for Authentik worker rollout and API readiness. Adjust Helm chart values for Grafana and Headlamp to accommodate new OIDC settings, ensuring seamless authentication and authorization processes.
gsdavidp pushed to main at gsdavidp/home-server 2026-05-14 04:39:36 +00:00
15d0e120d3 Update Ansible configuration and documentation to reflect new inventory structure. Migrate group_vars to inventory/group_vars/ and enhance README with updated paths for variable files, improving clarity for users.
gsdavidp pushed to main at gsdavidp/home-server 2026-05-14 04:23:52 +00:00
78b524a044 Add Authentik and oauth2-proxy support to noble cluster setup, including environment variables, playbook tags, and landing URLs. Update README and kustomization.yaml to reflect new OIDC integration, enhancing security and user authentication capabilities.
gsdavidp pushed to main at gsdavidp/home-server 2026-05-14 03:59:54 +00:00
2bf7277917 Enhance csi-snapshot-controller README with troubleshooting guidance for CrashLoopBackOff issues and update kustomization.yaml to include deployment patch. This improves user experience and deployment reliability.