302 Commits
Author SHA1 Message Date
renovate[bot] 39e9c7866a chore(deps): update flate to v0.6.5 (#298) 2026-09-11 09:15:19 -04:00
renovate[bot] e67a0990ec chore(base): update netbirdio/netbird docker tag to v0.78.1 (#299) 2026-09-11 09:15:02 -04:00
renovate[bot] 9505d24fc7 chore(deps): update dependency helm to v4.3.0 (#300) 2026-09-11 09:14:35 -04:00
renovate[bot] 617932ed59 chore(deps): update dependency uv to v0.12.10 (#297) 2026-09-11 09:14:18 -04:00
renovate[bot] 78aa5125f8 chore(base): update quay.io/jetstack/charts/cert-manager docker tag to v1.21.2 (#296) 2026-09-11 09:13:56 -04:00
renovate[bot] 76f5d957be chore(base): update ghcr.io/stakater/charts/reloader docker tag to v2.2.17 (#295) 2026-09-11 09:13:46 -04:00
renovate[bot] 8b0e1d53cc chore(base): update ghcr.io/openebs/charts/openebs docker tag to v4.6.1 (#294) 2026-09-11 09:13:37 -04:00
Devin Buhl 33682e78cc chore(renovate): match every o11y-manifests bundle in the no-pinDigest rule (#293)
Signed-off-by: Devin Buhl <devin@buhl.casa>
2026-09-11 09:09:34 -04:00
Devin Buhl 111d4c5b16 chore(renovate): track harbor o11y-manifests at registry.futo.org (#292)
Signed-off-by: Devin Buhl <devin@buhl.casa>
2026-09-11 09:06:11 -04:00
Mark Harding 83a50425d2 feat(github): Update the harbor-o11y public key (#291)
Update the harbor-o11y public key
2026-09-11 10:12:18 +00:00
Devin Buhl 4a0b6f0cbe feat(fip-o11y): consume the futo-internal-platform o11y bundle (#290)
Signed-off-by: Devin Buhl <devin@buhl.casa>
2026-09-09 11:53:02 -04:00
renovate[bot] dcd77c4d29 chore(base): update ghcr.io/victoriametrics/helm-charts/victoria-metrics-k8s-stack docker tag to v0.92.1 (#281) 2026-09-09 09:02:54 -04:00
renovate[bot]andDevin Buhl e0438cb440 chore(deps): update terraform helm to v3.3.0 (#284)
Co-authored-by: Devin Buhl <onedr0p@users.noreply.github.com>
2026-09-09 08:15:16 -04:00
renovate[bot] 43b577c1a9 chore(deps): update dependency pipx to v1.17.2 (#283) 2026-09-09 08:13:18 -04:00
renovate[bot] 5835d08d07 chore(deps): update terraform rootly to v5.21.0 (#285) 2026-09-09 08:13:09 -04:00
renovate[bot] 30db141544 chore(base): update ghcr.io/home-operations/charts/echo docker tag to v0.2.5 (#275) 2026-09-09 08:12:44 -04:00
renovate[bot] c92cc49068 chore(base): update mirror.gcr.io/envoyproxy/gateway-helm docker tag to v1.9.1 (#265) 2026-09-09 08:12:22 -04:00
renovate[bot] 92091a87e4 chore(deps): update dependency terragrunt to v1.1.4 (#278) 2026-09-09 08:11:45 -04:00
renovate[bot] 477459e310 chore(deps): update dependency gh to v2.100.0 (#282) 2026-09-09 08:10:36 -04:00
renovate[bot] f5d2b6d38a chore(deps): update dependency flux2 to v2.9.5 (#276) 2026-09-09 08:09:59 -04:00
renovate[bot] 7878cb3aa6 chore(deps): update dependency uv to v0.12.9 (#279) 2026-09-09 08:09:37 -04:00
Devin Buhl 7697738da4 chore(renovate): skip harbor o11y-manifests digest pinning, automerge flate (#289)
Signed-off-by: Devin Buhl <devin@buhl.casa>
2026-09-09 07:46:58 -04:00
Devin Buhl b239efb936 feat(grafana): default staging oauth logins to the editor role (#273)
Signed-off-by: Devin Buhl <devin@buhl.casa>
2026-09-09 07:37:34 -04:00
renovate[bot] d61cb65b9d chore(deps): update home-operations/flate action to v0.6.2 (#266) 2026-09-07 08:57:59 -04:00
Mark Harding ba58d11b15 feat(github): Add habor o11y (#272) 2026-09-04 09:06:45 -04:00
renovate[bot] 2e51a6c85f chore(base): update ghcr.io/external-secrets/charts/external-secrets docker tag to v2.10.0 (#267) 2026-09-03 09:58:58 -04:00
Devin Buhl ec1a462f7a chore(mise): lock only linux and macos on arm64/amd64 (#271)
Signed-off-by: Devin Buhl <devin@buhl.casa>
2026-09-02 10:11:59 -04:00
Devin Buhl a3ca499b11 ci(deploy): swap the devtools use-mise wrapper for the official mise-action (#270)
Signed-off-by: Devin Buhl <devin@buhl.casa>
2026-09-02 09:56:56 -04:00
Devin Buhl 76e4e69f0d feat(deployment): guard servers from destroy and stage production talos reboots (#269)
* feat(deployment): guard servers from destroy and stage production talos reboots

Add prevent_destroy to the OVH control-plane instances, the bare-metal
workers, and the Talos machine secrets so a plan that would replace or
delete one fails instead of applying.

Add a talos apply_mode variable. Production applies with
staged_if_needing_reboot: a machine-config change that needs a reboot is
written to the node but stays inactive until an operator reboots it, one
node at a time. Staging keeps auto so the reboot path is exercised there
first. The provider has no try-style auto-revert mode, and the per-node
applies are unordered, so this is the only lever that stops a bad config
from rebooting every control plane at once.

Document both behaviours in the bootstrap guide.

Signed-off-by: Devin Buhl <devin@buhl.casa>

* chore(rootly): refresh provider lock hashes

Signed-off-by: Devin Buhl <devin@buhl.casa>

---------

Signed-off-by: Devin Buhl <devin@buhl.casa>
2026-09-02 09:08:17 -04:00
Antoine Lecompte e16314ff8c fix(netbird): add fip to the policy granting it route delivery (#268) 2026-09-02 08:32:25 -04:00
Devin Buhl 75f9cb25a4 fix(victoria-logs): allow partial query responses during vlstorage outages (#262)
Signed-off-by: Devin Buhl <devin@buhl.casa>
2026-08-28 11:04:07 -04:00
Devin Buhl 63d12190a0 feat(deployment): publish vmauth gateway URLs to shared 1Password vaults (#263)
Signed-off-by: Devin Buhl <devin@buhl.casa>
2026-08-28 11:03:57 -04:00
Devin Buhl 143dd6ce42 feat(base): deploy VictoriaMetrics and VictoriaLogs MCP servers (#264)
Signed-off-by: Devin Buhl <devin@buhl.casa>
2026-08-28 11:03:49 -04:00
Zack Pollard 9337c9865c feat(fmeet): pull in the FUTO Meet dashboards and alerts bundle (#239) 2026-08-27 19:48:15 +01:00
Andy Molenda 3a3abf02ec chore(deps): update flate to v0.6.1 (#258) 2026-08-27 09:59:11 -04:00
renovate[bot] 829de161fa chore(deps): update home-operations/flate action to v0.5.1 (#233) 2026-08-27 09:17:37 -04:00
renovate[bot] fc5e3649a3 chore(deps): update dependency github:home-operations/flate to v0.5.1 (#257) 2026-08-27 09:17:15 -04:00
Devin Buhl daaed94095 chore: latest flate versions should have fixed the ks root issue (#256) 2026-08-27 09:10:43 -04:00
renovate[bot] 31df4def11 chore(deps): update dependency kubectl to v1.37.0 (#255) 2026-08-27 09:04:45 -04:00
renovate[bot] 5f23090bd1 chore(deps): update dependency uv to v0.12.6 (#254) 2026-08-27 09:04:24 -04:00
renovate[bot] 03c44c9f26 chore(deps): update dependency gh to v2.98.0 (#251) 2026-08-27 09:01:57 -04:00
renovate[bot] bb6e43a25d chore(deps): update dependency pipx:python-openstackclient to v10.3.0 (#253) 2026-08-27 09:00:22 -04:00
renovate[bot] 1eb9bb2f09 chore(base): update ghcr.io/openebs/charts/openebs docker tag to v4.6.0 (#250) 2026-08-27 08:59:59 -04:00
renovate[bot] a31b35e5a9 chore(deps): update terraform rootly to v5.20.1 (#252) 2026-08-27 08:59:30 -04:00
renovate[bot] 06bc37b6fb chore(deps): update dependency yq to v4.53.6 (#246) 2026-08-27 08:58:52 -04:00
renovate[bot] 72b8d54455 chore(base): update ghcr.io/home-operations/charts/gatus-sidecar docker tag to v0.5.2 (#249) 2026-08-27 08:58:00 -04:00
renovate[bot] c1132552e3 chore(base): update ghcr.io/home-operations/charts-mirror/metrics-server docker tag to v3.14.0 (#248) 2026-08-27 08:57:40 -04:00
renovate[bot] 6f2260622c chore(base): update ghcr.io/grafana/helm-charts/grafana-operator docker tag to v5.25.0 (#247) 2026-08-27 08:57:23 -04:00
renovate[bot] 3281441873 chore(deps): update dependency uv to v0.12.5 (#245) 2026-08-27 08:57:02 -04:00
renovate[bot] 1e1f8cf2fa chore(deps): update dependency talosctl to v1.13.9 (#244) 2026-08-27 08:56:42 -04:00