renovate[bot]
75781b052e
chore(deps): update dependency pipx to v1.16.2 ( #137 )
2026-07-23 21:43:19 -04:00
renovate[bot]
3a96596f5d
chore(deps): update dependency github:home-operations/flate to v0.4.12 ( #135 )
2026-07-23 21:43:01 -04:00
Devin Buhl
d8511212d7
feat: grafana dashboards + alerting overhaul (discord, oci bundle, folders, cnpg, o11y alerts) ( #140 )
...
Signed-off-by: Devin Buhl <devin@buhl.casa >
2026-07-23 20:37:46 -04:00
Devin Buhl
214da1b903
ci: wire up the terraform plan workflow ( #125 )
...
Signed-off-by: Devin Buhl <devin@buhl.casa >
2026-07-23 20:31:33 -04:00
renovate[bot]
5ebf4c23c6
chore(deps): update dependency markdownlint-cli2 to v0.23.1 ( #132 )
2026-07-22 16:03:05 -04:00
renovate[bot]
bf0b54ee65
chore(base): update netbirdio/netbird docker tag to v0.74.7 ( #131 )
2026-07-22 16:02:24 -04:00
renovate[bot]
4ff9211aa6
chore(base): update ghcr.io/victoriametrics/helm-charts/victoria-metrics-k8s-stack docker tag to v0.87.0 ( #126 )
2026-07-22 16:02:04 -04:00
renovate[bot]
653374ee41
chore(deps): update immich-app/devtools action to v3.2.0 ( #133 )
2026-07-22 16:01:44 -04:00
Devin Buhl
17b89441a1
feat: o11y perf tuning, grafana HA alerting, and envoy observability ( #130 )
...
Signed-off-by: Devin Buhl <devin@buhl.casa >
2026-07-22 13:49:00 -04:00
Devin Buhl
b87b929bb6
feat: o11y stack tuning, yucca dashboard folder, and docs ( #128 )
...
Signed-off-by: Devin Buhl <devin@buhl.casa >
2026-07-22 11:59:42 -04:00
Devin Buhl
7fbc18a6c3
feat: browsable VM/VL mesh UIs and yucca grafana dashboards ( #127 )
...
Signed-off-by: Devin Buhl <devin@buhl.casa >
2026-07-22 11:16:01 -04:00
renovate[bot]
d3ea2b025e
chore(base): update ghcr.io/victoriametrics/helm-charts/victoria-metrics-k8s-stack docker tag to v0.86.2 ( #116 )
2026-07-20 10:28:46 -04:00
renovate[bot]
f56a8af557
chore(base): update netbirdio/netbird docker tag to v0.74.6 ( #118 )
2026-07-20 09:32:39 -04:00
7e752ed93e
chore(deps): update immich-app/devtools action to v3 ( #121 )
...
Co-authored-by: Devin Buhl <devin@buhl.casa >
Co-authored-by: Devin Buhl <onedr0p@users.noreply.github.com >
Signed-off-by: Devin Buhl <devin@buhl.casa >
2026-07-20 09:31:56 -04:00
Devin Buhl
f133aefc8b
chore: fix production renovate gaps (pinDigest phantom + netbird image pin) ( #124 )
...
Signed-off-by: Devin Buhl <devin@buhl.casa >
2026-07-20 09:21:47 -04:00
renovate[bot]
f70dd46c20
chore(base): update ghcr.io/victoriametrics/helm-charts/victoria-logs-cluster docker tag to v0.2.8 ( #110 )
2026-07-20 09:04:19 -04:00
renovate[bot]
4efc449276
chore(deps): update terraform netbox to v5 ( #122 )
2026-07-20 09:03:42 -04:00
renovate[bot]
8f933a1fec
chore(base): update ghcr.io/cloudnative-pg/charts/cloudnative-pg docker tag to v0.29.0 ( #112 )
2026-07-20 08:56:46 -04:00
renovate[bot]
197db7583d
chore(deps): lock file maintenance (mise) ( #123 )
2026-07-20 08:54:22 -04:00
renovate[bot]
316528591f
chore(base): update ghcr.io/victoriametrics/helm-charts/victoria-logs-collector docker tag to v0.3.7 ( #111 )
2026-07-20 08:54:02 -04:00
renovate[bot]
73574a24a7
chore(base): update ghcr.io/prometheus-community/charts/prometheus-operator-crds docker tag to v30 ( #120 )
2026-07-20 08:52:57 -04:00
renovate[bot]
57a3bfed2b
chore(base): update ghcr.io/openebs/charts/openebs docker tag to v4.5.1 ( #115 )
2026-07-20 08:52:29 -04:00
renovate[bot]
92c722eb13
chore(base): update mirror.gcr.io/envoyproxy/gateway-helm docker tag to v1.8.2 ( #117 )
...
Co-authored-by: renovate[bot] <29139614+renovate[bot]@users.noreply.github.com>
2026-07-20 08:51:05 -04:00
renovate[bot]
426c7b54d3
chore(base): update ghcr.io/external-secrets/charts/external-secrets docker tag to v2.8.0 ( #113 )
2026-07-20 08:50:07 -04:00
renovate[bot]
981f8b6f36
chore(base): update ghcr.io/home-operations/charts/echo docker tag to v0.2.1 ( #114 )
2026-07-20 08:49:49 -04:00
renovate[bot]
8acec80e33
chore(base): update quay.io/jetstack/charts/cert-manager docker tag to v1.21.0 ( #119 )
2026-07-20 08:45:47 -04:00
renovate[bot]
846aa4c45d
chore(base): update ghcr.io/aureq/charts/cert-manager-webhook-ovh docker tag to v0.9.14 ( #92 )
2026-07-20 08:29:08 -04:00
renovate[bot]
d19bb7a8bf
chore(base): update ghcr.io/home-operations/charts-mirror/metrics-server docker tag to v3.13.1 ( #78 )
2026-07-20 08:28:44 -04:00
renovate[bot]
ff73cea3c7
chore(base): update ghcr.io/prometheus-community/charts/prometheus-operator-crds docker tag to v27.0.1 ( #79 )
2026-07-20 08:28:26 -04:00
renovate[bot]
480e1ee33b
chore(base): update ghcr.io/spegel-org/helm-charts/spegel docker tag to v0.7.4 ( #80 )
2026-07-20 08:28:04 -04:00
renovate[bot]
1af9ceb4f4
chore(base): update ghcr.io/stakater/charts/reloader docker tag to v2.2.14 ( #87 )
2026-07-20 08:27:41 -04:00
Devin Buhl
428513655e
chore: unblock and gate renovate env PR flow ( #109 )
...
* chore: unblock and gate renovate env PR flow
prHourlyLimit 0 so the weekly window actually drains the queue - the
default of 2/hour meant production-prefixed branches never reached the
front, so no production PR was ever created. Production updates now
require a Dependency Dashboard checkbox (dependencyDashboardApproval),
giving the intended promotion flow: base/staging merges and soaks first,
production is a deliberate click. Also disables netbox provider majors,
which track NetBox server versions.
Signed-off-by: Devin Buhl <devin@buhl.casa >
* Apply suggestion from @onedr0p
* Apply suggestions from code review
Co-authored-by: Devin Buhl <onedr0p@users.noreply.github.com >
* Apply suggestions from code review
Co-authored-by: Devin Buhl <onedr0p@users.noreply.github.com >
---------
Signed-off-by: Devin Buhl <devin@buhl.casa >
2026-07-17 11:21:21 -04:00
Devin Buhl
7c237b79d7
chore: bring all deps up-to-date ( #108 )
...
Signed-off-by: Devin Buhl <devin@buhl.casa >
2026-07-17 11:13:16 -04:00
renovate[bot]
8a6f8fd174
chore(base): pin netbirdio/netbird docker tag to 201ce4b ( #77 )
2026-07-17 11:01:09 -04:00
renovate[bot]
56f9559c62
chore(deps): update dependency opentofu to v1.12.3 ( #94 )
2026-07-17 10:48:34 -04:00
renovate[bot]
9ccaeb4146
chore(deps): update terraform ovh to v2.16.1 ( #49 )
2026-07-17 10:47:58 -04:00
renovate[bot]
3b1ced8318
chore(deps): update terraform kubernetes to v3.2.1 ( #48 )
2026-07-17 10:47:38 -04:00
renovate[bot]
22e7aba785
chore(deps): update terraform helm to v3.2.0 ( #29 )
2026-07-17 10:47:17 -04:00
renovate[bot]
469b147b95
chore(deps): lock file maintenance (mise) ( #85 )
2026-07-17 10:46:46 -04:00
Devin Buhl
6cbb439098
docs: describe the netbird mesh topology and refresh stale sections ( #107 )
...
Signed-off-by: Devin Buhl <devin@buhl.casa >
2026-07-17 10:08:20 -04:00
Devin Buhl
e36185430c
fix: carry OCI chart digests in the production patches ( #106 )
...
Signed-off-by: Devin Buhl <devin@buhl.casa >
2026-07-17 07:42:03 -04:00
Devin Buhl
b9eb3cf26c
refactor: futo-org netbird provider + rfc1123 object names ( #105 )
...
Signed-off-by: Devin Buhl <devin@buhl.casa >
2026-07-16 11:42:11 -04:00
Devin Buhl
d2eb0b8ac0
refactor: make tf outputs the single source of operational facts ( #104 )
...
Signed-off-by: Devin Buhl <devin@buhl.casa >
2026-07-16 11:17:33 -04:00
Devin Buhl
5ea3585222
refactor: derive the kubeconfig mesh endpoint in terraform ( #103 )
...
Signed-off-by: Devin Buhl <devin@buhl.casa >
2026-07-16 09:31:15 -04:00
Devin Buhl
d39642be3a
feat: HA kube-apiserver access over the mesh (TLS passthrough) ( #101 )
...
Signed-off-by: Devin Buhl <devin@buhl.casa >
2026-07-16 08:23:55 -04:00
Devin Buhl
81f3d68750
refactor: retire the in-cluster 1Password Connect ( #100 )
...
Signed-off-by: Devin Buhl <devin@buhl.casa >
2026-07-14 09:41:06 -04:00
Devin Buhl
35f06f901e
feat: point ExternalSecrets at bootstrap-hosted 1Password Connect ( #99 )
...
Signed-off-by: Devin Buhl <devin@buhl.casa >
2026-07-14 09:18:26 -04:00
Devin Buhl
7d5446b43b
feat: add addressing to netbox ( #98 )
...
Signed-off-by: Devin Buhl <devin@buhl.casa >
2026-07-14 08:28:29 -04:00
renovate[bot]
b7b38ed7aa
chore(deps): update dependency github:home-operations/flate to v0.4.10 ( #88 )
2026-07-14 07:01:34 -04:00
renovate[bot]
142df9aec4
chore(deps): update dependency jq to v1.8.2 ( #93 )
2026-07-14 07:01:13 -04:00