269 Commits

This Branch

This Branch

All Branches

Author	SHA1	Message	Date
Devin Buhl	25817f44a5	feat(grafana): default users to Editor and lock provisioned folders (#317) ... Signed-off-by: Devin Buhl <devin@buhl.casa>	2026-09-11 10:48:53 -04:00
renovate[bot]	362467b0f8	chore(production): update ghcr.io/prometheus-community/charts/prometheus-operator-crds docker tag to v32 (#316) ... Co-authored-by: renovate[bot] <29139614+renovate[bot]@users.noreply.github.com>	2026-09-11 09:43:27 -04:00
renovate[bot]	62687e9209	chore(production): update netbirdio/netbird docker tag to v0.78.1 (#315) ... Co-authored-by: renovate[bot] <29139614+renovate[bot]@users.noreply.github.com>	2026-09-11 09:43:20 -04:00
renovate[bot]	176eb2b31a	chore(production): update mirror.gcr.io/envoyproxy/gateway-helm docker tag to v1.9.1 (#314) ... Co-authored-by: renovate[bot] <29139614+renovate[bot]@users.noreply.github.com>	2026-09-11 09:43:14 -04:00
renovate[bot]	0ddac0aa05	chore(production): update ghcr.io/victoriametrics/helm-charts/victoria-metrics-k8s-stack docker tag to v0.92.1 (#313) ... Co-authored-by: renovate[bot] <29139614+renovate[bot]@users.noreply.github.com>	2026-09-11 09:43:08 -04:00
renovate[bot]	cb9a6b73c4	chore(production): update ghcr.io/openebs/charts/openebs docker tag to v4.6.1 (#312) ... Co-authored-by: renovate[bot] <29139614+renovate[bot]@users.noreply.github.com>	2026-09-11 09:43:02 -04:00
renovate[bot]	7310278dbf	chore(production): update ghcr.io/home-operations/charts-mirror/metrics-server docker tag to v3.14.0 (#311) ... Co-authored-by: renovate[bot] <29139614+renovate[bot]@users.noreply.github.com>	2026-09-11 09:42:56 -04:00
renovate[bot]	7e13a45f6f	chore(production): update ghcr.io/grafana/helm-charts/grafana-operator docker tag to v5.25.0 (#310) ... Co-authored-by: renovate[bot] <29139614+renovate[bot]@users.noreply.github.com>	2026-09-11 09:42:50 -04:00
renovate[bot]	ef61a108e8	chore(production): update ghcr.io/external-secrets/charts/external-secrets docker tag to v2.10.0 (#309) ... Co-authored-by: renovate[bot] <29139614+renovate[bot]@users.noreply.github.com>	2026-09-11 09:42:43 -04:00
renovate[bot]	2d92546a56	chore(production): update quay.io/jetstack/charts/cert-manager docker tag to v1.21.2 (#308) ... Co-authored-by: renovate[bot] <29139614+renovate[bot]@users.noreply.github.com>	2026-09-11 09:42:37 -04:00
renovate[bot]	f563500553	chore(production): update ghcr.io/stakater/charts/reloader docker tag to v2.2.17 (#307) ... Co-authored-by: renovate[bot] <29139614+renovate[bot]@users.noreply.github.com>	2026-09-11 09:42:31 -04:00
renovate[bot]	925ab6b086	chore(production): update ghcr.io/home-operations/charts/echo docker tag to v0.2.5 (#306) ... Co-authored-by: renovate[bot] <29139614+renovate[bot]@users.noreply.github.com>	2026-09-11 09:42:25 -04:00
renovate[bot]	ff6129c513	chore(production): update ghcr.io/aureq/charts/cert-manager-webhook-ovh docker tag to v0.9.16 (#305) ... Co-authored-by: renovate[bot] <29139614+renovate[bot]@users.noreply.github.com>	2026-09-11 09:42:19 -04:00
renovate[bot]	ba1bc76887	chore(deps): update dependency uv to v0.12.13 (#304)	2026-09-11 09:27:39 -04:00
renovate[bot]	5cceb85465	chore(deps): update dependency talosctl to v1.14.0 (#301)	2026-09-11 09:16:30 -04:00
renovate[bot]	28032f2704	chore(base): update ghcr.io/prometheus-community/charts/prometheus-operator-crds docker tag to v32 (#303)	2026-09-11 09:16:04 -04:00
renovate[bot]	5d15b03cb1	chore(deps): update terraform netbox to v5.8.0 (#302)	2026-09-11 09:15:39 -04:00
renovate[bot]	39e9c7866a	chore(deps): update flate to v0.6.5 (#298)	2026-09-11 09:15:19 -04:00
renovate[bot]	e67a0990ec	chore(base): update netbirdio/netbird docker tag to v0.78.1 (#299)	2026-09-11 09:15:02 -04:00
renovate[bot]	9505d24fc7	chore(deps): update dependency helm to v4.3.0 (#300)	2026-09-11 09:14:35 -04:00
renovate[bot]	617932ed59	chore(deps): update dependency uv to v0.12.10 (#297)	2026-09-11 09:14:18 -04:00
renovate[bot]	78aa5125f8	chore(base): update quay.io/jetstack/charts/cert-manager docker tag to v1.21.2 (#296)	2026-09-11 09:13:56 -04:00
renovate[bot]	76f5d957be	chore(base): update ghcr.io/stakater/charts/reloader docker tag to v2.2.17 (#295)	2026-09-11 09:13:46 -04:00
renovate[bot]	8b0e1d53cc	chore(base): update ghcr.io/openebs/charts/openebs docker tag to v4.6.1 (#294)	2026-09-11 09:13:37 -04:00
Devin Buhl	33682e78cc	chore(renovate): match every o11y-manifests bundle in the no-pinDigest rule (#293) ... Signed-off-by: Devin Buhl <devin@buhl.casa>	2026-09-11 09:09:34 -04:00
Devin Buhl	111d4c5b16	chore(renovate): track harbor o11y-manifests at registry.futo.org (#292) ... Signed-off-by: Devin Buhl <devin@buhl.casa>	2026-09-11 09:06:11 -04:00
Mark Harding	83a50425d2	feat(github): Update the harbor-o11y public key (#291) ... Update the harbor-o11y public key	2026-09-11 10:12:18 +00:00
Devin Buhl	4a0b6f0cbe	feat(fip-o11y): consume the futo-internal-platform o11y bundle (#290) ... Signed-off-by: Devin Buhl <devin@buhl.casa>	2026-09-09 11:53:02 -04:00
renovate[bot]	dcd77c4d29	chore(base): update ghcr.io/victoriametrics/helm-charts/victoria-metrics-k8s-stack docker tag to v0.92.1 (#281)	2026-09-09 09:02:54 -04:00
renovate[bot]andDevin Buhl	e0438cb440	chore(deps): update terraform helm to v3.3.0 (#284) ... Co-authored-by: Devin Buhl <onedr0p@users.noreply.github.com>	2026-09-09 08:15:16 -04:00
renovate[bot]	43b577c1a9	chore(deps): update dependency pipx to v1.17.2 (#283)	2026-09-09 08:13:18 -04:00
renovate[bot]	5835d08d07	chore(deps): update terraform rootly to v5.21.0 (#285)	2026-09-09 08:13:09 -04:00
renovate[bot]	30db141544	chore(base): update ghcr.io/home-operations/charts/echo docker tag to v0.2.5 (#275)	2026-09-09 08:12:44 -04:00
renovate[bot]	c92cc49068	chore(base): update mirror.gcr.io/envoyproxy/gateway-helm docker tag to v1.9.1 (#265)	2026-09-09 08:12:22 -04:00
renovate[bot]	92091a87e4	chore(deps): update dependency terragrunt to v1.1.4 (#278)	2026-09-09 08:11:45 -04:00
renovate[bot]	477459e310	chore(deps): update dependency gh to v2.100.0 (#282)	2026-09-09 08:10:36 -04:00
renovate[bot]	f5d2b6d38a	chore(deps): update dependency flux2 to v2.9.5 (#276)	2026-09-09 08:09:59 -04:00
renovate[bot]	7878cb3aa6	chore(deps): update dependency uv to v0.12.9 (#279)	2026-09-09 08:09:37 -04:00
Devin Buhl	7697738da4	chore(renovate): skip harbor o11y-manifests digest pinning, automerge flate (#289) ... Signed-off-by: Devin Buhl <devin@buhl.casa>	2026-09-09 07:46:58 -04:00
Devin Buhl	b239efb936	feat(grafana): default staging oauth logins to the editor role (#273) ... Signed-off-by: Devin Buhl <devin@buhl.casa>	2026-09-09 07:37:34 -04:00
renovate[bot]	d61cb65b9d	chore(deps): update home-operations/flate action to v0.6.2 (#266)	2026-09-07 08:57:59 -04:00
Mark Harding	ba58d11b15	feat(github): Add habor o11y (#272)	2026-09-04 09:06:45 -04:00
renovate[bot]	2e51a6c85f	chore(base): update ghcr.io/external-secrets/charts/external-secrets docker tag to v2.10.0 (#267)	2026-09-03 09:58:58 -04:00
Devin Buhl	ec1a462f7a	chore(mise): lock only linux and macos on arm64/amd64 (#271) ... Signed-off-by: Devin Buhl <devin@buhl.casa>	2026-09-02 10:11:59 -04:00
Devin Buhl	a3ca499b11	ci(deploy): swap the devtools use-mise wrapper for the official mise-action (#270) ... Signed-off-by: Devin Buhl <devin@buhl.casa>	2026-09-02 09:56:56 -04:00
Devin Buhl	76e4e69f0d	feat(deployment): guard servers from destroy and stage production talos reboots (#269) ... * feat(deployment): guard servers from destroy and stage production talos reboots Add prevent_destroy to the OVH control-plane instances, the bare-metal workers, and the Talos machine secrets so a plan that would replace or delete one fails instead of applying. Add a talos apply_mode variable. Production applies with staged_if_needing_reboot: a machine-config change that needs a reboot is written to the node but stays inactive until an operator reboots it, one node at a time. Staging keeps auto so the reboot path is exercised there first. The provider has no try-style auto-revert mode, and the per-node applies are unordered, so this is the only lever that stops a bad config from rebooting every control plane at once. Document both behaviours in the bootstrap guide. Signed-off-by: Devin Buhl <devin@buhl.casa> * chore(rootly): refresh provider lock hashes Signed-off-by: Devin Buhl <devin@buhl.casa> --------- Signed-off-by: Devin Buhl <devin@buhl.casa>	2026-09-02 09:08:17 -04:00
Antoine Lecompte	e16314ff8c	fix(netbird): add fip to the policy granting it route delivery (#268)	2026-09-02 08:32:25 -04:00
Devin Buhl	75f9cb25a4	fix(victoria-logs): allow partial query responses during vlstorage outages (#262) ... Signed-off-by: Devin Buhl <devin@buhl.casa>	2026-08-28 11:04:07 -04:00
Devin Buhl	63d12190a0	feat(deployment): publish vmauth gateway URLs to shared 1Password vaults (#263) ... Signed-off-by: Devin Buhl <devin@buhl.casa>	2026-08-28 11:03:57 -04:00
Devin Buhl	143dd6ce42	feat(base): deploy VictoriaMetrics and VictoriaLogs MCP servers (#264) ... Signed-off-by: Devin Buhl <devin@buhl.casa>	2026-08-28 11:03:49 -04:00