Commit Graph
110 Commits
Author SHA1 Message Date
Devin Buhl d20079b97b refactor(flux): dedup per-env Kustomizations into base ks.yaml+app layout (#147)
Signed-off-by: Devin Buhl <devin@buhl.casa>
2026-07-24 12:49:03 -04:00
Devin Buhl f027e07c9c fix(grafana): consolidate the Discord alert into a single embed (#146)
Signed-off-by: Devin Buhl <devin@buhl.casa>
2026-07-24 06:49:01 -04:00
Devin Buhl ec188a653b feat(grafana): clean up Discord notifications and route by grafana_folder (#141)
Signed-off-by: Devin Buhl <devin@buhl.casa>
2026-07-24 06:24:47 -04:00
renovate[bot] ab0e95639f chore(deps): update github-actions (#145)
Co-authored-by: renovate[bot] <29139614+renovate[bot]@users.noreply.github.com>
2026-07-24 05:16:28 -04:00
renovate[bot] 29b5dba9b4 chore(deps): update dependency uv to v0.11.32 (#139) 2026-07-23 22:16:12 -04:00
renovate[bot] fb5e7eb6df chore(base): update mirror.gcr.io/envoyproxy/gateway-helm docker tag to v1.8.3 (#134) 2026-07-23 21:44:29 -04:00
renovate[bot] 204a57917a chore(deps): update dependency opentofu to v1.12.5 (#136) 2026-07-23 21:44:06 -04:00
renovate[bot] 0099d34edb chore(deps): update dependency talosctl to v1.13.7 (#138) 2026-07-23 21:43:49 -04:00
renovate[bot] 75781b052e chore(deps): update dependency pipx to v1.16.2 (#137) 2026-07-23 21:43:19 -04:00
renovate[bot] 3a96596f5d chore(deps): update dependency github:home-operations/flate to v0.4.12 (#135) 2026-07-23 21:43:01 -04:00
Devin Buhl d8511212d7 feat: grafana dashboards + alerting overhaul (discord, oci bundle, folders, cnpg, o11y alerts) (#140)
Signed-off-by: Devin Buhl <devin@buhl.casa>
2026-07-23 20:37:46 -04:00
Devin Buhl 214da1b903 ci: wire up the terraform plan workflow (#125)
Signed-off-by: Devin Buhl <devin@buhl.casa>
2026-07-23 20:31:33 -04:00
renovate[bot] 5ebf4c23c6 chore(deps): update dependency markdownlint-cli2 to v0.23.1 (#132) 2026-07-22 16:03:05 -04:00
renovate[bot] bf0b54ee65 chore(base): update netbirdio/netbird docker tag to v0.74.7 (#131) 2026-07-22 16:02:24 -04:00
renovate[bot] 4ff9211aa6 chore(base): update ghcr.io/victoriametrics/helm-charts/victoria-metrics-k8s-stack docker tag to v0.87.0 (#126) 2026-07-22 16:02:04 -04:00
renovate[bot] 653374ee41 chore(deps): update immich-app/devtools action to v3.2.0 (#133) 2026-07-22 16:01:44 -04:00
Devin Buhl 17b89441a1 feat: o11y perf tuning, grafana HA alerting, and envoy observability (#130)
Signed-off-by: Devin Buhl <devin@buhl.casa>
2026-07-22 13:49:00 -04:00
Devin Buhl b87b929bb6 feat: o11y stack tuning, yucca dashboard folder, and docs (#128)
Signed-off-by: Devin Buhl <devin@buhl.casa>
2026-07-22 11:59:42 -04:00
Devin Buhl 7fbc18a6c3 feat: browsable VM/VL mesh UIs and yucca grafana dashboards (#127)
Signed-off-by: Devin Buhl <devin@buhl.casa>
2026-07-22 11:16:01 -04:00
renovate[bot] d3ea2b025e chore(base): update ghcr.io/victoriametrics/helm-charts/victoria-metrics-k8s-stack docker tag to v0.86.2 (#116) 2026-07-20 10:28:46 -04:00
renovate[bot] f56a8af557 chore(base): update netbirdio/netbird docker tag to v0.74.6 (#118) 2026-07-20 09:32:39 -04:00
7e752ed93e chore(deps): update immich-app/devtools action to v3 (#121)
Co-authored-by: Devin Buhl <devin@buhl.casa>
Co-authored-by: Devin Buhl <onedr0p@users.noreply.github.com>
Signed-off-by: Devin Buhl <devin@buhl.casa>
2026-07-20 09:31:56 -04:00
Devin Buhl f133aefc8b chore: fix production renovate gaps (pinDigest phantom + netbird image pin) (#124)
Signed-off-by: Devin Buhl <devin@buhl.casa>
2026-07-20 09:21:47 -04:00
renovate[bot] f70dd46c20 chore(base): update ghcr.io/victoriametrics/helm-charts/victoria-logs-cluster docker tag to v0.2.8 (#110) 2026-07-20 09:04:19 -04:00
renovate[bot] 4efc449276 chore(deps): update terraform netbox to v5 (#122) 2026-07-20 09:03:42 -04:00
renovate[bot] 8f933a1fec chore(base): update ghcr.io/cloudnative-pg/charts/cloudnative-pg docker tag to v0.29.0 (#112) 2026-07-20 08:56:46 -04:00
renovate[bot] 197db7583d chore(deps): lock file maintenance (mise) (#123) 2026-07-20 08:54:22 -04:00
renovate[bot] 316528591f chore(base): update ghcr.io/victoriametrics/helm-charts/victoria-logs-collector docker tag to v0.3.7 (#111) 2026-07-20 08:54:02 -04:00
renovate[bot] 73574a24a7 chore(base): update ghcr.io/prometheus-community/charts/prometheus-operator-crds docker tag to v30 (#120) 2026-07-20 08:52:57 -04:00
renovate[bot] 57a3bfed2b chore(base): update ghcr.io/openebs/charts/openebs docker tag to v4.5.1 (#115) 2026-07-20 08:52:29 -04:00
renovate[bot] 92c722eb13 chore(base): update mirror.gcr.io/envoyproxy/gateway-helm docker tag to v1.8.2 (#117)
Co-authored-by: renovate[bot] <29139614+renovate[bot]@users.noreply.github.com>
2026-07-20 08:51:05 -04:00
renovate[bot] 426c7b54d3 chore(base): update ghcr.io/external-secrets/charts/external-secrets docker tag to v2.8.0 (#113) 2026-07-20 08:50:07 -04:00
renovate[bot] 981f8b6f36 chore(base): update ghcr.io/home-operations/charts/echo docker tag to v0.2.1 (#114) 2026-07-20 08:49:49 -04:00
renovate[bot] 8acec80e33 chore(base): update quay.io/jetstack/charts/cert-manager docker tag to v1.21.0 (#119) 2026-07-20 08:45:47 -04:00
renovate[bot] 846aa4c45d chore(base): update ghcr.io/aureq/charts/cert-manager-webhook-ovh docker tag to v0.9.14 (#92) 2026-07-20 08:29:08 -04:00
renovate[bot] d19bb7a8bf chore(base): update ghcr.io/home-operations/charts-mirror/metrics-server docker tag to v3.13.1 (#78) 2026-07-20 08:28:44 -04:00
renovate[bot] ff73cea3c7 chore(base): update ghcr.io/prometheus-community/charts/prometheus-operator-crds docker tag to v27.0.1 (#79) 2026-07-20 08:28:26 -04:00
renovate[bot] 480e1ee33b chore(base): update ghcr.io/spegel-org/helm-charts/spegel docker tag to v0.7.4 (#80) 2026-07-20 08:28:04 -04:00
renovate[bot] 1af9ceb4f4 chore(base): update ghcr.io/stakater/charts/reloader docker tag to v2.2.14 (#87) 2026-07-20 08:27:41 -04:00
Devin Buhl 428513655e chore: unblock and gate renovate env PR flow (#109)
* chore: unblock and gate renovate env PR flow

prHourlyLimit 0 so the weekly window actually drains the queue - the
default of 2/hour meant production-prefixed branches never reached the
front, so no production PR was ever created. Production updates now
require a Dependency Dashboard checkbox (dependencyDashboardApproval),
giving the intended promotion flow: base/staging merges and soaks first,
production is a deliberate click. Also disables netbox provider majors,
which track NetBox server versions.

Signed-off-by: Devin Buhl <devin@buhl.casa>

* Apply suggestion from @onedr0p

* Apply suggestions from code review

Co-authored-by: Devin Buhl <onedr0p@users.noreply.github.com>

* Apply suggestions from code review

Co-authored-by: Devin Buhl <onedr0p@users.noreply.github.com>

---------

Signed-off-by: Devin Buhl <devin@buhl.casa>
2026-07-17 11:21:21 -04:00
Devin Buhl 7c237b79d7 chore: bring all deps up-to-date (#108)
Signed-off-by: Devin Buhl <devin@buhl.casa>
2026-07-17 11:13:16 -04:00
renovate[bot] 8a6f8fd174 chore(base): pin netbirdio/netbird docker tag to 201ce4b (#77) 2026-07-17 11:01:09 -04:00
renovate[bot] 56f9559c62 chore(deps): update dependency opentofu to v1.12.3 (#94) 2026-07-17 10:48:34 -04:00
renovate[bot] 9ccaeb4146 chore(deps): update terraform ovh to v2.16.1 (#49) 2026-07-17 10:47:58 -04:00
renovate[bot] 3b1ced8318 chore(deps): update terraform kubernetes to v3.2.1 (#48) 2026-07-17 10:47:38 -04:00
renovate[bot] 22e7aba785 chore(deps): update terraform helm to v3.2.0 (#29) 2026-07-17 10:47:17 -04:00
renovate[bot] 469b147b95 chore(deps): lock file maintenance (mise) (#85) 2026-07-17 10:46:46 -04:00
Devin Buhl 6cbb439098 docs: describe the netbird mesh topology and refresh stale sections (#107)
Signed-off-by: Devin Buhl <devin@buhl.casa>
2026-07-17 10:08:20 -04:00
Devin Buhl e36185430c fix: carry OCI chart digests in the production patches (#106)
Signed-off-by: Devin Buhl <devin@buhl.casa>
2026-07-17 07:42:03 -04:00
Devin Buhl b9eb3cf26c refactor: futo-org netbird provider + rfc1123 object names (#105)
Signed-off-by: Devin Buhl <devin@buhl.casa>
2026-07-16 11:42:11 -04:00