Commit Graph
23 Commits
Author SHA1 Message Date
Antoine Lecompte 963364a034 feat(prod): prod (#247) 2026-07-13 13:15:50 +00:00
Antoine Lecompte 7858d7318d fix(netbird): make mutating webhook not go boom (#244) 2026-06-30 17:22:27 +00:00
Antoine Lecompte e00ea72a21 fix(kube): move to local volumes (#241) 2026-06-30 11:22:14 -04:00
Antoine Lecompte c6985d902c feat(all): introduce partition/region/ceph-cluster model across the stack (#222)
* feat: introduce partition/region/ceph-cluster model across the stack

Formalize partition -> region -> {one k8s cluster, many ceph clusters} and
thread it through every layer plus a new yuctl ops CLI.

- tf: deployment/<partition>/<region>/<stack> layout; terragrunt path-parse +
  state key yucca/<partition>/<region>/<stack>; per-region region.hcl (role,
  site_id, datacenter, provider_code, domain); env->partition / site->region
  renames (NetBird object names byte-identical); standardized per-stack
  `discovery` output contract (secrets as op:// refs).
- k8s: clusters/<partition>/<region>/ (staging/austin, prod/htz-fsn1, dev/local);
  role-based kustomize components (primary/secondary); hybrid cluster-settings
  (TF-rendered identity + human fragment); dev-mirror folded into dev/local;
  charts regrouped into charts/{apps,platform,lib,dev}.
- ci: infra.yml partition/region discovery matrix; partition-keyed path filters;
  <partition>-<region> environment gates; image-versions path moves.
- ansible: inventories under <partition>-<region>/<cluster>.
- yuctl: Go/cobra CLI reading the discovery contract from TF state.
- Retire the sietch-talos libvirt VM cluster (dev@local is the k3d cluster);
  ceph inventory_dirname -> <partition>-<region>/<cluster>.

Verified: mise k8s:validate green (3 clusters); yuctl go build/vet; tofu
validate pre-merge (all 9 stacks). Live-staging state migration NOT run.

* fix typo

* commit
2026-06-29 08:40:29 -04:00
Antoine Lecompte 54c410f59c fix(netbird): comment in the things (#221)
* fix(netbird): comment in the things

* remove netbird namespace
2026-06-27 12:01:58 +00:00
Antoine Lecompte 0ec09f022a feat(netbird): k8s (#218) 2026-06-26 19:41:32 +00:00
Antoine Lecompte 5d97a0fd04 feat(staging): wire in metrics-worker (#181)
* feat(staging): wire in metrics-worker

* fix(metrics-worker): urls

* secrets
2026-06-26 14:35:37 +00:00
Antoine Lecompte fa1683c9c6 fix(michael): remove duplicate s3 env vars (#194) 2026-06-26 14:06:26 +00:00
Antoine Lecompte 82f8f44a97 feat(k8s): wire in flux notifications-controller for commit statuses (#195) 2026-06-26 09:47:05 -04:00
Andy Molenda 3815637b50 feat(k8s): point michael at the staging RGW endpoint (#185) 2026-06-25 14:18:28 -07:00
Antoine Lecompte 065ff3d308 feat(michael): make michael also do load balancing since he's not too… (#179)
* feat(michael): make michael also do load balancing since he's not too busy

* add load balancing locally plus expose knobs
2026-06-25 18:02:51 +00:00
Antoine Lecompte bc8136def5 feat(staging): normalize logs (#164) 2026-06-25 17:55:33 +00:00
Antoine Lecompte 03e2802c06 fix(staging): correct vmauth url (#153) 2026-06-24 10:21:38 -04:00
Antoine Lecompte 1736b7cd3a fix(staging): set web port (#152) 2026-06-24 14:08:17 +00:00
Antoine Lecompte 8f8be89592 fix(staging): oidc unfun (#151) 2026-06-24 14:01:28 +00:00
Antoine Lecompte b03327f7c7 fix(staging): missing quotes (#150) 2026-06-24 13:48:09 +00:00
Antoine Lecompte a92d39f4ec fix(staging): something (#149) 2026-06-24 09:41:40 -04:00
Antoine Lecompte 7d5af4559f feat(staging): wire in oidc (#148) 2026-06-24 09:22:29 -04:00
Antoine Lecompte df65da6f92 fix(staging): a lot (#147) 2026-06-24 13:10:57 +00:00
Antoine Lecompte ff995bc59c fix(staging): typo (#146) 2026-06-24 12:43:06 +00:00
Antoine Lecompte f700b18cd6 feat: staging (#135)
* feat: staging

* more stuff

* pin actions

* adjust

* adjust
2026-06-23 18:21:12 +00:00
Paul Makles faa288087d feat: metrics worker (radosgw ingest) (#123) 2026-06-17 14:16:28 +01:00
Antoine Lecompte 070e22a7bb feat: local k8s (#85)
* impl. local kube

* add support for op injected oidc secrets

* ci: set least-privilege workflow token permissions
2026-06-12 13:17:37 +00:00