immich-app/yucca
1
0
Fork 0
mirror of https://github.com/immich-app/yucca.git synced 2026-09-30 13:33:00 +08:00
Code Issues Packages Projects Releases Wiki Activity
166 Commits 66 Branches 63 Tags
481c5e920a289c5dc09d4a7c147a962044e8a852
Commit Graph
166 Commits
This Branch
This Branch
All Branches
Author SHA1 Message Date
Antoine Lecompte 481c5e920a feat(yucca): add full e2e mgmt provisioning maybe (#182) 
* feat(yucca): add full e2e mgmt provisioning maybe

* moar !

* prefer tailscale over public ip if availbale

* ignore files

* fix

* more progress
 2026-06-26 14:45:20 -04:00
Antoine Lecompte 847409819f fix(netbird): restore the talos plan's NetBird connect (revert -refre… (#215) 
fix(netbird): restore the talos plan's NetBird connect (revert -refresh=false)

#212 left the talos plan on `-refresh=false` with no overlay connect, but the
plan reads data.talos_cluster_health — a data source that dials the cluster over
the overlay and is NOT skipped by -refresh=false, so it hangs with no route to
the nodes. Restore the netbird-connect step on the plan job.

Documents the one-time out-of-band bootstrap: the CI setup key is minted by the
netbird apply, which is gated behind the plan that needs it, so seed it once via
TF_STACK_DIR=tf/deployment/staging/netbird mise run tf:apply.
 2026-06-26 18:36:17 +00:00
Antoine Lecompte 948b15cf0b fix(netbird): some issues (#212) 2026-06-26 18:16:41 +00:00
immich-push-o-matic[bot] 38ce07687e chore(main): release 0.10.0 (#210) v0.10.0 2026-06-26 18:13:17 +00:00
Paul Makles a6146e9b73 fix: invert restore snapshot disabled check (#211) 2026-06-26 18:11:32 +00:00
Antoine Lecompte 031974a32b feat(netbird): wire this sweetie up (#209) 
* feat(netbird): wire this sweetie up

* remove dev

* fix

* more features
 2026-06-26 18:03:02 +00:00
immich-push-o-matic[bot] fc59e9b074 chore(main): release 0.9.1 (#208) v0.9.1 2026-06-26 17:35:49 +01:00
Andy Molenda f0dd618119 fix(ceph): reload nftables only when the live ruleset differs (#206) 2026-06-26 09:30:52 -07:00
Paul Makles ce09c1987f refactor: export one service instead of repositories (#207) 2026-06-26 17:29:27 +01:00
immich-push-o-matic[bot] 64963fcb2c chore(main): release 0.9.0 (#196) v0.9.0 2026-06-26 16:46:17 +01:00
Antoine Lecompte 05bb52e750 fix(ansible): add missing deps (#204) 2026-06-26 11:44:45 -04:00
Paul Makles b8f361da89 refactor: polish for immich integration (#205) 2026-06-26 15:44:10 +00:00
Antoine Lecompte 1d4a0ebcc2 Feat/ansible change (#203) 
* feat(ansible): change

* fix(ceph): install ansible-iac SSH key in OpenSSH format

The SIETCH_CEPH_ANSIBLE_IAC_SSH_KEY 1P item is an SSH_KEY whose private-key
field reads back as PKCS#8 by default. macOS ssh tolerates that for ed25519,
but Ubuntu's OpenSSH (CI runners) rejects it with 'Load key: invalid format',
so the infra.yml ceph deploy hit 'Permission denied (publickey)' and every
node was UNREACHABLE. Read the key with ?ssh-format=openssh so it lands as a
universally-accepted OPENSSH private key.
 2026-06-26 15:35:11 +00:00
Antoine Lecompte f49cf82079 feat(ansible): change (#202) 2026-06-26 15:20:56 +00:00
Andy Molenda e6335c9715 docs(ceph): drop painbox references (#201) 2026-06-26 08:19:40 -07:00
Antoine Lecompte 97b4514644 feat(ansible): make it go brrr in ci (#200) 2026-06-26 15:10:20 +00:00
Andy Molenda dec16ab595 chore(ceph): drop painbox cluster (#199) 2026-06-26 08:09:20 -07:00
Antoine Lecompte 5d97a0fd04 feat(staging): wire in metrics-worker (#181) 
* feat(staging): wire in metrics-worker

* fix(metrics-worker): urls

* secrets
 2026-06-26 14:35:37 +00:00
Andy Molenda 983e061d01 feat(ceph): add read-only metrics-worker RGW admin user + keys (#188) 2026-06-26 14:07:49 +00:00
Antoine Lecompte fa1683c9c6 fix(michael): remove duplicate s3 env vars (#194) 2026-06-26 14:06:26 +00:00
Antoine Lecompte deed0ba505 fix(yucca-api): good secret name (#198) 2026-06-26 14:02:42 +00:00
Antoine Lecompte ec750767a3 fix: device code flow maybe (#158) 2026-06-26 13:58:11 +00:00
Antoine Lecompte 9f7b94b5fb Fix/vault vmauth (#197) 
fix(yucca): correct vault for vmwauth
 2026-06-26 13:53:41 +00:00
Antoine Lecompte 82f8f44a97 feat(k8s): wire in flux notifications-controller for commit statuses (#195) 2026-06-26 09:47:05 -04:00
immich-push-o-matic[bot] c24b69a777 chore(main): release 0.8.0 (#192) v0.8.0 2026-06-26 12:17:09 +01:00
renovate[bot] 489d28c892 fix(deps): update module github.com/aws/aws-sdk-go-v2/service/s3 to v1.97.3 [security] (#69) 2026-06-26 12:14:14 +01:00
renovate[bot] 4b280718ef chore(deps): update dependency @vitest/browser to v4.1.8 [security] (#112) 2026-06-26 10:58:28 +00:00
renovate[bot] 83f3d15934 chore(deps): update dependency vite to v7.3.5 [security] (#127) 2026-06-26 10:55:09 +00:00
renovate[bot] bf6d907f0d chore(deps): update dependency @nestjs/core to v11.1.18 [security] (#66) 2026-06-26 10:54:51 +00:00
Paul Makles 3ab42dea5c ci: drop package name for release-please (#190) 2026-06-26 10:43:12 +00:00
immich-push-o-matic[bot]andizzy 46aade4b2d chore: release main (#189) 
Co-authored-by: izzy <me@insrt.uk>
 2026-06-26 10:32:20 +00:00
Andy Molenda 96dfa44c84 docs(ceph): repoint example refs from dev to staging (#187) 2026-06-25 15:06:46 -07:00
Andy Molenda a16ba1a570 chore(ceph): decommission dev sietch stack, repoint defaults to staging (#186) 2026-06-25 14:40:06 -07:00
Andy Molenda 3815637b50 feat(k8s): point michael at the staging RGW endpoint (#185) 2026-06-25 14:18:28 -07:00
Andy Molenda 5af389f188 feat(ceph): add LV-based SSD OSD tier for sietch (#184) 2026-06-25 14:18:25 -07:00
Andy Molenda f82728cc98 fix(ceph): harden deploy-ceph for from-scratch reimage (#183) 2026-06-25 13:58:13 -07:00
Antoine Lecompte 065ff3d308 feat(michael): make michael also do load balancing since he's not too… (#179) 
* feat(michael): make michael also do load balancing since he's not too busy

* add load balancing locally plus expose knobs
 2026-06-25 18:02:51 +00:00
Antoine Lecompte 9b39abfd6a fix(fabic): a lot of custom stuff there (#180) 
* fix: fabric stuff

* fix: fabric stuff 2 - electric boogaloo

* fix: fabric stuff 2 - electric boogaloo 2

* fix(fabric): fix stuff 3 electic boogaloo (big)
 2026-06-25 18:01:47 +00:00
Andy Molenda 3d52829f19 fix(ceph): use --force-password for dashboard password on Tentacle (#178) 2026-06-25 10:57:26 -07:00
Antoine Lecompte bc8136def5 feat(staging): normalize logs (#164) 2026-06-25 17:55:33 +00:00
Antoine Lecompte b5a0b97bcb Fix/fabric stuff 2 (#176) 
* fix: fabric stuff

* fix: fabric stuff 2 - electric boogaloo

* fix: fabric stuff 2 - electric boogaloo 2
 2026-06-25 17:19:17 +00:00
Andy Molenda 66740a7398 feat(ceph): optional OSD-disk wipe in provision (clean rebuild) (#177) 2026-06-25 10:13:15 -07:00
Andy Molenda b287282c7c chore(ceph): record sietch node Dell service tags (#175) 2026-06-25 09:59:48 -07:00
Andy Molenda 8618de8864 feat(ceph): authorize ops SSH keys from the identity registry (#174) 2026-06-25 09:27:45 -07:00
Antoine Lecompte 6d4056dffd fix: fabric stuff (#173) 2026-06-25 16:17:39 +00:00
Andy Molenda 9c33f90e9e feat(ceph): per-role password length, shorter ops (#172) 2026-06-25 09:10:34 -07:00
Antoine Lecompte a6802df749 feat: more fabric things!! (#171) 2026-06-25 15:54:20 +00:00
Andy Molenda 86cbe06bc3 feat(ceph): support per-cluster baseline packages (#169) 2026-06-25 08:26:26 -07:00
Antoine Lecompte 80d15f23af feat: fabric terraform (#170) 2026-06-25 11:23:59 -04:00
Andy Molenda 9562a46b25 feat(dns): add s3.staging.austin RGW records for sietch (#167) 
* feat(ceph): add sietch staging ansible inventory

* feat(dns): add s3.staging.austin RGW records for sietch
 2026-06-25 07:54:35 -07:00