Commit Graph
372 Commits
Author SHA1 Message Date
Antoine Lecompte 54c410f59c fix(netbird): comment in the things (#221)
* fix(netbird): comment in the things

* remove netbird namespace
2026-06-27 12:01:58 +00:00
Antoine Lecompte a6235d77ed fix(netbird): comment out lines (#220)
* feat(netbird): k8s

* fix(netbird): comment out things temp
2026-06-26 19:48:41 +00:00
Antoine Lecompte 4033cc2d97 fix(netbird): add netbird network to trusted list (#219) 2026-06-26 19:42:45 +00:00
Antoine Lecompte 0ec09f022a feat(netbird): k8s (#218) 2026-06-26 19:41:32 +00:00
Antoine Lecompte e039026cbe feat(netbird-ansible): better subnet routers (#217) 2026-06-26 19:27:28 +00:00
Antoine Lecompte 00421f33ec fix(netbird): take explicit group-name overrides verbatim(#216) 2026-06-26 19:02:30 +00:00
Antoine Lecompte 481c5e920a feat(yucca): add full e2e mgmt provisioning maybe (#182)
* feat(yucca): add full e2e mgmt provisioning maybe

* moar !

* prefer tailscale over public ip if availbale

* ignore files

* fix

* more progress
2026-06-26 14:45:20 -04:00
Antoine Lecompte 847409819f fix(netbird): restore the talos plan's NetBird connect (revert -refre… (#215)
fix(netbird): restore the talos plan's NetBird connect (revert -refresh=false)

#212 left the talos plan on `-refresh=false` with no overlay connect, but the
plan reads data.talos_cluster_health — a data source that dials the cluster over
the overlay and is NOT skipped by -refresh=false, so it hangs with no route to
the nodes. Restore the netbird-connect step on the plan job.

Documents the one-time out-of-band bootstrap: the CI setup key is minted by the
netbird apply, which is gated behind the plan that needs it, so seed it once via
TF_STACK_DIR=tf/deployment/staging/netbird mise run tf:apply.
2026-06-26 18:36:17 +00:00
Antoine Lecompte 948b15cf0b fix(netbird): some issues (#212) 2026-06-26 18:16:41 +00:00
immich-push-o-matic[bot] 38ce07687e chore(main): release 0.10.0 (#210) v0.10.0 2026-06-26 18:13:17 +00:00
Paul Makles a6146e9b73 fix: invert restore snapshot disabled check (#211) 2026-06-26 18:11:32 +00:00
Antoine Lecompte 031974a32b feat(netbird): wire this sweetie up (#209)
* feat(netbird): wire this sweetie up

* remove dev

* fix

* more features
2026-06-26 18:03:02 +00:00
immich-push-o-matic[bot] fc59e9b074 chore(main): release 0.9.1 (#208) v0.9.1 2026-06-26 17:35:49 +01:00
Andy Molenda f0dd618119 fix(ceph): reload nftables only when the live ruleset differs (#206) 2026-06-26 09:30:52 -07:00
Paul Makles ce09c1987f refactor: export one service instead of repositories (#207) 2026-06-26 17:29:27 +01:00
immich-push-o-matic[bot] 64963fcb2c chore(main): release 0.9.0 (#196) v0.9.0 2026-06-26 16:46:17 +01:00
Antoine Lecompte 05bb52e750 fix(ansible): add missing deps (#204) 2026-06-26 11:44:45 -04:00
Paul Makles b8f361da89 refactor: polish for immich integration (#205) 2026-06-26 15:44:10 +00:00
Antoine Lecompte 1d4a0ebcc2 Feat/ansible change (#203)
* feat(ansible): change

* fix(ceph): install ansible-iac SSH key in OpenSSH format

The SIETCH_CEPH_ANSIBLE_IAC_SSH_KEY 1P item is an SSH_KEY whose private-key
field reads back as PKCS#8 by default. macOS ssh tolerates that for ed25519,
but Ubuntu's OpenSSH (CI runners) rejects it with 'Load key: invalid format',
so the infra.yml ceph deploy hit 'Permission denied (publickey)' and every
node was UNREACHABLE. Read the key with ?ssh-format=openssh so it lands as a
universally-accepted OPENSSH private key.
2026-06-26 15:35:11 +00:00
Antoine Lecompte f49cf82079 feat(ansible): change (#202) 2026-06-26 15:20:56 +00:00
Andy Molenda e6335c9715 docs(ceph): drop painbox references (#201) 2026-06-26 08:19:40 -07:00
Antoine Lecompte 97b4514644 feat(ansible): make it go brrr in ci (#200) 2026-06-26 15:10:20 +00:00
Andy Molenda dec16ab595 chore(ceph): drop painbox cluster (#199) 2026-06-26 08:09:20 -07:00
Antoine Lecompte 5d97a0fd04 feat(staging): wire in metrics-worker (#181)
* feat(staging): wire in metrics-worker

* fix(metrics-worker): urls

* secrets
2026-06-26 14:35:37 +00:00
Andy Molenda 983e061d01 feat(ceph): add read-only metrics-worker RGW admin user + keys (#188) 2026-06-26 14:07:49 +00:00
Antoine Lecompte fa1683c9c6 fix(michael): remove duplicate s3 env vars (#194) 2026-06-26 14:06:26 +00:00
Antoine Lecompte deed0ba505 fix(yucca-api): good secret name (#198) 2026-06-26 14:02:42 +00:00
Antoine Lecompte ec750767a3 fix: device code flow maybe (#158) 2026-06-26 13:58:11 +00:00
Antoine Lecompte 9f7b94b5fb Fix/vault vmauth (#197)
fix(yucca): correct vault for vmwauth
2026-06-26 13:53:41 +00:00
Antoine Lecompte 82f8f44a97 feat(k8s): wire in flux notifications-controller for commit statuses (#195) 2026-06-26 09:47:05 -04:00
immich-push-o-matic[bot] c24b69a777 chore(main): release 0.8.0 (#192) v0.8.0 2026-06-26 12:17:09 +01:00
renovate[bot] 489d28c892 fix(deps): update module github.com/aws/aws-sdk-go-v2/service/s3 to v1.97.3 [security] (#69) 2026-06-26 12:14:14 +01:00
renovate[bot] 4b280718ef chore(deps): update dependency @vitest/browser to v4.1.8 [security] (#112) 2026-06-26 10:58:28 +00:00
renovate[bot] 83f3d15934 chore(deps): update dependency vite to v7.3.5 [security] (#127) 2026-06-26 10:55:09 +00:00
renovate[bot] bf6d907f0d chore(deps): update dependency @nestjs/core to v11.1.18 [security] (#66) 2026-06-26 10:54:51 +00:00
Paul Makles 3ab42dea5c ci: drop package name for release-please (#190) 2026-06-26 10:43:12 +00:00
immich-push-o-matic[bot]andizzy 46aade4b2d chore: release main (#189)
Co-authored-by: izzy <me@insrt.uk>
2026-06-26 10:32:20 +00:00
Andy Molenda 96dfa44c84 docs(ceph): repoint example refs from dev to staging (#187) 2026-06-25 15:06:46 -07:00
Andy Molenda a16ba1a570 chore(ceph): decommission dev sietch stack, repoint defaults to staging (#186) 2026-06-25 14:40:06 -07:00
Andy Molenda 3815637b50 feat(k8s): point michael at the staging RGW endpoint (#185) 2026-06-25 14:18:28 -07:00
Andy Molenda 5af389f188 feat(ceph): add LV-based SSD OSD tier for sietch (#184) 2026-06-25 14:18:25 -07:00
Andy Molenda f82728cc98 fix(ceph): harden deploy-ceph for from-scratch reimage (#183) 2026-06-25 13:58:13 -07:00
Antoine Lecompte 065ff3d308 feat(michael): make michael also do load balancing since he's not too… (#179)
* feat(michael): make michael also do load balancing since he's not too busy

* add load balancing locally plus expose knobs
2026-06-25 18:02:51 +00:00
Antoine Lecompte 9b39abfd6a fix(fabic): a lot of custom stuff there (#180)
* fix: fabric stuff

* fix: fabric stuff 2 - electric boogaloo

* fix: fabric stuff 2 - electric boogaloo 2

* fix(fabric): fix stuff 3 electic boogaloo (big)
2026-06-25 18:01:47 +00:00
Andy Molenda 3d52829f19 fix(ceph): use --force-password for dashboard password on Tentacle (#178) 2026-06-25 10:57:26 -07:00
Antoine Lecompte bc8136def5 feat(staging): normalize logs (#164) 2026-06-25 17:55:33 +00:00
Antoine Lecompte b5a0b97bcb Fix/fabric stuff 2 (#176)
* fix: fabric stuff

* fix: fabric stuff 2 - electric boogaloo

* fix: fabric stuff 2 - electric boogaloo 2
2026-06-25 17:19:17 +00:00
Andy Molenda 66740a7398 feat(ceph): optional OSD-disk wipe in provision (clean rebuild) (#177) 2026-06-25 10:13:15 -07:00
Andy Molenda b287282c7c chore(ceph): record sietch node Dell service tags (#175) 2026-06-25 09:59:48 -07:00
Andy Molenda 8618de8864 feat(ceph): authorize ops SSH keys from the identity registry (#174) 2026-06-25 09:27:45 -07:00