chrisfu/prole
1
0
Fork 0
mirror of https://github.com/dredx/prole.git synced 2026-09-24 15:44:33 +00:00
Code Issues Actions Packages Projects Releases Wiki Activity
c3fae73de3
prole/deploy/gcp/gke
History
chrisfu c3fae73de3 fix(cnpg,kong): wire cnpg-backup-sa, migrate PodMonitor, drop DASHBOARD consumer 
Three Junie briefs landed in one commit:

#07 — Wire cnpg-backup-sa into CNPG cluster spec (drift R8)
  deploy/gcp/gke/knoe-db.yaml: add spec.serviceAccountName: cnpg-backup-sa
  (requires CNPG v1.29+, which is the live operator version).
  etc/init_cnpg_gke.sh: operator install URL now uses CNPG_OPERATOR_VERSION
  variable (default 1.29.0); new §11 patches knoe-db and
  knoe-db-barman-cloud RoleBindings to add cnpg-backup-sa as a subject
  if not already present — matching the 2026-04-29 live stabilization.

#13 — Migrate off deprecated enablePodMonitor + podMonitorRelabelings
  Both deprecated fields removed from deploy/gcp/gke/knoe-db.yaml
  spec.monitoring. New deploy/gcp/gke/knoe-db-podmonitor.yaml carries
  the PodMonitor with the cluster relabeling rule (cnpg.io/cluster pod
  label → cluster label; required for all 85 CNPG Grafana panels).
  Apply alongside knoe-db.yaml on next cluster patch.

#15 — Remove dead DASHBOARD consumer + basicauth_credentials
  supabase/helm/knoe-supabase:
  - wrapper.sh: drop DASHBOARD_USERNAME / DASHBOARD_PASSWORD envsubst lines
  - config.yaml: drop DASHBOARD consumer + basicauth_credentials block
  - kong/deployment.yaml: drop both DASHBOARD env-var secret refs
  - values.yaml: rename secret.dashboard → secret.openai (apiKey only;
    username/password dropped — no enforcer since commit 25f1b2e)
  - secrets/dashboard.yaml + _helpers.tpl: renamed to openai /
    supabase.secret.openai
  - studio/deployment.yaml: reads from secret.openai.apiKey
  - ci/example.yaml: updated to secret.openai.apiKey
  helm template confirms knoe-supabase-openai secret referenced; no
  DASHBOARD output.

docs/TODO.md: queue items #7, #13, #15 + drift row R8 archived to Done.

Co-authored-by: Junie <junie@jetbrains.com>
2026-05-02 03:08:34 -07:00
..
argocd-oidc-cm.yaml feat: Kerberos identity management — PROLE.LOCAL realm, cross-realm trust, user provisioning 2026-04-01 20:38:57 -07:00
cnpg-prometheus-ilb.yaml Merge claude/crazy-bose-fec256 into main 2026-05-01 16:39:10 -07:00
gitlab-google-oidc-secret.example.yaml Complete rebranding from prole to knoe and fix macOS application identity. Bulk renamed 'prole' to 'knoe' across code, scripts, and manifests. Updated Makefile with 'knoe', 'build', and 'start' targets. Implemented macOS Application Bundle (.app) support for correct identity. Fixed macOS 'Python' process name to 'Knoe.DB Installer' via Objective-C bridge. Standardized application name to 'Knoe.DB Installer' across all interfaces. 2026-04-22 15:08:35 -07:00
grafana-google-oidc-secret.example.yaml Merge claude/crazy-bose-fec256 into main 2026-05-01 16:39:10 -07:00
knoe-auth-deployment.yaml Merge claude/crazy-bose-fec256 into main 2026-05-01 16:39:10 -07:00
knoe-auth-google-oidc-secret.example.yaml Complete rebranding from prole to knoe and fix macOS application identity. Bulk renamed 'prole' to 'knoe' across code, scripts, and manifests. Updated Makefile with 'knoe', 'build', and 'start' targets. Implemented macOS Application Bundle (.app) support for correct identity. Fixed macOS 'Python' process name to 'Knoe.DB Installer' via Objective-C bridge. Standardized application name to 'Knoe.DB Installer' across all interfaces. 2026-04-22 15:08:35 -07:00
knoe-auth-oidc-secret.example.yaml Phase 1: OIDC provider integration and GKE auth deployment 2026-04-28 12:22:45 -07:00
knoe-db-backup-gcs.yaml chore(deploy): split knoe-db-backup-gcs manifest — SA only, drop legacy ScheduledBackup 2026-05-02 03:00:51 -07:00
knoe-db-external-lb.yaml Merge claude/crazy-bose-fec256 into main 2026-05-01 16:39:10 -07:00
knoe-db-podmonitor.yaml fix(cnpg,kong): wire cnpg-backup-sa, migrate PodMonitor, drop DASHBOARD consumer 2026-05-02 03:08:34 -07:00
knoe-db.yaml fix(cnpg,kong): wire cnpg-backup-sa, migrate PodMonitor, drop DASHBOARD consumer 2026-05-02 03:08:34 -07:00
knoe-kdc-configmap.yaml feat(auth): land Round 1 — invite-OTP enrollment, kadmin client, GKE manifests 2026-04-27 14:47:27 -07:00
knoe-kdc-secrets.yaml feat(auth): land Round 1 — invite-OTP enrollment, kadmin client, GKE manifests 2026-04-27 14:47:27 -07:00
knoe-onboard.yaml Merge claude/crazy-bose-fec256 into main 2026-05-01 16:39:10 -07:00
namespace.yaml Complete rebranding from prole to knoe and fix macOS application identity. Bulk renamed 'prole' to 'knoe' across code, scripts, and manifests. Updated Makefile with 'knoe', 'build', and 'start' targets. Implemented macOS Application Bundle (.app) support for correct identity. Fixed macOS 'Python' process name to 'Knoe.DB Installer' via Objective-C bridge. Standardized application name to 'Knoe.DB Installer' across all interfaces. 2026-04-22 15:08:35 -07:00
oauth2-proxy-deployment.yaml Merge claude/crazy-bose-fec256 into main 2026-05-01 16:39:10 -07:00
oauth2-proxy-google-oidc-secret.example.yaml Merge claude/crazy-bose-fec256 into main 2026-05-01 16:39:10 -07:00
workload-identity.yaml fix(cnpg): stabilize CNPG/Barman Cloud init on GKE (knoe-dev-0 / knoe-db-0) 2026-04-05 02:04:11 -07:00