prole/knoe
chrisfu eb9430df9d fix(gitlab,infra): ARM64 RPi service cluster – GitLab deploy in gitlab ns on gandalf
Namespace & routing
- milestones.py: GitOpsMilestone now resolves namespace from
  gitops.gitlab_namespace (new) → Global.GITLAB_NAMESPACE → 'gitlab'
  hardcoded; never falls through to gitops.namespace (was 'gitea')
- prole.cfg: add gitops.gitlab_namespace=gitlab + GITLAB_NAMESPACE=gitlab
- init_gitlab.sh: NAMESPACE defaults to gitlab, NODE_SELECTOR blanked so
  only gitaly+minio are node-pinned; GITOPS_NAMESPACE fallback removed

GitLab on ARM64 RPi (16 KB kernel pages)
- init_gitlab.sh: DaemonSet compiles jemalloc-5.3.0 with --with-lg-page=14
  (glibc/Ubuntu) on every node; LD_PRELOAD injected per Ruby component
- Minio: quay.io 2022 image (ARM64); configure init container replaced
  with ARM64 alpine that writes credential files; MINIO_ROOT_USER/PASSWORD
  injected directly into main container env via secretKeyRef
- Minio buckets auto-created post-deploy (registry, lfs, artifacts, etc.)
- webservice/sidekiq: replicaCount=1, reduced memory (1500M/800M),
  liveness probe initialDelaySeconds=3600 (Rails loads 25-40min on RPi)
- allowedHosts set as flat string list (chart 9.x default is list-of-maps
  which breaks URI initializer in 7_gitlab_http.rb)
- gitaly+minio always pinned to gandalf (local PV); other workloads spread

Storage
- Static PVs created for gitaly (50Gi) + minio (10Gi) on synology d005
- Synology dirs created before PVs; bucket creation idempotent

Redis (shared for GitLab KAS)
- init_redis.sh: persistence disabled (no dynamic provisioner); Redis used
  as pub/sub broker only

Infrastructure / pi.prole.org
- Removed pi.prole.org from [k3s_agents] – dedicated pihole node, OOM
- host_vars: k3s_enabled=false, k3s_state=absent (storage preserved)
- New playbook: infrastructure/playbooks/disable_pi_k3s.yml (drain + disable)
- monitoring.py: node-exporter DaemonSet excludes pi.prole.org
- init_monitoring.sh: pi.prole.org excluded from node-exporter affinity
- kong-deployment.yaml: affinity rule prevents scheduling on pi (pihole owns 80/443)

Co-authored-by: Junie <junie@jetbrains.com>
2026-04-02 20:15:11 -07:00
..
core fix(gitlab,infra): ARM64 RPi service cluster – GitLab deploy in gitlab ns on gandalf 2026-04-02 20:15:11 -07:00
ops feat: add storage probing and operational service updates 2026-03-26 09:44:23 -07:00
scripts Checkpoint: rename installer to knoe + harden db build context 2026-03-22 01:45:21 -07:00
ui feat(installer): add Knoe User Accounts screen after Kerberos provisioning 2026-04-01 21:45:24 -07:00
__init__.py Checkpoint: rename installer to knoe + harden db build context 2026-03-22 01:45:21 -07:00
build.py Checkpoint: rename installer to knoe + harden db build context 2026-03-22 01:45:21 -07:00
config.py Replace gcloud auth login with in-TUI email + access token credential form 2026-03-31 23:35:40 -07:00
core.py Checkpoint: rename installer to knoe + harden db build context 2026-03-22 01:45:21 -07:00
deploy.py Checkpoint: rename installer to knoe + harden db build context 2026-03-22 01:45:21 -07:00
main.py Checkpoint: rename installer to knoe + harden db build context 2026-03-22 01:45:21 -07:00
milestone.py Fix idempotent k3s deploy: TLS/DB secret bootstrap, PV release, barman idempotency, kubeconfig priority 2026-03-23 23:31:19 -07:00
ncurses_installer.py Migrate install.py logic to install.sh and restructure installer flow. Update core references, tests, and navigation to reflect the new Knoe installer architecture. 2026-04-01 01:17:04 -07:00
ncurses_ui.py Checkpoint: rename installer to knoe + harden db build context 2026-03-22 01:45:21 -07:00
prole_conf.py Standardize namespace and cluster config flow 2026-03-23 16:52:40 -07:00
README.md Checkpoint: rename installer to knoe + harden db build context 2026-03-22 01:45:21 -07:00
runner.py Checkpoint: rename installer to knoe + harden db build context 2026-03-22 01:45:21 -07:00
screen.py Checkpoint: rename installer to knoe + harden db build context 2026-03-22 01:45:21 -07:00
state.py Checkpoint: rename installer to knoe + harden db build context 2026-03-22 01:45:21 -07:00
welcome.txt Checkpoint: rename installer to knoe + harden db build context 2026-03-22 01:45:21 -07:00

Moved

This document has moved. Please see the up-to-date installer guide at:

installer/README.md

The root-level file is kept only as a pointer to avoid breaking links during the refactor.