mirror of
https://github.com/dredx/prole.git
synced 2026-09-23 12:03:59 +00:00
- knoe-db.yaml: switch to CNPG-managed TLS cert with serverAltDNSNames (pg.prole.org + knoe-db-rw cluster service) — removes static serverTLSSecret/serverCASecret - dns.yml: add pg.prole.org A record to prole_k3s_dns_records (10.0.0.3, 10.0.0.6) for Ansible-managed split-horizon DNS via Samba AD DC - k3s.cfg: align KNOE_HOME paths to ~/dev/prole, add PROLE_KDC_* vars, remove hardcoded KUBECTL_CONTEXT (kubeconfig current-context is authoritative) - prod.cfg: add PROLE_KDC_STORAGE_CLASS = prole-iscsi - onepassword.py: skip vault check gracefully when no 1Password session active (non-TTY) - CLAUDE.md: document production postgres connection string and DNS/CA cert ops Co-Authored-By: Claude Sonnet 4.6 <noreply@anthropic.com> |
||
|---|---|---|
| .. | ||
| cnpg-placement | ||
| dev | ||
| postgresql | ||
| prod | ||
| service | ||
| test | ||
| database_versions.json | ||
| gke.cfg | ||
| k3d.cfg | ||
| k3s.cfg | ||
| knoe.cfg | ||
| knoe.silent.all.cfg | ||
| port-mapping.cfg | ||