chemavx/k8s-manifests
1
0
Fork 0
Code Issues Pull Requests Actions Packages Projects Releases Wiki Activity
326 Commits 2 Branches 0 Tags
91bf7d290936a329e5a0407456d6c7a23bbc1954
Commit Graph
6 Commits
Author SHA1 Message Date
chemavxandClaude Opus 4.8 184c5f4815 umami: drop dead umami-secrets ignoreDifferences stanza (3c) 
Old out-of-band umami-secrets deleted (kubectl); the /data ignoreDifferences
stanza referencing it is now dead. Removed from both the registered app
manifest and the in-dir duplicate. umami-secrets-infisical is Owner-managed
by the operator, not a git-tracked Secret, so no ignore rule is needed.

Co-Authored-By: Claude Opus 4.8 <noreply@anthropic.com>
 2026-06-22 06:58:20 +00:00
chemavxandClaude Opus 4.8 b566fe3d96 umami: repoint umami app to Infisical secret (3b-ii) 
DATABASE_URL + APP_SECRET now reference umami-secrets-infisical. Postgres
(3b-i) already healthy on the same secret; umami's wait-for-postgres
initContainer enforces ordering. Old umami-secrets stays live until 3c.

Co-Authored-By: Claude Opus 4.8 <noreply@anthropic.com>
 2026-06-22 06:56:37 +00:00
chemavxandClaude Opus 4.8 9e2971f1bc umami: repoint postgres to Infisical secret + flip to Recreate (3b-i) 
POSTGRES_PASSWORD now references umami-secrets-infisical. Adds strategy:
Recreate (single-replica RWO PVC — avoids two postmasters racing PGDATA
during a roll), permanent. Data dir already initialized, so the
byte-identical POSTGRES_PASSWORD is never re-applied on restart (benign).
umami still on old umami-secrets (both live in parallel = zero gap).

Co-Authored-By: Claude Opus 4.8 <noreply@anthropic.com>
 2026-06-22 06:55:59 +00:00
chemavxandClaude Opus 4.8 a86934c264 umami: add Infisical StaticSecret (/umami passthrough, parallel name) 
3a of the umami-secrets centralization. Adds umami-secrets-infisical synced
from homelab/prod /umami (3 lowercase-hyphenated keys, passthrough).
Parallel name — old out-of-band umami-secrets stays live until 3c.

Co-Authored-By: Claude Opus 4.8 <noreply@anthropic.com>
 2026-06-22 06:55:11 +00:00
chemavxandClaude Fable 5 729e3ac4af fix: Prune=false guard on every PVC under a prune-enabled Application 
Same protection already given to polymarket-bot postgres and n8n: without
it, removing a PVC manifest from git (rename, multi-doc refactor) would
make ArgoCD destroy the volume and its data.

Co-Authored-By: Claude Fable 5 <noreply@anthropic.com>
 2026-06-12 15:55:23 +00:00
chemavxandClaude Sonnet 4.6 530177cd6e feat: add Umami analytics deployment 
Deploys Umami with PostgreSQL backend, Traefik ingress, cert-manager
TLS, and ArgoCD GitOps pattern matching existing services.

Co-Authored-By: Claude Sonnet 4.6 <noreply@anthropic.com>
 2026-05-11 07:48:53 +00:00