chemavx/k8s-manifests
1
0
Fork 0
Code Issues Pull Requests Actions Packages Projects Releases Wiki Activity
44 Commits 2 Branches 0 Tags
bf7ac532deb3c031fd3599a3d31418d235c35a97
Commit Graph
18 Commits
This Branch
This Branch
All Branches
Author SHA1 Message Date
chemavxandClaude Sonnet 4.6 a5aac4dd83 chore(openclaw): golden config snapshot + RBAC manifest in git 
- Add openclaw/golden/ with stable copies of openclaw.json, SOUL.md,
  TOOLS.md, HOMELAB.md, kubectl-ro
- Fix HOMELAB.md model roles (qwen3-es:14b=primary, llama3.1-es:8b=fallback)
- Add rbac-openclaw-agent.yaml (ClusterRole read-only + binding + SA)

Co-Authored-By: Claude Sonnet 4.6 <noreply@anthropic.com>
 2026-04-21 09:18:39 +00:00
chemavxandClaude Sonnet 4.6 8592a09bc7 fix(ollama): use Recreate strategy to avoid RWO PVC conflict 
RollingUpdate caused rollout deadlocks because the PVC (ReadWriteOnce)
cannot be mounted by two pods simultaneously.

Co-Authored-By: Claude Sonnet 4.6 <noreply@anthropic.com>
 2026-04-21 09:03:47 +00:00
chemavxandClaude Sonnet 4.6 8b7d3c0659 feat(ollama): migrate GPU from AMD ROCm to NVIDIA CUDA (RTX 3060 via OCuLink) 
Switch from ollama/ollama:rocm + amd.com/gpu to standard CUDA image + nvidia.com/gpu.
RTX 3060 (GA106, 12GB) now used via NVIDIA GPU Operator on chemavx-k8.

Co-Authored-By: Claude Sonnet 4.6 <noreply@anthropic.com>
 2026-04-17 17:13:07 +00:00
chemavx 72be7ebac8 feat(portfolio): add ChemaVX portfolio with Polymarket live metrics 2026-04-16 10:00:16 +00:00
chemavx a0d208db63 feat(grafana): add ChemaVX Homelab Overview dashboard as ConfigMap 2026-04-16 09:54:19 +00:00
chemavxandClaude Sonnet 4.6 0927658f58 chore: pin ollama and cloudflare-ddns to exact running versions 
- ollama/ollama:latest → 0.20.7
- favonia/cloudflare-ddns:latest → 1.16.2

Co-Authored-By: Claude Sonnet 4.6 <noreply@anthropic.com>
 2026-04-15 08:13:13 +00:00
chemavxandClaude Sonnet 4.6 22ae5d7d4b chore: pin all floating image tags to exact running versions 
- vaultwarden/server:latest → 1.35.4
- redis:alpine → 8.6.2-alpine (authentik)
- homarr-labs/homarr:latest → 1.0.0
- gitea/gitea:latest → 1.25.5
- uptime-kuma:1 → 1.23.17

Co-Authored-By: Claude Sonnet 4.6 <noreply@anthropic.com>
 2026-04-15 08:11:22 +00:00
chemavxandClaude Sonnet 4.6 c1e57613ed chore(openclaw): update to 2026.4.12 
Co-Authored-By: Claude Sonnet 4.6 <noreply@anthropic.com>
 2026-04-15 07:58:37 +00:00
chemavx 0841d6bbe6 fix: add CreateOnly sync option to n8n-secret to prevent ArgoCD from overwriting encryption key 2026-04-14 20:30:36 +00:00
chemavx 7397c1d939 refactor: rewrite n8n manifests as clean GitOps specs, remove server-exported fields 2026-04-14 20:25:16 +00:00
chemavx 192a0bfa7a fix: delete secret-n8n-tls.yaml — kubernetes.io/tls type requires data fields, cert-manager manages this secret directly 2026-04-14 20:06:32 +00:00
chemavx f42cdee585 security: remove all REDACTED secrets from repo, add pre-commit guard 
- Delete 26 secret manifests containing REDACTED placeholder values
  (15 cert-manager TLS + 11 app secrets across 8 namespaces)
- REDACTED is valid base64 that decodes to non-UTF-8 bytes — ArgoCD
  applying these manifests corrupts live secrets in the cluster
- Add .githooks/pre-commit that rejects any .yaml with REDACTED
- Add README.md documenting secret management policy and manual
  creation commands for each service
- n8n secret manifests already fixed in previous commits (618b1e8, db04fd2)
 2026-04-14 20:02:51 +00:00
chemavx db04fd2cbc fix: remove REDACTED data from n8n-tls secret manifest, prevent ArgoCD from corrupting cert-manager TLS 2026-04-14 19:58:44 +00:00
chemavx 618b1e8d11 fix: remove sensitive data from secret manifest, prevent ArgoCD from overwriting encryption key 2026-04-14 19:09:41 +00:00
chemavxandClaude Sonnet 4.6 c9d4877742 fix(polymarket-bot): remove cert-manager managed TLS secret from repo 
ArgoCD was overwriting the polymarket-tls secret with REDACTED values,
corrupting the TLS cert. This secret is managed by cert-manager and
must not be tracked in git.

Co-Authored-By: Claude Sonnet 4.6 <noreply@anthropic.com>
 2026-04-13 20:33:36 +00:00
chemavxandClaude Sonnet 4.6 e59da6b3a9 chore(polymarket-bot): clean up manifests, remove stale kubectl annotations 
Co-Authored-By: Claude Sonnet 4.6 <noreply@anthropic.com>
 2026-04-13 20:28:27 +00:00
chemavxandClaude Sonnet 4.6 45c4dde929 fix(polymarket-bot): fix corrupted secret and migrate to Gitea registry images 
- Fix bot-secrets: replace corrupted REDACTED base64 values with correct ones
- Update deployment-api and deployment-bot to use git.chemavx.xyz registry images
- Add imagePullSecrets (gitea-registry) to api and bot deployments
- Add secret-gitea-registry.yaml manifest for ArgoCD to manage

Co-Authored-By: Claude Sonnet 4.6 <noreply@anthropic.com>
 2026-04-13 20:27:23 +00:00
chemavx ff2e6cc985 feat: export all K8 Plus cluster manifests 
Namespaces: argocd, authentik, backup-system, cloudflare-ddns,
gitea, homarr, monitoring, n8n, openclaw, polymarket-bot, vaultwarden
Cluster-wide: clusterissuers, namespaces
Secrets: redacted (structure only, data=REDACTED)
 2026-04-10 08:57:02 +00:00