No description
Find a file
Infrastructure Admin 0dee133377 Add Argo Workflows, mTLS container registry, and fix infrastructure
- Move Keycloak off Helm to plain Crossplane Object manifests (PostgreSQL + Keycloak deployment)
- Add Vaultwarden SSO/OIDC config with Keycloak, fix Recreate deployment strategy for RWO volumes
- Switch routing from Helm-based Pomerium to pomerium-allinone with all service routes
- Deploy Argo Workflows (controller, server, CRDs, RBAC) with KEDA queue-depth autoscaling
- Add Civo cluster autoscaler with pool-scaler for zero-to-one scale-up via Civo API
- Add node-labeler to auto-tag nodes by pool membership for nodeSelector scheduling
- Set up mTLS container registry at registry.nge6.com (Forgejo built-in, client cert required)
- Add internal registry route (registry-internal.nge6.com) for in-cluster image pulls
- Fix DNS records for new Emissary LB IP (212.2.241.28)
- Fix CoreDNS crash from invalid custom config
- Fix Emissary apiext expired webhook CA certificate

Co-Authored-By: Claude Opus 4.6 (1M context) <noreply@anthropic.com>
2026-04-07 21:23:12 -04:00
argo-workflows Add Argo Workflows, mTLS container registry, and fix infrastructure 2026-04-07 21:23:12 -04:00
auth Add Argo Workflows, mTLS container registry, and fix infrastructure 2026-04-07 21:23:12 -04:00
bin Complete GitOps infrastructure setup 2025-09-28 02:43:00 -04:00
cert-manager Complete GitOps infrastructure setup 2025-09-28 02:43:00 -04:00
dns Add kustomization.yaml files for subdirectories 2025-09-26 00:22:09 -04:00
emissary Add kustomization.yaml files for subdirectories 2025-09-26 00:22:09 -04:00
flux Complete GitOps infrastructure setup 2025-09-28 02:43:00 -04:00
gitea Fix YAML syntax error in gitea secrets 2025-09-25 20:47:59 -04:00
istio Initial infrastructure as code deployment 2025-09-23 08:43:06 -04:00
keycloak Initial infrastructure as code deployment 2025-09-23 08:43:06 -04:00
pomerium Initial infrastructure as code deployment 2025-09-23 08:43:06 -04:00
spire Initial infrastructure as code deployment 2025-09-23 08:43:06 -04:00
.gitignore Initial infrastructure as code deployment 2025-09-23 08:43:06 -04:00
acme-challenge-ingress.yaml Initial infrastructure as code deployment 2025-09-23 08:43:06 -04:00
ambassador-listeners.yaml Add Argo Workflows, mTLS container registry, and fix infrastructure 2026-04-07 21:23:12 -04:00
cluster-autoscaler.yaml Add Argo Workflows, mTLS container registry, and fix infrastructure 2026-04-07 21:23:12 -04:00
DEPLOYMENT.md Simplify GitOps to test with just core files first 2025-09-26 08:59:17 -04:00
external-dns.yaml Complete GitOps infrastructure setup 2025-09-28 02:43:00 -04:00
forgejo-k8s.yaml Add Argo Workflows, mTLS container registry, and fix infrastructure 2026-04-07 21:23:12 -04:00
helm-provider-rbac.yaml Initial infrastructure as code deployment 2025-09-23 08:43:06 -04:00
helm-provider.yaml Initial infrastructure as code deployment 2025-09-23 08:43:06 -04:00
keycloak-auth-dns.yaml Add Argo Workflows, mTLS container registry, and fix infrastructure 2026-04-07 21:23:12 -04:00
keycloak-config.yaml Initial infrastructure as code deployment 2025-09-23 08:43:06 -04:00
keycloak-dns-fix.yaml Add Argo Workflows, mTLS container registry, and fix infrastructure 2026-04-07 21:23:12 -04:00
keycloak-nge6-dns.yaml Add Argo Workflows, mTLS container registry, and fix infrastructure 2026-04-07 21:23:12 -04:00
kubernetes-provider-role.yaml Initial infrastructure as code deployment 2025-09-23 08:43:06 -04:00
kustomization.yaml Add Argo Workflows, mTLS container registry, and fix infrastructure 2026-04-07 21:23:12 -04:00
namespaces.yaml Remove duplicate auth-system-namespace definition 2025-09-26 07:53:02 -04:00
node-labeler.yaml Add Argo Workflows, mTLS container registry, and fix infrastructure 2026-04-07 21:23:12 -04:00
pomerium-allinone.yaml Add Argo Workflows, mTLS container registry, and fix infrastructure 2026-04-07 21:23:12 -04:00
pomerium-ambassador-mapping.yaml Initial infrastructure as code deployment 2025-09-23 08:43:06 -04:00
pomerium-certificate.yaml Initial infrastructure as code deployment 2025-09-23 08:43:06 -04:00
pomerium-correct-listeners.yaml Initial infrastructure as code deployment 2025-09-23 08:43:06 -04:00
pomerium-dns.yaml Add Argo Workflows, mTLS container registry, and fix infrastructure 2026-04-07 21:23:12 -04:00
pomerium-native.yaml Add Argo Workflows, mTLS container registry, and fix infrastructure 2026-04-07 21:23:12 -04:00
pomerium-working-host.yaml Initial infrastructure as code deployment 2025-09-23 08:43:06 -04:00
pomerium.yaml Add Argo Workflows, mTLS container registry, and fix infrastructure 2026-04-07 21:23:12 -04:00
pool-scaler.yaml Add Argo Workflows, mTLS container registry, and fix infrastructure 2026-04-07 21:23:12 -04:00
provider-configs.yaml Initial infrastructure as code deployment 2025-09-23 08:43:06 -04:00
providers.yaml Initial infrastructure as code deployment 2025-09-23 08:43:06 -04:00
registry-internal.yaml Add Argo Workflows, mTLS container registry, and fix infrastructure 2026-04-07 21:23:12 -04:00
registry.yaml Add Argo Workflows, mTLS container registry, and fix infrastructure 2026-04-07 21:23:12 -04:00
sealed-secrets.yaml Initial infrastructure as code deployment 2025-09-23 08:43:06 -04:00
vaultwarden.yaml Add Argo Workflows, mTLS container registry, and fix infrastructure 2026-04-07 21:23:12 -04:00