unkinben
b4d69c8d72
chore: mount vault CA cert for Node.js TLS trust in paperclip
...
ci/woodpecker/pr/pre-commit Pipeline was successful
ci/woodpecker/pr/kubeconform Pipeline was successful
Mount the vault-ca-cert secret and set NODE_EXTRA_CA_CERTS so Node.js
trusts the internal CA chain when making outbound TLS connections.
2026-05-03 00:08:11 +10:00
unkinben
156b545249
fix: set Host header on paperclip health probes to bypass hostname guard ( #107 )
...
The privateHostnameGuard middleware blocks requests where the Host header
is not in the allowlist. Kubelet httpGet probes use the pod IP as the
Host header, which is never in the allowlist. Setting Host: localhost
ensures probes are always permitted.
Reviewed-on: #107
2026-05-02 23:01:59 +10:00
unkinben
0883f327e9
chore: update trusted hostnames ( #106 )
...
- remove scheme from paperclip.k8s..
- add localhost (what probe is hitting)
Reviewed-on: #106
2026-05-02 22:40:21 +10:00
unkinben
04b7c04366
chore: fix livenessProbe for paperclip ( #105 )
...
Reviewed-on: #105
2026-05-02 22:28:52 +10:00
unkinben
9914186fd5
chore: additional papaerclip environemnt variables ( #104 )
...
https://github.com/paperclipai/paperclip/issues/3121
Reviewed-on: https://git.unkin.net/unkin/argocd-apps/pulls/104
2026-05-02 22:11:38 +10:00
unkinben
f55b7065f1
fix: rename pgpooler to include rw ( #103 )
...
- undo previous change (target pgcluster name)
- actually rename the pgpooler
Reviewed-on: #103
2026-05-02 21:39:51 +10:00
unkinben
87a5a271c3
fix: set pgpooler name to include -rw ( #102 )
...
- this matches the credentials set for paperclip
Reviewed-on: #102
2026-05-02 21:35:23 +10:00
unkinben
e156cd10bd
feat: deploy paperclip to au-syd1 via ArgoCD (aitooling project) ( #100 )
...
Adds base manifests and au-syd1 overlay for Paperclip (AI agent
orchestration platform), following the litellm deployment pattern.
Updates aitooling ApplicationSet to include the paperclip path.
Closes #99
Reviewed-on: #100
2026-05-02 21:27:51 +10:00
unkinben