Commit Graph

Select branches

Hide Pull Requests

benvin/add-bind-operator

benvin/agent-observability-rbac

benvin/argocd-image-updater-deploy

benvin/artifactapi-auth-uploads

benvin/artifactapi-tf-signing

benvin/artifactkeeper

benvin/bind-external-mail-zones

benvin/compiler-cert-helpers

benvin/consul-dns-k8s

benvin/consul-k8s-servers

benvin/drop-acme-apex-ns

benvin/externaldns-debug-logging

benvin/externaldns-fix

benvin/fix-externaldns-crashing

benvin/grafana-operator

benvin/grafana-schemas

benvin/helm_virtual

benvin/jellyfin-sso-valkey-state

benvin/kea-operator-v0.1.6

benvin/kubeconform-crd-schemas

benvin/kubeconform-helm-kubeversion

benvin/litellm-sso

benvin/media-apps-argocd

benvin/oauth2-proxy-image-fix

benvin/opa_policies

benvin/postfix

benvin/resolver-validate-except

benvin/revert-artifactapi-oauth2

benvin/stalwart

benvin/traefik-ldaps-entrypoint

fix-kanidm-replication-config

issue-155-open-webui-litellm

main

#1

#10

#100

#101

#102

#103

#104

#105

#106

#107

#108

#109

#11

#110

#111

#112

#113

#114

#115

#116

#117

#118

#119

#12

#120

#121

#122

#123

#124

#125

#126

#127

#128

#129

#13

#130

#131

#132

#133

#134

#135

#136

#137

#138

#139

#14

#140

#141

#142

#143

#144

#145

#146

#147

#148

#149

#15

#150

#151

#152

#153

#156

#157

#158

#159

#16

#160

#161

#162

#163

#164

#165

#166

#167

#168

#169

#17

#170

#171

#172

#173

#174

#175

#176

#177

#178

#179

#18

#180

#181

#182

#183

#184

#185

#186

#187

#188

#189

#19

#190

#191

#192

#193

#194

#195

#196

#197

#198

#199

#2

#20

#200

#201

#202

#203

#204

#205

#206

#207

#208

#209

#21

#210

#211

#212

#213

#214

#215

#216

#217

#218

#219

#22

#220

#221

#222

#223

#224

#225

#226

#227

#228

#229

#23

#230

#231

#232

#233

#234

#235

#236

#237

#238

#239

#24

#240

#241

#242

#243

#244

#245

#246

#247

#248

#249

#25

#250

#251

#252

#253

#254

#255

#256

#257

#258

#259

#26

#260

#261

#262

#263

#264

#265

#266

#267

#268

#269

#27

#270

#271

#272

#273

#274

#275

#276

#277

#278

#279

#28

#280

#281

#282

#283

#284

#285

#286

#287

#288

#289

#29

#290

#291

#292

#293

#294

#295

#296

#297

#298

#299

#3

#30

#300

#301

#302

#303

#304

#305

#306

#308

#309

#31

#310

#311

#312

#313

#314

#315

#316

#317

#318

#319

#32

#320

#327

#328

#329

#33

#330

#331

#332

#333

#334

#335

#336

#337

#338

#339

#34

#340

#341

#342

#343

#344

#345

#346

#347

#348

#349

#35

#350

#351

#352

#353

#354

#355

#356

#357

#358

#359

#36

#360

#361

#362

#363

#364

#365

#366

#367

#368

#369

#37

#370

#371

#372

#373

#374

#375

#376

#377

#378

#379

#38

#380

#381

#382

#383

#384

#385

#386

#387

#388

#389

#39

#390

#391

#392

#393

#394

#395

#396

#397

#398

#399

#4

#40

#400

#401

#402

#403

#404

#405

#406

#407

#408

#409

#41

#410

#411

#412

#413

#414

#415

#416

#417

#418

#419

#42

#420

#421

#422

#423

#424

#425

#426

#427

#428

#429

#43

#430

#431

#432

#433

#434

#435

#436

#437

#438

#439

#44

#440

#441

#442

#443

#444

#445

#446

#447

#448

#449

#45

#450

#451

#452

#453

#454

#455

#456

#457

#458

#459

#46

#460

#461

#462

#463

#464

#465

#466

#467

#468

#469

#47

#470

#471

#472

#473

#474

#475

#476

#477

#478

#479

#48

#480

#481

#482

#483

#484

#485

#486

#487

#488

#489

#49

#490

#491

#492

#493

#494

#495

#496

#497

#498

#499

#5

#50

#500

#501

#502

#503

#504

#505

#506

#507

#508

#509

#51

#510

#511

#512

#513

#514

#515

#516

#517

#518

#519

#52

#520

#521

#522

#523

#524

#525

#526

#527

#528

#529

#53

#530

#531

#532

#533

#534

#535

#536

#537

#538

#539

#54

#540

#541

#542

#543

#544

#545

#546

#547

#548

#549

#55

#550

#551

#552

#553

#554

#555

#556

#557

#558

#559

#56

#560

#561

#562

#563

#564

#565

#566

#567

#568

#569

#57

#570

#571

#572

#573

#574

#58

#59

#6

#60

#61

#62

#63

#64

#65

#66

#67

#68

#69

#7

#70

#71

#72

#73

#74

#75

#76

#77

#78

#79

#8

#80

#81

#82

#83

#84

#85

#86

#87

#88

#89

#9

#90

#91

#92

#93

#94

#95

#96

#97

#98

Mono Color

• 99551420ea Require tokens for artifactapi uploads benvin/artifactapi-auth-uploads unkin-agent 2026-10-26 00:59:43 +11:00
• 0552be6028 Bump artifactapi to v3.25.0 (#573) main unkin-agent 2026-10-25 23:45:54 +11:00
• 4b5d14cf52 Bump artifactapi to v3.24.0 (#572) unkin-agent 2026-10-25 20:25:21 +11:00
• ec35ef9830 bump artifactapi to v3.23.0 (#571) unkin-agent 2026-10-24 20:40:34 +11:00
• bb0cc51e0a bump artifactapi to v3.22.0 (#570) unkin-agent 2026-10-24 17:28:37 +11:00
• bcde44ffab bind-resolvers: RBL zones as BindZones (#569) unkin-agent 2026-10-24 17:06:09 +11:00
• 90600e3840 bump artifactapi to v3.21.0 (#568) unkin-agent 2026-10-24 16:41:34 +11:00
• 2dad204428 Deploy encapi v0.2.0 with Vault OIDC (#567) unkin-agent 2026-10-23 23:02:00 +11:00
• f4cd6160ab Raise puppet-postgres memory (#566) unkin-agent 2026-10-23 21:25:31 +11:00
• 45aa23942f bump artifactapi to v3.20.0 (#565) unkin-agent 2026-10-20 22:25:18 +11:00
• 461e3c6530 Add public main.unkin.net and edge.unkin.net zones to bind-external benvin/bind-external-mail-zones unkin-agent 2026-10-19 22:08:48 +11:00
• e8b1a41af1 bump artifactapi to v3.19.0 (#563) unkin-agent 2026-10-19 22:07:09 +11:00
• 1379e0bf79 bump artifactapi to v3.18.0 (#562) unkin-agent 2026-10-18 19:03:40 +11:00
• d3df1c03cd bump artifactapi to v3.17.1 (#561) unkin-agent 2026-10-18 02:49:49 +11:00
• d0932a6946 bump artifactapi to v3.16.0 (#560) unkin-agent 2026-10-17 22:00:21 +11:00
• 7aee011da1 bump artifactapi to v3.15.0 (#559) unkin-agent 2026-10-17 16:16:43 +11:00
• 9aea107185 bind-operator: v0.4.0 (#558) unkin-agent 2026-10-17 15:33:16 +11:00
• 3057392c35 mail: use real edge MTA public IPs (#556) unkin-agent 2026-10-17 12:51:26 +11:00
• 331d96278d bind-internal: add mail edge A records (#557) unkin-agent 2026-10-17 12:50:56 +11:00
• 2493e729f4 bind-resolvers: forward to public resolvers, RBLs direct (#555) unkin-agent 2026-10-16 23:29:33 +11:00
• 8ea58cb6c1 Allow the bne dmz vpc in the resolver dmz acl (#554) unkin-agent 2026-10-16 23:09:20 +11:00
• 9188ef9ac3 bind-resolvers: stop querying IPv6 nameservers (#553) unkin-agent 2026-10-16 22:34:48 +11:00
• 8a1d544393 Enable Vault OIDC auth on artifactapi config writes (#552) unkin-agent 2026-10-16 22:23:54 +11:00
• 9a38cacf54 Move resolver DMZ ACL to the RFC 1918 mail VPC ranges (#551) unkin-agent 2026-10-16 21:52:33 +11:00
• 52cfabb38f Verify smarthost edge relays against the internal CA (#548) unkin-agent 2026-10-14 22:06:30 +11:00
• 49a98aa428 Add main.unkin.net as a second mail domain (#550) unkin-agent 2026-10-13 21:43:43 +11:00
• bb45b20f8a Route rspamd-tagged mail to Junk through Stalwart's spam filter (#544) unkin-agent 2026-10-13 21:43:13 +11:00
• 822d50b07d Allow BinaryLane DMZ VPCs in resolver ACL (#545) unkin-agent 2026-10-13 21:32:11 +11:00
• 283f9e8ac4 Give stalwart-apply a writable HOME (#549) unkin-agent 2026-10-13 21:26:50 +11:00
• 02ded6c26b Terminate haproxy edge TLS at Traefik (#547) unkin-agent 2026-10-13 21:12:40 +11:00
• 82b86072ee Deploy Stalwart into the mail namespace (#539) unkin-agent 2026-10-13 20:58:08 +11:00
• 716ff7c807 Recurse from root hints on bind-resolvers (#546) unkin-agent 2026-10-13 20:53:37 +11:00
• 0ee11a065b Add rspamd, ClamAV and sentinel Valkey to the mail namespace (#542) unkin-agent 2026-10-12 22:36:55 +11:00
• 70dd1bd775 Add postfix smarthost to the mail namespace (#541) unkin-agent 2026-10-12 22:30:47 +11:00
• 07584e5179 bind-internal: point mail.unkin.net at 198.18.200.18 (#543) unkin-agent 2026-10-12 22:16:56 +11:00
• 47fe9e085a Add internal mail.unkin.net A record (#540) unkin-agent 2026-10-12 21:26:06 +11:00
• 1d9b7ec924 Add mail namespace with Stalwart backing stores (#538) unkin-agent 2026-10-12 00:25:41 +11:00
• fc7d69644c Add terraform-binarylane woodpecker service account (#537) unkin-agent 2026-10-12 00:22:04 +11:00
• 045c7ff009 Bump pdbmux to v0.5.0 (#536) unkin-agent 2026-10-10 14:39:01 +11:00
• 69f2a2a6ec add artifactapi image-keeper daemonset (#535) unkin-agent 2026-10-10 01:06:10 +11:00
• f89927b1f4 bump artifactapi to v3.13.1 (#534) unkin-agent 2026-10-09 23:25:52 +11:00
• ff2309cc9f forward consul zone to k8s consul DNS LB benvin/consul-dns-k8s unkin-agent 2026-10-09 23:01:43 +11:00
• 10867af9b9 Gate consul readiness on raft leader, drop container caps benvin/consul-k8s-servers unkin-agent 2026-10-09 22:53:03 +11:00
• 7960ee03f9 pin artifactapi back to v3.12.0 (#532) unkin-agent 2026-10-09 22:52:29 +11:00
• 9bec0068c9 Merge main unkin-agent 2026-10-09 22:48:08 +11:00
• 393100430b Bump artifactapi to v3.13.0 (#529) unkin-agent 2026-10-09 22:48:05 +11:00
• 5024945c74 consul: remove standalone k8s consul (#530) unkin-agent 2026-10-09 22:46:40 +11:00
• 29092387d4 consul: render ACL tokens to a reloadable config file and add server TLS certificate unkin-agent 2026-10-09 22:41:49 +11:00
• e66abc17d0 consul: add k8s servers joining the au-syd1 VM datacenter unkin-agent 2026-10-09 22:34:51 +11:00
• 41abdd42ef consul: remove standalone k8s consul overlay unkin-agent 2026-10-09 22:33:34 +11:00
• 87880ac8ef kea: bump to v0.1.7 from docker-internal (#527) unkin-agent 2026-10-09 21:49:33 +11:00
• 7ac84461ce consul: pull chart via artifactapi helm mirror (#528) unkin-agent 2026-10-09 21:49:13 +11:00
• 797e1bc7bc kea-operator: bump to v0.1.6 benvin/kea-operator-v0.1.6 unkin-agent 2026-10-06 00:05:34 +11:00
• 9b857bef64 logging: expose vlselect on internal traefik (#525) unkin-agent 2026-10-05 14:08:33 +11:00
• d1825bb655 authentik: raise server cpu request to 500m (#526) unkin-agent 2026-10-05 14:07:45 +11:00
• 206fe90f80 Raise puppetserver compiler requests to match real usage (#524) unkin-agent 2026-10-05 12:34:19 +11:00
• 6d842c7d66 feat(bind-internal): publish haproxy edge sites from k8s DNS (#523) unkin-agent 2026-10-05 01:31:06 +11:00
• d9cc24dbdb Serve grafana.unkin.net from traefik-external (#522) unkin-agent 2026-10-05 00:38:21 +11:00
• 115cdd492f Bump artifactapi to v3.12.0 (#521) unkin-agent 2026-10-04 23:41:15 +11:00
• 9375052d6c Set traefik resource requests so HPAs can scale (#520) unkin-agent 2026-10-04 15:27:49 +11:00
• af61ac5e92 Set traefik-external externalTrafficPolicy to Local (#519) unkin-agent 2026-10-04 15:26:23 +11:00
• 2bcce4894f Drop git.unkin.net from k8s gitea gateway and routes (#518) unkin-agent 2026-10-04 15:07:08 +11:00
• b0bfa4605f vmagent: raise kubernetes-apiservers max_scrape_size to 64MiB (#517) unkin-agent 2026-10-04 14:01:14 +11:00
• cc0dd24991 vmagent: fix consul target address relabel (#516) unkin-agent 2026-10-03 22:51:46 +10:00
• 27dd7e7f3d vmagent: cap consul SD wait time under nginx timeout (#515) unkin-agent 2026-10-03 22:15:16 +10:00
• 96624a69c4 Rename the terraform-infra CI ServiceAccount to terraform-netbox (#514) unkin-agent 2026-10-03 09:34:19 +10:00
• 73cb3903c2 Add k8up Grafana dashboard (#513) unkin-agent 2026-10-02 23:29:40 +10:00
• 575bd5d361 Scrape k8up operator metrics (#512) unkin-agent 2026-10-02 23:28:59 +10:00
• 79e8ccb3d8 feat(grafana): sync kubernetes dashboards from victoria-metrics-k8s-stack (#511) unkin-agent 2026-10-02 23:04:57 +10:00
• 5a8559e97c grafana: drop alerting Service and POD_IP env owned by grafana-operator (#510) unkin-agent 2026-10-02 22:44:54 +10:00
• ec60a8c9d7 grafana: enable unified alerting HA gossip (#509) unkin-agent 2026-10-02 22:37:19 +10:00
• ee2476fe5d grafana: scale to 3 replicas, raise limits (#508) unkin-agent 2026-10-02 22:15:25 +10:00
• e6e882abfc Give vlogs its own namespace (#507) unkin-agent 2026-09-28 22:55:28 +10:00
• c979579c50 Collect pod logs with VLAgent, retire the NATS/ClickHouse chain (#506) unkin-agent 2026-09-27 20:23:58 +10:00
• 9f6019b0e4 Drop obsolete vector-test CI pipeline (#505) unkin-agent 2026-09-27 20:12:45 +10:00
• a5a5cc44e9 Promote bind-operator to v0.3.1 (#503) unkinben 2026-09-27 18:11:38 +10:00
• be2c751175 Redirect vlogs root to the VictoriaLogs UI (#504) unkin-agent 2026-09-27 18:10:35 +10:00
• 216b1d72ac Split bind-internal DNSRecords into one file per record (#501) unkin-agent 2026-09-27 17:43:16 +10:00
• 6854042fe4 Drop the redundant acme.unkin.net apex NS DNSRecord benvin/drop-acme-apex-ns unkin-agent 2026-09-27 17:41:39 +10:00
• 7581578df1 Split bind-external DNSRecords into one file per record (#500) unkin-agent 2026-09-27 17:28:37 +10:00
• 6515e7f637 Expose VictoriaLogs UI at vlogs.unkin.net behind oauth2-proxy (#498) unkin-agent 2026-09-27 17:21:40 +10:00
• 90d512fadf Drop the gocache serve Deployment and nginx sidecar (#499) unkin-agent 2026-09-27 11:20:59 +10:00
• d4a39c44e6 add agent-observability service account and namespace-scoped RBAC benvin/agent-observability-rbac unkin-agent 2026-09-27 00:38:38 +10:00
• 757ae5b240 Add a VictoriaLogs cluster and point logs-ingest at it (#488) unkin-agent 2026-09-27 00:33:58 +10:00
• 02f877540c Add gocache serve Deployment with nginx stream sidecar (#496) unkin-agent 2026-09-27 00:32:32 +10:00
• 148dac8ca2 Declare the acme.unkin.net nameservers (#495) unkin-agent 2026-09-27 00:10:13 +10:00
• 53e5846c18 Roll bind-operator to v0.3.0 (#494) unkin-agent 2026-09-27 00:06:21 +10:00
• 9fed5decc8 bump victoria-metrics-operator chart to 0.67.3 (#493) unkin-agent 2026-09-27 00:05:47 +10:00
• 20077f1029 Move the haproxy edge behind the external Traefik (#492) unkin-agent 2026-09-26 23:38:07 +10:00
• 426a399f31 Drop stalwart mail proxying from the haproxy edge (#491) unkin-agent 2026-09-26 21:25:49 +10:00
• 5341253573 Add Ceph RGW bucket for the shared Go build cache (#489) unkin-agent 2026-09-26 20:56:51 +10:00
• d48125d699 Add job and start deadlines to the g10k-code CronJob (#490) unkin-agent 2026-09-26 20:55:32 +10:00
• abf6bfae88 Drop dead X-Frame-Options rules from the haproxy edge (#487) unkin-agent 2026-09-26 20:36:26 +10:00
• 4190785389 Move the au-syd1 haproxy edge into Kubernetes (#485) unkin-agent 2026-09-26 18:22:57 +10:00
• 812a9a2f2b Publish real delegation records for acme.unkin.net (#486) unkin-agent 2026-09-26 16:42:02 +10:00
• f37749523d Add *.main and *.ceph wildcard certificates for haproxy (#484) unkin-agent 2026-09-26 16:38:31 +10:00
• 004343437a Check kube-version inside the build recipe benvin/kubeconform-helm-kubeversion unkin-agent 2026-09-19 12:50:11 +10:00
• 1d77e8c970 Harden kube-version lookup and match the live cluster unkin-agent 2026-09-19 12:39:10 +10:00
• fb458ea90e Pin helm capabilities version to the validation target unkin-agent 2026-09-19 12:28:16 +10:00
• fe51aa07be Give the puppetserver compilers the Vault cert helpers (#482) unkin-agent 2026-09-24 21:15:09 +10:00