Commit Graph

Select branches

Hide Pull Requests

benvin/add-bind-operator

benvin/agent-observability-rbac

benvin/argocd-image-updater-deploy

benvin/artifactapi-auth-uploads

benvin/artifactapi-tf-signing

benvin/artifactkeeper

benvin/bind-external-mail-zones

benvin/compiler-cert-helpers

benvin/consul-dns-k8s

benvin/consul-k8s-servers

benvin/drop-acme-apex-ns

benvin/externaldns-debug-logging

benvin/externaldns-fix

benvin/fix-externaldns-crashing

benvin/grafana-operator

benvin/grafana-schemas

benvin/helm_virtual

benvin/jellyfin-sso-valkey-state

benvin/kea-operator-v0.1.6

benvin/kubeconform-crd-schemas

benvin/kubeconform-helm-kubeversion

benvin/litellm-sso

benvin/media-apps-argocd

benvin/oauth2-proxy-image-fix

benvin/opa_policies

benvin/postfix

benvin/resolver-validate-except

benvin/revert-artifactapi-oauth2

benvin/stalwart

benvin/traefik-ldaps-entrypoint

fix-kanidm-replication-config

issue-155-open-webui-litellm

main

#1

#10

#100

#101

#102

#103

#104

#105

#106

#107

#108

#109

#11

#110

#111

#112

#113

#114

#115

#116

#117

#118

#119

#12

#120

#121

#122

#123

#124

#125

#126

#127

#128

#129

#13

#130

#131

#132

#133

#134

#135

#136

#137

#138

#139

#14

#140

#141

#142

#143

#144

#145

#146

#147

#148

#149

#15

#150

#151

#152

#153

#156

#157

#158

#159

#16

#160

#161

#162

#163

#164

#165

#166

#167

#168

#169

#17

#170

#171

#172

#173

#174

#175

#176

#177

#178

#179

#18

#180

#181

#182

#183

#184

#185

#186

#187

#188

#189

#19

#190

#191

#192

#193

#194

#195

#196

#197

#198

#199

#2

#20

#200

#201

#202

#203

#204

#205

#206

#207

#208

#209

#21

#210

#211

#212

#213

#214

#215

#216

#217

#218

#219

#22

#220

#221

#222

#223

#224

#225

#226

#227

#228

#229

#23

#230

#231

#232

#233

#234

#235

#236

#237

#238

#239

#24

#240

#241

#242

#243

#244

#245

#246

#247

#248

#249

#25

#250

#251

#252

#253

#254

#255

#256

#257

#258

#259

#26

#260

#261

#262

#263

#264

#265

#266

#267

#268

#269

#27

#270

#271

#272

#273

#274

#275

#276

#277

#278

#279

#28

#280

#281

#282

#283

#284

#285

#286

#287

#288

#289

#29

#290

#291

#292

#293

#294

#295

#296

#297

#298

#299

#3

#30

#300

#301

#302

#303

#304

#305

#306

#308

#309

#31

#310

#311

#312

#313

#314

#315

#316

#317

#318

#319

#32

#320

#327

#328

#329

#33

#330

#331

#332

#333

#334

#335

#336

#337

#338

#339

#34

#340

#341

#342

#343

#344

#345

#346

#347

#348

#349

#35

#350

#351

#352

#353

#354

#355

#356

#357

#358

#359

#36

#360

#361

#362

#363

#364

#365

#366

#367

#368

#369

#37

#370

#371

#372

#373

#374

#375

#376

#377

#378

#379

#38

#380

#381

#382

#383

#384

#385

#386

#387

#388

#389

#39

#390

#391

#392

#393

#394

#395

#396

#397

#398

#399

#4

#40

#400

#401

#402

#403

#404

#405

#406

#407

#408

#409

#41

#410

#411

#412

#413

#414

#415

#416

#417

#418

#419

#42

#420

#421

#422

#423

#424

#425

#426

#427

#428

#429

#43

#430

#431

#432

#433

#434

#435

#436

#437

#438

#439

#44

#440

#441

#442

#443

#444

#445

#446

#447

#448

#449

#45

#450

#451

#452

#453

#454

#455

#456

#457

#458

#459

#46

#460

#461

#462

#463

#464

#465

#466

#467

#468

#469

#47

#470

#471

#472

#473

#474

#475

#476

#477

#478

#479

#48

#480

#481

#482

#483

#484

#485

#486

#487

#488

#489

#49

#490

#491

#492

#493

#494

#495

#496

#497

#498

#499

#5

#50

#500

#501

#502

#503

#504

#505

#506

#507

#508

#509

#51

#510

#511

#512

#513

#514

#515

#516

#517

#518

#519

#52

#520

#521

#522

#523

#524

#525

#526

#527

#528

#529

#53

#530

#531

#532

#533

#534

#535

#536

#537

#538

#539

#54

#540

#541

#542

#543

#544

#545

#546

#547

#548

#549

#55

#550

#551

#552

#553

#554

#555

#556

#557

#558

#559

#56

#560

#561

#562

#563

#564

#565

#566

#567

#568

#569

#57

#570

#571

#572

#573

#574

#58

#59

#6

#60

#61

#62

#63

#64

#65

#66

#67

#68

#69

#7

#70

#71

#72

#73

#74

#75

#76

#77

#78

#79

#8

#80

#81

#82

#83

#84

#85

#86

#87

#88

#89

#9

#90

#91

#92

#93

#94

#95

#96

#97

#98

Mono Color

• a3a56d0c2b chore: add almalinux-vault repos (#186) unkinben 2026-06-02 23:13:45 +10:00
• 4b1fbe1fe1 feat(kanidm): scale down to single replica, remove replication (#185) unkinben 2026-06-02 22:41:28 +10:00
• 666f3d055c feat: add sessionaffinity to kanidm service (#184) unkinben 2026-06-02 21:17:51 +10:00
• fd7fc8f41b refactor(ci): convert CRD schema generator to uv inline script benvin/kubeconform-crd-schemas unkinben 2026-06-02 16:12:30 +10:00
• 93581bfde2 feat(ci): add CRD schema generation for kubeconform validation unkinben 2026-05-30 23:09:34 +10:00
• 3dc8801070 fix(kanidm): fix automatic_refresh TOML generation in init container (#182) unkinben 2026-05-31 00:25:21 +10:00
• 60f1f3130b fix(kanidm): replicate 1/2 from 0 only with automatic_refresh (#181) unkinben 2026-05-31 00:20:30 +10:00
• b6f8cb0633 feat: autorestart statefulset (#180) unkinben 2026-05-30 23:40:07 +10:00
• 0199a422a0 Merge branch 'main' into fix-kanidm-replication-config fix-kanidm-replication-config unkinben 2026-05-30 23:33:36 +10:00
• f11ec1056d fix(kanidm): remove invalid automatic_refresh from replication config (#179) unkinben 2026-05-30 23:20:48 +10:00
• 1b4b22cad8 fix(kanidm): remove invalid automatic_refresh from replication config unkinben 2026-05-30 23:15:41 +10:00
• ed7feaf19a Update apps/base/kanidm/vaultauth.yaml (#177) unkinben 2026-05-30 23:11:38 +10:00
• 4d594fbde7 feat(kanidm): vault-managed replication certs with auto-restart (#176) unkinben 2026-05-30 23:00:46 +10:00
• 1b781e0885 feat(woodpecker): set workflow pod priority class to power (#175) unkinben 2026-05-26 23:58:57 +10:00
• ede25a3858 feat(platform): add priority-classes app with low/power/medium/high classes (#174) unkinben 2026-05-26 23:41:54 +10:00
• 3d85105afd feat(open-webui): HA deployment with CNPG, PDB, and session persistence issue-155-open-webui-litellm unkinben 2026-05-26 23:37:10 +10:00
• f5f713fe86 feat(artifactapi): add open-webui/open-webui to ghcr immutable patterns (#173) unkinben 2026-05-26 23:28:27 +10:00
• 85a8cfe47d fix(open-webui): use traefik-internal gateway for chat hostname unkinben 2026-05-26 23:26:01 +10:00
• 16dabbbf8d fix(open-webui): use litellm external hostname as OPENAI_API_BASE_URL unkinben 2026-05-26 23:25:26 +10:00
• 1bcb88d3dd feat(open-webui): deploy Open WebUI with litellm backend unkinben 2026-05-26 00:11:25 +10:00
• 3990fbfe06 feat(vault): switch to Kubernetes service registration (#171) unkinben 2026-05-26 00:06:56 +10:00
• d358098fff chore: update replication certs (#170) unkinben 2026-05-25 23:52:06 +10:00
• 201e601737 feat: update kanidm replicaiton (#169) unkinben 2026-05-25 23:25:48 +10:00
• d230d87ec9 feat(artifactapi): add conftest to GitHub generic remote cache (#168) unkinben 2026-05-25 22:44:57 +10:00
• 6497dab25e fix(puppet): remove explicit clusterIP: null from puppetdb Service (#166) unkinben 2026-05-25 22:44:24 +10:00
• f403c6b05d fix(kanidm): add explicit group/kind/weight to TLSRoute refs (#165) unkinben 2026-05-25 22:43:52 +10:00
• ac8b8212bd fix(consul): normalize cpu limit to canonical string form (#164) unkinben 2026-05-25 22:43:35 +10:00
• d0b3c26223 feat(opa): add conftest OPA policies and pre-commit hook benvin/opa_policies unkinben 2026-05-25 00:00:37 +10:00
• dd282f59fb fix(litellm): normalize postgres cluster resource values (#163) unkinben 2026-05-24 23:30:10 +10:00
• 5b3058e75e fix(postfix): use hash: transport_maps with postmap init container benvin/postfix unkinben 2026-05-24 20:38:27 +10:00
• ebc21b9fa1 fix(postfix): use .unkin.net subdomain pattern in transport map unkinben 2026-05-24 20:35:19 +10:00
• 1890dd4bda fix(gateways): add explicit group/kind/weight to all HTTPRoute refs (#162) unkinben 2026-05-24 20:32:37 +10:00
• 6815b66010 fix(kanidm): use dockerhub image instead of ghcr.io (#161) unkinben 2026-05-24 20:27:21 +10:00
• 7cbec33588 fix(artifactapi): move kanidm to dockerhub remote (#160) unkinben 2026-05-24 20:24:33 +10:00
• 3756208ccd benvin/kanidm (#159) unkinben 2026-05-24 19:55:22 +10:00
• 5d6d6a9441 fix(stalwart): pin stalwart-external LoadBalancer to 198.18.199.2 benvin/stalwart unkinben 2026-05-24 19:54:29 +10:00
• d57c1db5f8 fix(mailgateway): pin postfix-external LoadBalancer to 198.18.199.1 unkinben 2026-05-24 19:54:08 +10:00
• 942e23c146 fix(mailgateway): add purelb dmz service-group annotation to LoadBalancer unkinben 2026-05-24 19:52:16 +10:00
• 572b6bfd9f fix(stalwart): add purelb dmz service-group annotation to LoadBalancer unkinben 2026-05-24 19:52:03 +10:00
• 6ce92e8ead benvin/artifactapi-mail-images (#158) unkinben 2026-05-24 14:44:38 +10:00
• b465763302 feat(stalwart): use Valkey for in-memory store, improve health probes unkinben 2026-05-24 12:56:32 +10:00
• af79d86db6 feat(artifactapi): cache stalwart webadmin zip (#157) unkinben 2026-05-24 12:55:16 +10:00
• b09cd1628d feat(postfix): deploy postfix MTA and rspamd spam filter unkinben 2026-05-24 00:43:56 +10:00
• 0d89a69c18 feat(stalwart): deploy Stalwart mail server with CNPG and S3 unkinben 2026-05-24 00:48:49 +10:00
• 5f4c9225bb feat(artifactapi): add mail stack images to docker registry cache (#156) unkinben 2026-05-24 12:42:27 +10:00
• cbc2c1cb9f fix(gateways): add explicit group: "" to all certificateRefs entries (#153) unkinben 2026-05-23 23:47:24 +10:00
• c6f9893804 fix(argocd): add vault and consul to platform project destinations (#152) unkinben 2026-05-23 23:27:24 +10:00
• e43fb742ad feat(artifactapi): add kanidm to ghcr docker immutable patterns (#151) unkinben 2026-05-23 23:09:38 +10:00
• 11ac2ae91e feat(consul): deploy HashiCorp Consul 1.22.7 via Helm chart (5-replica cluster) (#149) unkinben 2026-05-23 22:40:49 +10:00
• d2be521878 feat(vault): deploy HashiCorp Vault 2.0.1 via Helm chart (5-replica HA raft) (#148) unkinben 2026-05-23 22:39:41 +10:00
• bcd4c1a722 feat(cert-manager): upgrade to v1.20.2 and enable Gateway API support (#150) unkinben 2026-05-23 22:38:39 +10:00
• 6d9530b1ee feat(artifactapi): add hashicorp/consul and hashicorp/vault to docker immutable patterns (#147) unkinben 2026-05-23 18:21:25 +10:00
• dcea768c15 feat(woodpecker): upgrade to v3.14.1 (chart 3.6.3) (#146) unkinben 2026-05-23 18:00:55 +10:00
• e05f9bfd83 feat: increase litellm resources (#144) unkinben 2026-05-23 17:59:43 +10:00
• 445d8b6e7e feat: add HTTP→HTTPS redirect to Gateway API services (#145) unkinben 2026-05-23 17:34:07 +10:00
• c2637da068 feat(artifactapi): migrate Ingress to Gateway API (#129) unkinben 2026-05-23 16:06:33 +10:00
• 90ddd932fe feat(puppet): migrate puppetdb Ingress to Gateway API (#131) unkinben 2026-05-23 16:05:26 +10:00
• 2c6d88aa6b feat(puppet): migrate puppetboard Ingress to Gateway API (#130) unkinben 2026-05-23 01:31:28 +10:00
• 58368948d9 feat(paperclip): migrate Ingress to Gateway API (#133) unkinben 2026-05-23 01:31:03 +10:00
• 4f5c3f7ea0 feat(litellm): migrate Ingress to Gateway API (#134) unkinben 2026-05-23 01:29:54 +10:00
• fd87cb96b5 feat(externaldns): upgrade to 1.21.1, fix sources for installed CRDs (#143) unkinben 2026-05-23 01:28:20 +10:00
• d619f9195e benvin/externaldns_compatability (#142) unkinben 2026-05-23 01:17:20 +10:00
• d4b66bb651 fix: use chart logLevel value instead of duplicate extraArg benvin/externaldns-debug-logging unkinben 2026-05-23 01:08:49 +10:00
• 1944dbbfcd temp: enable debug logging on externaldns to diagnose TLSRoute sync timeout (#140) unkinben 2026-05-23 01:07:45 +10:00
• 7a9ed39f97 fix(externaldns): remove experimental Gateway API route sources benvin/fix-externaldns-crashing unkinben 2026-05-23 00:52:55 +10:00
• 0940cc20f8 fix(traefik): listen on port 443 directly for Gateway API compatibility (#138) unkinben 2026-05-23 00:44:13 +10:00
• 20ce2b1b92 feat(cattle-system): migrate rancher Ingress to Gateway API (#132) unkinben 2026-05-23 00:24:57 +10:00
• 64dc5a0242 fix(traefik): add instance labels to GatewayClasses (#137) unkinben 2026-05-23 00:23:18 +10:00
• 57c14d32c0 fix(traefik): remove invalid controllerName flag causing CrashLoopBackOff (#136) unkinben 2026-05-22 23:58:56 +10:00
• 2df359c4a9 fix(traefik): set controllerName on GatewayClasses and Traefik providers (#135) unkinben 2026-05-22 23:44:06 +10:00
• f53a2dc4f8 fix: terraform_vault must be RFC1123 compliant (#128) unkinben 2026-05-21 23:19:20 +10:00
• c5dd3cc5cb feat: add terraform_vault role (#127) unkinben 2026-05-21 23:13:48 +10:00
• 462b2b3f4f feat(externaldns): add Gateway API sources for httproute, tlsroute, grpcroute, tcproute, udproute (#126) unkinben 2026-05-18 00:11:33 +10:00
• 73c9b3f603 fix(traefik): replace invalid controllername flag with labelSelector for v3 (#125) unkinben 2026-05-18 00:03:12 +10:00
• 9a01a9ef19 fix: enable gateway/ingress class on platform project (#124) unkinben 2026-05-17 23:56:12 +10:00
• 53553ddcfd feat: deploy internal/external traefik routers (#119) unkinben 2026-05-17 23:44:50 +10:00
• 5d3ff3a0f4 feat(artifactapi): allow kubeconform and kustomize from GitHub (#123) unkinben 2026-05-17 12:19:27 +10:00
• c3002dc3c1 feat(artifactapi): allow kubecolor releases from GitHub (#122) unkinben 2026-05-11 23:39:48 +10:00
• 27db33536a feat(artifactapi): allow almalinux, debian, and fedora from Docker Hub (#121) unkinben 2026-05-10 22:56:39 +10:00
• 8a7068a1c4 feat(artifactapi): add argo-helm as a remote and virtual helm member (#120) unkinben 2026-05-10 22:53:43 +10:00
• f03eb6f651 feat: deploy argocd-image-updater via Helm benvin/argocd-image-updater-deploy unkinben 2026-05-10 22:53:06 +10:00
• 296c569cc8 feat: move artifactapi to image-updater ApplicationSet with annotations unkinben 2026-05-10 22:51:25 +10:00
• c1d831176d feat(artifactapi): add argo-helm as a remote and virtual helm member unkinben 2026-05-10 22:50:14 +10:00
• 1cefd3b78e feat: change argocd crds source to artifactapi (#118) unkinben 2026-05-10 21:12:44 +10:00
• 842d774fc3 feat: deploy gatewayapi crds (#117) unkinben 2026-05-10 21:05:56 +10:00
• 4c8827ce35 feat: add traefik/gatewayapi (#116) unkinben 2026-05-10 17:07:33 +10:00
• 5e03215f4d chore: migrate reloader/reflector to virtual/helm (#115) unkinben 2026-05-05 21:42:23 +10:00
• 02ee82da1e feat: update vso to 1.3.0 (#114) unkinben 2026-05-05 00:01:58 +10:00
• 18c519f979 chore: remove hashicorp helm repo (#113) unkinben 2026-05-03 23:51:44 +10:00
• dd0e297c14 chore: mount vault CA for helm TLS trust and add ArgoCD self-management (#112) unkinben 2026-05-03 22:47:53 +10:00
• 6fb98d66b0 chore: add vault CA cert to argocd-tls-certs-cm for helm TLS trust (#111) unkinben 2026-05-03 17:13:25 +10:00
• bcea7df925 chore: swap vso to virtual helm repo (#109) unkinben 2026-05-03 16:49:53 +10:00
• f45194282b chore: add resource requests/limits to workflows (#110) unkinben 2026-05-03 16:49:46 +10:00
• 260b2d4364 chore: mount vault CA cert for Node.js TLS trust in paperclip (#108) unkinben 2026-05-03 00:10:08 +10:00
• 156b545249 fix: set Host header on paperclip health probes to bypass hostname guard (#107) unkinben 2026-05-02 23:01:59 +10:00
• 0883f327e9 chore: update trusted hostnames (#106) unkinben 2026-05-02 22:40:21 +10:00
• 04b7c04366 chore: fix livenessProbe for paperclip (#105) unkinben 2026-05-02 22:28:52 +10:00
• 9914186fd5 chore: additional papaerclip environemnt variables (#104) unkinben 2026-05-02 22:11:38 +10:00
• f55b7065f1 fix: rename pgpooler to include rw (#103) unkinben 2026-05-02 21:39:51 +10:00
• 87a5a271c3 fix: set pgpooler name to include -rw (#102) unkinben 2026-05-02 21:35:23 +10:00