unkin/argocd-apps
3
0
Fork 0
Code Issues 7 Pull Requests 4 Actions Packages Projects Releases Wiki Activity

Give vlogs its own namespace #507

Merged
benvin merged 1 commits from benvin/vlogs-own-namespace into main 2026-09-28 22:55:30 +10:00
Conversation 1 Commits 1 Files Changed 14
+44 -11
unkin-agent commented 2026-09-28 22:49:20 +10:00
Member
Copy Link
Copy Source

The Vault KV layout is kubernetes/namespace///, so vlogs and logviewer both running as SA default in the shared logging namespace would collide on one oauth-credentials entry. Splitting vlogs out resolves it without widening any Vault policy.

  • Move apps/base/logging/vlogs to apps/base/vlogs, namespace vlogs
  • Add namespace.yaml and a vlogs-scoped VaultAuth (role default)
  • Point the VaultStaticSecret at kubernetes/namespace/vlogs/default/oauth-credentials
  • Add the au-syd1 overlay, platform ApplicationSet path and project destination
  • Move the wildcard-unkin-net-tls reflection from logging to vlogs; vlogs was its only consumer there

Secret is already seeded at the new Vault path.

The Vault KV layout is kubernetes/namespace/<ns>/<sa>/<secret>, so vlogs and logviewer both running as SA default in the shared logging namespace would collide on one oauth-credentials entry. Splitting vlogs out resolves it without widening any Vault policy. - Move apps/base/logging/vlogs to apps/base/vlogs, namespace vlogs - Add namespace.yaml and a vlogs-scoped VaultAuth (role default) - Point the VaultStaticSecret at kubernetes/namespace/vlogs/default/oauth-credentials - Add the au-syd1 overlay, platform ApplicationSet path and project destination - Move the wildcard-unkin-net-tls reflection from logging to vlogs; vlogs was its only consumer there Secret is already seeded at the new Vault path.
unkin-agent added 1 commit 2026-09-28 22:49:21 +10:00
Move vlogs into its own namespace
ci/woodpecker/pr/pre-commit Pipeline was successful
Details
ci/woodpecker/pr/kubeconform Pipeline was successful
Details
a5f1f04b60
unkin-agent commented 2026-09-28 22:53:54 +10:00
Author
Member
Copy Link
Copy Source

No findings.

No findings.
benvin merged commit e6e882abfc into main 2026-09-28 22:55:30 +10:00
benvin deleted branch benvin/vlogs-own-namespace 2026-09-28 22:55:31 +10:00
Sign in to join this conversation.
Reviewers
No Reviewers
Labels
No items
No Label
Milestone
No items
No Milestone
Projects
Clear projects
No project
Assignees
Clear assignees
benvin (BenVincent) unkin-agent (Unkin Agent) unkinben (Ben Vincent)
No Assignees
1 Participants
Notifications
Due Date
No due date set.
Dependencies

No dependencies set.

Reference: unkin/argocd-apps#507
Delete Branch "benvin/vlogs-own-namespace"

Deleting a branch is permanent. Although the deleted branch may continue to exist for a short time before it actually gets removed, it CANNOT be undone in most cases. Continue?