unkin-agent 062d217ea8 bind-internal: add cheeztv.unkin.net record (#421) ...

why: cheeztv.unkin.net never resolved — external-dns ignores unkin.net (domain-filter is k8s.syd1.au.unkin.net only); *.unkin.net names are DNSRecord CRs.

- add cheeztv-dns-internal A record → 198.18.200.4 (internal traefik VIP serving the cheeztv gateway)

Reviewed-on: #421
Co-authored-by: unkin-agent <unkin-agent@unkin.net>
Co-committed-by: unkin-agent <unkin-agent@unkin.net>

2026-08-26 20:09:08 +10:00

..

age-api

Enable Reloader secret watching, scope existing auto to configmap-only (#326) (#339)

2026-08-08 19:35:31 +10:00

arrstack

Extend LE *.unkin.net wildcard to arrstack + authentik (reflect into gitea) (#418)

2026-08-25 21:48:54 +10:00

artifactapi

Export and scrape metrics from all redis/valkey instances (#398)

2026-08-23 19:19:16 +10:00

authentik

Extend LE *.unkin.net wildcard to arrstack + authentik (reflect into gitea) (#418)

2026-08-25 21:48:54 +10:00

bind-external

Add agent-dns RBAC: static SA + ClusterRole + per-namespace RoleBindings (#332)

2026-08-02 21:49:37 +10:00

bind-internal

bind-internal: add cheeztv.unkin.net record (#421)

2026-08-26 20:09:08 +10:00

bind-system

Add agent-dns RBAC: static SA + ClusterRole + per-namespace RoleBindings (#332)

2026-08-02 21:49:37 +10:00

cattle-system

fix(gateways): add explicit group/kind/weight to all HTTPRoute refs (#162)

2026-05-24 20:32:37 +10:00

cephrgw-system

Enable Reloader secret watching, scope existing auto to configmap-only (#326) (#339)

2026-08-08 19:35:31 +10:00

cert-manager

Extend LE *.unkin.net wildcard to arrstack + authentik (reflect into gitea) (#418)

2026-08-25 21:48:54 +10:00

certificates

certificates: restore the validly-signed intermediate in vault-ca-cert (#305)

2026-07-28 23:14:14 +10:00

cheeztv

cheeztv: terminate public cheeztv.unkin.net TLS with the LE *.unkin.net wildcard (#417)

2026-08-25 20:58:02 +10:00

clickhouse-system

Add ClickHouse + Vector + NATS JetStream centralized logging (with S3 raw archive) (#296)

2026-07-28 19:54:27 +10:00

cnpg-system

feat: migrate cnpg-system from Terraform to ArgoCD (#44)

2026-03-19 01:25:50 +11:00

consul

Route consul API hostname to the HTTP API (8500) (#282)

2026-07-25 18:19:38 +10:00

csi-cephfs

Mount mediafs CephFS into arrstack (#391)

2026-08-22 23:05:43 +10:00

csi-cephrbd

observability: scrape existing app metrics (audit + ceph-csi batch) (#239)

2026-07-06 23:57:54 +10:00

dhcp-system

Bump kea images to v0.1.3 (HA peer DNS startup wait) (#344)

2026-08-08 23:36:25 +10:00

elastic-system

feat: migrate elastic-system to ArgoCD (#79)

2026-03-27 17:00:05 +11:00

encapi

Enable Reloader secret watching, scope existing auto to configmap-only (#326) (#339)

2026-08-08 19:35:31 +10:00

externaldns

Add agent-dns RBAC: static SA + ClusterRole + per-namespace RoleBindings (#332)

2026-08-02 21:49:37 +10:00

fafflix

Replace legacy jellyfin app with fafflix (adult, cheeztv pattern) (#415)

2026-08-25 20:06:53 +10:00

ghp

ghp: deploy service-token fork image + wire GHP_AUTH_SERVICE_TOKENS (#372)

2026-08-15 18:18:22 +10:00

gitea

Export and scrape metrics from all redis/valkey instances (#398)

2026-08-23 19:19:16 +10:00

grafana

Add Traefik Grafana dashboard (#407)

2026-08-23 21:56:45 +10:00

grafana-system

grafana-system: deploy grafana-operator

2026-07-05 22:16:30 +10:00

inteldeviceplugins-system

chore: migrate reloader/reflector to virtual/helm (#115)

2026-05-05 21:42:23 +10:00

k8up-system

Deploy k8up backup operator (platform, k8up-system) (#363)

2026-08-14 00:29:15 +10:00

kanidm

Enable Reloader secret watching, scope existing auto to configmap-only (#326) (#339)

2026-08-08 19:35:31 +10:00

litellm

Export and scrape metrics from all redis/valkey instances (#398)

2026-08-23 19:19:16 +10:00

logging

logging: set clickhouse readonly profile to readonly=2 (#409)

2026-08-23 22:36:52 +10:00

netbox

Export and scrape metrics from all redis/valkey instances (#398)

2026-08-23 19:19:16 +10:00

node-feature-discovery

feat: migrate node-feature-discovery and inteldeviceplugins-system to platform project (#48)

2026-03-19 02:14:45 +11:00

observability

observability: fix dropped kubelet/cadvisor metrics, add kube-state-metrics + VMAlert k8s.rules (#399)

2026-08-23 21:38:06 +10:00

paperclip

cephrgw: recreate cnpg backup buckets on ec placement (step 3) (#316)

2026-07-30 23:44:50 +10:00

pdbmux

Enable Reloader secret watching, scope existing auto to configmap-only (#326) (#339)

2026-08-08 19:35:31 +10:00

priority-classes

feat(platform): add priority-classes app with low/power/medium/high classes (#174)

2026-05-26 23:41:54 +10:00

puppet

Force Replace sync for the Recreate puppet master to clear stale rollingUpdate (#349)

2026-08-09 20:55:00 +10:00

purelb

feat: migrate purelb to ArgoCD (#84)

2026-04-07 19:52:17 +10:00

reflector-system

fix: helm-charts in overlay only (#5)

2026-03-01 16:01:32 +11:00

reloader-system

feat: add reloader (#6)

2026-03-01 16:34:01 +11:00

reposync

feat: migrate reposync to ArgoCD (#78)

2026-03-27 16:26:35 +11:00

traefik-system

fix(traefik): add instance labels to GatewayClasses (#137)

2026-05-23 00:23:18 +10:00

valkey-operator-system

Install valkey-operator (#365)

2026-08-15 12:32:57 +10:00

vault

feat(vault): switch to Kubernetes service registration (#171)

2026-05-26 00:06:56 +10:00

vm-system

feat: migrate vm-system to ArgoCD (#80)

2026-03-27 17:04:15 +11:00

vpa-system

Add vpa-system: VPA CRDs + recommender (advise mode) (#281)

2026-07-25 18:26:15 +10:00

vso-system

feat: migrate vso-system to ArgoCD (#81)

2026-04-07 19:33:50 +10:00

watchstate

watchstate: deploy admin-gated jellyfin watch-state sync tool (#419)

2026-08-25 21:39:07 +10:00

woodpecker

woodpecker: add arrproxy-ci service account (#376)

2026-08-16 16:09:58 +10:00

kustomization.yaml

feat: initial commit

2026-03-01 14:31:16 +11:00