argocd-apps

T

unkinben 4d594fbde7 feat(kanidm): vault-managed replication certs with auto-restart (#176 )

- Store per-pod replication certs in Vault (kv/kubernetes/namespace/kanidm/default/repl-certs)
- VaultAuth + VaultStaticSecret sync certs to kanidm-repl-certs Secret
- busybox config-init init container injects peer certs from Secret into server.toml at startup
- Remove hardcoded partner_cert entries from per-pod server.toml templates
- Add automatic_refresh = true to all replication configs
- Add reloader.stakater.com/auto annotation to trigger rolling restart on ConfigMap/Secret changes
- Document domain UUID mismatch resolution and cert rotation in README

Reviewed-on: #176

2026-05-30 23:00:46 +10:00

.woodpecker

chore: add resource requests/limits to workflows (#110 )

2026-05-03 16:49:46 +10:00

apps

feat(kanidm): vault-managed replication certs with auto-restart (#176 )

2026-05-30 23:00:46 +10:00

argocd

feat(platform): add priority-classes app with low/power/medium/high classes (#174 )

2026-05-26 23:41:54 +10:00

feat: migrate purelb to ArgoCD (#84 )

2026-04-07 19:52:17 +10:00