|
|
a336eda7e9
|
feat(argocd): SSO OIDC Authentik sur le domaine (argocd.funklab.online) (#92)
- values : configs.cm (url + oidc.config vers auth.funklab.online, secret
référencé $argocd-oidc:clientSecret) + rbac lab-admins→admin
- IngressRoute websecure + Let's Encrypt (route argocd.lab.local conservée)
Appliqué hors ArgoCD (bootstrap helm) :
helm upgrade argocd argo/argo-cd -n argocd --version 9.5.14 \
-f k8s/argocd-bootstrap/values.yaml
Secret k8s argocd-oidc déjà créé (clé clientSecret, label part-of=argocd).
Co-authored-by: Claude Fable 5 <noreply@anthropic.com>
|
2026-07-07 17:21:19 +02:00 |
|
alkatrazz
|
d7b33bb34a
|
feat: bootstrap ArgoCD + structure GitOps k8s
- k8s/argocd-bootstrap/values.yaml : ArgoCD Helm values (ingress Traefik,
resources limités, dex désactivé)
- k8s/apps-of-apps/ : root Application + monitoring Application
- k8s/infra/monitoring/ : kube-prometheus-stack v85.0.2 (Grafana, Prometheus,
AlertManager, node-exporter daemonset)
- Scrape additionnels : storage-01:9100, gpu-01:9100 (node), :9101 (ROCm),
llama-server :1234/:1236/:1237
- AlertManager webhook → http://192.168.10.1:9093/webhook (Hermes monitor)
- Ressources dimensionnées pour compute 8GB
- kubeEtcd/Scheduler/ControllerManager/Proxy désactivés (Talos)
Co-Authored-By: Claude Sonnet 4.6 <noreply@anthropic.com>
|
2026-05-13 20:26:49 +02:00 |
|
