Ruben Hensen
0dc0bc4322
docs: authentik's base URL is already set
2026-10-25 04:22:06 +01:00
Ruben Hensen
3c4a8cc8db
docs: bring the authentik README up to date
2026-10-25 04:16:48 +01:00
Ruben Hensen
d17e78130d
docs: record metrics-server and plan the restore test
2026-10-25 04:15:43 +01:00
Ruben Hensen
aa940134ea
docs: record the CI and the Renovate triage
2026-10-25 04:10:14 +01:00
Ruben Hensen
f2e4c5aff6
docs: record the backup check
2026-10-25 03:49:43 +01:00
Ruben Hensen
1f56e67e8b
docs: what the disk did in the last day, and foto's DNS
2026-10-25 03:42:13 +01:00
Ruben Hensen
cadac4cebf
docs: record the cleanup and what is left of it
2026-10-25 03:29:55 +01:00
Ruben Hensen
7d3a64e5c8
docs: record the NetworkPolicies for the other apps and Vault
2026-10-25 03:24:07 +01:00
Ruben Hensen
684f536f2f
docs: record the NetworkPolicies for immich, mbgwp and authentik
2026-10-25 03:17:11 +01:00
Ruben Hensen
ada909ee02
docs: plan off-site backups through a friend's bucket
2026-10-25 03:05:39 +01:00
Ruben Hensen
345de16552
docs: record the Vault 2.2.1 upgrade
2026-10-25 02:52:52 +01:00
Ruben Hensen
4709194483
docs: tick off the authentik login test
2026-10-25 02:40:45 +01:00
Ruben Hensen
ad2d6fbae5
docs: record the authentik 2026.8 upgrade
2026-10-25 02:34:51 +01:00
Ruben Hensen
a70dff6fdd
docs: add a roadmap in place of the wishlist
2026-10-25 02:16:31 +01:00
Ruben Hensen
ab0a09a356
docs: the immich login moved to auth.scoutingmbg.nl
2026-10-25 02:08:59 +01:00
Ruben Hensen
ae2e5ad9fa
docs: record the foto.scoutingmbg.nl DNS change
2026-10-24 17:48:35 +02:00
Ruben Hensen
c5d2ebaefc
docs: record the Envoy retry policy
2026-10-24 17:06:29 +02:00
Ruben Hensen
5f8394e0c0
docs: plan a second SSD for Longhorn
...
Hardware to buy, shrinking the data first (214 GiB of old snapshots), installing the NVMe drive, and moving every replica over with a disk eviction.
2026-10-24 15:17:15 +02:00
Ruben Hensen
396eb2665c
docs: record why controllers still lost their leases
...
Heavy writes on the node's only SSD stall dqlite; the fixes so far, the running measurement and the second-SSD option.
2026-10-24 14:46:09 +02:00
Ruben Hensen
111a9ddcea
docs: foto@ is deleted
2026-10-24 14:20:07 +02:00
Ruben Hensen
a8296a514e
docs: foto@'s likes are deleted
2026-10-24 14:19:00 +02:00
Ruben Hensen
712fa1fe65
docs: sol-auth is gone
2026-10-24 14:15:14 +02:00
Ruben Hensen
6c6f473f63
docs: fotoupload@ sessions ended
2026-10-24 14:13:40 +02:00
Ruben Hensen
a5478d60e6
docs: share-sync joins albums that kaderleden create
2026-10-24 14:11:07 +02:00
Ruben Hensen
f69b790a58
docs: immich now logs in with Scouts Online only
2026-10-24 14:04:43 +02:00
Ruben Hensen
ebf28c1bf1
docs: step B of the Scouts Online login is live
2026-10-24 13:43:24 +02:00
Ruben Hensen
1c6b42b20b
docs: step A of the Scouts Online login is live
2026-10-24 13:25:02 +02:00
Ruben Hensen
f3f36c3718
docs: plan the immich login with Scouts Online
...
Building blocks, design and the three steps towards personal accounts with upload rights from Scouts Online roles.
2026-10-24 13:19:52 +02:00
Ruben Hensen
f4e74a9503
docs: record the immich 3 upgrade
...
v3.3.5 with chart 0.13.4 is running; note the safety net to clean up later and the optional revised ML models.
2026-10-24 12:33:43 +02:00
Ruben Hensen
e7696107c0
docs: record the immich database migration
...
immich now runs v2.7.5 on PostgreSQL 17 with VectorChord. The PostgreSQL 14 cluster stays for a few days as a fallback.
2026-10-24 02:19:57 +02:00
Ruben Hensen
8357d31f9c
docs: record the Longhorn NetworkPolicies and poll interval
2026-10-24 00:05:44 +02:00
Ruben Hensen
f2936e69ec
docs: record the switch to annotation tracking
2026-10-24 00:01:16 +02:00
Ruben Hensen
f901beea4c
docs: record the ESO storedVersions cleanup
2026-10-23 23:53:16 +02:00
Ruben Hensen
d747530f52
docs: tick off the 1.36 component recheck
2026-10-23 23:37:17 +02:00
Ruben Hensen
f0519d1b70
docs: record the CVE-2026-2270 patch
...
microk8s now runs 1.36/edge (v1.36.5) and stays held; it goes back to 1.36/stable once that channel catches up.
2026-10-23 23:35:32 +02:00
Ruben Hensen
acc3d7eabb
docs: tick off microk8s 1.36
...
v1.36.2 with containerd 2.2.3, and the snap is held. The CVE-2026-2270 patch release is still to come to the stable channel.
2026-10-23 23:24:06 +02:00
Ruben Hensen
96870af92f
docs: prepare microk8s 1.36
...
Nothing changes in microk8s between 1.35 and 1.36 for this setup. The stable channels lag upstream patches, including the CVE-2026-2270 fix, so the snap gets held and patch updates become a deliberate step.
2026-10-23 23:18:51 +02:00
Ruben Hensen
a0fcf9ec3f
docs: tick off Longhorn 1.13
2026-10-23 23:15:04 +02:00
Ruben Hensen
bd8643c00b
docs: tick off Velero 1.18
2026-10-23 22:48:57 +02:00
Ruben Hensen
04ac64f956
docs: tick off Argo CD 3.5
2026-10-23 22:42:00 +02:00
Ruben Hensen
e95d78e160
docs: tick off microk8s 1.35
...
v1.35.6 with containerd 2.1.6. containerd converted the old config without warnings, and the fixed hosts.toml now parses.
2026-10-23 22:29:32 +02:00
Ruben Hensen
b60d3b5589
docs: record the VACUUM and prepare microk8s 1.35
...
The database went from 709 MB to 44 MB, the first snapshot after it is 8.3 MB instead of 150 MB, and k8s-dqlite uses 403 MB instead of 1,346 MB.
2026-10-23 22:21:46 +02:00
Ruben Hensen
175769d36c
Add a tool to VACUUM the k8s-dqlite database
...
dqlite supports VACUUM from v1.18.2, which microk8s 1.34 ships, but the dqlite shell wraps every statement in a transaction and SQLite refuses to VACUUM inside one. dqlite-vacuum sends it through the go-dqlite driver instead and otherwise just prints page statistics. dqlite-vacuum.sh makes the backups first.
Rehearsed on opti1 on a throwaway node in /dev/shm: 657 MB to 41 MB in 0.6s, with concurrent writes unaffected and the data intact after restarts.
2026-10-23 22:03:30 +02:00
Ruben Hensen
c55b7ceab5
docs: tick off microk8s 1.34
...
v1.34.9 runs with the dqlite snapshot tuning intact. LIST latency is unchanged from 1.33, so the ConsistentListFromCache stalls of canonical/microk8s#5568 don't show here.
2026-10-23 21:42:44 +02:00
Ruben Hensen
67abb0b972
docs: prepare the move to microk8s 1.34
...
k8s-dqlite v1.8.1 in microk8s 1.34 already bundles dqlite 1.18.2, so the database can be vacuumed from 1.34 on. Also notes the containerd 2 jump at 1.35, the feature gates the 1.34 hook adds for kine, and the front-proxy certificate that expired in 2025.
2026-10-23 21:35:16 +02:00
Ruben Hensen
a07ef664cb
docs: tick off the Envoy Gateway migration
2026-10-23 21:29:37 +02:00
Ruben Hensen
48f5c7d894
docs: tick off the switch to Envoy Gateway and the Longhorn login
2026-10-23 21:17:04 +02:00
Ruben Hensen
23aaf5ab26
docs: tick off the routes and note what the switch-over needs
2026-10-23 21:02:10 +02:00
Ruben Hensen
8e508080d7
docs: plan the Envoy Gateway phases
...
Phase 1 is done: Envoy Gateway runs next to ingress-nginx on test ports.
2026-10-23 17:27:49 +02:00
Ruben Hensen
3a250b65cc
docs: tick off cert-manager 1.21.2
2026-10-23 17:22:22 +02:00
Ruben Hensen