rubenhensen/k8scd
1
0 Fork 0
mirror of https://github.com/rubenhensen/k8scd.git synced 2026-11-15 22:29:09 +01:00
Code Issues Packages Projects Releases Wiki Activity
1,251 Commits 27 Branches 0 Tags
6da1b3e88e4407c0607cd8f32b343f5415a5f565
Commit Graph
3 Commits
Author SHA1 Message Date
Ruben Hensen 2ce9c33dbd Remove ghost-blog and whishper 
Neither is used any more: the blog moves to a self-written site, and
whishper needs more compute than this setup has. Ghost also ran Node 18,
which won't get the eMudhra root store fix.

Drops both apps, the blog DNS record, Gatus check and node001 tunnel
entry, their ca-bundle namespaces, and the leftover ExternalSecret for the
old hensen.io blog namespace. Final Velero backups keep the data:
ghost-blog-final-202610220955 until 22 October 2027 and
whisper-final-202610220955 until 20 January 2027.
 2026-10-22 10:11:06 +02:00
Ruben Hensen fe678d4b4b ca-bundle: also serve argocd, authentik and actual-budget 
Those three namespaces had their own ~190KB copy of patched-ca-bundle.
Let the ca-bundle chart render them too, so the bundle lives in one file.
 2026-10-22 09:26:43 +02:00
Ruben Hensen 9a984c724c Add a ca-bundle chart for the patched CA bundle 
Nine more namespaces need patched-ca-bundle, the bundle from Alpine
ca-certificates-bundle 20261020-r0 without the roots above the compromised
eMudhra intermediates. Rather than another nine ~190KB copies, a small
chart renders the ConfigMap from one ca-certificates.crt into every
namespace in values.yaml. argocd, authentik and actual-budget keep their
own copies for now.
 2026-10-22 09:11:01 +02:00