bluejay/bluejay-infra
1
0
Fork 0
Code Issues Pull Requests 14 Actions Packages Projects Releases Wiki Activity
Files
9a58fd2af65d96c129159cb4da1f0f106948eac9
bluejay-infra/apps
History
Andrew Stoltz 9a58fd2af6 oidc: flip enforcement ON for knowledge + distribution (no-live-proof, fix-forward) 
Operator 2026-06-04: nothing is production yet, flip OIDC + fix-forward (no
browser-proof gate). knowledge: Auth__Enabled false->true (OIDC env already
wired). distribution: add OIDC env block (Authority/Audience/ClientId=distribution,
ClientSecret from distribution-oidc-client) + Enabled=true; public read/entitlement
+ Method() allowlist stay open (OIDC gates admin only). Clients already provisioned
(secrets present). ArgoCD deploys both.

Co-Authored-By: Claude Opus 4.8 <noreply@anthropic.com>
2026-06-03 23:38:48 -05:00
..
agent-zero
fix(agent-zero): export knowledge mcp gate to python builder
2026-04-29 23:32:55 -05:00
andrew
Fix Traefik dashboard cert issuer: step-ca-acme
2026-03-10 01:12:08 -05:00
asterisk
K8s manifest hardening + new bluejay-infra-lint test project
2026-05-04 03:18:04 -05:00
authentik
authentik: generous startup/liveness probes for first-boot migration
2026-05-25 16:03:03 -05:00
cdi
feat(infra): add Multus CNI + CDI + PROD VLAN 57 NAD as GitOps prereqs for ci1
2026-05-08 13:05:58 -05:00
dustin
Fix Traefik dashboard cert issuer: step-ca-acme
2026-03-10 01:12:08 -05:00
edge2-services
edge2-services: print.iamworkin.lan Traefik HTTPS for Print.Web (XL Track C)
2026-04-26 14:37:33 -05:00
erik
Fix Traefik dashboard cert issuer: step-ca-acme
2026-03-10 01:12:08 -05:00
fc-aistation
Adopt live Library Retail AiStation web apps
2026-06-03 20:24:32 -05:00
fc-chat
deploy: roll Chat and Knowledge OIDC images
2026-06-03 18:13:09 -05:00
fc-desktop
fix(fc-desktop): land 4 NetworkPolicies into bluejay-infra (was deploy-script-only)
2026-05-07 10:27:20 -05:00
fc-devicemgmt
fix(fc-devicemgmt): remove self-referential Application resource (Q-MR-79)
2026-05-20 11:18:25 -05:00
fc-distribution
oidc: flip enforcement ON for knowledge + distribution (no-live-proof, fix-forward)
2026-06-03 23:38:48 -05:00
fc-divoom-dm-pi-device
divoom: add pi deploy artifact manifests
2026-06-02 21:45:27 -05:00
fc-divoom-tv-pi
divoom: add pi deploy artifact manifests
2026-06-02 21:45:27 -05:00
fc-dms
Add signage service ingress manifests
2026-04-09 15:09:08 -05:00
fc-landing
Add step-ca TLS certs for mysql, php, desktop, signage, fc-landing
2026-04-08 18:20:23 -05:00
fc-library
Adopt live Library Retail AiStation web apps
2026-06-03 20:24:32 -05:00
fc-llm-bridge
K8s manifest hardening + new bluejay-infra-lint test project
2026-05-04 03:18:04 -05:00
fc-menuboard
apps: fc-chat refactor + fc-menuboard app split
2026-04-16 19:25:25 -05:00
fc-messageboard
K8s manifest hardening + new bluejay-infra-lint test project
2026-05-04 03:18:04 -05:00
fc-mysql
Add step-ca TLS certs for mysql, php, desktop, signage, fc-landing
2026-04-08 18:20:23 -05:00
fc-php
Add step-ca TLS certs for mysql, php, desktop, signage, fc-landing
2026-04-08 18:20:23 -05:00
fc-presentations
Add signage service ingress manifests
2026-04-09 15:09:08 -05:00
fc-redis
feat(fc-redis): add SignalR backplane for cross-product event bus (Q-SO-1 Phase A)
2026-05-11 19:02:58 -05:00
fc-retail
Adopt live Library Retail AiStation web apps
2026-06-03 20:24:32 -05:00
fc-scoreboard
Add signage service ingress manifests
2026-04-09 15:09:08 -05:00
fc-segmentdisplay
feat(fc-segmentdisplay): switch tls certificate to dns01
2026-04-23 18:39:17 -05:00
fc-signage
Add step-ca TLS certs for mysql, php, desktop, signage, fc-landing
2026-04-08 18:20:23 -05:00
fc-signage-appletv
Add Apple TV signage docs manifest
2026-05-13 20:32:48 -05:00
fc-signage-pi-player
Tighten Pi signage HDMI settle coverage (#3)
2026-05-18 02:35:17 +00:00
fc-signalcontrol
K8s manifest hardening + new bluejay-infra-lint test project
2026-05-04 03:18:04 -05:00
fc-ttsreader
Deploy TtsReader schema repair image
2026-06-02 22:00:15 -05:00
fc-updater
fc-updater: disable loki audit sink
2026-05-31 11:34:12 -05:00
fit
Fix Traefik dashboard cert issuer: step-ca-acme
2026-03-10 01:12:08 -05:00
flowercore
Adopt fc-updater into ArgoCD
2026-05-06 17:33:32 -05:00
gitea-public
Update telephony-web image to v20260324d, resolve merge conflicts
2026-03-24 15:55:52 -05:00
github-runner
ops: trim load for degraded 2-node cluster (agent2 PSU dead)
2026-05-28 13:47:13 -05:00
guacamole
fix(guacamole): add --- separator between macmini-vnc-creds OnePasswordItem and guacamole-branding ConfigMap
2026-05-12 09:26:03 -05:00
intranet
Deploy TtsReader correction bridge images
2026-05-31 12:35:45 -05:00
irc
fix(irc): use short name for unrealircd in anope + thelounge configs
2026-04-22 21:23:38 -05:00
knowledge
oidc: flip enforcement ON for knowledge + distribution (no-live-proof, fix-forward)
2026-06-03 23:38:48 -05:00
kubevirt-vms
ops: trim load for degraded 2-node cluster (agent2 PSU dead)
2026-05-28 13:47:13 -05:00
mail
mail: remove cert-manager Certificate (manage mail-tls via step-ca JWK + noc1 renew timer)
2026-06-01 15:55:38 -05:00
matrix
statefulsets: align guacamole and matrix drift defaults
2026-04-22 23:11:47 -05:00
monitoring
fix(monitoring): repoint pirelay scrape to signalcontrol
2026-06-03 20:20:36 -05:00
multus
fix(multus): bump kube-multus-ds memory 50Mi/50Mi -> 1Gi/512Mi (prevent OOM cascade)
2026-05-11 10:30:05 -05:00
noc-services
feat(noc-services): wire puppetdb.iamworkin.lan through Traefik step-ca cert
2026-04-28 15:13:20 -05:00
pki-web
Add infrastructure manifests for 9 services
2026-03-09 16:35:04 -05:00
selenium
selenium: right-size hub + chrome + edge memory limits
2026-05-25 20:11:41 -05:00
teamspeak
Update telephony-web image to v20260324d, resolve merge conflicts
2026-03-24 15:55:52 -05:00
telephony
fix(telephony): init container runs as root to chown hostPath /tmp/tts-audio
2026-05-11 18:37:15 -05:00
traefik-dashboard
Fix Traefik dashboard cert issuer: step-ca-acme
2026-03-10 01:12:08 -05:00
voice
Update telephony-web image to v20260324d, resolve merge conflicts
2026-03-24 15:55:52 -05:00
worldbuilder
feat(worldbuilder): pin k8s demo to fake backend (#10)
2026-05-18 04:52:11 +00:00
zabbix
fix(zabbix): bump web probe timeouts 5s→15s + add failureThreshold
2026-05-15 15:59:04 -05:00