bluejay fef68a9560 feat(fc-devicemgmt): add Kubernetes deployment manifests (#1) ...

Sprint 8 IMPL lane Cx-5: fc-devicemgmt K8s manifests (rebased onto main 2026-05-18; 13 files, +944).

Namespace + Web Deployment (replicas:2, MySQL backend) + Operator Deployment (replicas:1, KubeOps leader-elect) + Service + Certificate (step-ca-acme ClusterIssuer) + Traefik IngressRoute (devices.iamworkin.lan internal) + ServiceAccount + ClusterRole + ClusterRoleBinding + NetworkPolicy (CNI DNAT-aware backend ports) + OnePasswordItem (5-field consolidated) + ArgoCD Application bootstrap shape + lint coverage.

Follow-ups (not merge blockers):
- localhost/fc-devicemgmt-{web,operator}:v20260512-cx5 must be imported to all 3 RKE2 nodes; pods will ErrImageNeverPull until imported.
- 1Password vault item 'FlowerCore DeviceManagement Runtime' must be created with 5 fields before pods can start.
- DNS devices.iamworkin.lan -> 10.0.56.200 already present.

Co-Authored-By: Claude Opus 4.7 (1M context) <noreply@anthropic.com>

2026-05-18 02:56:23 +00:00

..

agent-zero

fix(agent-zero): export knowledge mcp gate to python builder

2026-04-29 23:32:55 -05:00

andrew

Fix Traefik dashboard cert issuer: step-ca-acme

2026-03-10 01:12:08 -05:00

asterisk

K8s manifest hardening + new bluejay-infra-lint test project

2026-05-04 03:18:04 -05:00

cdi

feat(infra): add Multus CNI + CDI + PROD VLAN 57 NAD as GitOps prereqs for ci1

2026-05-08 13:05:58 -05:00

dustin

Fix Traefik dashboard cert issuer: step-ca-acme

2026-03-10 01:12:08 -05:00

edge2-services

edge2-services: print.iamworkin.lan Traefik HTTPS for Print.Web (XL Track C)

2026-04-26 14:37:33 -05:00

erik

Fix Traefik dashboard cert issuer: step-ca-acme

2026-03-10 01:12:08 -05:00

fc-chat

apps: fc-chat refactor + fc-menuboard app split

2026-04-16 19:25:25 -05:00

fc-desktop

fix(fc-desktop): land 4 NetworkPolicies into bluejay-infra (was deploy-script-only)

2026-05-07 10:27:20 -05:00

fc-devicemgmt

feat(fc-devicemgmt): add Kubernetes deployment manifests (#1)

2026-05-18 02:56:23 +00:00

fc-distribution

fix(certs): kill cert-manager renewal loop on 3 broken Certificate specs

2026-05-07 15:32:00 -05:00

fc-dms

Add signage service ingress manifests

2026-04-09 15:09:08 -05:00

fc-landing

Add step-ca TLS certs for mysql, php, desktop, signage, fc-landing

2026-04-08 18:20:23 -05:00

fc-llm-bridge

K8s manifest hardening + new bluejay-infra-lint test project

2026-05-04 03:18:04 -05:00

fc-menuboard

apps: fc-chat refactor + fc-menuboard app split

2026-04-16 19:25:25 -05:00

fc-messageboard

K8s manifest hardening + new bluejay-infra-lint test project

2026-05-04 03:18:04 -05:00

fc-mysql

Add step-ca TLS certs for mysql, php, desktop, signage, fc-landing

2026-04-08 18:20:23 -05:00

fc-php

Add step-ca TLS certs for mysql, php, desktop, signage, fc-landing

2026-04-08 18:20:23 -05:00

fc-presentations

Add signage service ingress manifests

2026-04-09 15:09:08 -05:00

fc-redis

feat(fc-redis): add SignalR backplane for cross-product event bus (Q-SO-1 Phase A)

2026-05-11 19:02:58 -05:00

fc-scoreboard

Add signage service ingress manifests

2026-04-09 15:09:08 -05:00

fc-segmentdisplay

feat(fc-segmentdisplay): switch tls certificate to dns01

2026-04-23 18:39:17 -05:00

fc-signage

Add step-ca TLS certs for mysql, php, desktop, signage, fc-landing

2026-04-08 18:20:23 -05:00

fc-signage-appletv

Add Apple TV signage docs manifest

2026-05-13 20:32:48 -05:00

fc-signage-pi-player

Tighten Pi signage HDMI settle coverage (#3)

2026-05-18 02:35:17 +00:00

fc-signalcontrol

K8s manifest hardening + new bluejay-infra-lint test project

2026-05-04 03:18:04 -05:00

fc-ttsreader

deploy(ttsreader): persist voice reference clips on pvc

2026-05-06 20:48:58 -05:00

fc-updater

[uc] Phase 1 auth gate deploy v20260509-4162dca-authgate

2026-05-08 21:16:54 -05:00

fit

Fix Traefik dashboard cert issuer: step-ca-acme

2026-03-10 01:12:08 -05:00

flowercore

Adopt fc-updater into ArgoCD

2026-05-06 17:33:32 -05:00

gitea-public

Update telephony-web image to v20260324d, resolve merge conflicts

2026-03-24 15:55:52 -05:00

github-runner

fix(github-runner): dedupe DOTNET_INSTALL_DIR+NUGET_PACKAGES on base+sharedpos

2026-05-17 21:53:05 -05:00

guacamole

fix(guacamole): add --- separator between macmini-vnc-creds OnePasswordItem and guacamole-branding ConfigMap

2026-05-12 09:26:03 -05:00

intranet

deploy(intranet): promote brochure wave 1 image

2026-05-08 11:12:56 -05:00

irc

fix(irc): use short name for unrealircd in anope + thelounge configs

2026-04-22 21:23:38 -05:00

knowledge

fix(certs): kill cert-manager renewal loop on 3 broken Certificate specs

2026-05-07 15:32:00 -05:00

kubevirt-vms

kubevirt-vms: boot ci1 from server template

2026-05-12 16:58:18 -05:00

mail

Update telephony-web image to v20260324d, resolve merge conflicts

2026-03-24 15:55:52 -05:00

matrix

statefulsets: align guacamole and matrix drift defaults

2026-04-22 23:11:47 -05:00

monitoring

feat(github-runner): harden Linux runner fleet (#5)

2026-05-18 02:51:02 +00:00

multus

fix(multus): bump kube-multus-ds memory 50Mi/50Mi -> 1Gi/512Mi (prevent OOM cascade)

2026-05-11 10:30:05 -05:00

noc-services

feat(noc-services): wire puppetdb.iamworkin.lan through Traefik step-ca cert

2026-04-28 15:13:20 -05:00

pki-web

Add infrastructure manifests for 9 services

2026-03-09 16:35:04 -05:00

selenium

fix(selenium): GitOps-capture selenium-netpol (was unmanaged anywhere)

2026-05-07 10:30:59 -05:00

teamspeak

Update telephony-web image to v20260324d, resolve merge conflicts

2026-03-24 15:55:52 -05:00

telephony

fix(telephony): init container runs as root to chown hostPath /tmp/tts-audio

2026-05-11 18:37:15 -05:00

traefik-dashboard

Fix Traefik dashboard cert issuer: step-ca-acme

2026-03-10 01:12:08 -05:00

voice

Update telephony-web image to v20260324d, resolve merge conflicts

2026-03-24 15:55:52 -05:00

worldbuilder

fix(certs): kill cert-manager renewal loop on 3 broken Certificate specs

2026-05-07 15:32:00 -05:00

zabbix

fix(zabbix): bump web probe timeouts 5s→15s + add failureThreshold

2026-05-15 15:59:04 -05:00