- ExternalSecret: pull neuron_api_key from Vault into NEURON_API_KEY - ConfigMap: set OTEL_EXPORTER_OTLP_ENDPOINT to alloy-otlp in-cluster service instead of localhost (fixes 196 restart OTel connection errors)
- Add hourly restic backup CronJob to neuron-prod namespace - Backs up /data/neuron-prod.db to Cloudflare R2 (legion-neuron-backup bucket) - Retention: 24 hourly, 7 daily, 4 weekly — <$0.01/month at current DB size - ExternalSecret pulls restic password + R2 creds from Vault secret/r2 - Actuator exposure per environment: - prod: health,info only / show-details=never (no internals exposed) - stage: health,info,metrics,loggers / show-details=always (pre-prod visibility) - dev: full (health,info,metrics,env,beans,loggers,mappings) / show-details=always
Will Anderson