will.anderson/infrastructure
1
0
Fork 0
Code Issues Pull Requests Actions Packages Projects Releases Wiki Activity

Commit Graph

  • 086a7b0bf0 add DocuSeal to GKE — manifests, Terraform, Argo CD app; update ci-base Dockerfile main Will Anderson 2026-05-05 10:38:45 -05:00
  • 73b9095d83 migrate Terraform backend to GCS, remove dead Vault GCE nodes Will Anderson 2026-05-05 10:38:22 -05:00
  • d54ec38a1c fix GCE runner: add build tools, libcurl, NOPASSWD sudo, Node.js 20 Will Anderson 2026-05-05 10:27:45 -05:00
  • 422cca6962 scale gitea-runner to 0 while Autopilot DinD blocker is pending Will Anderson 2026-05-05 10:22:21 -05:00
  • 9a368986b2 fix gitea-runner deployment for GKE Autopilot constraints Will Anderson 2026-05-05 10:22:02 -05:00
  • c31edc8b83 deploy gitea CI runner to GKE as k8s pod Will Anderson 2026-05-05 10:16:49 -05:00
  • 4dc687f2ae Fix runner extra_hosts: inject gitea-proxy ClusterIP for build containers Will Anderson 2026-05-05 05:41:59 -05:00
  • c94721b70b Remove SSH insteadOf rewrite from git-ssh-init.sh Will Anderson 2026-05-05 05:27:44 -05:00
  • a301302138 Route gitea-proxy directly to GKE LB IP, drop CF Access Will Anderson 2026-05-05 05:12:48 -05:00
  • 3462ea37a4 Add ignoreDifferences for Deployment status in gitea-gke Will Anderson 2026-05-05 05:07:15 -05:00
  • 82e05429f1 Fix Argo CD child app repoURL: k3s Gitea → GKE Gitea Will Anderson 2026-05-05 05:04:01 -05:00
  • 686041946b Enable Gitea Actions (GITEA__actions__ENABLED=true) Will Anderson 2026-05-05 04:56:29 -05:00
  • 158689dd0e Roll runner pods to pick up updated GITEA_INSTANCE_URL Will Anderson 2026-05-05 04:45:38 -05:00
  • b5c7125c13 Roll gitea-proxy pod for SNI fix Will Anderson 2026-05-05 04:42:08 -05:00
  • 464b33a176 Fix nginx SNI for Cloudflare upstream TLS Will Anderson 2026-05-05 04:41:46 -05:00
  • cebaf44db3 Scale GKE Vault to 1 replica while raft standby deadlock is unresolved Will Anderson 2026-05-05 04:37:20 -05:00
  • 939e66bfbb Route runner daemon through nginx CF Access proxy Will Anderson 2026-05-05 04:17:52 -05:00
  • ae3257525e wire soul to web_demo_key for Anthropic API isolation Will Anderson 2026-05-05 04:09:41 -05:00
  • c2900400a4 ci: switch runner git clones from HTTPS+CF Access to SSH deploy key Will Anderson 2026-05-05 04:07:35 -05:00
  • 2e5655c583 vault: rolling restart to fix raft join; remove sealedok from readiness probe Will Anderson 2026-05-05 03:59:33 -05:00
  • 3f08c6dc01 fix(runner): bump config-version to trigger rollout with new Gitea URL Will Anderson 2026-05-05 03:48:15 -05:00
  • fedf549a92 Merge pull request 'fix(runner): point GITEA_INSTANCE_URL at GKE Gitea public URL' (#1) from fix/runner-gitea-url into main will.anderson 2026-05-05 08:42:19 +00:00
  • 01507ad8ae fix(runner): point GITEA_INSTANCE_URL at GKE Gitea public URL fix/runner-gitea-url Will Anderson 2026-05-05 03:39:17 -05:00
  • 479190ef47 migrate all Argo CD repo sources from Legion Gitea to GKE Gitea Will Anderson 2026-05-05 02:25:14 -05:00
  • 804060c958 fix vault raft join addresses for GKE StatefulSet naming Will Anderson 2026-05-04 23:56:10 -05:00
  • 872a834989 Cut over Vault and Gitea traffic from GCE/Legion to GKE Will Anderson 2026-05-04 23:46:20 -05:00
  • 010d81d6d9 fix(runner): correct Gitea ClusterIP and enable force_pull Will Anderson 2026-05-04 23:32:09 -05:00
  • 1c99931de6 fix(vault-gke): switch vault-1/2 to standard-rwo storage class Will Anderson 2026-05-04 22:41:38 -05:00
  • 3d581368c3 fix(vault-gke): relax topology spread to ScheduleAnyway while SSD quota is exhausted Will Anderson 2026-05-04 22:37:17 -05:00
  • 8592a1ed74 fix(gitea-gke): configure ESO SecretStore to use workload identity with gitea SA Will Anderson 2026-05-04 22:05:01 -05:00
  • 9252b069a2 fix(gitea-gke): update ESO API version from v1beta1 to v1 Will Anderson 2026-05-04 22:00:21 -05:00
  • c4f7dcc185 fix(vault-gke): raise cpu request to 500m for GKE Autopilot anti-affinity minimum Will Anderson 2026-05-04 21:59:51 -05:00
  • b572f5720b infra: wire GKE cluster endpoint and fix gitea SA account_id Will Anderson 2026-05-04 21:56:06 -05:00
  • 4ef5e99f31 fix(ci-base): correct Gitea namespace in git insteadOf redirect Will Anderson 2026-05-04 20:42:27 -05:00
  • 9330107fcc migrate Vault and Gitea to GKE Autopilot cluster Will Anderson 2026-05-04 20:40:48 -05:00
  • cc368d2ad1 fix(ci): remove duplicate runner Deployment from apps/ will.anderson 2026-05-04 22:55:55 +00:00
  • b4b05bfe40 fix(ci): remove duplicate runner Deployment from apps/ fix/remove-duplicate-runner-deployment Will Anderson 2026-05-04 17:55:28 -05:00
  • 48106b27ec vault: cut over to GCE Raft HA cluster, retire nook.family media stack Will Anderson 2026-05-04 16:40:03 -05:00
  • 0006380c27 route runner build container clones via public URL with CF Access (#7) will.anderson 2026-05-04 21:37:53 +00:00
  • 7ab97eb88d add CF Access service token for Gitea Actions runner (#5) will.anderson 2026-05-04 21:25:20 +00:00
  • 23fc64e7b7 fix(neuron-prod): set neuron-marketing-hpa minReplicas to 1 (#8) will.anderson 2026-05-04 21:21:16 +00:00
  • 81c301f013 fix(neuron-prod): set neuron-marketing-hpa minReplicas to 1 fix/marketing-hpa-min-replicas Will Anderson 2026-05-04 16:21:01 -05:00
  • bec948bcca route runner build container clones via public URL with CF Access feature/runner-public-url-cf-access Will Anderson 2026-05-04 16:19:35 -05:00
  • a64860064b fix(neuron-prod): add allow-dharma-ingress NetworkPolicy (#6) will.anderson 2026-05-04 21:16:01 +00:00
  • 7aa56dcb1e fix(neuron-prod): add allow-dharma-ingress NetworkPolicy fix/dharma-network-policy Will Anderson 2026-05-04 16:15:38 -05:00
  • 2acf886d9f add CF Access service token for Gitea Actions runner feature/runner-cf-access-service-token Will Anderson 2026-05-04 16:14:42 -05:00
  • cbb564ccf5 revert(ci): runner public URL — CF Access blocks registration (#4) will.anderson 2026-05-04 21:05:29 +00:00
  • a529690235 Revert "fix(ci): point Gitea Actions runners at public instance URL" revert/runner-url Will Anderson 2026-05-04 16:05:10 -05:00
  • be0508037a fix(dharma): drop letsencrypt certResolver from IngressRoute will.anderson 2026-05-04 20:56:29 +00:00
  • 6f5d041440 fix(ci): point Gitea Actions runners at public instance URL will.anderson 2026-05-04 20:56:26 +00:00
  • 5868607c27 fix(ci): point Gitea Actions runners at public instance URL fix/gitea-runner-public-url Will Anderson 2026-05-04 15:52:10 -05:00
  • 627d448f6f fix ci-base: install Node 20 via binary tarball instead of nodesource apt fix/dharma-prod-502 Will Anderson 2026-05-04 15:48:12 -05:00
  • 24c2b056ab dharma: pin deployment image to SHA tag (placeholder) feature/dharma-pinned-image-tag Will Anderson 2026-05-04 15:26:36 -05:00
  • baae9b289a fix: drop bogus letsencrypt certResolver from dharma IngressRoute Will Anderson 2026-05-04 14:37:32 -05:00
  • 4754c69e01 fix: mount /var/run/docker.sock (Docker Engine) not containerd socket Will Anderson 2026-05-04 14:10:25 -05:00
  • 0444d265b9 fix: gitea runner docker_host path mismatch — use /var/run/docker.sock Will Anderson 2026-05-04 13:44:46 -05:00
  • 84688aec9d restore Always pull policy for engram-server: registry image now works Will Anderson 2026-05-04 11:43:52 -05:00
  • 10c3af4afe fix engram-server: use IfNotPresent pull policy to use local k3s cache Will Anderson 2026-05-04 11:42:10 -05:00
  • 283e335e0a deploy engram-server to neuron-prod: dharma storage backend Will Anderson 2026-05-04 11:28:45 -05:00
  • f2f20c1f2c remove missing soma manifests from prod kustomization Will Anderson 2026-05-04 11:11:18 -05:00
  • 44faf74b61 fix CI runner secrets: correct Gitea URL and use Vault-backed tokens Will Anderson 2026-05-04 11:07:43 -05:00
  • 2d655e0966 fix backup-verify path and suspend redpanda-topics-init Will Anderson 2026-05-04 10:54:31 -05:00
  • c7da8ca727 fix dharma startup: allow neuron-daemon ingress from neuron-prod namespace Will Anderson 2026-05-04 10:49:55 -05:00
  • 246368c132 vault: GCE Raft HA cluster replacing defunct Legion k3s deployment Will Anderson 2026-05-04 10:17:12 -05:00
  • 89564ccec7 bring unmanaged GCP resources under Terraform Will Anderson 2026-05-04 09:57:33 -05:00
  • 7e092d4686 fix TF drift: add DOCUSEAL_WEBHOOK_TOKEN and TOGETHER_API_KEY env vars Will Anderson 2026-05-04 09:44:46 -05:00
  • d0a6ca753c expose engram port 7750 on neuron-daemon service Will Anderson 2026-05-03 13:32:35 -05:00
  • b70fef611a deploy DHARMA registry to neuron-prod Will Anderson 2026-05-03 13:26:54 -05:00
  • 73004fa287 neuron-web: drop unused registry-pull-secret Will Anderson 2026-05-03 10:49:24 -05:00
  • 2f5fdd163e fix legion-apps argo umbrella to use gitea DNS name Will Anderson 2026-05-03 10:48:53 -05:00
  • 3daf615dd2 add neuron-web phase-1 deploy on Legion Will Anderson 2026-05-03 10:45:18 -05:00
  • b3609d6401 fold in dev-env + ci-runner provisioning fixups Will Anderson 2026-05-02 13:21:32 -05:00
  • cd2c22c295 add marketing-dev environment - team-internal auto-deploy zone Will Anderson 2026-05-02 13:13:58 -05:00
  • 40c6a31784 add sandbox.neurontechnologies.ai - internal-only experimentation env Will Anderson 2026-05-02 12:53:16 -05:00
  • 0c32964ead ci: add gitea actions runner on GCP with WIF-backed deploy SA Will Anderson 2026-05-02 12:45:25 -05:00
  • 7ee6099139 dns: document email auth records and rationale for out-of-band management Will Anderson 2026-05-01 22:49:32 -05:00
  • ec2d5794ec prod: fix Cloud Run config for v1.0 (port 8080, env vars, secrets) Will Anderson 2026-05-01 18:13:00 -05:00
  • 89e6c811d7 Update ArgoCD and neurontechnologies DNS config Will Anderson 2026-04-29 08:50:24 -05:00
  • d9ac977fef Wire Stripe billing secrets and env vars into Soma Cloud Run Will Anderson 2026-04-29 04:34:13 -05:00
  • e5c9fd1287 Add Anthropic API key secret and env var to Soma Cloud Run Will Anderson 2026-04-28 21:29:27 -05:00
  • 961dad90c0 Set neuron-marketing HPA minReplicas to 0 — site down Will Anderson 2026-04-28 18:57:09 -05:00
  • a823b0c1d3 Scale neuron-marketing to 0 — taking site down Will Anderson 2026-04-28 18:55:39 -05:00
  • e69ecd2240 Scale neuron-marketing to 1 replica for demo launch Will Anderson 2026-04-28 18:52:21 -05:00
  • 4943ccfc74 Add NEURON_API_KEY to neuron-dev secrets and fix OTLP endpoint Will Anderson 2026-04-28 15:17:16 -05:00
  • c3a90ac484 Add SOMA_KEY_SECRET to Secret Manager and wire it into Cloud Run Will Anderson 2026-04-28 11:39:33 -05:00
  • 1a8e039ecf Rename inference endpoint to neuron.neurontechnologies.ai, add wildcard DNS for customer orgs Will Anderson 2026-04-28 11:15:11 -05:00
  • 9e2646701c Grant soma compute permissions for GCE inference nodes Will Anderson 2026-04-28 10:48:32 -05:00
  • f2b025a433 Deploy soma to GCP Cloud Run at ai.neurontechnologies.ai Will Anderson 2026-04-28 10:15:15 -05:00
  • 65dd9884ae Fix soma model ID: NeuronTechnologiesAI/Neuron (correct HF org casing) Will Anderson 2026-04-28 09:35:37 -05:00
  • 88d7799911 deploy soma inference gateway with neuron model on ai.neurontechnologies.ai Will Anderson 2026-04-28 09:31:46 -05:00
  • 60f4e0693e Remove adguard — home DNS server, no purpose on GCP Will Anderson 2026-04-27 18:27:21 -05:00
  • fb5b93f9d7 fix broken pods in GCP k3s cluster Will Anderson 2026-04-27 18:17:32 -05:00
  • aee77bbfc0 Bump secret-hash annotation to force MCP pod restart Will Anderson 2026-04-27 18:05:47 -05:00
  • 409a04ce80 Route neurontechnologies.ai/mcp to neuron-mcp:8080 Will Anderson 2026-04-27 18:05:04 -05:00
  • 20a4a2c37f Take marketing site offline until launch Will Anderson 2026-04-27 17:58:33 -05:00
  • dda07ae269 Route /oauth2, /connect, /.well-known at neurontechnologies.ai to MCP Will Anderson 2026-04-27 17:51:59 -05:00
  • f5a691be3c Remove media (torrents) and headscale VPN — no longer needed on GCP Will Anderson 2026-04-27 17:44:08 -05:00
  • 03495962e0 fix(daemon): use neuron-rest cluster service instead of local JVM (--jar was circular proxy) Will Anderson 2026-04-27 17:26:58 -05:00
  • 498979ec90 fix(redis): remove image tag override, use chart default Will Anderson 2026-04-27 17:18:46 -05:00
  • bba12f3156 fix: remove static volumeNames for GCP migration, fix redis image tag Will Anderson 2026-04-27 16:53:01 -05:00