eblume/blumeops
1
1
Fork 0
Code Issues Pull requests Projects Releases 83 Packages Wiki Activity Actions

C0: wave-1 decommission follow-ups (argocd admin RBAC, teslamate probe)

Browse source 
- argocd: grant local break-glass admin the admin role (g, admin, role:admin);
  previously only the Authentik admins group had access, locking out admin
  once its token expired (policy.default is unset).
- alloy-k8s: repoint the teslamate blackbox probe from the deleted minikube
  service to https://tesla.ops.eblu.me/ (Caddy over Tailscale), like immich.

Co-Authored-By: Claude Opus 4.8 (1M context) <noreply@anthropic.com>
This commit is contained in:
Erich Blume 2026-06-03 13:02:05 -07:00
commit eaa899cfc6
3 changed files with 14 additions and 1 deletions
Download patch file Download diff file Expand all files Collapse all files

3
argocd/manifests/alloy-k8s/config.alloy
View file

@ -191,8 +191,9 @@ prometheus.exporter.blackbox "services" {
}
target {
// Migrated to ringtail (wave-1); probe through Caddy over Tailscale.
name = "teslamate"
address = "http://teslamate.teslamate.svc.cluster.local:4000/"
address = "https://tesla.ops.eblu.me/"
module = "http_2xx"
}