eblume/blumeops
1
1
Fork 0
Code Issues Pull requests Projects Releases 83 Packages Wiki Activity Actions
blumeops/docs/changelog.d/+wave1-decommission-followups.infra.md
Erich Blume eaa899cfc6 C0: wave-1 decommission follow-ups (argocd admin RBAC, teslamate probe) 
- argocd: grant local break-glass admin the admin role (g, admin, role:admin);
  previously only the Authentik admins group had access, locking out admin
  once its token expired (policy.default is unset).
- alloy-k8s: repoint the teslamate blackbox probe from the deleted minikube
  service to https://tesla.ops.eblu.me/ (Caddy over Tailscale), like immich.

Co-Authored-By: Claude Opus 4.8 (1M context) <noreply@anthropic.com>
2026-06-03 13:02:05 -07:00

513 B
Raw Blame History

Fix three follow-ups from the wave-1 decommission: grant the local break-glass admin account ArgoCD admin rights (g, admin, role:admin — previously only the Authentik admins group had access, so admin was locked out whenever its token expired), and repoint the alloy blackbox probe for teslamate from the deleted minikube service to https://tesla.ops.eblu.me/ (through Caddy over Tailscale). The orphaned paperless/teslamate roles + ExternalSecrets left on the minikube blumeops-pg are also cleaned up.