Erich Blume 756f2dff13 Migrate Tailscale Ingresses to shared ProxyGroup for per-Ingress tagging ... The legacy per-Ingress StatefulSet proxy model silently ignores the tailscale.com/tags annotation, so tag:flyio-target was never applied to docs/loki/prometheus — breaking the restricted ACL. This adds a ProxyGroup (type: Ingress, 2 replicas) and annotates all 12 Ingresses with tailscale.com/proxy-group: "ingress" to enable per-Ingress tag overrides and restore connectivity. Co-Authored-By: Claude Opus 4.6 <noreply@anthropic.com>		2026-02-08 12:13:04 -08:00
..
.gitkeep	Add towncrier changelog system (#86)	2026-02-03 11:48:13 -08:00
feature-blumeops-tasks-due-date-filter.feature.md	Filter blumeops-tasks to hide future-dated tasks (#124)	2026-02-08 10:38:44 -08:00
op-read-migration.infra.md	Migrate Ansible op calls to op read URI syntax (#125)	2026-02-08 10:52:43 -08:00
restrict-flyio-proxy-acl.infra.md	Migrate Tailscale Ingresses to shared ProxyGroup for per-Ingress tagging	2026-02-08 12:13:04 -08:00