  panxiao81andClaude Opus 5.5
|
954bb39a23
|
docs: 记录共享 PG SQL 级指标的部署与验证
ansible / collection-test (pull_request) Successful in 9m52s
yaml / yaml (pull_request) Failing after 10m40s
ansible / lint (pull_request) Successful in 12m38s
Co-Authored-By: Claude Opus 5.5 <[email protected]>
|
2026-10-01 16:20:16 +00:00 |
|
|
panxiao81andClaude Opus 5.5
|
549f82810e
|
修正 Patroni 已接收配置的判断：重启前预加载库行带 error 属预期
Co-Authored-By: Claude Opus 5.5 <[email protected]>
|
2026-10-01 16:20:16 +00:00 |
|
|
panxiao81andClaude Opus 5.5
|
567b42ed13
|
修正 monitoring.yml 的 check 模式与 Patroni pending 判断
只读探测在 check 模式下照常执行；依赖真实执行结果的等待与验证在 check 模式跳过。
patronictl JSON 会省略空值字段，pending 判断先检查键是否存在。
Co-Authored-By: Claude Opus 5.5 <[email protected]>
|
2026-10-01 16:20:15 +00:00 |
|
|
panxiao81andClaude Opus 5.5
|
0cd4a67e12
|
新增共享 PG 的 SQL 级指标与 dev 告警分流
- 数据库主机上按实例运行 prometheus-community/postgres_exporter 0.20.1，
以实例 OS 用户走本地 socket，经 peer + ident 映射到仅有 pg_monitor 的
homelab_monitor 角色；无密码、不经 Bao。版本与官方 sha256sums.txt 同源。
- prod/dev 启用 pg_stat_statements；monitoring.yml 仅在未生效时 reload/重启
（prod 走 Patroni pending restart），重复执行 changed=0。
- 告警以上游 postgres_mixin 为底改写为 PrometheusRule，阈值对齐 Patroni
failover lag 与 max_slot_wal_keep_size；抓取目标带 env 标签。
- Alertmanager 新增 env="dev" 路由到独立 dev 频道，dev SQL 检查告警补 env。
Co-Authored-By: Claude Opus 5.5 <[email protected]>
|
2026-10-01 16:20:15 +00:00 |
|
|
panxiao81
|
78a73d80aa
|
revert: 撤回超出数据库任务范围的 Ayatori 接入文档修改
|
2026-09-27 18:02:49 +00:00 |
|
|
panxiao81
|
b6c6287ae3
|
docs: 明确数据库环境隔离交付与控制面职责边界
|
2026-09-27 17:58:27 +00:00 |
|
|
panxiao81
|
7da5bc1181
|
docs: 记录共享数据维护告警 GitOps 接管结果
|
2026-09-27 17:38:13 +00:00 |
|
|
panxiao81
|
589c34ee60
|
Merge pull request '补齐共享 etcd/PG 的备份、证书续签及 dev 健康告警' (#166) from feat/shared-pg-health into main
yaml / yaml (push) Successful in 56s
ansible / collection-test (push) Successful in 2m16s
ansible / lint (push) Successful in 2m52s
Reviewed-on: #166
|
2026-09-27 17:35:27 +00:00 |
|
|
panxiao81
|
396109d462
|
docs: 明确 exporter 升级方式与 PrometheusRule 声明
|
2026-09-27 17:29:49 +00:00 |
|
|
panxiao81
|
0d633cf0cc
|
fix: 使用 PrometheusRule 并按 exporter 版本获取官方校验和
yaml / yaml (pull_request) Successful in 51s
ansible / collection-test (pull_request) Successful in 2m28s
ansible / lint (pull_request) Successful in 4m5s
|
2026-09-27 17:29:40 +00:00 |
|
|
panxiao81
|
26a8ffed83
|
docs: 补充共享数据维护监控与告警排障
|
2026-09-27 17:07:34 +00:00 |
|
|
panxiao81
|
0988f5c37e
|
feat: 补齐共享数据备份、证书续签与开发实例监控
yaml / yaml (pull_request) Successful in 27s
ansible / collection-test (pull_request) Successful in 1m59s
ansible / lint (pull_request) Successful in 3m14s
|
2026-09-27 17:05:24 +00:00 |
|
|
panxiao81
|
06943d4c65
|
将 laptop ZFS ARC 预算限制为 4 GiB
yaml / yaml (push) Successful in 25s
Co-authored-by: panxiao81 <[email protected]>
|
2026-09-27 03:31:25 +00:00 |
|
|
panxiao81
|
7137426e8f
|
补齐 OpenBao 内部健康与快照新鲜度告警
yaml / yaml (push) Successful in 1m28s
ansible / collection-test (push) Successful in 2m27s
ansible / lint (push) Successful in 8m18s
Co-authored-by: panxiao81 <[email protected]>
|
2026-09-25 20:59:36 +00:00 |
|
|
panxiao81
|
834f654941
|
接入 OpenBao 受鉴权监控并修复快照续期 (#162)
yaml / yaml (push) Successful in 35s
terraform / validate (push) Successful in 1m43s
ansible / collection-test (push) Successful in 1m55s
ansible / lint (push) Successful in 2m48s
Co-authored-by: panxiao81 <[email protected]>
|
2026-09-25 20:39:31 +00:00 |
|
|
panxiao81
|
52322116f9
|
docs: 确认共享数据库监控由 Flux 接管
|
2026-09-25 19:51:35 +00:00 |
|
|
panxiao81
|
3a2fe5fa0c
|
feat: 纳管共享 etcd 与 k3s 外 PostgreSQL 高可用及备份
yaml / yaml (pull_request) Successful in 41s
ansible / collection-test (pull_request) Successful in 2m41s
terraform / validate (pull_request) Successful in 2m41s
ansible / lint (pull_request) Successful in 4m36s
|
2026-09-25 19:34:48 +00:00 |
|
|
panxiao81
|
acd4b55722
|
docs: 记录共享 etcd 与外置 PostgreSQL 部署和接入边界
|
2026-09-25 19:31:14 +00:00 |
|
|
panxiao81
|
5435d7d2d5
|
feat: 部署 Hydra 与通用 OIDC 登录适配器
ansible / lint (pull_request) Failing after 4m34s
hydra-login / verify (pull_request) Successful in 6m9s
ansible / collection-test (pull_request) Successful in 8m24s
|
2026-09-25 13:42:39 +00:00 |
|
|
panxiao81
|
83e4ac2f01
|
Merge pull request '新增 Nexus 统一制品仓库 POC' (#103) from feat/nexus-poc into main
ansible / collection-test (push) Successful in 4m14s
ansible / lint (push) Successful in 5m15s
yaml / yaml (push) Successful in 35s
terraform / validate (push) Successful in 1m8s
Reviewed-on: #103
|
2026-09-20 19:49:49 +00:00 |
|
|
panxiao81
|
110dbcc2c3
|
新增 Nexus 统一制品仓库 POC
ansible / lint (pull_request) Failing after 0s
ansible / collection-test (pull_request) Failing after 0s
yaml / yaml (pull_request) Failing after 0s
terraform / validate (pull_request) Failing after 0s
|
2026-09-18 19:11:30 +00:00 |
|
|
panxiao81
|
7582990655
|
修复 OpenSandbox 冷启动超时与旧 worker 清理
ansible / lint (pull_request) Failing after 0s
ansible / collection-test (pull_request) Failing after 0s
yaml / yaml (pull_request) Failing after 0s
|
2026-09-18 18:53:26 +00:00 |
|
|
panxiao81
|
6eb4875db6
|
接入 OpenSandbox 动态 Runner
ansible / collection-test (pull_request) Successful in 2m58s
ansible / lint (pull_request) Successful in 4m33s
yaml / yaml (pull_request) Successful in 29s
|
2026-09-18 18:33:00 +00:00 |
|
|
panxiao81
|
4c823f8181
|
确保 OpenSandbox values 立即生效
yaml / yaml (pull_request) Successful in 27s
ansible / collection-test (pull_request) Successful in 1m16s
ansible / lint (pull_request) Successful in 2m33s
|
2026-09-18 17:49:26 +00:00 |
|
|
panxiao81
|
159a75b710
|
记录 sandbox ESO 当前状态
yaml / yaml (pull_request) Successful in 16s
terraform / validate (pull_request) Successful in 39s
|
2026-09-18 17:40:24 +00:00 |
|
|
panxiao81
|
e0e629794b
|
为 sandbox 接入 OpenBao External Secrets
yaml / yaml (pull_request) Successful in 17s
terraform / validate (pull_request) Successful in 49s
|
2026-09-18 17:34:53 +00:00 |
|
|
panxiao81
|
d526fd75d3
|
部署 OpenSandbox 控制面
yaml / yaml (pull_request) Successful in 17s
|
2026-09-18 16:36:21 +00:00 |
|
|
panxiao81
|
e67bce5121
|
fix: 延长 sandbox Flux 根同步超时
ansible / collection-test (pull_request) Successful in 1m8s
ansible / lint (pull_request) Successful in 2m56s
|
2026-09-17 18:20:33 +00:00 |
|
|
panxiao81
|
b619f6f681
|
fix: 补齐 sandbox PSAT reviewer 权限
yaml / yaml (pull_request) Successful in 13s
|
2026-09-17 17:30:54 +00:00 |
|
|
panxiao81
|
aeb8c49d0a
|
feat: 部署 sandbox SPIRE Agent 与 CSI
yaml / yaml (pull_request) Successful in 20s
ansible / collection-test (pull_request) Successful in 1m9s
ansible / lint (pull_request) Successful in 2m15s
|
2026-09-17 17:23:25 +00:00 |
|
|
panxiao81
|
ea15841d4d
|
feat: 引导 sandbox SPIRE external controller
yaml / yaml (pull_request) Successful in 17s
ansible / collection-test (pull_request) Successful in 1m5s
ansible / lint (pull_request) Successful in 4m4s
|
2026-09-17 17:00:44 +00:00 |
|
|
panxiao81
|
b7b92b3465
|
feat: 引导 sandbox 跨集群 SPIRE 认证
yaml / yaml (pull_request) Successful in 19s
ansible / lint (pull_request) Successful in 2m13s
ansible / collection-test (pull_request) Successful in 1m11s
|
2026-09-17 16:50:02 +00:00 |
|
|
panxiao81
|
60836c3360
|
feat: 接入 sandbox Kubernetes 监控
yaml / yaml (pull_request) Successful in 25s
ansible / collection-test (pull_request) Successful in 1m10s
ansible / lint (pull_request) Successful in 4m33s
|
2026-09-17 16:02:48 +00:00 |
|
|
panxiao81
|
f810b1c674
|
docs: 明确 sandbox 监控边界
yaml / yaml (pull_request) Successful in 17s
ansible / collection-test (pull_request) Successful in 1m8s
ansible / lint (pull_request) Successful in 2m43s
|
2026-09-17 15:11:29 +00:00 |
|
|
panxiao81
|
6585d8c46a
|
feat: 声明 sandbox 双节点 K3s 集群
yaml / yaml (pull_request) Successful in 18s
ansible / collection-test (pull_request) Successful in 1m16s
ansible / lint (pull_request) Successful in 2m18s
|
2026-09-17 14:57:48 +00:00 |
|
|
panxiao81
|
412fa93018
|
修正网络配置 YAML 缩进
yaml / yaml (pull_request) Successful in 28s
terraform / validate (pull_request) Successful in 55s
ansible / collection-test (pull_request) Successful in 1m21s
ansible / lint (pull_request) Successful in 4m11s
|
2026-09-17 13:29:14 +00:00 |
|
|
panxiao81
|
2e05b1a96a
|
声明式管理 Proxmox API 对象与 Samba DNS 上游
yaml / yaml (pull_request) Failing after 25s
terraform / validate (pull_request) Successful in 51s
ansible / collection-test (pull_request) Successful in 1m27s
ansible / lint (pull_request) Successful in 3m45s
|
2026-09-17 13:22:50 +00:00 |
|
|
panxiao81
|
71eea7d8fc
|
恢复 OCI Terraform 与站点网络 IaC
|
2026-09-17 13:22:49 +00:00 |
|
|
panxiao81
|
a08c8a7303
|
统一 DN42 DNS 与宿主 Docker 地址池
|
2026-09-17 13:22:49 +00:00 |
|
|
panxiao81
|
5241eceb0c
|
feat(dns): 用模板生成各后端配置
yaml / yaml (pull_request) Successful in 23s
terraform / validate (pull_request) Successful in 36s
ansible / collection-test (pull_request) Successful in 1m33s
ansible / lint (pull_request) Failing after 2m44s
|
2026-09-16 18:27:09 +00:00 |
|
|
panxiao81
|
f3d8c38d28
|
收窄本机 SPIFFE 身份的 KV 权限范围
terraform / validate (pull_request) Successful in 28s
|
2026-09-16 17:15:07 +00:00 |
|
|
panxiao81
|
64b1acd6c3
|
授权本机 SPIFFE 身份访问开发服务
yaml / yaml (pull_request) Successful in 12s
terraform / validate (pull_request) Successful in 32s
|
2026-09-16 17:06:27 +00:00 |
|
|
panxiao81
|
31d89817b2
|
fix(zot): 分离匿名拉取与 SPIRE 鉴权推送入口
yaml / yaml (pull_request) Successful in 22s
ansible / collection-test (pull_request) Successful in 1m10s
ansible / lint (pull_request) Successful in 17m42s
|
2026-09-16 13:06:35 +00:00 |
|
|
panxiao81
|
47042d4df4
|
完善内存监控并迁移 Grafana 内网入口
yaml / yaml (push) Successful in 20s
ansible / collection-test (push) Successful in 1m10s
ansible / lint (push) Successful in 13m9s
Co-authored-by: panxiao81 <[email protected]>
|
2026-09-16 12:47:52 +00:00 |
|
|
panxiao81
|
c11e1d5e6f
|
部署 NATS JetStream 消息基础设施
yaml / yaml (pull_request) Successful in 51s
ansible / collection-test (pull_request) Successful in 2m0s
ansible / lint (pull_request) Successful in 19m43s
|
2026-09-16 12:00:24 +00:00 |
|
|
panxiao81
|
5c2b575a4f
|
feat(zot): 接入 SeaweedFS 与 SPIRE 并统一 S3 凭据来源
yaml / yaml (pull_request) Successful in 20s
ansible / collection-test (pull_request) Successful in 59s
ansible / lint (pull_request) Successful in 10m32s
|
2026-09-14 13:26:54 +00:00 |
|
|
panxiao81
|
ed86738c4b
|
文档：记录 SPIRE 与 OpenBao workload identity 用法
|
2026-09-14 10:31:36 +00:00 |
|
|
panxiao81
|
c9987122e6
|
配置 SPIRE JWT-SVID 登录 OpenBao
terraform / validate (pull_request) Successful in 1m12s
|
2026-09-13 15:56:08 +00:00 |
|
|
panxiao81
|
b6ad65d768
|
暴露 SPIRE OIDC discovery endpoint
ansible / collection-test (pull_request) Successful in 2m17s
yaml / yaml (pull_request) Successful in 28s
ansible / lint (pull_request) Successful in 4m21s
|
2026-09-13 15:44:18 +00:00 |
|
|
panxiao81
|
e2be2ca045
|
fix(dns): 声明公网隧道 CNAME 目标
yaml / yaml (pull_request) Successful in 18s
ansible / collection-test (pull_request) Successful in 54s
ansible / lint (pull_request) Successful in 5m13s
|
2026-09-10 18:04:02 +00:00 |
|