2 Commits

Author	SHA1	Message	Date
Sienna Meridian Satterwhite	33f0e44545	feat(build): mTLS for buildkitd + public exposure via TLS passthrough ... cert-manager self-signed CA issues server and client certs for BuildKit mTLS. Buildkitd serves TLS on its ClusterIP (hostNetwork removed) and is publicly reachable at build.DOMAIN_SUFFIX:443 through Pingora's new SNI-based TLS passthrough router. Clients authenticate with the client certificate from the buildkitd-client-tls secret.	2026-03-26 14:23:56 +00:00
Sienna Meridian Satterwhite	ccfe8b877a	feat: La Suite email/messages, buildkitd, monitoring, vault and storage updates ... - Add Messages (email) service: backend, frontend, MTA in/out, MPA, SOCKS proxy, worker, DKIM config, and theme customization - Add Collabora deployment for document collaboration - Add Drive frontend nginx config and values - Add buildkitd namespace for in-cluster container builds - Add SeaweedFS remote sync and additional S3 buckets - Update vault secrets across namespaces (devtools, lasuite, media, monitoring, ory, storage) with expanded credential management - Update monitoring: rename grafana→metrics OAuth2Client, add Prometheus remote write and additional scrape configs - Update local/production overlays with resource patches - Remove stale login-ui resource patch from production overlay	2026-03-10 19:00:57 +00:00