skic-v1-playground/knowledge-wiki
4
0
Fork 0
Code Issues Pull Requests Actions Packages Projects Releases Wiki Activity

wiki: sync 2026-08-02 22:18 UTC — 4 file(s) updated

Browse Source
This commit is contained in:
jarvis-at-skic
2026-08-02 22:18:01 +00:00
parent 16128a0b72
commit 24dfe75e6e
4 changed files with 52 additions and 8 deletions
Download Patch File Download Diff File Expand all files Collapse all files
meta/infrastructure.md
+4 -2
View File
@@ -9,8 +9,8 @@
| Service | Endpoint | Status |
|---------|----------|--------|
| TrueNAS SCALE | lego-cloud.eu | ✅ |
| Gitea | https://gitea.lego-cloud.eu (org: `home-v1`) | ✅ |
| Keycloak | https://keycloak.lego-cloud.eu (realm: `master`) | ✅ |
| Gitea | https://gitea.lego-cloud.eu (org: `home-v1`) | ⚠️ Internal upstream healthy; public ingress degraded 2026-08-02 |
| Keycloak | https://keycloak.lego-cloud.eu (realm: `master`) | ⚠️ Public ingress degraded 2026-08-02 |
| Zot Registry | port 30264, OIDC via Keycloak (client: `zot`) | ✅ |
| STT (Whisper) | http://192.168.1.218:39000/v1 (model: `Systran/faster-whisper-base`) | 🔲 |
| Piper TTS | http://192.168.1.218:39001/v1 | 🔲 |
@@ -24,3 +24,5 @@
- **Reusable Gitea operations skill:** ✅ `gitea-repository-operations` at `/opt/data/skills/software-development/gitea-repository-operations/SKILL.md`; covers safe discovery, create/clone/change/push, collaborators, issues/PRs, Actions, automation, and authenticated remote verification. Wiki runbook: [`gitea-repository-operations.md`](gitea-repository-operations.md).
- **Global network repository:** ✅ [`world-v1/network-v1`](https://gitea.lego-cloud.eu/world-v1/network-v1) — source-backed Internet address book. IP mapping separates registry holder, route origin, operator, and service; details in [`network-v1.md`](network-v1.md).
- **Gitea write access restored (verified 2026-07-20 15:08 UTC):** after Lego requested another access check at 11:08 UTC, authenticated SSH `git ls-remote` succeeded and local/remote `main` both resolved to `35eb834`. The disabled-account incident recorded at 11:06 UTC is resolved, and all queued commits reached the remote.
- **Gondor v1 node access (verified 2026-08-02):** reusable `gondor-v1-nodes` skill at `/opt/data/skills/cloud-architecture/gondor-v1-nodes/SKILL.md`. Hermes SSH access as `lego` is verified to Osgiliath 000 (`192.168.148.249`), Minas Tirith 010 (`192.168.153.55`), and Minas Tirith 020 (`192.168.6.208`).
- **Ingress incident (open, 2026-08-02):** Argo CD deployed `ingress-nginx` 4.11.3 as a DaemonSet with host ports 80/443 on Osgiliath, conflicting with its existing system Nginx. Kubernetes ingress intercepts legacy public hosts, returning the fake `ingress.local` certificate/default 404; `argo-workflows.apps.lego-cloud.eu` works and Gitea's internal upstream is healthy. Recommended durable repair is in GitOps (`home-v1/gondor-v1.git`, `cluster/0500-resources/0000-ingress-nginx/ingress-nginx/values.yml`): keep system Nginx as Osgiliath's public ingress, schedule Kubernetes ingress on workers, and proxy required app routes. Exact owner, due date, and final approved implementation remain **UNKNOWN**.