Lots of multi-tenancy fixes #134

Merged

jessebot merged 23 commits from bump-pyproject into main 2026-10-21 19:44:54 +00:00

Conversation 0 Commits 23 Files changed 12 +106 -66

jessebot commented 2026-10-21 16:12:24 +00:00

Owner

Copy link

• this also releases the previous PR (#133)
• add gotosocial.frontend parameters
• add ArgoCD.get_sync_wave() method to get a currently installed app's sync wave, so we don't move too fast or too slow
• always store htpasswd secret separately from all the tenant secrets for all LGTM stack components.
  • all openbao unencrypted LGTM stack credentials are stored in tenants/{tenant_name}/{component}-remote-write in the core/grafana-stack openbao namespace
    • the remote write credentials are also stored in the core/alloy openbao namespace for the current cluster only.
• be a bit more clever about how we do OpenBao.kv_put in the ExternalSecrets object to reduce code in the create_generic_credentials method.
  • also fixed a doc string for that method
• change while loop that we use to wait for openbao... again
• diable grafana-stack by default
• allow disabling the SMTP feature of GoToSocial

- this also releases the previous PR (#133) - add gotosocial.frontend parameters - add `ArgoCD.get_sync_wave()` method to get a currently installed app's sync wave, so we don't move too fast or too slow - always store htpasswd secret separately from all the tenant secrets for all LGTM stack components. - all openbao unencrypted LGTM stack credentials are stored in `tenants/{tenant_name}/{component}-remote-write` in the `core/grafana-stack` openbao namespace - the remote write credentials are also stored in the `core/alloy` openbao namespace for the *current cluster only*. - be a bit more clever about how we do `OpenBao.kv_put` in the `ExternalSecrets` object to reduce code in the `create_generic_credentials` method. - also fixed a doc string for that method - change while loop that we use to wait for openbao... again - diable grafana-stack by default - allow disabling the SMTP feature of GoToSocial

jessebot added the

minor

label 2026-10-21 16:12:24 +00:00

jessebot self-assigned this 2026-10-21 16:12:24 +00:00

jessebot added 11 commits 2026-10-21 16:12:24 +00:00

bump pyproject.toml to new version 2771f5088a

put extra tenants into a different set of secrets 8be3317ca7

fix external tenant creation in openbao b2c19ef996

fix how we write extra pathed secrets 3871f29377

clean up how we set tenant name, which isn't needed until alloy is past syncwave 1 50944520a7

update how we create alloy credentials so a remote alloy never gets the full htpasswd c51a3b6893

allow different gotosocial frontends 53b3443441

rename the htpasswd credentials file 423ec16b57

fix how we provide manual alloy secrets c1b7140cfe

fix the alloy writes d370e18a12

install current sync wave of alloy e9313ddd64

jessebot added 1 commit 2026-10-21 16:26:58 +00:00

reduce a bit of debug logging 04ec1622be

jessebot added 1 commit 2026-10-21 16:37:43 +00:00

try to while loop it? 45e4f3b7b2

jessebot added 1 commit 2026-10-21 16:44:27 +00:00

turn off the grafana stack by default e8969834df

jessebot added 1 commit 2026-10-21 16:47:12 +00:00

set default log level to info 541a00185c

jessebot added 1 commit 2026-10-21 16:59:58 +00:00

add debug line 7bc98f20a4

cloudymax added 1 commit 2026-10-21 17:44:27 +00:00

add kube and system reserved resources f07ae80c43

cloudymax added 1 commit 2026-10-21 17:48:18 +00:00

bump kube reserved cpu de17a0d896

cloudymax added 1 commit 2026-10-21 17:55:00 +00:00

bump reserved again 86832c9761

cloudymax added 1 commit 2026-10-21 18:59:19 +00:00

Update .forgejo/smol_k8s_lab_config_k3s.yaml 510c05e1c0

cloudymax added 1 commit 2026-10-21 19:00:41 +00:00

Update .forgejo/smol_k8s_lab_config_k3s.yaml f801cfa680

jessebot added 1 commit 2026-10-21 19:38:31 +00:00

update default gotosocial settings 0a2f9bc8a0

jessebot added 1 commit 2026-10-21 19:43:33 +00:00

allow not generating smtp credentials f580c282c6

jessebot merged commit 10bf3c367f into main 2026-10-21 19:44:54 +00:00

jessebot deleted branch bump-pyproject 2026-10-21 19:44:54 +00:00

jessebot referenced this pull request from a commit 2026-10-21 19:44:56 +00:00

Lots of multi-tenancy fixes (#134)

Sign in to join this conversation.

Reviewers

No reviewers

Labels

Clear labels   

TUI

something to do with the Terminal User Interface

  

bug

Something is not working

  

docs

documentation required

  

duplicate

This issue or pull request already exists

  

enhancement

New feature

  

help wanted

Need some help

  

invalid

Something is wrong

  

major

a major version bump is needed

  

question

More information is needed

  

secrets

things to do with how we handle secrets

  

wontfix

This won't be fixed

  

bug

Something is not working

  

docs

Update the docs

  

duplicate

This issue or pull request already exists

  

enhancement

New feature

  

help wanted

Need some help

  

invalid

Something is wrong

  

major

⚠️ Major level semver bump. Includes breaking changes!

  

minor

🐭 Minor level semver bump in version. New feature with no breaking changes.

  

patch

🩹 Patch level semver bump in version. Likely a bug fix.

  

question

More information is needed

  

wontfix

This won't be fixed

No labels

TUI

bug

docs

duplicate

enhancement

help wanted

invalid

major

question

secrets

wontfix

bug

docs

duplicate

enhancement

help wanted

invalid

major

minor

patch

question

wontfix

Milestone

Clear milestone

No items

No milestone

Projects

Clear projects

No items

No project

Assignees

Clear assignees

No assignees

jessebot

2 participants

Notifications

Subscribe

Due date

The due date is invalid or out of range. Please use the format "yyyy-mm-dd".

No due date set.

Dependencies

No dependencies set

Reference

oeng/smol-k8s-lab!134

No description provided.