forust a8f7c79934 fix(adguard): sync job RBAC and idempotency ...

- grant list+watch on adguard-deployment (rollout status hung
  without it, job hit activeDeadline and failed)
- compare content digests only (old hash embedded filenames, so
  every run patched + restarted even when in sync)

Keeps explicit rollout restart alongside reloader annotation:
one extra restart per rotation (~60d) is accepted for
determinism if reloader is down.

2026-09-23 13:52:57 +02:00

..

active

ci(deploy): split runtime by k8s/active marker

2026-09-06 20:39:12 +02:00

adguard.yaml

feat(adguard,traefik,cert-manager,reloader): foundation for adguard cert sync

2026-09-23 13:19:26 +02:00

cert-sync-rbac.yaml

fix(adguard): sync job RBAC and idempotency

2026-09-23 13:52:57 +02:00

cert-sync.yaml

fix(adguard): sync job RBAC and idempotency

2026-09-23 13:52:57 +02:00

ingress.yaml

fix(adguard): drop retired adguard.forust.xyz from prod route so dns.forust.xyz gets LE cert

2026-09-23 13:42:04 +02:00

namespace.yaml

lint: yaml spaces and tabs

2026-06-09 12:59:36 +02:00

secrets.yaml.example

feat(k8s): standardize IngressRoutes — LE prod certs, prod→local→dev order, Traefik values fix

2026-06-08 12:27:55 +02:00