Infrastructure as Code

Graham McInitre 514b346662 cloudflared: aggressive reconnects, always-pull latest, restricted PSS compliance ... - imagePullPolicy: Always so :latest actually tracks upstream (nodes were running two different cached digests) - --retries 1: supervisor retries forever; this caps the jittered backoff at ~2s instead of the exponential 1..32s ramp - liveness failureThreshold 30: let cloudflared's own fast retry loop reconnect instead of killing pods into exponential CrashLoopBackOff (pods had 300+ restarts) - maxSurge 0 / maxUnavailable 1: required anti-affinity on 3 workers deadlocked surge-based rollouts - securityContext for restricted:latest PodSecurity (nonroot 65532, drop ALL caps, no privilege escalation, RuntimeDefault seccomp) Co-Authored-By: Claude <noreply@anthropic.com>		2026-07-16 08:48:53 -05:00
ansible	update radius	2026-07-12 15:35:31 -05:00
cluster	cloudflared: aggressive reconnects, always-pull latest, restricted PSS compliance	2026-07-16 08:48:53 -05:00
home/cluster	updates	2026-06-19 09:33:27 -05:00
old/cluster	update and remove dns from tf	2026-01-10 16:00:02 -06:00
talos	updated talos	2026-07-05 13:27:15 -05:00
tofu	update radius	2026-07-12 15:35:31 -05:00
.gitignore	update gitignore and docs for local tofu state	2026-02-17 14:31:33 -06:00
CLAUDE.md	flatcar resolvers	2026-06-22 15:52:51 -05:00
talosconfig	fix vntx cnames	2026-01-16 09:25:46 -06:00