Adds postBuild.substituteFrom to the Flux Kustomization reference manifest
so that ${GRAFANA_ADMIN_PASSWORD} in flux/monitoring/helmrelease.yaml is
substituted from the grafana-admin secret at reconcile time.
Without this block Flux passes the literal string to the Helm chart, causing
Grafana to start with a broken admin password.
The live copy in 0xWheatyz/Talos at
testing1/first-cluster/cluster/flux/api-company-source/kustomization.yaml
must also be updated with the same block (companion to issue #90).
Closesleeworks-agents/api-company#97
Documents Node.js v22.22.2, Python 3.11.2, Helm v3.21.0, Flux CLI v2.4.0,
kustomize v5.6.0 as available in the agent container. Confirms git remote
points to gitea.leeworks.dev/leeworks-agents/api-company. Includes stack
summary (runtime choices, Helm registry, Flux bootstrap reference) and
a live-verification block for operator use.
Closesleeworks-agents/api-company#94
Add three Astro markdown pages under docs-site/src/pages/legal/:
- terms-of-service.md -> /legal/terms-of-service
- privacy-policy.md -> /legal/privacy-policy
- acceptable-use-policy.md -> /legal/acceptable-use-policy
All three use the Base.astro layout and render the legal content from
docs/legal/ (synced verbatim). The Base.astro layout already had legal
footer links added previously; this commit also adds a footer section
directly in index.astro for redundancy.
The ToS URL (https://docs.leeworks.dev/legal/terms-of-service) is now
ready to be pasted into the RapidAPI listing (issue #44).
Closesleeworks-agents/api-company#89
- Fix APIDataStale 'for' duration from 5m to 30m (issue spec requires 30m)
- Add APIDataCriticallyStale alert at 60-day threshold (5184000s) with for: 1h
and severity: critical
Both alerts fire on api_data_freshness_seconds metric for all three API jobs.
Existing APIHighErrorRate and APIHighLatency alerts are unmodified.
kustomize build flux/ passes.
Closesleeworks-agents/api-company#88
The bedag HelmRepository was only declared inside flux/docs-site/, causing
a race condition where zip-enrichment, holidays, and air-quality HelmReleases
would fail with 'HelmRepository not found' if they reconciled before docs-site.
Move flux/docs-site/helmrepository.yaml -> flux/bedag-helmrepository.yaml and
add it as a top-level resource in flux/kustomization.yaml so it is always
available before any HelmRelease that depends on the bedag chart.
Closesleeworks-agents/api-company#87
Triaged issues #76 and #77 (new operator secret tasks for Flux GitRepository
auth and gitea-act-runner token). Both are blocked manual operator tasks;
instructions posted on each issue. No PRs open. kustomize build flux/ = PASS.
Add checklist item 10 and full detail section for the rapidapi-proxy-secret
Kubernetes secret that must be created in each API namespace (zip-enrichment,
holidays, air-quality) before the Phase 3 server middleware can validate
incoming RapidAPI requests.
Includes:
- Checklist item 10 in the summary list
- Full detail section with kubectl commands for all 3 namespaces
- Note about placeholder ExternalSecret manifests and ESO (issue #61)
- Updated dependency-order diagram
Closesleeworks-agents/api-company#60
- dns.md: fix '6 A records' wording to '7 A records'
- dns.md: add grafana.leeworks.dev to status checklist and dig verification block
- operator-runbook.md: fix 'all six' to 'all seven', add registry.leeworks.dev
row to Phase 4 DNS table, add dig verification loop
Closesleeworks-agents/api-company#62
- Item 8: gitea-registry imagePullSecret in zip-enrichment, holidays,
air-quality, docs-site namespaces (closesleeworks-agents/api-company#58)
- Item 9: gitea-image-automation-token in flux-system with write:repository
scope for Flux ImageUpdateAutomation (closesleeworks-agents/api-company#57)
- Wire gitea-image-automation-token as push.secretRef in imageupdateautomation.yaml
- Update dependency order and item count from seven to nine
Closesleeworks-agents/api-company#46
Add flux/ directories for all three API services, each containing:
- namespace.yaml — Kubernetes Namespace
- helmrelease.yaml — HelmRelease using bedag/raw chart with Deployment,
Service, and Ingress (TLS via cert-manager letsencrypt-prod)
- externalsecret.yaml — placeholder/comment for RapidAPI proxy-secret;
includes kubectl manual-create instructions until ESO is deployed
- kustomization.yaml — per-directory Kustomize resources list
Services and subdomains:
zip-enrichment → zip.leeworks.dev
holidays → holidays.leeworks.dev
air-quality → aqi.leeworks.dev
Images:
registry.leeworks.dev/zip-enrichment/server:latest
registry.leeworks.dev/holidays/server:latest
registry.leeworks.dev/air-quality/server:latest
Update root flux/kustomization.yaml to include all three new directories.
kustomize build flux/ passes with zero errors.
agent-company
AI-Manager