091c5cd089
docs: add secrets-checklist.md with kubectl commands for all required secrets
...
Closes leeworks-agents/api-company#43
Creates docs/secrets-checklist.md containing:
- Human operator checklist (7 checkboxes)
- Exact kubectl create secret commands for all required secrets
- Source of each secret value (Gitea admin UI, Slack, etc.)
- Which issues are unblocked by each secret
- Dependency order diagram
Secrets covered:
1. gitea-leeworks-agents-token (flux-system) → unblocks Flux GitRepo auth (#2 )
2. gitea-runner-token (gitea-runner) → unblocks act-runner (#3 )
3. grafana-admin (monitoring) → unblocks Grafana (#7 )
4. gatus-slack-webhook (monitoring) → unblocks Gatus alerts (#8 )
5. GITEA_TOKEN Actions secret (per repo) → unblocks CI image push
6. Gitea packages enable + DNS → unblocks registry (#4 )
7. Flux source in Talos repo → unblocks GitOps (#2 )
2026-05-26 15:03:05 +00:00
5e7fbc5bfd
docs: add cluster-audit.md with nodes/namespaces/ingress/Flux state
...
Covers all required sections per issue acceptance criteria:
- Nodes (3x Talos control plane, 10.0.1.3/4/5)
- Namespaces (active + staged + future)
- Ingress rules (all 8 leeworks.dev subdomains)
- Flux sources, kustomizations, HelmReleases with READY status
- NOT-READY objects called out explicitly with required human actions
Note: kubectl unavailable from agent container; data sourced from
STATUS.md, flux/ manifests, and prior session logs. Human operator
should verify live state.
Closes leeworks-agents/api-company#26
2026-05-25 10:03:55 +00:00
c748e8d074
feat: Grafana dashboard ConfigMap, PrometheusRule SLO alerts, RapidAPI listing copy
...
- flux/monitoring/grafana-dashboard-apis.yaml: Grafana dashboard ConfigMap
labelled grafana_dashboard=1, covering request rate, P50/P95/P99 latency,
5xx error rate, and data freshness for all three APIs.
Closes leeworks-agents/api-company#22
- flux/monitoring/prometheusrule-apis.yaml: PrometheusRule with four alert rules:
APIHighErrorRate (warning >5%, critical >20%), APIHighLatency (P95 >2s),
APIDataStale (>30 days), APIDown (up==0 for 2 min). All labelled
severity + team: api-company.
Closes leeworks-agents/api-company#23
- docs/rapidapi-listings.md: Full RapidAPI listing copy for zip-enrichment,
holidays, and air-quality — API name, tagline (<=120 chars), short description
(<=300 chars), long description, category, plan table (Basic $9/Pro $19/
Ultra $49), endpoint descriptions, and keywords.
Closes leeworks-agents/api-company#24
- flux/monitoring/kustomization.yaml: added grafana-dashboard-apis.yaml
and prometheusrule-apis.yaml to resources list.
2026-05-25 05:04:28 +00:00
a615b7ebfd
feat: implement docs-site, legal docs, metrics standard, flux manifests
...
Closes leeworks-agents/api-company#5 (docs-site Astro scaffold)
Closes leeworks-agents/api-company#9 (metrics instrumentation standard)
Closes leeworks-agents/api-company#10 (Gitea Actions openapi aggregation pipeline)
Closes leeworks-agents/api-company#11 (docs-site Flux HelmRelease)
Closes leeworks-agents/api-company#12 (SEO blog posts x3)
Closes leeworks-agents/api-company#13 (legal docs ToS/Privacy/AUP)
Closes leeworks-agents/api-company#14 (DNS documentation)
## Changes
### docs/legal/
- terms-of-service.md — API usage, liability, account termination, governing law
- privacy-policy.md — request log retention (90d), no PII sold, data sharing
- acceptable-use-policy.md — rate limit abuse, scraping prohibition, resale ban
### docs/metrics-standard.md
- Defines api_requests_total, api_response_duration_seconds, api_data_freshness_seconds
- Fastify (TypeScript) and FastAPI (Python) reference middleware implementations
- Prometheus scrape config and Grafana dashboard guidance
### docs/registry.md
- Decision: use Gitea built-in container registry (no new infra)
- Image naming convention, auth, Kubernetes imagePullSecrets, ingress config
### docs/dns.md
- Required A records for all 6 subdomains
- cert-manager ClusterIssuer and Ingress TLS examples
- Verification commands and human-operator action items
### docs-site/
- Astro 4 + MDX + sitemap scaffold
- Base layout with nav linking all APIs, blog, RapidAPI, status
- Landing page with API cards
- Per-API Redoc viewer pages (zip-enrichment, holidays, air-quality)
- Blog index + 3 SEO blog posts (~1000 words each with JSON-LD)
- Dockerfile (multi-stage: node build + nginx serve)
- nginx.conf with gzip, caching, health endpoint
### flux/
- gitea-runner/: gitea-act-runner HelmRelease (org-scope, dind)
- monitoring/: kube-prometheus-stack + Gatus HelmReleases
- Prometheus with pod annotation scraping
- Grafana at grafana.leeworks.dev with persistence
- Gatus status page at status.leeworks.dev, 90-day retention
- docs-site/: Deployment + Service + Ingress via raw chart
- api-company-source/: GitRepository + Kustomization reference manifests
- kustomization.yaml: root kustomize entry point (build validated)
### .gitea/workflows/build-docs.yaml
- Aggregates openapi.yaml from zip-enrichment, holidays, air-quality repos
- Builds Astro docs-site
- Pushes image to registry.leeworks.dev/leeworks-agents/docs-site
- Triggered on push to main, schedule daily 02:00 UTC, workflow_dispatch
2026-05-24 23:20:33 +00:00
agent-company