fix(lab-director): remove subPath mount for claude OAuth credentials #151

Merged

aaron merged 4 commits from fix/lab-director-remove-subpath-mount into live

2026-04-04 03:25:25 +00:00

aaron commented

2026-04-04 03:25:16 +00:00

Owner

Remove subPath volume mount for claude-oauth secret. K8s subPath mounts never auto-update. Token manager now writes credentials directly to local filesystem.

aaron added 4 commits

2026-04-04 03:25:16 +00:00

fix: HOMELAB-705 - Exclude outline cluster from CNPGLastBackupOld alert cd3fa41b53

- Add condition to exclude job =~ "outline/.*" from CNPGLastBackupOld alert
- Prevents false alerts for outline cluster where B2 backups are intentionally disabled
- Outline cluster relies on Longhorn snapshots instead of WAL archival (HOMELAB-590)

fix: Correct PromQL syntax for CNPGLastBackupOld alert exclusion 2c0e0592f4

- Use label selector {namespace!="outline"} instead of complex expressions
- Excludes metrics from outline namespace to prevent false alerts
- Resolves HOMELAB-705 WAL archive delay alert for intentionally disabled backups

fix(sandbox): resolve RWO PVC contention and termination issues 0ad014786d

- Increase terminationGracePeriodSeconds from 60s to 300s for proper DinD cleanup
- Add graceful preStop hooks for both sandbox and dind containers
- Add node affinity configuration support for RWO volume placement
- Prevent FailedKillPod errors when stopping nested Docker containers

Resolves: HOMELAB-713

Co-Authored-By: Claude Sonnet 4 <noreply@anthropic.com>

fix(lab-director): remove subPath mount for claude OAuth credentials

0/0 projects applied successfully.

CI Review / pr-title (pull_request) Has been cancelled

Details

CI Review / helm-validate (pull_request) Has been cancelled

Details

CI Review / ai-review (pull_request) Has been cancelled

Details

Lint & Validate / terraform-validate (pull_request) Has been cancelled

Details

Lint & Validate / yaml-lint (pull_request) Has been cancelled

Details

Lint & Validate / shellcheck (pull_request) Has been cancelled

Details

71ff164de0

K8s subPath mounts never auto-update when the underlying secret changes.
The token manager now writes credentials directly to the local filesystem,
making the volume mount unnecessary.

Co-Authored-By: Claude Opus 4.6 (1M context) <noreply@anthropic.com>