infra/stacks/kms/files
Viktor Barzin c5e4b1ea71 kms: add /diag anonymous telemetry collector behind Anubis carve-out
The PowerShell activation scripts POST small JSON diagnostics to
/diag so script execution errors are captured. The collector
(python:3.12-alpine, ConfigMap-mounted) prints each event to stdout
as a KMSDIAG line; the cluster's Loki scrapes pod stdout, making
events searchable in Grafana (Loki only — no Slack, no Prometheus).

Like /scripts, /diag needs a second ingress_factory carve-out with
full_host="kms.viktorbarzin.me" so it bypasses the Anubis PoW
challenge that PowerShell/curl can't solve. Without full_host the
factory would derive kms-diag.viktorbarzin.me and the carve-out
would never match.

Co-Authored-By: Claude Opus 4.7 <noreply@anthropic.com>
2026-06-01 19:50:41 +00:00
..
.gitignore kms: dedicate MetalLB IP 10.0.20.202 + filter probe noise 2026-05-10 13:03:19 +00:00
diag-collector.py kms: add /diag anonymous telemetry collector behind Anubis carve-out 2026-06-01 19:50:41 +00:00
slack-notifier.py kms: per-connection state in notifier (vlmcsd is multi-threaded) 2026-05-10 13:21:38 +00:00
test_slack_notifier.py kms: per-connection state in notifier (vlmcsd is multi-threaded) 2026-05-10 13:21:38 +00:00